Solved I can't change my update setting

[snurjawi]

here's my problem, i print screen it for you. HELP me please.
Even though i am the administrator.

 

[NoelDP]

Do you have UAC switched off?
Are you sure you're in an Admin account?
Have you had a malware incident recently?
How fresh is this install?


Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

 

[Layback Bear]

Running two anti virus programs at the same time is not helping things.

Snurjawi specs.

AVG, Smadav

http://www.softpedia.com/get/Antivirus/Smadav.shtml

 

[snurjawi]

I have no idea about the UAC.
Yeah, i'm sure enough that i'm the administrator. (i think so)
About malware incident, it's been a long time ago i think. And it has been solved.
The install is about a few hours ago.

Here's the report :

Farbar Service Scanner Version: 21-07-2014
Ran by SONY (administrator) on 10-08-2014 at 20:28:49
Running from "C:\Users\SONY\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

 

[snurjawi]

Running two anti virus programs at the same time is not helping things.

Snurjawi specs.

AVG, Smadav

I use two antivirus because in my experiences, sometimes, some virus could be scan with this, and some with that.

 

[NoelDP]

SmaDav is the only piece of software I've ever seen on SoftPedia to get that bad a review - uninstalling would be a good idea. (AVG can get sniffy about certain things, as well p but that's a different story)

What other AV's have you had installed on this machine?

 

[snurjawi]

SmaDav is the only piece of software I've ever seen on SoftPedia to get that bad a review - uninstalling would be a good idea. (AVG can get sniffy about certain things, as well p but that's a different story)

What other AV's have you had installed on this machine?

just two of that, then how's the report? is there anything i can do to make this right?

 

[NoelDP]

The Farbar results are normal.


Try running this Microsoft Fixit...
http://download.microsoft.com/downl...D46-9CD2-F0F93D1C5F06/MicrosoftFixit50362.msi

 

[snurjawi]

The Farbar results are normal.


Try running this Microsoft Fixit...
http://download.microsoft.com/downl...D46-9CD2-F0F93D1C5F06/MicrosoftFixit50362.msi

nothing is happen. i've run it, twice. but still. nothing.

 

[NoelDP]

OK - Please open an Elevated Command Prompt, and run the following commands

REG QUERY HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\Internet Communication Management\Internet Communication" /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
 
.

This will create a file on your desktop - WUSETTINGS.TXT - please upload the file to your reply.


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

 

[snurjawi]

OK - Please open an Elevated Command Prompt, and run the following commands

REG QUERY HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\Internet Communication Management\Internet Communication" /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
REG QUERY HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU  /S >> "%userprofile%\desktop\WUSETTINGS.TXT" 
 
.

This will create a file on your desktop - WUSETTINGS.TXT - please upload the file to your reply.


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

Here's the WUSETTINGS. HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1 NoAutoUpdate REG_DWORD 0x0 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer NoInternetOpenWith REG_DWORD 0x1 NoDriveTypeAutoRun REG_DWORD 0xdd NoCDBurning REG_DWORD 0x1 NoWindowsUpdate REG_DWORD 0x1 ClearRecentDocsOnExit REG_DWORD 0x0 NoRecentDocsHistory REG_DWORD 0x0 NoInstrumentation REG_DWORD 0x0 NoLowDiskSpaceChecks REG_DWORD 0x1 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate DisableWindowsUpdateAccess REG_DWORD 0x1 HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1 NoAutoUpdate REG_DWORD 0x0

 

[NoelDP]

After cleaning up the formatting - this is what that chunk looks like...

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1
NoAutoUpdate REG_DWORD 0x0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoInternetOpenWith REG_DWORD 0x1
NoDriveTypeAutoRun REG_DWORD 0xdd
NoCDBurning REG_DWORD 0x1
NoWindowsUpdate REG_DWORD 0x1
ClearRecentDocsOnExit REG_DWORD 0x0
NoRecentDocsHistory REG_DWORD 0x0
NoInstrumentation REG_DWORD 0x0
NoLowDiskSpaceChecks REG_DWORD 0x1

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
DisableWindowsUpdateAccess REG_DWORD 0x1

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1
NoAutoUpdate REG_DWORD 0x0

You have a lot of entries there - all of which are totally unnecessary, and none of which normally exist in a Home Premium system

Please open an Elevated Command Prompt, and run the following commands (They may or may not work, depending on the registry permissions)


REG DELETE HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
REG DELETE HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

Once the commands have run, close the window and reboot - then try Windows Update again.

 

[snurjawi]

After cleaning up the formatting - this is what that chunk looks like...

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1
NoAutoUpdate REG_DWORD 0x0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoInternetOpenWith REG_DWORD 0x1
NoDriveTypeAutoRun REG_DWORD 0xdd
NoCDBurning REG_DWORD 0x1
NoWindowsUpdate REG_DWORD 0x1
ClearRecentDocsOnExit REG_DWORD 0x0
NoRecentDocsHistory REG_DWORD 0x0
NoInstrumentation REG_DWORD 0x0
NoLowDiskSpaceChecks REG_DWORD 0x1

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
DisableWindowsUpdateAccess REG_DWORD 0x1

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
NoAutoRebootWithLoggedOnUsers REG_DWORD 0x1
NoAutoUpdate REG_DWORD 0x0

You have a lot of entries there - all of which are totally unnecessary, and none of which normally exist in a Home Premium system

Please open an Elevated Command Prompt, and run the following commands (They may or may not work, depending on the registry permissions)


REG DELETE HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
REG DELETE HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

Once the commands have run, close the window and reboot - then try Windows Update again.

There's is command to say yes/no I write 'Yes' Then the answer is : 'ERROR: Access denied' Should i reboot the computer?

 

[NoelDP]

No point - if Access is denied then nothing has happened.

Let's see if we can do this another way.



Please download SFCFix from here... http://www.sysnative.com/niemiro/apps/SFCFix.exe and save it to your desktop

I've uploaded a file - sjiaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the downloaded file, and select Extract all…
Extract the contained file to your desktop - which will create a SFCFix.txt file there.

Now drag the SFCFix.txt file over onto the SFCFix.exe file - this should force SFCFix to run the file
It will create a new SFCFix log file on the - please upload that, then reboot and try Windows update again.

 

[snurjawi]

No point - if Access is denied then nothing has happened.

Let's see if we can do this another way.



Please download SFCFix from here... http://www.sysnative.com/niemiro/apps/SFCFix.exe and save it to your desktop

I've uploaded a file - sjiaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the downloaded file, and select Extract all…
Extract the contained file to your desktop - which will create a SFCFix.txt file there.

Now drag the SFCFix.txt file over onto the SFCFix.exe file - this should force SFCFix to run the file
It will create a new SFCFix log file on the - please upload that, then reboot and try Windows update again.

it says, i have to seek advice to my helper (that means you) with give you this log : SFCFix version 2.3.0.0 by niemiro. Start time: 2014-08-13 02:53:03.317 Not using a script file. AutoAnalysis:: SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com. CBS & SFC total detected corruption count: 1 CBS & SFC total unimportant corruption count: 0 CBS & SFC total fixed corruption count: 0 SURT total detected corruption count: 0 SURT total unimportant corruption count: 0 SURT total fixed corruption count: 0 AutoAnalysis:: directive completed successfully. Successfully processed all directives. SFCFix version 2.3.0.0 by niemiro has completed. Currently storing 0 datablocks. Finish time: 2014-08-13 03:05:52.416 Script hash: ----------------------EOF-----------------------

 

[NoelDP]

That looks as if you just ran the SFCFix executable, rather than dropped the SFCFix.txt file onto it - please try again.

 

[snurjawi]

That looks as if you just ran the SFCFix executable, rather than dropped the SFCFix.txt file onto it - please try again.

sorry then. it says : no new update is available at this time. Detected logfile supplied as script. Script blocked. Press any key to exit . . . sorry i can't attach the screen capture.

 

[NoelDP]

OK, thanks.

I'll have to take advice on this one!
Please follow these instructions carefully (errors made in here can be fatal - and there's no easy way back)...

Create a new System Restore Point

Open Regedit
In the left pane, navigate to the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Key, and right-click on it.
Select Permissions

What identities are listed?
Click on the Advanced button
Click on the Owner tab
Who is listed as the Owner?

now hit the Cancel buttons until you're back in Regedit, and exit that, and post the answers to the questions.

It may tell us why things aren't working.

 

[snurjawi]

OK, thanks.

I'll have to take advice on this one!
Please follow these instructions carefully (errors made in here can be fatal - and there's no easy way back)...

Create a new System Restore Point

Open Regedit
In the left pane, navigate to the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Key, and right-click on it.
Select Permissions

What identities are listed?
Click on the Advanced button
Click on the Owner tab
Who is listed as the Owner?

now hit the Cancel buttons until you're back in Regedit, and exit that, and post the answers to the questions.

It may tell us why things aren't working.

list of identities :
CREATOR OWNER
SYSTEM
Administrators (SALSABILA-SUSHI\Administrator)
Users (SALSABILA-SUSHI\Users)

Current owner : Administrators (SALSABILA-SUSHI\Administrator)

 

[NoelDP]

IN that case, all I can think of is that they must be either tagged as 'in use' or contain illegal characters which prevent the commands from working.
I'll see what I can figure out.