Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win 8.1 - Windows update "checking for updates" eternally


  • Please log in to reply
23 replies to this topic

#1 KingFlippyNips

KingFlippyNips

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 09:49 PM

Hello all,

 

I have a Dell Inspiron 15 7000. Restored it recently to scratch and following this, windows update has been stuck on checking for updates ever since. I've let it run overnight several times and tried various fixes to no avail. 

 

So far I've tried

 

- restarting,

- the windows troubleshooter,

- http://www.kapilarya.com/windows-updates-troubleshooting, but half the commands failed.

https://windowsforum.com/threads/windows-update-keeps-checking-for-updates-forever.73958/page-2

- A fix on youtube which involved deleting two folders

- A fix that just shows all the taskbar icons

 

However it never passes checking for updates. Everything else seems to be working fine and I have only recently restored it so I can't imagine restoring again would help.

 

Thanks to anyone who tries to help as this is damn frustrating!

 

 

 

 



BC AdBot (Login to Remove)

 


#2 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 09:54 PM

Forgot to mention that I tried twice to upgrade to windows 10 straight away, but they failed again. 


Edited by KingFlippyNips, 03 January 2016 - 09:54 PM.


#3 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 03 January 2016 - 10:07 PM

Which version of Windows are you having the issue on (7/8/8.1)? Scratch that, missed the title.

 

Can you link a copy of your %windir%\Windowsupdate.log?

 

If you aren't getting an error, I wouldn't think it is a service issue, as BITS and other services' corruption would instantly give you a few specific errors.

 

I've had luck with similar issues using the Tweaking.com Windows Repair tool - just use the Windows Update module of it.


Edited by Demonslay335, 03 January 2016 - 10:08 PM.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#4 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 10:20 PM

I'm not fully sure how to do that sorry, bit of a novice. I've got the windows update log in notepad. Trying to work out a way to attach a file as it's too massive to paste...

 

 

"2016-01-04 13:59:03:037 1036 6ac Agent  * Found 52 updates and 18 categories in search; evaluated appl. rules of 1571 out of 2811 deployed entities
2016-01-04 13:59:03:037 1036 684 Report REPORT EVENT: {BEEC91E9-3D14-4254-8D7E-F0D4638E85AE} 2016-01-04 13:59:03:037-0800 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 (null) Success Software Synchronization Windows Update Client successfully detected 52 updates.
2016-01-04 13:59:03:037 1036 6ac Agent *********
2016-01-04 13:59:03:037 1036 6ac Agent **  END  **  Agent: Finding updates [CallerId =   Id = 1]
2016-01-04 13:59:03:037 1036 6ac Agent *************
2016-01-04 13:59:03:037 1036 6ac IdleTmr WU operation (CSearchCall::Init ID 1, operation # 16) stopped; does use network; is not at background priority
2016-01-04 13:59:03:037 1036 6ac IdleTmr Decremented PDC RefCount for Network to 0
2016-01-04 13:59:03:037 1036 6ac IdleTmr Decremented idle timer priority operation counter to 1
2016-01-04 13:59:03:037 1504 5dc COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = ]
2016-01-04 13:59:03:131 1504 5dc COMAPI  - Updates found = 52
2016-01-04 13:59:03:131 1504 5dc COMAPI ---------
2016-01-04 13:59:03:131 1504 5dc COMAPI --  END  --  COMAPI: Search [ClientId = ]
2016-01-04 13:59:03:131 1504 5dc COMAPI -------------"
 
Here is the last part. Not sure of that is what your after. I'll give the Tweaking.com tool a go. I appreciate the help!

Edited by KingFlippyNips, 03 January 2016 - 10:27 PM.


#5 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 03 January 2016 - 10:31 PM

Try using Pastebin for the log.


logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#6 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 10:58 PM

http://pastebin.com/3SRiwuUj

 

This is only around of third of the total log as it was too big.



#7 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 03 January 2016 - 11:08 PM

I'm not really an expert at reading that particular log, but I found this line interesting:

2016-01-03  14:02:14:587     736    109c    AU    # WARNING: Failed to find updates with error code 8024a008

Was that time during your installation of Windows? I notice a reference to OOBE (Out Of Box Experience, a phase where you input your username and all that) a few lines down, so we might ignore that if that is the case. (Mixed you with another user who just reformatted, but I'm still curious why I see a TON of references to being in OOBE mode.)

 

I also see references to another error a little farther down.

2016-01-03  14:08:11:961     736    1ae0    Agent   WARNING: WU client failed Searching for update with error 0x8024000b

If that is a cause, here is a Microsoft KB about a fix for that error.

 

I'm combing through the rest of the log currently.


Edited by Demonslay335, 03 January 2016 - 11:12 PM.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#8 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 11:33 PM

A lot of those errors came up when windows update was running and I ran the troubleshooter. I know for certain this one did; 8024a008. I think the troubleshooter stopping processes was the cause. Otherwise I've had no errors whatsoever, but only that it hasn't passed beyond checking for updates.



#9 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 03 January 2016 - 11:41 PM

Curious: if you pull up a command line (Start -> "cmd"), what do you get for your context (e.g. "C:\Users\[username]")?

I do see in the logs it is talking with Microsoft's server, and if found 52 updates.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#10 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 11:46 PM

I get C:\Users\[My name]>

 

Yeah I noticed that as well. Seems it can find the updates but can't progress to doing anything about it.



#11 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 03 January 2016 - 11:52 PM

OK, good. Was trying to see if you were for some reason in a temporary profile or audit mode. All the stuff saying OOBE is active is a bit odd if you aren't actually in sysprep/audit mode (you would have entered this usually with Ctrl+Shift+F3 during install, unless something glitches out in the OEM install).

I retract me previous edit about the reformatting... I double confused myself, you did say you formatted. :P

You did say you had it sit overnight, so I can assume you installed Windows atleast a few days ago, and not during the timestamps in the log?

Edited by Demonslay335, 03 January 2016 - 11:53 PM.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#12 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 03 January 2016 - 11:57 PM

Restored the computer to original settings a few weeks ago. Tried to upgrade to windows 10 which failed and since then have only loaded a few programs and updated some drivers. Have been trying to get windows update to work ever since. Computer works well otherwise. Doing another restore wouldn't be the end of the world so if nothing else works I'll do that. I did run it in safe mode and several other things to try and get window 10 update to work so I'm thinking something related to that is the issue.


Edited by KingFlippyNips, 03 January 2016 - 11:58 PM.


#13 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,427 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:19 PM

Posted 04 January 2016 - 12:05 AM

Any luck with using the Tweaking.com tool or Microsoft KB fix? When you say you tried a fix involving deleting folders, was that C:\Windows\SoftwareDistribution after stopping the wuauserv service? If you have Windows Defender installed, try updates through that, saw a forum mentioning that for troubleshooting since it uses the same underlaying mechanism.

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#14 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 04 January 2016 - 12:11 AM

It was this one:

 

1- stop Windows Update Service: right click on taskbar I task manager I services I wuauserv

2- delete two folders 
"C:\Windows\SoftwareDistribution\DataSto­re"
"C:\Windows\SoftwareDistribution\Downloa­d"

3- start Windows Update Service: right click on taskbar I task manager I services I wuauserv

 

Okay I'll look into that.



#15 KingFlippyNips

KingFlippyNips
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:05:19 PM

Posted 04 January 2016 - 12:29 AM

I ran all the tweaking scans and the repair, hasn't seemed to help so far and I've just tried the KB fix. Will wait for windows defender to finish updating then reboot. Windows defender seems to be updating fine. 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users