[SOLVED] Error 0x80080643 on KB2267602 - Windows Defender Issues

C

Cr3nshaw

Contributor
Joined
Jul 30, 2018
Posts
52
Hi again,


i'm having trouble with updates on a PC of a friend, i already noticed that windows defender is kinda corrupted (won't start and won't let me change settings), and the update that's giving me troubles is Windows Defender related...
I tried to run dism /online /cleanup-image /restorehealth and sfc /scannow from elevated command prompt, and both complete successfully.
I tried to run SFCFix, but it crashed (!) with unhandled exception.
This machine is an HP that was affected from the recent WDF_Violation BSOD, but removing the problematic packet from offline restore mode fixed the problem.
The update failing is KB2267602, and the error is 0x80080643 (found almost nothing relatable on google).
Another downside of the failed update (i think) is that Windows Defender can't scan downloaded files, and it defaults to "it's a virus, delete it", so actually i can only download files via Firefox, since Chrome and Edge have this over-protective behavior.

I uploaded CBS and DISM logs on my dropbox, in a zip file with the dumps from the sfcfix crash... can you help me sort this out please?

Dropbox - SFCFix.zip

Thanks a lot
 
Retrieve Components Hive
 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service and just provide the link here.
 
Hi, here's the link to the components file

Dropbox - COMPONENTS.zip

I did some research yesterday, the problem i have seems to be related to a Windows update (https://support.microsoft.com/en-us/help/4052623/update-for-windows-defender-antimalware-platform), but even following instruction and adding rules to Applocker via gpedit did nothing. The Windows Defender Antivirus service is actually failing to start with error 87 - Wrong parameter, so i'm not sure that properly a Windows Update issue, so feel free to move the topic to another session if needed. Yet SFCFix crashing is a rare occurence to me, so maybe it's update related after all... really don't know :) my expertise is in MS cloud services, not the operating systems :p

Thanks for you support
 
Absolutely a Windows Update issue!

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.



  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put
    Code:
    tags around the log to break up the text.





SFC Scan



  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.
 

Attachments

Followed the instructions, still no luck in updating or starting windows defender :)

View attachment cbs.zip

Code: 
SFCFix version 3.0.0.0 by niemiro.Start time: 2018-10-16 01:22:24.675
Microsoft Windows 10 Build 17134 - amd64
Using .zip script file at C:\Users\antonella\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll


Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll.
The file \\?\C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll is in use and must be replaced over a reboot.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll.


Successfully pended file for replace over reboot: \\?\C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll


Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll
PowerCopy:: directive completed successfully.








Reboot:: directive completed successfully.








PostRebootCorruptionDetection::
No hash verification failures detected.
PostRebootCorruptionDetection:: directive completed successfully.








PostRebootRestorePermissions::
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
PostRebootRestorePermissions:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 14 datablocks.
Finish time: 2018-10-16 01:24:01.930
----------------------EOF-----------------------
 
Ok, just went with "update and restart" yesterday, but was after posting the logs. Will go with shutdown -h from now on :) Do you need new logs or the old ones are fine?
 
Code: 
SFCFix version 3.0.0.0 by niemiro.Start time: 2018-10-16 20:41:33.651
Microsoft Windows 10 Build 17134 - amd64
Using .zip script file at C:\Users\antonella\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll


WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll.
WARNING: File C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll to C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll.


Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpAsDesc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpClient.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCmdRun.exe
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpCommu.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpOAV.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpRtp.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MpSvc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpCom.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpEng.exe
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\MsMpLics.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc\winshfhc.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\eppmanifest.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmpcom.dll
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-offline-onecore_31bf3856ad364e35_10.0.17134.228_none_126029e35b0ef9cd\msmplics.dll
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 14 datablocks.
Finish time: 2018-10-16 20:41:34.229
Script hash: 0ITh52ADNKEKgw53jNjSG5cFwTQz7tXRE3rwU8NsuCM=
----------------------EOF-----------------------

CBS File (link on dropbox)

Dropbox - cbs.zip

Thanks
 
Please do the following now.

Step#1 - DISM /RestoreHealth Scan
Warning:this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.



  1. Right-click on the Start button and select Command Prompt (Admin)
  2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
    Dism /Online /Cleanup-Image /RestoreHealth
  3. Once it finishes, copy and paste the following into the command-prompt window and press Enter. If prompted to overwrite the existing file go ahead.
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please zip/upload to this thread.
    Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Hi, the dism scan interrupts at 85.5% with error 0x800f081f, referring to inability to find the source. I attached the referred dism log in the cbs zip linked below:

Dropbox - cbs.zip

Thanks for your support
 
SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.



  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put
    Code:
    tags around the log to break up the text.
 

Attachments

Code: 
SFCFix version 3.0.0.0 by niemiro.Start time: 2018-10-16 23:14:38.125
Microsoft Windows 10 Build 17134 - amd64
Using .zip script file at C:\Users\antonella\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.320_none_a76113d3acd39876


Successfully copied file C:\Users\antonella\AppData\Local\niemiro\Archive\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.320_none_a76113d3acd39876\mpazsubmit.dll to C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.320_none_a76113d3acd39876\mpazsubmit.dll.


Successfully restored ownership for C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.320_none_a76113d3acd39876
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.320_none_a76113d3acd39876
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 15 datablocks.
Finish time: 2018-10-16 23:14:38.297
Script hash: slnryUw9Mc7kbdIZx/486mn8u688lSo9Z+ZCivEVF5g=
----------------------EOF-----------------------

Here it is, thank you
 
The problem persists :( the computer actually made an update that was "stuck" from the last reboot, but wasn't windows defender related, the update to the windows defender signatures still fails with error 0x80070643

Here the cbs log:

Dropbox - cbs.zip
 
Farbar Service Scanner
1. Download Farbar Service Scanner from here, and move it to the Desktop
2. Right-click on FSS.exe > Run as Administrator
3. Checkmark everything, and click Scan
KUTc3I2.png
4. Once it finishes, Notepad will open FSS.txt on your Desktop. Copy and paste everything in it in your next reply
 
Code: 
Farbar Service Scanner Version: 27-01-2016Ran by antonella (administrator) on 17-10-2018 at 00:31:23
Running from "C:\Users\antonella\Downloads"
Microsoft Windows 10 Pro  (X64)
Boot Mode: Normal
****************************************************************


Internet Services:
============


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.




Windows Firewall:
=============


Firewall Disabled Policy: 
==================




System Restore:
============


System Restore Policy: 
========================




Security Center:
============




Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv: "%systemroot%\system32\svchost.exe -k netsvcs -p".
The ServiceDll of wuauserv service is OK.




Windows Autoupdate Disabled Policy: 
============================




Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend: ""C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1809.2-0\MsMpEng.exe"".




Windows Defender Disabled Policy: 
==========================




Other Services:
==============




File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed




**** End of log ****
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top