Important updates not downloading (code 80070B9)

[Joeturbo]

I do now keep getting a notification saying "windows could not check for updates automatically" ?

log file attached if any use

 

[NoelDP]

Great! - thanks for the feedback

 

[NoelDP]

Ooops! - caught your earlier reply but not the later one
one of the last entries in your WU log is this...

2014-04-10 11:30:25:609 364 428 Report REPORT EVENT: {C7DF29E2-C6EB-4C07-9407-4751470E074C} 2014-04-10 11:30:20:602+0100 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.

It could be just a 'stuck' flag - try this.


Open Windows Update
Click on Change Settings
Select 'Never Update...'
Click OK
exit Windows Update
Now open Windows update again
Click on Change Settings
Select 'Update automatically'
Click OK
exit Windows Update
Open Windows Update, and do a manual Check for Updates.

 

[Joeturbo]

Just tried this. As soon as I changed it back to "update auto" it did a search for updates before I had the chance to press ok (found none) and I then got a pop up saying "windows could not check for updates automatically" again. I clicked ok, shut the windows update page, opened the windows update page and have no option for manual check?

 

[NoelDP]

Hmmm - let's have a look at the services involved...


Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

 

[Joeturbo]

sorry for the delay, been mega busy, still experiencing the same issue. please see farbar log below

Farbar Service Scanner Version: 25-02-2014
Ran by SHARON (administrator) on 21-04-2014 at 10:20:07
Running from "C:\Users\SHARON\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============
Firewall Disabled Policy:
==================

System Restore:
============
System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============
Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

 

[NoelDP]

That looks fine - so at least the critical services are set properly, and apparently functioning properly.

Please open an Elevated Command Prompt, and run the following commands (just in case)...

SC QC TrustedInstaller
SC QUERYEX TrustedInstaller
DIR C:\Windows\System32\Drivers\etc\hosts

post the results.

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[Joeturbo]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>SC QC TrustedInstaller
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: TrustedInstaller
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\servicing\TrustedInstaller.exe
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : Windows Modules Installer
DEPENDENCIES :
SERVICE_START_NAME : localSystem
C:\Windows\system32>SC QUERYEX TrustedInstaller
SERVICE_NAME: TrustedInstaller
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :
C:\Windows\system32>DIR C:\Windows\System32\Drivers\etc\hosts
Volume in drive C is Packard Bell
Volume Serial Number is 8298-1DE9
Directory of C:\Windows\System32\Drivers\etc
10/06/2009 22:00 824 hosts
1 File(s) 824 bytes
0 Dir(s) 359,909,142,528 bytes free
C:\Windows\system32>

 

[NoelDP]

That looks normal as well.
In that case, your best option is probably a total reset of Windows Update....

http://www.sevenforums.com/tutorials/91738-windows-update-reset.html should do the job.

 

[Joeturbo]

I did "option 3 To Reset and Re-register Windows Update Components AND Reset Update History in One Easy Click ", seemed to do everything ok, it restarted the pc (took a while to load back up). But I still have the notification "windows could not check for updates automatically"
Any other ideas?

 

[NoelDP]

Please upload the following files (compressed) again - the errors may have changed.

C:\Windows\Logs\CBS\CBS.log
C:\Windows\WindowsUpdate.log

Please also upload the Application and System Event logs...

Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

 

[Joeturbo]

please find logs attached

 

[NoelDP]

You apparently have Office Click-to-Run installed?
This is probably from a Trial version of Office 2010 preinstalled by the manufacturer. If you don't use it, then I would suggest uninstalling it as it appears to be generating a number of errors.
There's nothing really other than that in the Event logs - a few minor errors, but nothing related that I can see.

Next stop, the WU log.

 

[NoelDP]

It looks to me like the problem is with the downloading...

2014-04-25 13:00:29:032  992 bb8 DnldMgr ***********  DnldMgr: New download job [UpdateId = {F9A1DEF5-D9D1-45B7-999B-A6415B2CB581}.200]  ***********
2014-04-25 13:00:29:032  992 bb8 DnldMgr Regulation: {7971F918-A847-4430-9279-4A52D1EFE18D} - Update F9A1DEF5-D9D1-45B7-999B-A6415B2CB581 is "PerUpdate" regulated and can NOT download. Sequence 9120 vs AcceptRate 200.
2014-04-25 13:00:29:032  992 bb8 DnldMgr   * Update is not allowed to download due to regulation.
2014-04-25 13:00:29:032  992 bb8 DnldMgr Regulation: {7971F918-A847-4430-9279-4A52D1EFE18D} - Update F9A1DEF5-D9D1-45B7-999B-A6415B2CB581 is "PerUpdate" regulated and can NOT download. Sequence 9120 vs AcceptRate 200.
2014-04-25 13:00:29:032  992 958 AU AU checked download status and it changed: Downloading is paused
2014-04-25 13:00:30:577  992 bb8 Report CWERReporter finishing event handling. (00000000)

However, I don't see why that should impact here..

Please open an Elevated COmmand Prompt, and run the following commands...

REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\AutoUpdate"
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /S
 
.

post the results

 

[Joeturbo]

I have "Microsoft word starter" which I assume came preinstalled on the laptop. Its not amazing but I do use it to type out all my yearly appraisals/feed back etc.

I will check the other thing now and post results

 

[Joeturbo]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur
rentVersion\WindowsUpdate\AutoUpdate"
ERROR: The system was unable to find the specified registry key or value.
C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur
rentVersion\WindowsUpdate\Auto Update" /S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update
NextSqmReportTime REG_SZ 2014-04-26 19:58:21
FeaturedUpdatesNotificationSeqNum REG_DWORD 0x601
FeaturedUpdatesNotificationSeqNumGenTime REG_SZ 2014-03-10 19:09:04
ElevateNonAdmins REG_DWORD 0x1
AUOptions REG_DWORD 0x4
ScheduledInstallDay REG_DWORD 0x0
ScheduledInstallTime REG_DWORD 0x3
IncludeRecommendedUpdates REG_DWORD 0x1
ActionCenterLastPossibleRestartNotification REG_SZ 2014-04-01 02:00:00
EnableFeaturedSoftware REG_DWORD 0x0
NextDetectionTime REG_SZ 2014-04-27 07:30:19
NextFeaturedUpdatesNotificationTime REG_SZ 2014-04-21 12:22:36
ScheduledInstallDate REG_SZ 2014-04-27 02:00:00
DownloadExpirationTime REG_SZ 2014-04-27 19:58:21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\Results
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\Results\Detect
LastError REG_DWORD 0x0
LastSuccessTime REG_SZ 2014-04-26 09:47:43
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\Results\Download
LastSuccessTime REG_SZ 2014-04-25 14:19:23
LastError REG_DWORD 0x0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\Results\Install
LastSuccessTime REG_SZ 2014-04-25 14:20:17
LastError REG_DWORD 0x0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\UAS
UpdateCount REG_DWORD 0x0

C:\Windows\system32>

 

[NoelDP]

It looks to me as if AU is set to properly, at least.

All the entries look right, although there area couple of oddities...

ScheduledInstallDate REG_SZ 2014-04-27 02:00:00
DownloadExpirationTime REG_SZ 2014-04-27 19:58:21

...which don't exist in any of my installs.

I'd rather not mess with them, as I don't know what they're for.
Those entries actually look as if they are from WSUS or another Push service - which may mean that the are coming from a GP that's been enabled for some reason, and that could be what's blocking manual checks.

The problem here is that GP's aren't supposed to be able to run in Home Premium - which means that it has to be a registry setting somewhere.
I'll do some hunting and see if I can come up with something.

 

[Joeturbo]

What's a GP?

 

[NoelDP]

Group Policy - sorry for the Jargon!