Vista refusing to update

[ruthy]

Good morning

I got sent here from the Microsoft forums.
I've spent hours trying to deal with this update problem. Basicly Vista wont let me turn on automatic updates or update in any way. I've narrowed it down to being a problem with one of the windows services, but I've not being able to narrow it down to which one it is.

 

I was thinking since so many people seem to be having this issue that there must be specific services or start up items which are responsible most of the time. Could you please tell me which ones they are most likely to be. So I can switch them off.

[Black Viper]

http://www.blackviper.com/WinVista/Services/Windows_Update.htm

[ruthy]

From what I understand I need to switch off a windows start up item or service. There doesn't seem to be a mention of that in the link provided.

[IH8U]

Hopefully you know how to get to services by typing services.msc in the run or search box on the Vista start menu.

Take note: Manual updates via Windows Update Version 6 web site still requires Windows Update, Cryptographic Services, Background Intelligent Transfer Service, and Windows Event Log to be running. Place all four in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3AM, for the automatic checking of updates, to a time when the system is "normally" on. Otherwise, Windows Update will check upon boot which may slow down the boot process.

Make sure these services are running and set to automatic. If they will not start check to make sure their dependencies are running.

Dependencies: What service Windows Update needs to function properly: Remote Procedure Call (RPC) (HB, HP, B, U)   DCOM Server Process Launcher (HB, HP, B, U)

If you have Microsoft Office installed,look at the options for Windows Update and see if the option to use Microsoft Update is selected and if it is change it back to Windows Update.
Try that and if you can't get Windows Update working let us know.

[ruthy]

Hi
All of those things are started and set to automatic. The only one which doesn't show up in services is windows update.

Here is a link to my windows technical support thread which will show all the things I have done. Hopefully it will make your job easier.

http://social.answers.microsoft.com/Forums/en-US/vistawu/thread/786ff732-70cb-4fea-9b5f-3003ffdffaa8

[WildcatDan]

I looked at your postings in the microsoft forum and I found myself asking some questions.  So, just for clarification, you said your system was clean.  Had you done some scans and found malware recently?  What software have you been scanning with?
 
I think you're zeroed in on the problem with the windows update service not loading.  The Microsoft MVP seems to be leaning towards malware that's damaged or is keeping your Windows Security Center from running properly.  The Windows Update service may be blocked by malware or corrupted in some way.

[Spawn]

This sounds like a virus to me because of the service missing...I read about Conflicker doing that back when it first arose, so I did some searching for you, and sure enough this was found:

"Do you have the following registry key info below? It is very likely that your computer/network is infected with a variant of the Conficker virus. One of it's first attack actions is to cripple the Windows Update service to prevent itself being removed by thngs like Windows Defender or the Maliscious Software Removal Tool.

Review: http://www.microsoft.com/security/portal/SearchResults.aspx?query=conficker
Download and run MSRT - http://www.microsoft.com/security/malwareremove/families.mspx

==========


Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv

  Name:            PreshutdownTimeout
  Type:            REG_DWORD
  Data:            0x36ee800

  Name:            DisplayName
  Type:            REG_SZ
  Data:            @%systemroot%\system32\wuaueng.dll,-105

  Name:            ImagePath
  Type:            REG_EXPAND_SZ
  Data:            %systemroot%\system32\svchost.exe -k netsvcs

  Name:            Description
  Type:            REG_SZ
  Data:            @%systemroot%\system32\wuaueng.dll,-106

  Name:            ObjectName
  Type:            REG_SZ
  Data:            LocalSystem

  Name:            ErrorControl
  Type:            REG_DWORD
  Data:            0x1

  Name:            Start
  Type:            REG_DWORD
  Data:            0x2

  Name:            DelayedAutoStart
  Type:            REG_DWORD
  Data:            0x1

  Name:            Type
  Type:            REG_DWORD
  Data:            0x20

  Name:            DependOnService
  Type:            REG_MULTI_SZ
  Data:            rpcss

  Name:            ServiceSidType
  Type:            REG_DWORD
  Data:            0x1

 =====

Once you have that all done, let me know if you need asistance getting your Windows Update service registry entries back together. Honestly, our recommendation after infection is to reinstall the OS to guarantee that a Conficker variant did not leave behind a rootkit, worm, or backdoor account that AV tools don't catch."

Source:http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/5a8bf018-c522-4a8e-a857-ac73f5e706ee

This still may not fix your issue, but it is something new to try.

Spawn

[ruthy]

The software I use is AVAST! and spybot.
I downloaded and ran the Microsoft removal tool; it didn't find anything.
How would I find the registry key that you were kind enough to show me Spawn?

[Spawn]

Start - run - type regedit.  When it opens, you should see HKEY_LOCAL_MACHINE on the left hand side.  Expand that out and look for System, then expand that out and look for CurrentControlSet, then Services, then wuauserv.

Spawn

[ruthy]

Thanks for explaining that. I go as far as services, but wuauserv doesn't seem to be in there.

[Spawn]

If it's not there, then that is your problem.  You'll need to add wuauserv, and then those other entries back into the registry.

Spawn

[ruthy]

Good morning
how would I do that?

[Spawn]

I personally am not sure.  You'll need the help of one of our other members who are more experience with this particular issue on how to do it

Spawn

[ruthy]

Its OK, but thanks for all the help you have given me.

[ruthy]

I've added that stuff back to the regestry using this link http://support.microsoft.com/kb/326253
Method 5: Register Windows Update engine files

but to no avail. Is it anything else it could be?