[SOLVED] Continually offered KB890830 Malicious Software Removal Tool for October

PaulB · Oct 27, 2015

I have run Windows Update several times today and it keeps cycling round offering the MSRT as an update. I even went to the Microsoft site and downloaded it from there and tried to run it but the update just kept restarting having found no infections. I have hopefully attached CBS.zip and SFCFix.text as per instructions seen elsewhere on the form

PaulB · Oct 27, 2015

wben353 said:
Hi PaulB & welcome to the forum.

Thank you :wave:

Aura · Oct 29, 2015

Hi PaulB :)

My name is Aura and I'll be assisting you with your issue. Follow the instructions below please.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.

PaulB · Oct 30, 2015

Done as requested :) The link to CBS.txt is https://drive.google.com/open?id=0B7PqpaxIdCMHU0lRMlRmYV92Wms

Aura · Oct 30, 2015

Alright, so SFC detected one corrupt file and repaired, let's see if SURT have anything to report.

System Update Readiness Tool (SURT) - Scan
Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log;

Download the right version of SURT for your system;
- Your version of Windows is:
Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes);
On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log;
Attach this log in your next reply;

Alternatively, if these instructions are unclear for you, you can follow the tutorial below.

System Update Readiness Tool (SURT)

PaulB · Oct 30, 2015

I have started running the SURT tool and it has been running for about 35mins so far. Just had a quick look at the CheckSUR.log (by copying it on to my desktop) and it has got as far as checking the Component Store. Other than reports on other areas that it has checked there are no errors so far. I am just a bit concerned at the length of time that it has been running. Text from the log so far reads:-

<begin quote>
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 25.0
2015-10-30 20:41

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
<end quote>

Last time stamp on the log is 20:53 and its now 21:26

My system is 32 bit Windows Vista

Aura · Oct 30, 2015

It can take a while to run depending on your system and hardware specs :)

PaulB · Oct 30, 2015

Its finished at last! Log attached

Aura · Oct 30, 2015

Seems like SURT repaired one key.

Code:

Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18971.
Processor architecture: x86.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18971&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.

Now, is the KB890830 still listed as an available update for install?

PaulB · Oct 31, 2015

No - Windows Update is now saying that my system is up to date so it looks as though the problem is fixed :) Thank you so very much for all your help - it is very much appreciated!

Aura · Oct 31, 2015

No problem Paul, you're welcome :)

Search

Search

[SOLVED] Continually offered KB890830 Malicious Software Removal Tool for October

PaulB

Member

Attachments

PaulB

Member

Aura

Sysnative Staff, Security Analyst

PaulB

Member

Aura

Sysnative Staff, Security Analyst

PaulB

Member

Aura

Sysnative Staff, Security Analyst

PaulB

Member

Attachments

Aura

Sysnative Staff, Security Analyst

PaulB

Member

Aura

Sysnative Staff, Security Analyst