Thing is that I have found all packages that are reported missing in SURT log (all file versions) and after running SURT again I have no result in fixing it. It seems to me that this may be result of my previous effort to remove/disable this Microsoft malware. At first I solved it by removing it from startup (schedule tasks) by deleting entries there. t worked for some time but bugger started to come back using some different scheme, so I changed ownership of files in GWX directory and deleted files there. Again it was good for some time when it started to appear again - with no GWX.exe on system. So I thought they must have started using it as rootkit, so I found all in one solution called "GWX Control Panel" which effectively disabled it and deleted unwanted malware installation of Win10, as well as disabled "OS upgrade". All this was restore able, so when problem emerged I switched everything back - but had no result on failed updates (malware was up and running).
So anyhow - registry seems to be only thing left to do. Would it be sufficient to delete every entry that has KB2952664 in its name or there is something more?