0

So coming into work today, I found that my Windows 10 machine had rebooted itself, force-closing several applications and losing data, which seems like insane default behavior, and I thought to myself "Maybe this was a critical security update at least?", so I went to "View installed update history"

The last update it displays was 1/14/2018. It is now 1/30/2018, and I know an update was installed last night. Visual Studio 2015 told me that's why it was force-closed (and it at least, was able to recover the data).

Does anyone know why updates are not being logged or logged updates are not being displayed?

Edit

Based on comments, I've reviewed the event log and it appears the problem MAY be related to crashes that MAY be caused by the updates. What I see is 3 crashes since 1/14/18, all occurring within 2 minutes of "successful" updates of components like "Windows Store" or "Paint". Windows Defender Definition updates are occurring regularly and successfully with no indications of problems, I should note. (They do tend to occur immediately AFTER crashes, however). Further, I have the startup message from VS 2015 telling me it was shut down by an update, when only one shutdown occurred last night--the one caused by a crash. I do not see any explicit failures logged by Windows Update. (And all updates logged as starting in the event log are logged as finished successfully there.)

The "Setup" Log in Event Viewer indicates the last successful install as occurring on 1/14, with KB4043961 marked as superseded on 1/16.

The windows updates logged in the "System" log since 1/14 are all "Windows Store", or Defender updates, application updates "Paint", "Advertising", "mscommunication". I don't see any normal-looking OS updates.

Further, I've opened up the most recent memory dump in windbg. Not enlightening, for me at least. The last crash was caused by a stack overflow in csrss.exe. Beyond that, the stack trace isn't clear enough for me at least to determine any clear cause.

The Windows Update troubleshooters repeatedly indicate I have pending updates, which Windows Update itself is apparently not seeing.

If this is enough information for anyone else to pinpoint or guess at the problem, I'd love to hear it.

Since this problem seems increasingly bizarre and specific to my machine, it's probably worth mentioning it's a relatively fresh and unmodified Win 10 install. VS 2015, VS 2017, Windows SDK, and WSL (bash), and TeamViewer are the only installs of any note. I have not edited any Windows files from within WSL.

10
  • 2
    What's your event viewer telling you? Commented Jan 30, 2018 at 18:42
  • That a definition update for Windows Defender was installed about 15 minutes after I locked my machine....I am really surprised that those require a reboot. They are constant.
    – zzxyz
    Commented Jan 30, 2018 at 18:49
  • 1
    Windows Defender updates do not require a reboot to be installed. There is an alternative to your theory, your computer simply encountered a crash, and automatically rebooted. The only update released in the last 16 days that would require a reboot was KB4078130 which must be downloaded and installed manually.
    – Ramhound
    Commented Jan 30, 2018 at 18:49
  • Okay, then the reboot is still unexplained. That's the only update I can see in "Windows Logs\System"
    – zzxyz
    Commented Jan 30, 2018 at 18:50
  • @Ramhound - You win the prize. Although...it appears that Windows Updates are now crashing my system. I went back about two weeks, and there seems to be a definite pattern.
    – zzxyz
    Commented Jan 30, 2018 at 18:57

1 Answer 1

1

If you are having problems with Windows Update, here are a few possible actions:

10
  • Both troubleshooters indicate there are "pending updates" as the only problem. If I select "Fix" the problem is marked as resolved, if "skip" the troubleshooter completes. No update installs or starts to install. I executed the reset instructions with no apparent effect, not that I would really expect one.
    – zzxyz
    Commented Jan 30, 2018 at 20:43
  • 1
    Do everything as advised in the last link, especially renaming the folder %systemroot%\SoftwareDistribution. There are scripts that automate this: PowerShell script and Batch script.
    – harrymc
    Commented Jan 30, 2018 at 21:16
  • My "installed update history" is now cleared, (after following steps 4 and 5 which I did skip the first time). Windows Update did not detect any updates to install after rebooting. I ran the troubleshooter again and it's still saying that there are pending updates. It also said security settings were changed, which it "fixed"--this was new.
    – zzxyz
    Commented Jan 30, 2018 at 21:30
  • Regarding security, I do have some DCOM error messages ("Access denied", more or less ) that are occurring fairly regularly. But the timing seems unrelated and both my SID and NT_AUTHORITY\LOCAL_SERVICE are being denied activation access to various CLSIDs.
    – zzxyz
    Commented Jan 30, 2018 at 21:34
  • 1
    You seem to have issues. I suggest doing chkdsk and sfc /scannow to check system integrity. At worse, you might need the big one: Repair Install. Mind your backups before.
    – harrymc
    Commented Jan 30, 2018 at 21:45

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .