[SOLVED] KB3126587 & KB4471318

N

nelbarn

Member
Joined
Dec 28, 2018
Posts
14
Unfortunately both of these windows updates fail. (I'm also struggling with the Premier Opinions malware which doesn't uninstall when I try to remove it through "Programs and Features. Happy to create a new thread for that issue if it would be preferable).

My CBS zip file is too big to upload here. I've synced it with Google Drive. SFCfix log:

SFCFix version 3.0.1.0 by niemiro.
Start time: 2018-12-29 05:48:59.955
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.








AutoAnalysis::
FIXED: Corruption at C:\Windows\winsxs\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.1.7601.17514_none_529b6191f4228c10\Microsoft.MediaCenter.Shell.dll has been successfully repaired from C:\ProgramData\MyChannelLogos\Backup\Microsoft.MediaCenter.Shell.dll.








SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 1
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 1
SURT total detected corruption count: 1
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.








Successfully processed all directives.






Failed to generate a complete zip file. Upload aborted.




SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2018-12-29 06:03:12.734
----------------------EOF-----------------------

Many thanks in anticipation of your help!
 
Hello and welcome,

Let concentrate on that malware issue first.

1. Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool

2. Right-click to run the tool as administrator. When the tool opens click Yes to disclaimer.
3. Note: Ensure that the Addition.txt check box is checked at the bottom of the form within the Optional Scan area.
4. Press the Scan button.
5. Please wait for the tool to finish. It will produce two logfiles called FRST.txt and Addition.txt in the same directory the tool is run from (which should be the desktop)
6. Post the logfiles FRST.txt and Addition.txt as attachment in your next reply.
 
Many thanks for your reply, Peter. I've attached the two files, as instructed. Please let me know if anything further is required. Thanks for your help.
 

Attachments

Do you still use the program LogMeIn ?


Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

Just to clarify, logmein doesn't appear to be installed on my machine any more.
 
Just to clarify, logmein doesn't appear to be installed on my machine any more.
Click to expand...
There are some remnants which will be removed with the next fix.

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Post the logfile Fixlog.txt as attachment in your next reply.


Step 2:
Download the free version of
571bf1f0722ca-malwarebytes_v221.PNG
MalwareBytes Anti-Malware (website).
(A file called 'mb3-setup-consumer-x.xx.x.xxxx.exe' will be downloaded)
Double-click this file to launch the installer of Malwarebytes, let it complete.
Do not change any setting during the installation.

Disable the real-time protection of your antivirus program during the scan with Malwarebytes. Malwarebytes will be a lot faster to complete.

Start "Malwarebytes Anti-Malware", click on "Dashboard" and next on the button "Scan Now".
If updates are available these will be downloaded first, then the scan will start.
The scan can take some time so please be patient.

When finished and if threats are found. let Malwarebytes remove them.
If you're being asked to restart the machine, please do so.
Note: Enable the real-time protection of your antivirus program if not already done.
Click Reports in Malwarebytes.
Put a check mark at the latest scanreport, click View report, click Export en select Text File (*.txt).
5c2cfc9e19f19-Malwarebytes_Export_Scanlog.png

Enter a filename and save it on your desktop.
Attach this text file to your next reply.
 

Attachments

Last edited:
Great. Malwarebytes did a nice cleanup.
Since that issue has been solved we can start with the Windows Update issue.

Check Windows Update again and report the result.
If it fails, run sfc /scannow again and attach the zipped cbs.log to your next reply.
 
PeterJ said:
Great. Malwarebytes did a nice cleanup.
Since that issue has been solved we can start with the Windows Update issue.

Check Windows Update again and report the result.
If it fails, run sfc /scannow again and attach the zipped cbs.log to your next reply.
Click to expand...

I've gone back through the steps. Windows Update had already successfully installed KB4471318 before I ran it again but KB3126587 continues to fail. sfc /scannow gives the response "Windows Resource Protection did not find any integrity violation" again. I tried the dism scan but it doesn't appear to have had an effect.

The log file from SFCfix reads as follows:

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-01-03 20:15:39.713
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.








AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-01-03 20:22:44.433
----------------------EOF-----------------------

My CBS zip file can be found here. Thanks again for your help with this.
 
Install Update with DISM

  1. Download the update MSU here: http://download.windowsupdate.com/d..._a9c28babef00f427021b566bdc4d3adbb07deb9e.msu
  2. Copy the MSU file to a convenient location (such as C:\temp).
  3. Click on the Start button and in the search box, type Command Prompt
  4. When you see Command Prompt on the list, right-click on it and select Run as administrator
  5. When command prompt opens, copy and paste the following commands into it, press enter after each

    cd C:\temp
    replace C:\temp with your path if different

    expand windows6.1-kb3126587-x64_a9c28babef00f427021b566bdc4d3adbb07deb9e.msu -f:* C:\temp

    DISM.exe /Online /Add-Package /PackagePath:C:\temp\windows6.1-kb3126587-x64.cab
  6. You should receive the message:
    The operation completed successfully.
  7. Make sure to allow the computer to restart if prompted.

    If you receive any other message:
  8. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
  9. Paste (Ctrl+V) it into your next post.
  10. Zip and attach C:\Windows\Logs\CBS\CBS.log
 
Unfortunately that didn't work. Here is the CMD transcript:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.


C:\Windows\system32>cd M:\Downloads


C:\Windows\system32>expand windows6.1-kb3126587-x64_a9c28babef00f427021b566bdc4d3adbb07deb9e.msu -f:* M:\Downloads
Microsoft (R) File Expansion Utility Version 6.1.7600.16385
Copyright (c) Microsoft Corporation. All rights reserved.


Can't open input file: windows6.1-kb3126587-x64_a9c28babef00f427021b566bdc4d3adbb07deb9e.msu.




C:\Windows\system32>cd M:\Downloads


C:\Windows\system32>cd c:\temp


c:\temp>expand windows6.1-kb3126587-x64_a9c28babef00f427021b566bdc4d3adbb07deb9e.msu -f:* C:\temp
Microsoft (R) File Expansion Utility Version 6.1.7600.16385
Copyright (c) Microsoft Corporation. All rights reserved.


Adding C:\temp\WSUSSCAN.cab to Extraction Queue
Adding C:\temp\Windows6.1-KB3126587-x64.cab to Extraction Queue
Adding C:\temp\Windows6.1-KB3126587-x64-pkgProperties.txt to Extraction Queue
Adding C:\temp\Windows6.1-KB3126587-x64.xml to Extraction Queue


Expanding Files ....


Expanding Files Complete ...
4 files total.


c:\temp>
c:\temp>DISM.exe /Online /Add-Package /PackagePath:C:\temp\windows6.1-kb3126587-x64.cab


Deployment Image Servicing and Management tool
Version: 6.1.7600.16385


Image Version: 6.1.7601.18489


Processing 1 of 1 - Adding package Package_for_KB3126587~31bf3856ad364e35~amd64~~6.1.1.1
[==========================100.0%==========================]
An error occurred - Package_for_KB3126587 Error: 0x80070490


Error: 1168


Element not found.


The DISM log file can be found at C:\Windows\Logs\DISM\dism.log


c:\temp>

Here is a link to the CBS zip.
 
Please do following:

FRST Registry Search
1. Click your Start button and choose Control Panel.
2. In the upper right corner ensure the View by: is set to Category.
3. Select the Programs group.
4. Click the Turn Windows features on or off link. This will bring up the Server Manager dialog.
Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps. You can minimize it if you wish but keep it open.

5. Right-click on the file FRST64.exe and choose Run as administrator.
6. Copy and paste KB2922229 into the Search box and click the Search Registry button.
7. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
8. You may close any remaining open windows now.
 
I need to have a look at the COMPONENTS hive.

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.


Option#2 (only if you are unable to follow the previous instructions)


  • Please download the Freeware RegBak from here: Acelogix Software - Download products
     You will find it at the bottom of the page that the link brings you to.
  • Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
  • Click the New Backup button. Accept the defaults and simply click Start.
  • When it says Finished successfully, click the Close button.
  • This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
  • This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
  • Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
  • Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
  • Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Filedropper or One Drive or SendSpace and then just provide the link in your reply.
  • You can close any open windows you have as well as the RegBak program now.
 
Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Post the logfile Fixlog.txt as attachment in your next reply.

Step 2:
Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log.

  1. Download SURT for your system. (Windows 7 SP1 x64)
  2. Once downloaded, execute the installer, and go through the installation (this process can take around 15-20 minutes).
  3. On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log.
  4. Attach this log in your next reply.

Alternatively, if these instructions are unclear for you, you can follow the tutorial below.

System Update Readiness Tool (SURT)
 

Attachments

The great news is that KB3126587 has finally installed! Through your help for the first time in 2 years I'm finally getting the "Your computer is up to date" message in Windows update. Very much appreciate your kindness. Many thanks.
 

Attachments

Very good but there are some other issues to solve.

Install Update with DISM

  1. Download the update MSU here: https://download.microsoft.com/down...F68-9DF884B3C06C/Windows6.1-KB2922229-x64.msu
  2. Copy the MSU file to a convenient location (such as C:\temp).
  3. Click on the Start button and in the search box, type Command Prompt
  4. When you see Command Prompt on the list, right-click on it and select Run as administrator
  5. When command prompt opens, copy and paste the following commands into it, press enter after each

    cd C:\temp
    replace C:\temp with your path if different

    expand Windows6.1-KB2922229-x64.msu -f:* C:\temp

    DISM.exe /Online /Add-Package /PackagePath:C:\temp\Windows6.1-KB2922229-x64.cab
  6. You should receive the message:
    The operation completed successfully.
  7. Make sure to allow the computer to restart if prompted.

    If you receive any other message:
  8. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
  9. Paste (Ctrl+V) it into your next post.
  10. Zip and attach C:\Windows\Logs\CBS\CBS.log
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top