fix security updates that failed to install

Question

I have windows 10 and my last 3 updates did not install. I have an active virus that keeps trying to install Trojan:Win32/Commando.A!ml . So, I can't disable Defender. HOw do I get window update to install the last 3 updates?

Answer 1

Hi Phil,

You need to get rid of the virus first.

I would run Malwarebytes Free, get rid

of the virus and then try the updates.

Answer 2

Please run the fixlist below.

• Download fixlist.txt
• Save Fixlist.txt to the same folder as FRST64English.exe.
• Close all programs.
• Launch the Farbar Scanner tool and click "Fix".
• Restart Windows if prompted.
• Upload the output log file (FixLog.txt) in your next reply.

---

NOTE: The fixlist.txt script was written specifically for this user and for use on that particular machine. It is not recommended to run it on another machine, and don't run the same fixlist.txt more than once.

Answer 3

I was denied access to - ren %systemroot%\system32\catroot2 catroot2.bak

Answer 4

I have done all those things. Trouble shooter states that it is a problem w/Bits Service but, I stopped and restarted it thru CMD. I can't even install Win 11. It installs and then uninstalls it. Is there a manual way to install the updates?

Answer 5

Since Defender cannot be disabled, focus on the Windows Update repair steps that do not require turning it off.

1. Restart and apply any pending update state.
   • Select Start > Power > Update and restart or Update and shut down if either option appears.
2. Run the Windows Update troubleshooter.
   • On Windows 10, go to Start > Settings > Update & Security > Troubleshoot > Additional troubleshooters.
   • Select Windows Update > Run the troubleshooter.
   • Apply any fixes it finds, then restart the PC.
3. Check free disk space.
   • Windows needs at least 16 GB free for a 32-bit OS or 20 GB for a 64-bit OS to upgrade.
   • If space is low, free space and try Windows Update again.
4. Make sure the Windows Update service is running.
   • Press Win + R, type services.msc, and press Enter.
   • Locate Windows Update.
   • If it is stopped, right-click it and select Start.
5. Repair system files.
   • Open Command Prompt as administrator.
   • Run:

          sfc /scannow
     

   • Let it finish completely, then restart.
6. Reset Windows Update components. This renames the update cache folders and can fix repeated failed installs.
   • Open Command Prompt as administrator.
   • Run these commands one at a time:

          net stop bits
          net stop wuauserv
          ren %systemroot%\softwaredistribution softwaredistribution.bak
          ren %systemroot%\system32\catroot2 catroot2.bak
          net start bits
          net start wuauserv
     

   • Restart the PC and check for updates again.
7. If updates still fail, check the specific error code shown in Settings > Update & Security > Windows Update. The next step depends on that code:
   • 0x80070005: make sure the account has administrator access.
   • 0x80070002 / 0x80070003 / 0x80070057: restart, run the troubleshooter again, and confirm enough disk space.
   • 0x80248014: start the Windows Update service and rerun the troubleshooter.

Because there is an active malware detection, avoid disabling Microsoft Defender. Complete the Windows Update repair steps above first, then retry the updates.

---

References:

• Troubleshoot problems updating Windows