Windows 7 updates fail to install

[Tipha]

I tried the SFC Scan (Following the Windows Update Posting Instructions) and it didn't find anything wrong.
I've run microsoft fix it but it didn't help.
I couldnt seen to find the Windows Update Error Codes on my windows update, it's always green (after trying to install the updates but doesnt) or orange ("install your selected updates"), both which does not view the error codes. One update has not been successful so it cannot view the error codes at the moment.
Had to remove about 3 CAB files to make the file size smaller.

View attachment 343783

 

[NoelDP]

It looks to me as if there's a problem with your Event log systems...

Please open an Elevated Command Prompt, and run the following commands...

vssadmin list writers
vssadmin list Providers
vssadmin list Volumes
vssadmin list ShadowStorage


post the results

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.


ALSO -
Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

 

[Tipha]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Writer name: 'Task Scheduler Writer'
Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
State: [1] Stable
Last error: No error

Writer name: 'VSS Metadata Store Writer'
Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
State: [1] Stable
Last error: No error

Writer name: 'Performance Counters Writer'
Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
State: [1] Stable
Last error: No error

Writer name: 'System Writer'
Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Instance Id: {d1001c1e-edf8-4ac4-a6f1-f32d6de51f0a}
State: [1] Stable
Last error: No error

Writer name: 'ASR Writer'
Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Instance Id: {2c84023a-6304-48a3-8567-a5acd93ac8c6}
State: [1] Stable
Last error: No error

Writer name: 'MSSearch Service Writer'
Writer Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
Writer Instance Id: {7f2aa11c-459a-4f28-9601-5fc47ceb5cdd}
State: [1] Stable
Last error: No error

Writer name: 'Registry Writer'
Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Instance Id: {b5ce4cfc-c756-48e7-9069-e7240c30a73c}
State: [1] Stable
Last error: No error

Writer name: 'BITS Writer'
Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
Writer Instance Id: {e4e2d5a9-64ec-4b9b-8b0c-63054efb8ce1}
State: [1] Stable
Last error: No error

Writer name: 'Shadow Copy Optimization Writer'
Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Instance Id: {97162ba6-eba1-4370-9321-d52cc539a0ae}
State: [1] Stable
Last error: No error

Writer name: 'COM+ REGDB Writer'
Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Instance Id: {f71edd1a-63e9-4448-996b-d13b1d2d7b3a}
State: [1] Stable
Last error: No error

Writer name: 'WMI Writer'
Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Instance Id: {b1024859-594b-422d-a199-7b8fa631edf6}
State: [1] Stable
Last error: No error


C:\Windows\system32>vssadmin list Providers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Provider name: 'Microsoft Software Shadow Copy provider 1.0'
Provider type: System
Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
Version: 1.0.0.7


C:\Windows\system32>vssadmin list Volumes
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Volume path: \\?\Volume{577c991f-f9df-11de-a39c-806e6f6e6963}\
Volume name: \\?\Volume{577c991f-f9df-11de-a39c-806e6f6e6963}\
Volume path: C:\
Volume name: \\?\Volume{577c9920-f9df-11de-a39c-806e6f6e6963}\

C:\Windows\system32>vssadmin list ShadowStorage
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Shadow Copy Storage association
For volume: (C\\?\Volume{577c9920-f9df-11de-a39c-806e6f6e6963}\
Shadow Copy Storage volume: (C\\?\Volume{577c9920-f9df-11de-a39c-806e6f6e69
63}\
Used Shadow Copy Storage space: 8.56 GB (0%)
Allocated Shadow Copy Storage space: 8.914 GB (0%)
Maximum Shadow Copy Storage space: 10 GB (1%)


C:\Windows\system32>


View attachment 343810

View attachment 343809

Hope I didn't do them wrong

 

[NoelDP]

Looks good to me! - it'll take me a while to digest the data.
back later.

 

[NoelDP]

There are some fairly odd errors in there - and you've had some forced CHKDSK runs.
I think a full CHKDSK is in order...


Please run a full CHKDSK scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot)

post back with a updated export of the Application Events log

 

[Tipha]

View attachment 343901

 

[Tipha]

The amount of updates that are failing are increasing
At the moment it's 11

 

[NoelDP]

The data tends to indicate corruption which may be cured by this procedure...

Open an Elevated Command Prompt,
run the following command

fsutil resource setautoreset true c:\

Once complete, wait ten minutes, and reboot.

 

[Tipha]

I didn't notice any difference after rebooting

 

[NoelDP]

Run a new Check for Updates - what results do you get now?
Post the new C:\Windows\windowsupdate.log file

 

[Tipha]

View attachment 344781

Don't know if I did this rightt-

View attachment 344782

Thank you so much for your time!

 

[Layback Bear]

Please fill in your system specs completely, including all security programs you are using. This will help our experts when they drop by.

This tutorial by Brink will help you.

http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html

 

[NoelDP]

The error showing in your graphic is typical of a connection problem - often caused by firewalls.
What security software is currently installed?
What other AV's have EVER been installed?

 

[Tipha]

We just use spybot and windows firewall.
I don't think so (not sure).

 

[NoelDP]

No Anti virus ????

 

[Tipha]

Nope

 

[Tipha]

View attachment 344902

 

[NoelDP]

Is there ANY reason why you're not running an AV?
You are probably infected already - and possibly heavily so.

I'm going to ask for a malware specialist to drop by and advise.

 

[ThrashZone]

Review Jacee’s instructions to run Adwcleaner here post #7,
Ignore the title of the thread,
http://www.sevenforums.com/system-security/316404-instant-savings-app.html
Screen shot of the download button to use for Adwcleaner
You can use these free tools to see if they find anything,
Manually Update them before running full scans,
Try not to use your computer while the scans are running, (one at a time of course).
See this tutorial on how to download and run Malwarebytes,
http://www.sevenforums.com/tutorials/338716-malwarebytes-anti-malware-free.html
Also use the Custom scan option not the Threat scan,

Please Do Not clean/ Delete or Remove Any detections before posting the scan results first before review especially Malwarebytes,
http://www.malwarebytes.org/products/malwarebytes_free
SAS is safe to remove anything it finds
http://www.superantispyware.com/?tag=SUPERANTISPYWARE
This one is the longest up to 4 hours, the others are only about 45 minutes,
http://www.microsoft.com/security/scanner/en-us/default.aspx

Post all scan results for review,
Cheers.

 

[ICIT2LOL]

I had this update problem recently with a brand new laptop worked it out to be it did not have SP1 on it installed it myself and bingo in flooded the updates so check your system in Control panel and see what you have got form what I have quickly read through not much about the system per se'

For malware scan I would be inclined to start with this Download Kaspersky Rescue Disk 10 first before going any further and here are tons of on call scanners available.