kerkanthony

Its an adware StopUpdates10Guard. So i downloaded it, run it, make it stop running and then uninstalled it. So i can remove all the software i downloaded.

yup we are okay to clean up and close. guess we all learn something new today

Yup working at 100% so interesting 1 simple adware can stop it and cant make it work unless you know what too look for.

Found this and it seems to help. So will see how it goes a few days. Thanks for the help. https://answers.microsoft.com/en-us/windows/forum/windows_10-update/windows-update-one-of-the-update-services-is-not/4ee9d03c-23f3-4cce-a31b-15f92375efbc#:~:text=One of the update services is not running properly%2C but,and then select Windows Update."

FSS.txt

Fixlog.txt

msert.log

Addition.txtAdwCleaner[C00].txtFRST.txt Hopefully this is the complete logs.

FRST.txtAddition.txt

Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 4/7/21 Scan Time: 8:26 PM Log File: 85c81292-979c-11eb-9249-7824af4303db.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1249 Update Package Version: 1.0.39189 License: Free -System Information- OS: Windows 10 (Build 19041.572) CPU: x64 File System: NTFS User: Ken\ken -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 402353 Threats Detected: 11 Threats Quarantined: 11 Time Elapsed: 47 min, 9 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 1 PUP.Optional.EasyLife, C:\USERS\KENDR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 217, 691263, , , , , , File: 10 Generic.Malware/Suspicious, C:\USERS\KENDR\APPDATA\LOCAL\TEMP\LOADERX.EXE, Quarantined, 0, 392686, 1.0.39189, , shuriken, , 1B497C93FB984B6F3911297B197AF5C2, 1941E682403DD5F423FEE6E9685020C587395EF9A62F86D1311812C7D29CBF1F PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, Quarantined, 217, 691263, , , , , 02EF4EC2BF6DA10B5C38C871E2807EBE, A3C1B76B9E3DCDF8AF036F9145783B6D9A9A8EB4C2342850C57E062F641057D5 PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000187.log, Quarantined, 217, 691263, , , , , 12F59552C41C82971C72FE8CADA9AE01, C0794F4BF460472F32BF9C37A83FC3C47CAA4A3AD8F38E6AE668F5F8A275B9B9 PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000189.ldb, Quarantined, 217, 691263, , , , , DDC2DCE198802FB21F89103D3AC792AF, 33068023D57FE5F537F78EC2AF9439580BA8E0234888CC79AA2E17A5D4ACC9DA PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, Quarantined, 217, 691263, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443 PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, Quarantined, 217, 691263, , , , , , PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, Quarantined, 217, 691263, , , , , D20F9A71CDE65AD89554D565A515C049, 40B0F05345242B3C20DC56517C0F1BE1D7BFE9F47F2C1D89204850BEB1B6BEFE PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, Quarantined, 217, 691263, , , , , F4007E7D138A7603B19F250377A64AFE, 5730FAC99B16B4D0F9FF5F5F22BB60AE0E312B4068FDAC8B7D0CD1361BE71A3F PUP.Optional.EasyLife, C:\Users\kendr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, Quarantined, 217, 691263, , , , , 8755C5032D26549FB5EB6D77EB6ADA2B, 1471FCE33B436AA07A51DD0C5C8241914CCA00E6C18F2A9D8E6F2116AA62A671 PUP.Optional.EasyLife, C:\USERS\KENDR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, 217, 691263, 1.0.39189, , ame, , 3DB55D5D1D34293E0E6F224DAA6CDE5B, E41C8D14F44C4E6D38CFE6B1F71E504E7B0F9433F62ED09BC907472239A83B51 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)

Hello tried to get Office activated with Ratibonus KMS tools and after that the windows update fail to be updated. As I saw this forum but seems some steps is no longer working since the threat is close. https://forums.malwarebytes.com/topic/241381-kmspico-installed-problem-with-windows-10/