Solved BSOD at random intervals arthr.sys?

[jtkm]

Windows Update does not work "Because the service is not running"

This message after re-start. But. At least the Firewall is on and working now

 

[NoelDP]

Open Windows Update
Click on Change Settings
Select 'Never Update...'
Click OK
exit Windows Update
Now open Windows update again
Click on Change Settings
Select 'Update automatically'
Click OK
exit Windows Update
Open Windows Update, and do a manual Check for Updates.

 

[jtkm]

WUPdate is .... WUPdating! SWEET!

but. Then I got this message: Unknown error 80073712.

 

[NoelDP]

Try the Windows Update instructions again - post the CBS and CheckSUR logs

 

[jtkm]

Sorry, you have to tell me what you mean. And which 'update' instructions.

I tried the reset windows update.bat file - I still get the same error message

tried the sfc / scannow thing - the command prompt says 'sfc' is not a valid command

Tried turning the wupdate to 'never check' and then back to 'always check' - changes nothing.

I don't understand how to find the logs you want.

 

[NoelDP]

http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html

 

[jtkm]

Ran it. Got the same result: sfc / scannow is not recognized as a valid command.

 

[NoelDP]

There is NO SPACE after the '/'
The proper command is
SFC /SCANNOW

 

[jtkm]

Result: 'not a recognizable command'

 

[NoelDP]

in that case your system may be seriously hosed.

Please open an elevated Command Prompt, and run the following commands.

DIR C:\Windows\SFC*.* /S

it will take a minute or two - please post the full results.

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[jtkm]

1)Using your instructions to open the ECP, I cannot select 'Run as Administrator' as that isn't an option

2) I usually go straight to 'start' then the search bar then 'command prompt'

3) Entering the IDR command as you gave it = "not a recognized command"

 

[NoelDP]

Sorry - the actual command is my fault....
it should be ..

DIR C:\Windows\SFC*.* /S

Do you have UAC disabled? - that's the only circumstance where the 'Run as...' is disabled.

 

[jtkm]

I do get some 'Run as .... ' options but I don't have it for the command prompt.
How do I tell if its disabled?

I did run the DIR command - but how to I export the results? I'm in the black & white DOS screen.

 

[NoelDP]

See my earlier post.

 

[jtkm]

See my earlier post: I do not have any options for cut/paste/whatever.

I am in the Windows-sys32 command prompt.

 

[NoelDP]

Those options ARE there.
right-click in the window and select 'Select All' - hit the Enter Key and then paste in your reply.

 

[jtkm]

Here ya go:

Specified COMMAND search directory bad
Microsoft(R) Windows DOS
(C)Copyright Microsoft Corp 1990-2001.

C>DIR C:\Windows\SFC*.* /S
Volume in drive C has no label.
Volume Serial Number is 2600-6E21

Directory of C:\Windows\System32

07/13/2009 06:10 PM 2,560 sfc.dll
07/13/2009 06:14 PM 35,328 sfc.exe
07/13/2009 06:16 PM 40,960 sfc_os.dll
3 File(s) 78,848 bytes

Directory of C:\Windows\System32\en-US

07/13/2009 07:01 PM 8,704 sfc.exe.mui
1 File(s) 8,704 bytes

Directory of C:\Windows\System32\migwiz

06/10/2009 02:44 PM 1,824 SFCN.dat
1 File(s) 1,824 bytes

Directory of C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad
364e35_6.1.7600.16385_none_587e2dd63c939245

06/10/2009 02:44 PM 1,824 SFCN.dat
1 File(s) 1,824 bytes

Directory of C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad
364e35_6.1.7601.17514_none_5aaf419e398215df

06/10/2009 02:44 PM 1,824 SFCN.dat
1 File(s) 1,824 bytes

Directory of C:\Windows\winsxs\x86_microsoft-windows-sfc_31bf3856ad364e35_6.1.7
600.16385_none_a70c196fbd853ae9

07/13/2009 06:10 PM 2,560 sfc.dll
07/13/2009 06:16 PM 40,960 sfc_os.dll
2 File(s) 43,520 bytes

Directory of C:\Windows\winsxs\x86_microsoft-windows-w..ty-client.resources_31b
f3856ad364e35_6.1.7600.16385_en-us_1657bd9334e39d09

07/13/2009 07:01 PM 8,704 sfc.exe.mui
1 File(s) 8,704 bytes

Directory of C:\Windows\winsxs\x86_microsoft-windows-wrp-integrity-client_31bf3
856ad364e35_6.1.7600.16385_none_2b1523604c99c736

07/13/2009 06:14 PM 35,328 sfc.exe
1 File(s) 35,328 bytes

Total Files Listed:
11 File(s) 180,576 bytes
0 Dir(s) 8,189,321,216 bytes free

C>

 

[NoelDP]

WTH???

Please open the System Properties Environment page...

Click on the Start button, then right -click on Computer, and select Properties.
in the list in the left, select Advanced System settings.
Click on the Environment Variables button.
In the bottom Window, what does the ComSpec variable show as?

 

[jtkm]

Comspec=C:\Windows\system32\cmd.exe

 

[NoelDP]

That's OK, at least.

I suspect that you have a rootkit

Your CMD prompt response shows
Microsoft(R) Windows DOS
(C)Copyright Microsoft Corp 1990-2001.

C>


The proper response is...

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>

Please run the following command and post the results

DIR C:\Windows\CMD.EXE /s

Please also check the version of the file by finding it with Windows Explorer, and right-clicking on it, selecting Properties, and clicking on the Details tab.