Windows 7 Update fails to even find updates (error:

Dragonride · 06 Oct 2013

Webcammax, possibly Web cam monitor? ensured that at least is uninstalled.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>net start xampp
System error 2 has occurred.

The system cannot find the file specified.

C:\Windows\system32>sc queryex xampp

SERVICE_NAME: xampp
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 1 STOPPED
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Windows\system32>sc qc xampp
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: xampp
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Xampp\service.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : XAMPP Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>sc sdshow xampp

D

A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S

AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

C:\Windows\system32>

NoelDP · 06 Oct 2013

The XAMPP service needs the file C:\Xampp\service.exe to be present and correct before it can start - is it there or not? If not, then it would probably be a good ides to either uninstall XAMPP or uninstall/reinstall it to ensure that everything else is OK as well.

Windows can be a little misleading with System 2 errors - because the file may be present, but the service may not have the correct permissions to be able to either access or open it. If you decide to reinstall XAMPP, then I would suggest running the following command after the install and a reboot

ICACLS C:\Xampp\service.exe

and post the results - together with a repeat of the SC commands above - with a new System event log.

The SDSHOW results above look about right - they are pretty much default permissions for a service.

Any joy with the WMP problems?

Dragonride · 07 Oct 2013

Xampp reinstalled, CMD results:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ICACLS C:\Xampp\service.exe
C:\Xampp\service.exe BUILTIN\Administrators

I)(F)
NT AUTHORITY\SYSTEM

I)(F)
BUILTIN\Users

I)(RX)
NT AUTHORITY\Authenticated Users

I)(M)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>SC QUERYEX XAMPP

SERVICE_NAME: XAMPP
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 1 STOPPED
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Windows\system32>SC QC XAMPP
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: XAMPP
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Xampp\service.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : XAMPP Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC SDSHOW XAMPP

D

A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S

AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

C:\Windows\system32>

WMD: I followed the instructions on the link you gave, disabled WMD and Media Centre, rebooted, re-enabled both, working fine now thanks. (Or so I thought, just seen the errors in the sys log!)

NoelDP · 07 Oct 2013

The WebCamMax service is still trying to start - please check MSCONFIG and see if you can find out what's attempting to force it.

It may even be that which is causing your WMP issues.

I'll check and see if I can find out what the SBRE service is supposed to do - we may still need to install the registry patch.
In the meantime, please open Device Manager, and enable Viewing of hidden devices.
Are there any flagged with yellow triangles or red crosses? If so, Remove them, and reboot - then go back in to Device Manager and see if the devices are still present, and whether the 'flags' are still there.

Dragonride · 07 Oct 2013

WebCamMax was down to a failed uninstall of WebCamMax so I re-downloaded and then uninstalled.

There are two yellow triangles marked in the Device Manager, both as under Portable Devices, entitled WPD FileSystem Volume Driver. As far as I can see, both are identical, dated 21/6/2006 version 6.1.7600.16385 Microsoft Windows.

Uninstalled them, re-booted, came back still with yellow triangles in place.

NoelDP · 07 Oct 2013

That would possibly fit with the

Code:

The driver \Driver\WUDFRd failed to load for the device 
WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.01#7&2C5E86A3&0&058F63636476

error. - and maybe the Bitlocker error as well. I've been avoiding mentioning that - as I know nothing about Bitlocker for one, and Bitlocker isn't available in Pro so far as I am aware, for another :)

Did you check MSCONFIG for WebCamMax? - also the Services.msc console may show something

NoelDP · 07 Oct 2013

Looking at the USB error - it's possible that this is caused by a misconfiguration somewhere.
Others have cured it by setting the Windows User Mode Driver Foundation service to Auto- start rather than manual.

Please run the following commands in an Elevated Command Prompt, and we'll see what the service has to say for itself...

NET START WUDFSVC
SC QC WUDFSVC
SC QUERYEX WUDFSVC
SC SDSHOW WUDFSVC

post the results

Dragonride · 07 Oct 2013

MSC shows nothing that seems to refer to WebCamMax, nor does services.msc through that does show bitlocker is present, but not running, where ever it's arrived from.

Results:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START WUDFSVC
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

C:\Windows\system32>SC QC WUDFSVC
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: WUDFSVC
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalSystemNetwo
rkRestricted
LOAD_ORDER_GROUP : PlugPlay
TAG : 0
DISPLAY_NAME : Windows Driver Foundation - User-mode Driver Framew
ork
DEPENDENCIES : PlugPlay
: WudfPf
SERVICE_START_NAME : LocalSystem

C:\Windows\system32>SC QUERYEX WUDFSVC

SERVICE_NAME: WUDFSVC
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 2020
FLAGS :

C:\Windows\system32>SC SDSHOW WUDFSVC

D

A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLORC
;;;IU)(A;;CCLCSWLORC;;;SU)S

AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)

C:\Windows\system32>

NoelDP · 07 Oct 2013

All the WUDFSVC output is normal.

OK - let's look at all the startup references then - download and save 'SilentRunners' from Silent Runners - Adware? Disinfect, don't reformat! - note that your AV may complain, since it's a VBS script. It is very safe though as all it does is query every possible malware startup point and list the output.

once saved, double-click on the file to run it, and accept the UAC prompt.
You'll get a request up as to whether you want to skip the supplemental scan - select NO as we want all the data we can find.
After a minute or two, you'll get a Success message - with the location of the output file.

Zip the output file, and attach it to your reply.

Dragonride · 07 Oct 2013

Okay, all done, eventually. It took a lot longer than a few minutes, but the full scan is now attached. Thanks again for all your help so far.

PS. I'm now starting to receive errors that my (genuine) Windows 7 is not genuine/activated as various files are missing/corrupt or removed, possibly by malware?