I adjusted the way Furtivex Malware Removal Script repairs service keys damaged by a particular miner. If you have these service keys:
BITS_bkp
dosvc_bkp
wuauserv_bkp
WaaSMedicSvc_bkp
UsoSvc_bkp
You're likely infected with a particular BitCoinMiner and can't perform Windows Updates. Your Task Manager may also be closing, prohibiting you from locating the suspicious directory / files involved.
Software to aid in its removal is available here: furtivex.net
You should see something like this in your log file if infected
# Services:
HKLM\SYSTEM\CurrentControlSet\services\BITS_bkp
HKLM\SYSTEM\CurrentControlSet\services\dosvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\UsoSvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\WaaSMedicSvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\wuauserv_bkp
Plusieurs clés de service ont été restaurées
