[SOLVED] SURT Corruption Issue. Need Help

J

joe_rockstar

Well-known member
Joined
Jun 6, 2020
Posts
58
First time posting like this,

I am on my HP Laptop which is running Windows 7 Home Premium SP1, No Hardware Issues, Windows Update Current, Running Microsoft Security Essentials. I recently tried to create a back up image and got an error so I decided to further investigate.To Date I have Run the following:

- System File Checker Scan: No Issues or Corruptions detected.
- Windows6.1-KB947821-v34-x64_SURT.msu: Installed no Issues
- SFCFix 3.0.2.1: Detected (1) SURT Corruption Count.


SFXFix Log below:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2020-06-06 19:58:36.323
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.

AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 0
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 1
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.

Attached is my CBS Log Folder from Windows in .Zip Format for Review.

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 

Attachments

UPDATE...

I did some digging into the CBS Folder @ the CheckSUR Log and it shows which Windows Update Package - Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2894844) is Corrupted. (See below) Further digging and the Update is not even for my Windows Product. I tried to Uninstall the Update with the Control Panel and got the Error, "An Error has Occurred. Not all of the Updates were successfully Uninstalled."

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2020-06-06 16:35

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs
(f) CBS MUM Corrupt 0x80070026 servicing\Packages\Package_2_for_KB2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum Line 1: X¯

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 1959
Found 1 errors
CBS MUM Corrupt Total count: 1

Unavailable repair files:
servicing\packages\Package_2_for_KB2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum
servicing\packages\Package_2_for_KB2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat
 
Hello and welcome,

Follow the instructions below please.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.
  • Download the attachment SFCFix.zip and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.
 

Attachments

PeterJ,

TY for the Prompt Response. Copied SFCFix.txt below. Is there anything else I need to do? Please Advise.

joe_rockstar

,|m|
________________________________________________________________________________
SFCFix version 3.0.2.1 by niemiro.
Start time: 2020-06-07 15:27:11.581
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\LaPuglia\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat
Successfully took permissions for file or folder C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum

Successfully copied file C:\Users\LaPuglia\AppData\Local\niemiro\Archive\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat to C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat.
Successfully copied file C:\Users\LaPuglia\AppData\Local\niemiro\Archive\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum to C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum.

Successfully restored ownership for C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat
Successfully restored permissions on C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.cat
Successfully restored ownership for C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum
Successfully restored permissions on C:\Windows\servicing\packages\package_2_for_kb2894844~31bf3856ad364e35~amd64~~6.1.1.1.mum
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2020-06-07 15:27:14.951
Script hash: 5y5ikQKl0d7AVKCGJ2uRZTVaf6xOYq+FfVsUaxO+T8s=
----------------------EOF-----------------------
 
Restart the computer.
Check Windows Update again and report the result.
If it fails, attach the zipped cbs log folder to your next reply.
 
Hey,

This time the Uninstall started and looked like it was going to work, but same error as before. The CBS Log Folder was too big to Upload so I shared it on my Google Drive. See the link below to download.

CBS.zip

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 
Remove Update Manually
  1. Click on the Start button and in the search box, type Command Prompt.
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator.
  3. When command prompt opens, copy and paste the following command into it, then press enter.
    wusa /uninstall /KB:4054998
  4. Let me know if it says it was successful or if there are any errors.
 
After running the Commands you instructed above, the dialogue returned says the the Update is not Installed on this Computer.... Shouldn't I be Uninstalling kb2894844? I am thinking you made a typo. I entered wusa /uninstall /KB:2894844 and got the follow error.

Installer encountered an error 0x800070490. Element not found.

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 
Last edited:
No typo, I really ment 4054998.

FRST Registry Search
  1. Click the Start button and choose Control Panel.
  2. In the upper right corner ensure the View by: is set to Category.
  3. Select the Programs group.
  4. Click the Turn Windows features on or off link. This will bring up the Server Manager dialog.
    Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps. You can minimize it if you wish but keep it open.
  5. Download the Farbar Recovery Scan Tool and save it to your Desktop:
    64-bit: Downloading Farbar Recovery Scan Tool

  6. Right-click on the file FRST64.exe and choose Run as administrator.
  7. Copy and paste KB4054998 into the Search box and click the Search Registry button.
  8. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
  9. You may close any remaining open windows now.
 
As Instructed I Opened the Control Panel made my way to the Turn Windows Features On or Off link. It brought up the Dialog Box but it is blank. It dos not show the Components Hive. Should I continue with running FBRT64? Please Advise.

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 
Open a elevated command prompt.
Copy and paste the following command into it, then press enter.
REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS

Leave the command prompt open and perform the instructions in message #9 again.
 
As Instructed I OpenED a elevated command prompt, copy and pasted REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS. The Operation was completed sucessfully. I Opened the Control Panel, Clicked the Turn Windows Features On or Off link and the Dialog Box remains Blank. Again it does not show the Components Hive. Should I continue with running FBRT64? Please Advise.

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 
The Operation was completed sucessfully.
Click to expand...
Good, then you can start with step 5 in message #9.
 
Peter3,

I ran everything as instructed. See attched SearchReg.txt for your Review.

Thanking you in advance for your expertise trouble shooting and help,

joe_rockstar

,|m|
 

Attachments

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.
  1. Download the attachment fixlist.txt and save it to your desktop.
  2. Right-click on FRST64.exe and select "Run as administrator".
  3. Press the Fix button.
  4. The tool will now process fixlist.txt.
  5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  7. Post the logfile Fixlog.txt as attachment in your next reply.

Step 2:
Restart the computer.
Check Windows Update again and report the result.
If it fails, attach the zipped cbs log folder to your next reply.
 

Attachments

PeterJ,

And there you have it. I was successfully able to remove Windows Security Update KB2894844! TY for your assistance in this matter. Now that the issue was resolved should I Re-Run SFCFix? Also, I am still having an issue viewing my Components Hive as I mentioned previously. Can you further assist me with this matter through this Thread or should I start a New One? Please let me know.

Thank you,

joe_rockstar

,|m|
 
Great, one issue solved.
Attach the zipped cbs.log to your next reply so we can have a look at the other issue.
 
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.
  1. Download the attachment fixlist.txt and save it to your desktop.
  2. Right-click on FRST64.exe and select "Run as administrator".
  3. Press the Fix button.
  4. The tool will now process fixlist.txt.
  5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  7. Post the logfile Fixlog.txt as attachment in your next reply.
 

Attachments

PeterJ,

See attached Fix.log.txt as requested. Was this Fixlist.txt for my Previous KB2894844 Error or my New Components Hive Error? I am asking because even though I was able to remove Windows Update KB2894844 my New CheckSUR.log shows additional errors because the KB2894844 Update was removed and is now missing... See link below to my Complete CBS Folder.

Logs.zip

Thanks,

joe_rockstar

,|m|
 

Attachments

You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top