[SOLVED] DISM Error: 2

Smexhy

Smexhy

Member
Joined
Sep 6, 2022
Posts
7
Hello, I found this forum through google while searching for this error and I have seen post by the @Maxstar which is fairly new, so this kind of malware might be pretty fresh hence why I wasn't able to find much on the internet. I wasn't able to find anything regarding this specific issue anywhere but here. What confirmed for me that I am on the right path is the mentioning in your topic regarding StopUpdates10 for which I found traces of on this specific computer I am having troubles with. This is the topic DISM Error: 2 - An error occurred while attempting to start the servicing process for the image located at C:\ which suggests me to register and open new topic for myself, which I did. I am including both txt files FRST generated here as required.

While investigating and running malwarebytes to scan the computer, I also found traces of some kind of bitcoin miner posing as google updates software, which I deleted through the malwarebytes itself (which might be related to the problem with DISM as well). Then I used Tweaking.com AIO tool to fix possible issues from the malware, together with SFC and CHKDSK scan (which didn't find any problems). Before running the tool, DISM, microsoft store, nor windows updates were working at all. After running and finishing the repairs, I was able to make windows updates work again. After fixing the windows updates I was able to install ton of security fixes, bios, drivers and even the latest biggest update for windows 10 21H2. Files included from FRST are after the fixes, updates and malware removed.

Currently I am trying to fix Microsoft Store and DISM as the issue why they aren't working are most probably connected. Microsoft store is reporting an error number 0x80131500 which google queries of course suggests me to run DISM and SFC - sfc didn't find any violations and dism doesn't work. I would be very open to any suggestions you guys might have to fix this (apart from reinstalling of course).
 

Attachments

Last edited:
Hi and welcome to Sysnative,

Start the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.
  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

Maxstar said:
Hi and welcome to Sysnative,

Start the
577bf0efb8088-FRST.png
Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.
  • Download the attachment fixlist.txt and save it to your desktop.
  • Right-click on FRST.exe and select "Run as administrator".
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally.
  • When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  • Post the logfile Fixlog.txt as attachment in your next reply.
Click to expand...
Hi, thank youu for your quick response and your time. I used fixlist provided here and followed instructions closely. After it was finished, restart had to be done as you said it might be. Then I uploaded the fixlist.txt in this post like you said. DISM was finally fixed and able to restore sucessfully whatever was needed. Then I ran SFC just to be sure there isn't anything left to fix. Windows updates were working correctly already, but I checked if it fixed the above error I mentioned with Microsoft Store, unfortunately it didn't.

I tried every single command I could find to fix Microsoft Store, reset its cache, wsreset, reinstall it, built-in troubleshooter, re-register mstore apps, disable/enable TLS in internet options, nothing helped though. However I ended up fixing in the end it with the trick of changing my region settings, where I set my country to UK. Then I was finally able to open and use microsoft store to proceed with all updates (including MStore). After the updates were done, I changed my region again to what it was and everything is working perfectly now as far as I can tell. Windows Search is a bit off when I search for applications (even after I rebuilt index manually) but other than that I think it's all good.

Let me know if there is anything else I should do that you find by looking in my fixlist log.
 
Hi,

Please post the Fixlog.txt for me to check, as well as FRST.txt and Addition.txt after a new scan with FRST.

 
Hi,
Rich (BB code): 
2022-09-07 14:26 - 2022-09-07 14:26 - 000071490 _____ C:\Users\<username>\Desktop\cc_20220907_142644.reg
In the latest log I noticed you've used the REG clean function of CCleaner, I strongly advise against using registry cleaners. Please note that modifying and/or deleting registry keys can cause Windows instability, or even worse. With registry cleaners and other doubtful optimization programs, there is always the risk of causing more problems than they claim to solve.

It seems, you've not used the free version of CCleaner, but a cracked version, because there are exclusions in the hosts file to verify the license for the Professional version? Is that right?

Rich (BB code): 
2022-09-07 01:47 - 2022-09-07 14:23 - 000001469 __RSH C:\Windows\system32\drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1                   license.piriform.com
127.0.0.1                   www.license.piriform.com
127.0.0.1                   speccy.piriform.com
127.0.0.1                   www.speccy.piriform.com
127.0.0.1                   recuva.piriform.com
127.0.0.1                   www.recuva.piriform.com
127.0.0.1                   defraggler.piriform.com
127.0.0.1                   www.defraggler.piriform.com
127.0.0.1                   ccleaner.piriform.com
127.0.0.1                   www.ccleaner.piriform.com
127.0.0.1                   license-api.ccleaner.com
 
Maxstar said:
Hi,
Rich (BB code): 
2022-09-07 14:26 - 2022-09-07 14:26 - 000071490 _____ C:\Users\<username>\Desktop\cc_20220907_142644.reg
In the latest log I noticed you've used the REG clean function of CCleaner, I strongly advise against using registry cleaners. Please note that modifying and/or deleting registry keys can cause Windows instability, or even worse. With registry cleaners and other doubtful optimization programs, there is always the risk of causing more problems than they claim to solve.

It seems, you've not used the free version of CCleaner, but a cracked version, because there are exclusions in the hosts file to verify the license for the Professional version? Is that right?

Rich (BB code): 
2022-09-07 01:47 - 2022-09-07 14:23 - 000001469 __RSH C:\Windows\system32\drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1                   license.piriform.com
127.0.0.1                   www.license.piriform.com
127.0.0.1                   speccy.piriform.com
127.0.0.1                   www.speccy.piriform.com
127.0.0.1                   recuva.piriform.com
127.0.0.1                   www.recuva.piriform.com
127.0.0.1                   defraggler.piriform.com
127.0.0.1                   www.defraggler.piriform.com
127.0.0.1                   ccleaner.piriform.com
127.0.0.1                   www.ccleaner.piriform.com
127.0.0.1                   license-api.ccleaner.com
Click to expand...
That's correct, I always though CCleaner was pretty decent tools that community always recommended, well at least it was long time ago, thank you for the info, I will make sure not to use it again and revert registry from backup it did before "fixing" it.
 
That's fine, please perform the following for a second opinion to check for any remnants of the infection.

Download
5e73b10539364-ESET_OnlineScanner.png
ESET Online Scanner and save it to your desktop.
  • Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
  • When the tool opens select the English language and click on Get Started.
  • Accept the license agreement, and select in the "Before we start..." screen the following options:
    • No thanks, I am not interested. (if you don't want to share anonymous data with ESET.)
    • Enable feedback system (recommended).
  • Click on Continue and click on the Full Scan option.
  • Select Enable ESET to detect and quarantine potentially unwanted applications - then click Start scan. (This may take some time.)
  • When the scan is ready and if threats have been detected, select Save scan log. Save it to your desktop as Eset.txt. Click on Continue.
  • ESET Online Scanner will now ask if you'd like to turn on the Periodic Scan feature. Disable this option if you don't want to plan the periodic scan.
  • Click on Continue If you left feedback, click Submit and continue. If not, Close without feedback.
  • Attach the scan log Eset.txt to your next reply.
 
Thank you, I did everything like you said. Here is the scan log attached.
 

Attachments

Hi,

Are there any further issues or is everything working properly again?
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top