Just to ensure your machine isn't infected, run a scan with the Free ESET Online Scanner -

Probably best to download and run the scan in Safe Mode with Networking

https://www.eset.com/uk/home/online-scanner/

This article has some tips for getting Windows Defender to turn on -

https://www.minitool.com/backup-tips/windows-defender-not-turning-on.html

Where Win 10 updates are concerned, this cmd can sometimes help -

dism /online /cleanup-image /startcomponentcleanup

Follow that with the dism /restorehealth and sfc /scannow cmds and try your updates again.

I think the problem is related to Windows Defender not being able to start.

I don't recognise the pics in relation to the forum.

You were obviously able to save those to upload.

I don't know what more I can add to this thread and don't know why you were unable to save a modified post.

I have posted and then modified this reply without any problems.

I use Edge in Win 11.

I think you are probably right that the spam catcher alert is incorrect and would seem to be browser specific.

If you do a manual check for updates, MS will give what you need.

I don't know why it did that but glad you were able to fix it.

If you've done a clean install then do a check for updates and Windows Update will automatically give you them and then you can select what you want to download and install.

This is the MS Update Catalog where you can manually download each update -

https://www.catalog.update.microsoft.com/Search.aspx?q=security%20monthly%20rollup%20for%20Windows%207

Is this what you are referring to ?

This article explains a method for how to slipstream SP1 onto an existing Win 7 basic install disk -

https://www.howtogeek.com/124368/how-to-create-a-customized-windows-7-installation-disc-with-integrated-updates/#:~:text=If%20you%20have%20a%20Windows%207%20disc%20without,check%20the%20check%20boxes%20or%20select%20a%20preset.

See if these steps to suspend Bitlocker will help -

https://www.tenforums.com/tutorials/38508-suspend-resume-bitlocker-protection-drive-windows-10-a.html

You could also try a cold boot by pressing and holding down the power key to see if it has cleared when you reboot.

Wait a few seconds before you reboot.

The sfc offboot cmd is when you are repairing the volume using the install media.

If you are going to come onto the forum then there's no need to check your emails.

You would need to boot up with install media to run a Startup Repair as it can only be accessed from Repair your computer.

The bootrec and fix mbr cmds would automatically execute on where the volume is installed.

Can you post a link to a website where it advises to change from x:sources to c:

Even when I run a sfc /scannow after booting up with install media, I enter the cmd from the default prompt but first run the cmd bcdedit |find "osdevice" and then I would use that partition letter instead of the X I have exampled in the following cmd -

sfc /scannow /offbootdir=X:\ /offwindir=X:\

For clarity that is a Pipe symbol before find and is the upper case of \