Registry key auto delete after reboot, after a malware attack

Farooq Ahamed 21 Reputation points
2021-11-08T18:33:46.883+00:00

My wuauserv registry keeps getting deleted every time the computer reboots. I cannot install anything from the Microsoft Store or have any Windows Update.
Every time I shut down or restart the computer it gets deleted. So I can't get the Windows Update service to start. Ran sfc/scannow a lot of times. Every time it repairs something until it cannot find any more issues. But the problem persists the next time I boot. Suffered a ransomware attack(BOOA) a few days back. Used Malwarebytes to disinfect the computer, but it does not find any more malwares or viruses. Searched the internet a lot about this problem. Couldn't find any solution. At least tell me a way to run Windows Update service without having to restart.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,140 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
8,222 questions
No comments
{count} votes

Accepted answer
  1. Adam J. Marshall 5,666 Reputation points Microsoft MVP
    2021-11-08T20:42:02.977+00:00

    Once a system is infected, there's no 100% guarantee that you're removing all parts of the ransomware or other malware that was installed on there. It sounds like you still have some malware installed that is causing you problems with Windows Update and it's services.

    I'd recommend a wipe and reload from a CLEAN USB media for Windows 10/11 (made with a known good clean computer) depending on what OS you had on there.


2 additional answers

Sort by: Most helpful
  1. Adam J. Marshall 5,666 Reputation points Microsoft MVP
    2021-11-09T03:23:43.887+00:00

    Reinstall Windows by wiping the drive clean. Don't do it from within Windows. Start up the system from the USB key.


  2. Adam J. Marshall 5,666 Reputation points Microsoft MVP
    2021-11-09T03:30:05.423+00:00

    No. Once digitally licensed, it will reactivate after being wiped after connecting to the internet.