[SOLVED] windows 7 x64 old esu update component csi c mark deployment identity missing

Alucard_d · Sep 18, 2023

Hello everyone,
I scanned with Surt and saw that there was 2 old esu missing winning keys// fast forward i repaired them through surt after i found the original manifests from the esu updates// then it asked me that it doesnt have csi c mark deployment key// i created these two key but i dont know what to do with the rest of binaries and stuff. If someone can help me make sense what do i have to do i would be grateful. Propably i need to generate the binaries for the whole csi c mark deployment key. I am sending both checksurt log and the persistent. (Windows 7 x64) PS. Also the esu updates that are responsible are windows6.1-kb4601347-x64 and windows6.1-kb4598279-x64. sfc turns out ok without errors.

Thank you in advance,
Andrew

PeterJ · Sep 18, 2023

Hello and welcome,

Remove Update Manually

Click on the Start button and in the search box, type Command Prompt.
When you see Command Prompt on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, then press enter.
wusa /uninstall /KB:4601363
Let me know if it says it was successful or if there are any errors.

Alucard_d · Sep 19, 2023

I run the command and it said that there isnt the update KB:4601363.
If its not important i can leave it as it is and stop trying to fix and dont spend your time too.
Regardless thank you for your time, and if there is something we can try, please let me know.

PeterJ · Sep 19, 2023

I don't see why we should stop fixing an issue after just one post ?
Lets continue.

FRST Registry Search

Click the Start button and in the search box, type CMD
When you see cmd.exe on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, press enter afterwards.
Code:
```
REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS
```
Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open.
Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool
Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
Right-click on the file FRST64.exe and choose Run as administrator.
Copy and paste KB4601363 into the Search box and click the Search Registry button.
When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
You may close any remaining open windows now.

Alucard_d · Sep 21, 2023

Hello again,
I m sorry for being late , irl stuff happened and couldnt check here.
So I run the scan and made sure the cmd was open but it hasnt found anything. Maybe its because the KB4601363 is security update only and i know that i installed the "full update" which i am pretty sure as i have found the same files that they were missing (at my surt persistent log).
The updates are KB4601347 and KB4598279. Of course im just trying to help. Also is it possible that it doesnt show because i used diskcleanup to delete windows update stuff a while ago?
I have attached the scan and thank you again for your time.

PeterJ · Sep 21, 2023

I m sorry for being late

No need to be sorry. Just reply when it suits you.
One of the errors in the CheckSur log is also part of KB4601363. I wanted to make this KB is not installed.

Remove Update Manually

Click on the Start button and in the search box, type Command Prompt.
When you see Command Prompt on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, then press enter.
wusa /uninstall /KB:4598279
Let me know if it says it was successful or if there are any errors.

Alucard_d · Sep 21, 2023

I just run the cmd as admin but it says KB4598279 is not installed.

PeterJ · Sep 21, 2023

FRST Registry Search

Click the Start button and in the search box, type CMD
When you see cmd.exe on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, press enter afterwards.
Code:
```
REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS
```
Note: This loads your components hive which is what we want. Please keep the command prompt windows open while you perform the remaining steps. You can minimize it if you wish but keep it open.
Right-click on the file FRST64.exe and choose Run as administrator.
Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
Copy and paste KB4598279 into the Search box and click the Search Registry button.
When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
You may close any remaining open windows now.

Alucard_d · Sep 23, 2023

I tried the FRST64 with the command prompt opened and it said there is nothing for KB4598279 in the registry.
Of course the file is attached.

Alucard_d · Sep 23, 2023

I also tried to install the latest ESU update which did install correctly. I have also attached the checksur and persistent logs.

PeterJ · Sep 23, 2023

Provide the Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to Gofile or WeTransfer and just provide the link here.

Option#2 (only if you are unable to follow the previous instructions)

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Gofile or WeTransfer and then just provide the link in your reply.
You can close any open windows you have as well as the RegBak program now.

Alucard_d · Sep 23, 2023

I was able to follow the first set of instructions. Here is the link for the components file. components.zip

PeterJ · Sep 23, 2023

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST64.exe and select "Run as administrator".
Press the Fix button.
The tool will now process fixlist.txt.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Attach the logfile Fixlog.txt to your next reply.

Step 2:
Start the System Update Readiness Tool (SURT) again.
On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply.

Alucard_d · Sep 25, 2023

After running the fix and checking with the SURT everything its clean. I have uploaded the log . If I knew it i would have deleted the key myself but i thought it was neeeded. Thank you very much for your timeand for your patience.

PeterJ · Sep 25, 2023

The related update isn't installed so we could safely remove those keys.

Follow the instructions below to cleanup the tools and logfiles used in this thread.
Rename the file FRST64.exe to uninstall.exe and run it. This will remove all files and folders created by FRST and the tool itself.
Reboot the machine to complete.
You may remove all other tools and log files.

Take care.

Alucard_d · Sep 26, 2023

Thank you again for your time!

[SOLVED] windows 7 x64 old esu update component csi c mark deployment identity missing

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Attachments

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member