BITS, WUAUSERV, WINDEFEND not working, missing from the Services List

[gouravguru007]

Hi,

I've a windows 7 Home Basic 64-bit Service Pack 1 in my PC. I noticed one day that I haven't been getting Windows Updates since a long time.

After doing all research, I've found that the BITS, wuauserv and windefend services are not working. They're not even listed in the Services list. Even the firewall wasn't working, but after trying a few things it started to work.

I have tried a lot of things, used microsoft easy fixit 50202, it says "Error: Service BITS failed to start".

I tried Windows Update Troubleshooter as well, but not all errors got fixed.

I tried that 538mb Windows Update Standalone Installer Package too, got an error there too, "0x80070424: the specified service does not exist as an installed device."

Please help me. Thanks.


This is a latest Farbar Service Scanner log. It may be useful.

Farbar Service Scanner Version: 27-01-2016
Ran by Intel i5 (administrator) on 21-03-2016 at 13:30:47
Running from "C:\Users\Intel i5\Desktop"
Microsoft Windows 7 Home Basic Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

 

[torchwood]

I suspect malware, typical things it does.
D/l run malwarebytes free, uncheck trial, but before scanning goto settings check rootkit scan.
then dissable any AV you have and run the ESET on-line scan.

Roy

 

[gouravguru007]

bits, wuauserv working now, but not Windefend.

Hi Roy,

Thank you for that. I followed the steps, did the malwarebytes free scan and ESET online scan too. Have quarantined the threat files in both and have sent you the screenshot of the same.

BITS and wuauserv are working now, but not the windefend service. I've sent you a screenshot of that too. Pls check.

Farbar scan shows the same for Windows Defender as before,

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Disabled. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

 

[UsernameIssues]

Many antivirus apps disable Windows Defender. It would help to know what antivirus app you have installed. You can answer that question in a post, but it is better to add that info to your system specs.

You might want to consider scanning with an offline scanner.
Windows Defender Offline is simple to use.
I boot to USB to scan with that tool.
https://www.raymond.cc/blog/13-anti...-in-search-for-the-best-rescue-disk/view-all/

 

[gouravguru007]

I have Iobit Advanced System Care. Also had the Iobi Malware fighter, but since it didnt pick what the Malwarebytes did, i uninstalled it.

I read somewhere about changing the Windefend service to automatic. I did that and now its working fine.
In The services list it shows automatic now, but the "Failed to read description, error code-1168" thing is still there.


Now after doing that, I opened Windows Update, and again got that "Red Cross icon", so I clicked Check for updates, and it's been checking since 5 mins now. I'll let you know what happens though.

 

[UsernameIssues]

If your antivirus app disabled Windows Defender, then you should leave it disabled.

You won't find very many active members of this forum that like any software written by IOBIT.

Let us know if a scan with Windows Defender Offline finds infections.

 

[gouravguru007]

No infections now. Scanned agin by Malwarebytes too.

But the other problem is, Windows update keeps on "checking for updates" for a long time, over an hour or so and still goes on.
I mean the progress bar keeps running, doesn't stop.

I ran this WindowsUpdate Troubleshooter, I've attached a screenshot. Pls check and help.

 

[UsernameIssues]

Set the computer not to sleep and let the Windows Update search continue for a day or two.