Helping blind user via TeamViewer with jammed Updates

gregrocker · May 28, 2013

Have run Updates reset and Readiness Tool twice now. Nothing in CheckSur log. It did allow half of the 49 queued updates to install, but it's stalled again now failing during reboots.

Running Readiness Tool again and uploading CBS log here in hopes someone can help this blind user, who has no one to help me remotely reinstall after major infection, now cleaned up.

CBS log link: http://sdrv.ms/1115ZBL

Thank you, friends!

gregrocker · May 28, 2013

Update: Every other small group of Updates seems to fail at reboot, so I run the REadiness Tool and/or Updates Troubleshooter and it allows them to install the next run.

I'm now down to SP1 and am hoping they work for it too. If not via Updates I have the Standalone downloaded.

Anyone recognize or theorize about this behavior? Infection damage?

She had cleaned up infection before I started, but Malwarebytes I ran first came up clean.

Corrine · May 29, 2013

gregrocker said:
Infection damage?

She had cleaned up infection before I started, but Malwarebytes I ran first came up clean.

Hi, Greg!

Without reviewing logs, it isn't possible to determine if there are still remnants of infection. However, if you have access to the machine, it wouldn't hurt to run a full system A/V scan and also check that only the latest versions of Adobe products and Oracle Java are installed.

Since you have run SURT, it may be helpful to Richard or Tom if you could provide that log. You can find it here: C:\Windows\Logs\CBS\CheckSUR.persist.log

niemiro · May 29, 2013

Hello Greg. It's really great to see you again :)

This error's a tough one. Extremely rare (I could number the times I've dealt with it before on my left hand), and you have a slight variant on it I have never come across before. However, there's no need to throw in the towel just yet :)

I first need you to open an Elevated Command Prompt and run these commands:

Code:

pnputil -a C:\Windows\WinSxS\amd64_bth.inf_31bf3856ad364e35_6.1.7600.17058_none_ce5d0a0ad527589a\bth.inf
pnputil -a C:\Windows\WinSxS\amd64_netrndis.inf_31bf3856ad364e35_6.1.7600.17233_none_23eb772b5f5707c6\netrndis.inf
pnputil -a C:\Windows\winsxs\amd64_winusb.inf_31bf3856ad364e35_6.1.7600.16421_none_5426b6732f25511d\winusb.inf

pnputil -i -a C:\Windows\WinSxS\amd64_bth.inf_31bf3856ad364e35_6.1.7600.17058_none_ce5d0a0ad527589a\bth.inf
pnputil -i -a C:\Windows\WinSxS\amd64_netrndis.inf_31bf3856ad364e35_6.1.7600.17233_none_23eb772b5f5707c6\netrndis.inf
pnputil -i -a C:\Windows\winsxs\amd64_winusb.inf_31bf3856ad364e35_6.1.7600.16421_none_5426b6732f25511d\winusb.inf

and save the console output (pipe a batch file or something, please :) )

I then need you to upload "C:\Windows\inf\setupapi.dev.log"

Thank you!

Richard

niemiro · May 30, 2013

Actually, Greg, I would like to add another step to the above instructions. Can you please use ProcMon (with an additional filter of Process Name: Is: pnputil.exe: then Include) Process Monitor

and Filter > Drop Filtered Events. Then File > Save > Events Displayed Using Current Filter into PML format. Thank you! I was kind of worried that in this case, the logfile along won't be enough, and I know we need to get this in as few connections as possible.

I've also corrected & extended the script posted above slightly. It turns out that -a -i isn't acceptable. It must be -i -a. Don't ask me why

Richard

gregrocker · May 30, 2013

Thank you both. I'm waiting to hear back from Jessie on these steps which I've linked to her.

niemiro · May 30, 2013

gregrocker said:
Thank you both. I'm waiting to hear back from Jessie on these steps which I've linked to her.

No problem :) However, I probably should have written out slightly more detailed instructions then. Do you think that would be necessary?

Fred Garvin · Jun 5, 2013

Greg, if you get stuck with something that can't be done remotely, you could PM one of us or mention the area your friend is in. I'd be happy to offer some help if it was local, I'm sure others would, too.

Search

Search

Helping blind user via TeamViewer with jammed Updates

gregrocker

Microsoft MVP

gregrocker

Microsoft MVP

Corrine

Administrator,
Microsoft MVP,
Security Analyst

niemiro

Senior Administrator, Windows Update Expert

niemiro

Senior Administrator, Windows Update Expert

gregrocker

Microsoft MVP

niemiro

Senior Administrator, Windows Update Expert

Fred Garvin

Sysnative Staff

Helping blind user via TeamViewer with jammed Updates

Microsoft MVP

Microsoft MVP

Administrator, Microsoft MVP, Security Analyst

Senior Administrator, Windows Update Expert

Senior Administrator, Windows Update Expert

Microsoft MVP

Senior Administrator, Windows Update Expert

Sysnative Staff

Administrator,
Microsoft MVP,
Security Analyst