Security updates no longer showing up

[Roger265]

Have a Toshiba laptop for a few years now. Just noticed that the last windows security updates I recieved were in July. I have gotten several windows updates to intall but they were for Windows Office only. Have done the show hidden and check for updates but it says everything is up to date. Did a fixit program I found from microsoft and it says everything was fine. Any ideas on what to try next.

 

[NoelDP]

Please follow the Windows Update Posting Instructions and post the requested data.
ALso
Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

 

[Roger265]

results from service scanner

Farbar Service Scanner Version: 10-11-2013
Ran by spud (administrator) on 20-11-2013 at 09:39:36
Running from "C:\Users\spud\Desktop"
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============
Firewall Disabled Policy:
==================

System Restore:
============
System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============
Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-02-13 12:21] - [2013-01-04 00:41] - 1893224 ____A (Microsoft Corporation) 5CFB7AB8F9524D1A1E14369DE63B83CC
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****


Ran the SURT tool

Did the /sfcscannow, came back with 'did not find any integrity violations'

zip file attached

Do not get any failed messages concerning the updates. It just does not find any security updates anymore and I know there have been many since July. Something messed up then but not sure what. Hope the above information and attached files help. Thank you for your help.

 

[NoelDP]

There's nothing significant that I can see in either the CBS or CheckSUR logs

Please post the C:\Windows\Windowsupdate.log file - it may tell us something?

 

[Roger265]

It is attached. Looking at the end of the file it looks like it may be finding stuff. I also see a line in there that says 'user declined update at shutdown' hmmm Last security update offered was July 17th.

When I shutdown the computer I get a screen showing windows has to close a program. It goes by really fast. Maybe something is not shutting down right but do not know what.

 

[NoelDP]

According to WU it hasn't installed any Windows updates since April 2013 - only Office ones.

I think a full reset of WU is going to be the next task....
http://www.sevenforums.com/tutorials/91738-windows-update-reset.html
Once completed, attempt a manual check for updates - what's found?

 

[Roger265]

which option is the best 1,2, or 3

 

[NoelDP]

Work through each in order testing WU after each

 

[Roger265]

No luck tried all 3. Could see it was starting and stopped services in the command box. It cleared the windows update showing never. It cleared the updates installed list but when I check for updates it only shows me a windows live essential 2011 update and a few optionals like bing bars.

 

[NoelDP]

Hmmm - not a situation I've come across before... I think I'm going to see if I can get some assistance on this.

Don't run away, but it may be a day or two before it arrives.

 

[Roger265]

thank you

 

[Roger265]

In case you need more information I attached windows update log which includes todays attempts

 

[tom982]

Hi Roger, welcome to SevenForums!

Firstly I would like you to run this FixIt in Aggressive Mode:

You receive a "0x80070002" or "0x80070003" error code after you download an update from Windows Update, from Microsoft Update, or from Windows Server Update Services

Then I would like you to run this command:

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   wuauclt.exe /detectnow
   
   
4. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
5. Paste (Ctrl+V) it into your next post please.

Then check for updates please.

Tom

 

[NoelDP]

(Ah, good - the cavalry has arrived! )

 

[Roger265]

I ran the fixit program in agressive mode. when finished it prompted me to restart which I did.
Opened the command prompt as administrator and pasted in the command, hit enter, nothing really happened but copied it anyway for you.

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\windows\system32>wuauclt.exe /detectnow
C:\windows\system32>

Started windows updates saw it said Most recent check for updates never and updates were installed never.

It is now checking for updates, not sure if this is good or bad but it has been 'checking for updates' mode now for 20 minutes ... thinking that is not to good. Will let it keep looking for awhile ......

 

[Roger265]

Well no luck, tried it twice, only important update found was windows live essentials. I attached update log

 

[NoelDP]

That looks strange to me - Tom, how about a wbem reset?

 

[tom982]

Yeah, why not? Can't hurt

I'm drawing blanks on this one to be honest, I've never seen anything like it before!

 

[NoelDP]

Roger,

Please open an Elevated Command Prompt and run the following commands...


net stop winmgmt

(hit the Y key and enter, to respond to the confirmation - repeat the command if you get an error)
now you can copy and paste the rest -

sc config winmgmt start= disabled
cd %windir%\system32\wbem
for /f %s in ('dir /b *.dll') do regsvr32 /s %s
for /f %s in ('dir /b *.mof') do mofcomp %s
wmiprvse /regserver
sc config winmgmt start= auto

WAIT for it to finish - it could be a couple of minutes

Now reboot.

see what happens with WU now, and post the new windowsupdate.log file

 

[Roger265]

Been very busy with Holiday stuff. May take me a few weeks to get back to this. When I do will follow your instuctions and post back the info for you.