Windows Update Service not installed error: 0x80070424

Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Run it, and tick all the options, then click on the Scan button - copy and paste the report to your response.

Your CBS.log shows the following problems....

Code:

 Line 17338: 2013-03-03 19:18:49, Info                  CSI    000001c4 [SR] Repairing 2 components
 Line 17339: 2013-03-03 19:18:49, Info                  CSI    000001c5 [SR] Beginning Verify and Repair transaction
 Line 17342: 2013-03-03 19:18:49, Info                  CSI    000001c7 [SR] Cannot repair member file [l:24{12}]"shellbrd.dll" of Microsoft-Windows-Branding-Shell-Ultimate, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17345: 2013-03-03 19:18:49, Info                  CSI    000001c9 [SR] Cannot repair member file [l:16{8}]"img0.jpg" of Microsoft-Windows-Shell-Wallpaper-Windows, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17348: 2013-03-03 19:18:49, Info                  CSI    000001cb [SR] Cannot repair member file [l:24{12}]"shellbrd.dll" of Microsoft-Windows-Branding-Shell-Ultimate, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17349: 2013-03-03 19:18:49, Info                  CSI    000001cc [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Branding-Ultimate-Client-Package~31bf3856ad364e35~x86~~6.1.7601.17514.BUC Namespace"
 Line 17354: 2013-03-03 19:18:49, Info                  CSI    000001cf [SR] Could not reproject corrupted file [ml:520{260},l:64{32}]"\??\C:\Windows\Branding\Shellbrd"\[l:24{12}]"shellbrd.dll"; source file in store is also corrupted
 Line 17359: 2013-03-03 19:18:49, Info                  CSI    000001d2 [SR] Cannot repair member file [l:16{8}]"img0.jpg" of Microsoft-Windows-Shell-Wallpaper-Windows, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17360: 2013-03-03 19:18:49, Info                  CSI    000001d3 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Branding-Ultimate-Client-Package~31bf3856ad364e35~x86~~6.1.7601.17514.BUC Namespace"
 Line 17365: 2013-03-03 19:18:49, Info                  CSI    000001d6 [SR] Could not reproject corrupted file [ml:520{260},l:72{36}]"\??\C:\Windows\Web\Wallpaper\Windows"\[l:16{8}]"img0.jpg"; source file in store is also corrupted
 Line 17378: 2013-03-03 19:18:49, Info                  CSI    000001d9 [SR] Repair complete

I'll post a fix for it soon - however, it may not work properly unless the system is in a fit state (which is doubtful, at present)

Looks like you've had a run-in with ZeroAccess?

Here's the fix for the CBS/SFC errors


I've uploaded a file - w44aa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\w44aa
hit the enter key - if you get a 'Not Found' error try
DIR D:\w44aa
or
DIR E:\w44aa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\w44aa <drive>:\windows\winsxs /y /i /s /v /h

(e.g.XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply


I'll post a fix for the service errors in a while.

Usually, with those errors, BFE is missing as well - so here's the fix for all three base services....

I've uploaded a file - wubitsbfe.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...

save it to the default location.
right-click on the extracted file, and select Merge.
Accept the warnings - you should get a 'success' message.
reboot and run the FarBar scanner again - post the new log.
Then we'll fix the remaining services.

Farbar Service Scanner Version: 03-03-2013
Ran by Wim (administrator) on 03-03-2013 at 23:18:44
Running from "D:\ZIP\Backup\Windows\sevenforums"
Windows 7 Ultimate Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============
Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Standard Profile]
"EnableFirewall"=DWORD:0

System Restore:
============
System Restore Disabled Policy:
========================

Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

Other Services:
==============

File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2013-03-03 22:10] - [2013-01-03 06:05] - 1293672 ____A (Microsoft Corporation) 7C0507D2391AF5933600CBCED799F277
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit

**** End of log ****

Extract wubitsbfe.zip and apply .reg file: OK
After reboot of the PC Windows Update can be used again.
The Windows Update history has gone.
In add/remove updates all updates are still listed and complete.

The img0.jpg is not replaced by original one.
Shellbrd.dll is not replaced too.

[F8] procedure for repair action did not work on Compaq PC,
nor did other function keys as candidate for this function.

The original img0.jpg was replaced after install of W7 by a more
representative wallpaper file than the original one.

The new CBS.log is attached.

Windows Update:
OK for Windows 7 and Office 2010.
The Windows Update History file was removed.
Just the most recent updates are shown now.

After running sfc /scannow:
some problemes solved, other problems could not be solved.
See: CBS.zip

How did you repair the SharedAccess and IPHLPSVC errors? - they were not included in my registry fix??

Please try running the CheckSUR tool now and we'll see what we get.