Package registry presence failed, possibly an orphaned package on package watchlist

SpadeM · Jul 30, 2015

Evening,

I've attached the CBS, CheckSUR and SFCFix logs to this post. Any help on how to solve the last 2 entries is appreciated

Code:

AutoAnalysis::
WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139.
CORRUPT: Failed to repair orphaned component "value name not identified" (x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139) on component watchlist.


WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f.
CORRUPT: Failed to repair orphaned component "value name not identified" (amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f) on component watchlist.

Microsoft services (the logs unpacked are around 200MB, mostly CBS log file size)

Aura · Aug 1, 2015

Hi SpadeM :)

My name is Aura and I'll be assisting you with your issue. Since the errors are located in your COMPONENTS Hive, I'll need it to create a fix. Follow the instructions below please.

Retrieve Components Hive

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or One Drive or SendSpace and then just provide the link in your reply.
You can close any open windows you have as well as the RegBack program now.

SpadeM · Aug 1, 2015

Hey Aura,

Forgot I already did a backup of the hive, just in case:

Microsoft services

Aura · Aug 1, 2015

I made you export the wrong hive, my bad. I need the CBS one.

Export CBS Registry Key

Click on the Start

button and in the search box, type regedit
When you see regedit on the list, right-click on it and select Run as administrator
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*)
Name this file CBS (with no file extension) and save it to your Desktop.

Once done please upload this file via Dropbox or One Drive or SendSpace.

SpadeM · Aug 3, 2015

Here it is:

Microsoft services

Aura · Aug 3, 2015

Can you upload the hive again? Follow the instructions to copy it once more to your Desktop and upload it. It seems that I can't load the Hive. So it's either a bad download, bad upload or the Hive is corrupted.

SpadeM · Aug 4, 2015

Aura said:
Can you upload the hive again? Follow the instructions to copy it once more to your Desktop and upload it. It seems that I can't load the Hive. So it's either a bad download, bad upload or the Hive is corrupted.

My fault, forgot to zip it before upload. Now it's a lot smaller and should be fine. View attachment CBS.zip

Aura · Aug 4, 2015

You saved it as a Registry file (.reg), I need it as a Registry File Hive please :)

SpadeM · Aug 4, 2015

Aura said:
You saved it as a Registry file (.reg), I need it as a Registry File Hive please :)

Apologies, my head is someplace else.
3rd time's the charm: Removed for security

Aura · Aug 4, 2015

Got it, thank you :) I removed it from your post, forgot to ask you to send me it via PM since the CBS contains information you don't want to be public on the Internet (such as product keys for software). But I downloaded it now so it's fine.

Aura · Aug 4, 2015

Alright, follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFixScript.txt and move the file to your Desktop;
Note: Make sure that the file is named SFCFixScript.txt, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

View attachment SFCFixScript.txt

SpadeM · Aug 10, 2015

Code:

RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f.
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139.
WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f.
Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f.
WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139.
Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139.
Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_6fa6caf69a98926f.
Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_0.0.0.0_none_13882f72e23b2139.
RegistryScript:: directive completed successfully.

Hello, apologies for being late. Looks good so far, I'm re-running SURT and waiting for the resulting log.

Aura · Aug 10, 2015

Alright, let me know when you get the log :)

SpadeM · Aug 10, 2015

Strange thing happened, CheckSUR.log came up with no errors found which is good but after a reboot and trying to install KB3040272, it failed again with the same SURT typical error code CBS called error 0x80070490.

Aura · Aug 10, 2015

Follow the instructions below then please.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

SpadeM · Aug 13, 2015

Hey,

Fresh from the SFC oven: Microsoft services

Aura · Aug 13, 2015

Alright the SFC returned a clean CBS.log. Let's make sure it's the same for SURT.

System Update Readiness Tool (SURT) - Scan
Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log;

Download the right version of SURT for your system;
- Your version of Windows is:
Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes);
On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log;
Attach this log in your next reply;

Alternatively, if these instructions are unclear for you, you can follow the tutorial below.

System Update Readiness Tool (SURT)

SpadeM · Aug 13, 2015

No errors detected and updates KB3033929 and KB3040272 still fail with the 490 code

Aura · Aug 13, 2015

Then it seems that your initial issue have been solved. Is there anything else? :)

SpadeM · Aug 13, 2015

Well besides the fact that those 2 updates still fail with the same SURT code 490, but this time there's no error to be found in the logs, that's pretty much it :)

I'll re-image the client.

Thank you for your time and effort.

Package registry presence failed, possibly an orphaned package on package watchlist

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member

Sysnative Staff, Security Analyst

Well-known member