A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 18, 2023 #1 Hello everyone, I scanned with Surt and saw that there was 2 old esu missing winning keys// fast forward i repaired them through surt after i found the original manifests from the esu updates// then it asked me that it doesnt have csi c mark deployment key// i created these two key but i dont know what to do with the rest of binaries and stuff. If someone can help me make sense what do i have to do i would be grateful. Propably i need to generate the binaries for the whole csi c mark deployment key. I am sending both checksurt log and the persistent. (Windows 7 x64) PS. Also the esu updates that are responsible are windows6.1-kb4601347-x64 and windows6.1-kb4598279-x64. sfc turns out ok without errors. Thank you in advance, Andrew Attachments CheckSUR.persist.log 42.1 KB · Views: 1 CheckSUR.log 665 bytes · Views: 1 Last edited: Sep 18, 2023
Hello everyone, I scanned with Surt and saw that there was 2 old esu missing winning keys// fast forward i repaired them through surt after i found the original manifests from the esu updates// then it asked me that it doesnt have csi c mark deployment key// i created these two key but i dont know what to do with the rest of binaries and stuff. If someone can help me make sense what do i have to do i would be grateful. Propably i need to generate the binaries for the whole csi c mark deployment key. I am sending both checksurt log and the persistent. (Windows 7 x64) PS. Also the esu updates that are responsible are windows6.1-kb4601347-x64 and windows6.1-kb4598279-x64. sfc turns out ok without errors. Thank you in advance, Andrew
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 18, 2023 #2 Hello and welcome, Remove Update Manually Click on the Start button and in the search box, type Command Prompt. When you see Command Prompt on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, then press enter. wusa /uninstall /KB:4601363 Let me know if it says it was successful or if there are any errors.
Hello and welcome, Remove Update Manually Click on the Start button and in the search box, type Command Prompt. When you see Command Prompt on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, then press enter. wusa /uninstall /KB:4601363 Let me know if it says it was successful or if there are any errors.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 19, 2023 #3 I run the command and it said that there isnt the update KB:4601363. If its not important i can leave it as it is and stop trying to fix and dont spend your time too. Regardless thank you for your time, and if there is something we can try, please let me know.
I run the command and it said that there isnt the update KB:4601363. If its not important i can leave it as it is and stop trying to fix and dont spend your time too. Regardless thank you for your time, and if there is something we can try, please let me know.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 19, 2023 #4 I don't see why we should stop fixing an issue after just one post ? Lets continue. FRST Registry Search Click the Start button and in the search box, type CMD When you see cmd.exe on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, press enter afterwards. Code: REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open. Download the Farbar Recovery Scan Tool and save it to your Desktop: 64-bit: Downloading Farbar Recovery Scan Tool Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST. Right-click on the file FRST64.exe and choose Run as administrator. Copy and paste KB4601363 into the Search box and click the Search Registry button. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply. You may close any remaining open windows now.
I don't see why we should stop fixing an issue after just one post ? Lets continue. FRST Registry Search Click the Start button and in the search box, type CMD When you see cmd.exe on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, press enter afterwards. Code: REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open. Download the Farbar Recovery Scan Tool and save it to your Desktop: 64-bit: Downloading Farbar Recovery Scan Tool Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST. Right-click on the file FRST64.exe and choose Run as administrator. Copy and paste KB4601363 into the Search box and click the Search Registry button. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply. You may close any remaining open windows now.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 21, 2023 #5 Hello again, I m sorry for being late , irl stuff happened and couldnt check here. So I run the scan and made sure the cmd was open but it hasnt found anything. Maybe its because the KB4601363 is security update only and i know that i installed the "full update" which i am pretty sure as i have found the same files that they were missing (at my surt persistent log). The updates are KB4601347 and KB4598279. Of course im just trying to help. Also is it possible that it doesnt show because i used diskcleanup to delete windows update stuff a while ago? I have attached the scan and thank you again for your time. Attachments SearchReg.txt 241 bytes · Views: 1 Last edited: Sep 21, 2023
Hello again, I m sorry for being late , irl stuff happened and couldnt check here. So I run the scan and made sure the cmd was open but it hasnt found anything. Maybe its because the KB4601363 is security update only and i know that i installed the "full update" which i am pretty sure as i have found the same files that they were missing (at my surt persistent log). The updates are KB4601347 and KB4598279. Of course im just trying to help. Also is it possible that it doesnt show because i used diskcleanup to delete windows update stuff a while ago? I have attached the scan and thank you again for your time.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 21, 2023 #6 I m sorry for being late Click to expand... No need to be sorry. Just reply when it suits you. One of the errors in the CheckSur log is also part of KB4601363. I wanted to make this KB is not installed. Remove Update Manually Click on the Start button and in the search box, type Command Prompt. When you see Command Prompt on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, then press enter. wusa /uninstall /KB:4598279 Let me know if it says it was successful or if there are any errors.
I m sorry for being late Click to expand... No need to be sorry. Just reply when it suits you. One of the errors in the CheckSur log is also part of KB4601363. I wanted to make this KB is not installed. Remove Update Manually Click on the Start button and in the search box, type Command Prompt. When you see Command Prompt on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, then press enter. wusa /uninstall /KB:4598279 Let me know if it says it was successful or if there are any errors.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 21, 2023 #7 I just run the cmd as admin but it says KB4598279 is not installed.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 21, 2023 #8 FRST Registry Search Click the Start button and in the search box, type CMD When you see cmd.exe on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, press enter afterwards. Code: REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open. Right-click on the file FRST64.exe and choose Run as administrator. Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST. Copy and paste KB4598279 into the Search box and click the Search Registry button. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply. You may close any remaining open windows now.
FRST Registry Search Click the Start button and in the search box, type CMD When you see cmd.exe on the list, right-click on it and select Run as administrator. When command prompt opens, copy and paste the following command into it, press enter afterwards. Code: REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open. Right-click on the file FRST64.exe and choose Run as administrator. Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST. Copy and paste KB4598279 into the Search box and click the Search Registry button. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply. You may close any remaining open windows now.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 23, 2023 #9 I tried the FRST64 with the command prompt opened and it said there is nothing for KB4598279 in the registry. Of course the file is attached. Attachments SearchReg.txt 241 bytes · Views: 0
I tried the FRST64 with the command prompt opened and it said there is nothing for KB4598279 in the registry. Of course the file is attached.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 23, 2023 #10 I also tried to install the latest ESU update which did install correctly. I have also attached the checksur and persistent logs. Attachments CheckSUR.log 726 bytes · Views: 1 CheckSUR.persist.log 42.8 KB · Views: 0
I also tried to install the latest ESU update which did install correctly. I have also attached the checksur and persistent logs.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 23, 2023 #11 Provide the Components Hive 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. 2. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below. 3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. 4. The file will likely be too large to upload here so please upload to Gofile or WeTransfer and just provide the link here. Option#2 (only if you are unable to follow the previous instructions) Please download the Freeware RegBak from here: Acelogix Software - Download products You will find it at the bottom of the page that the link brings you to. Go ahead and install this program and accept all the defaults. After the last install screen the program should open. Click the New Backup button. Accept the defaults and simply click Start. When it says Finished successfully, click the Close button. This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup... This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS. Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS. Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder. Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Gofile or WeTransfer and then just provide the link in your reply. You can close any open windows you have as well as the RegBak program now.
Provide the Components Hive 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. 2. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below. 3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. 4. The file will likely be too large to upload here so please upload to Gofile or WeTransfer and just provide the link here. Option#2 (only if you are unable to follow the previous instructions) Please download the Freeware RegBak from here: Acelogix Software - Download products You will find it at the bottom of the page that the link brings you to. Go ahead and install this program and accept all the defaults. After the last install screen the program should open. Click the New Backup button. Accept the defaults and simply click Start. When it says Finished successfully, click the Close button. This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup... This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS. Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS. Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder. Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Gofile or WeTransfer and then just provide the link in your reply. You can close any open windows you have as well as the RegBak program now.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 23, 2023 #12 I was able to follow the first set of instructions. Here is the link for the components file. components.zip
I was able to follow the first set of instructions. Here is the link for the components file. components.zip
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 23, 2023 #13 Step 1: Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine. Download the attachment fixlist.txt and save it to your desktop. Right-click on FRST64.exe and select "Run as administrator". Press the Fix button. The tool will now process fixlist.txt. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from. Attach the logfile Fixlog.txt to your next reply. Step 2: Start the System Update Readiness Tool (SURT) again. On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply. Attachments fixlist.txt 383 bytes · Views: 1
Step 1: Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine. Download the attachment fixlist.txt and save it to your desktop. Right-click on FRST64.exe and select "Run as administrator". Press the Fix button. The tool will now process fixlist.txt. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from. Attach the logfile Fixlog.txt to your next reply. Step 2: Start the System Update Readiness Tool (SURT) again. On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply.
A Alucard_d Member Joined Sep 18, 2023 Posts 9 Sep 25, 2023 #14 After running the fix and checking with the SURT everything its clean. I have uploaded the log . If I knew it i would have deleted the key myself but i thought it was neeeded. Thank you very much for your timeand for your patience. Attachments CheckSUR.log 394 bytes · Views: 0
After running the fix and checking with the SURT everything its clean. I have uploaded the log . If I knew it i would have deleted the key myself but i thought it was neeeded. Thank you very much for your timeand for your patience.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 13,295 Sep 25, 2023 #15 The related update isn't installed so we could safely remove those keys. Follow the instructions below to cleanup the tools and logfiles used in this thread. Rename the file FRST64.exe to uninstall.exe and run it. This will remove all files and folders created by FRST and the tool itself. Reboot the machine to complete. You may remove all other tools and log files. Take care.
The related update isn't installed so we could safely remove those keys. Follow the instructions below to cleanup the tools and logfiles used in this thread. Rename the file FRST64.exe to uninstall.exe and run it. This will remove all files and folders created by FRST and the tool itself. Reboot the machine to complete. You may remove all other tools and log files. Take care.
