Cbspersist Files Cannot install Win10

Toots · Aug 3, 2015

My OS is win8.1

Cannot install win 10 due to Error: 80070003. Have tried several times.

Ran SFC /scannow and it reports that I again have the cbspersist problem.

I showed 5 cbspersist.cab files in July. Must confess I deletd the July files and left one dated 8/1/15. I cloned my hard drive on 7/28/15 in anticipation of win 10. The cloned drive shows 5 cbspersist.cab files dated in July.

I show 61GB on my C: drive, while I only showed 15GB in May. Apparently this log file is a whopper.

Microsoft has stopped all updates except win 10.

Wish I could wipe out the win8.1 file and replace it with the win 10 iso but I understand that will not work.

Please help me.

Toots

Aura · Aug 4, 2015

Hi Toots :)

My name is Aura and I'll be assisting you with your issue. Follow the instructions below please.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

Toots · Aug 4, 2015

Aura said:
Hi Toots :)

My name is Aura and I'll be assisting you with your issue. Follow the instructions below please.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);

On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);

Enter the command below and press on Enter;

Code:

sfc /scannow

Note: There's a space between "sfc" and "/scannow";

Once the scan is complete, enter the command below and press on Enter

Code:

copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

https://www.dropbox.com/s/42559649ca4zsgn/cbs.txt?dl=0

Aura · Aug 4, 2015

Alright, follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

Toots · Aug 4, 2015

Aura said:
Alright, follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;

Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.

Save any work you have open, and close every programs;

Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;

SFCFix will launch, let it complete;

Once done, a file will appear on your Desktop, called SFCFix.txt;

Open the file, then copy and paste its content in your next reply;

SFCFix.zip

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-04 17:01:54.108
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at C:\Users\Beth\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a
Successfully took permissions for file or folder C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a
Successfully created directory tree \\?\C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54.
Successfully created directory tree \\?\C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54.
Successfully copied file C:\Users\Beth\AppData\Local\niemiro\Archive\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.asm-windowsdefault.json to C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.asm-windowsdefault.json.
Successfully copied file C:\Users\Beth\AppData\Local\niemiro\Archive\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json to C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json.
Successfully copied file C:\Users\Beth\AppData\Local\niemiro\Archive\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.asm-windowsdefault.json to C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.asm-windowsdefault.json.
Successfully copied file C:\Users\Beth\AppData\Local\niemiro\Archive\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json to C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json.
Successfully restored ownership for C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a
Successfully restored permissions on C:\WINDOWS\winsxs\Temp\InFlight\dc6eab9df7ced00197c50000480a040a
Successfully restored ownership for C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a
Successfully restored permissions on C:\WINDOWS\winsxs\Temp\InFlight\37d1ad9df7ced0019ac50000480a040a
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2015-08-04 17:01:54.342
Script hash: 27g4ok3thIZskRYIS1pOZh9lf4cvN5/v6E17t8yZ9Bo=
----------------------EOF-----

Aura · Aug 4, 2015

Alright, follow the instructions below once again. We'll see if the changes are accepted by SFC.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

Toots · Aug 5, 2015

Aura said:
Alright, follow the instructions below once again. We'll see if the changes are accepted by SFC.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);

On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);

Enter the command below and press on Enter;

Code:

sfc /scannow

Note: There's a space between "sfc" and "/scannow";

Once the scan is complete, enter the command below and press on Enter

Code:

copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

https://www.dropbox.com/s/42559649ca4zsgn/cbs.txt?dl=0

Aura · Aug 5, 2015

Alright follow the instructions below please.

DISM - Fixing Component Store Corruption
Follow the instructions below to run a DISM scan on your system:

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command DISM /Online /Cleanup-Image /RestoreHealth and press on Enter;
Let the scan run until the end (100%);
Copy the C:\Windows\Logs\DISM folder and C:\Windows\Logs\CBS\CBS.log file on your Desktop, then right-click on it, go to Send to... and select Compressed .zip archive;
Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

Toots · Aug 5, 2015

Aura said:
Alright follow the instructions below please.

DISM - Fixing Component Store Corruption
Follow the instructions below to run a DISM scan on your system:

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);

On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);

Enter the command DISM /Online /Cleanup-Image /RestoreHealth and press on Enter;

Let the scan run until the end (100%);

Copy the C:\Windows\Logs\DISM folder and C:\Windows\Logs\CBS\CBS.log file on your Desktop, then right-click on it, go to Send to... and select Compressed .zip archive;

Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

https://www.dropbox.com/s/g4fjlfjumdeouct/DISM.zip?dl=0
https://www.dropbox.com/s/3w1z7gjjilwd2ry/CBS.zip?dl=0

Aura · Aug 5, 2015

Can you run DISM again? I don't see traces of SURT in both logs.

Toots · Aug 5, 2015

Aura said:
Can you run DISM again? I don't see traces of SURT in both logs.

https://www.dropbox.com/s/g4fjlfjumdeouct/DISM.zip?dl=0

Aura · Aug 5, 2015

Alright so DISM cameback clean. Let's see if we can force Windows 10 to install now.

SoftwareDistribution - Rename
Follow the instructions below to rename the folders in SoftwareDistribution.

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the commands below one at the time (press Enter to send it);
- net stop wuauserv
- ren %SystemRoot%\SoftwareDistribution\Download DL.bak
- net start wuauserv
- wuauclt.exe /updatenow

This will trigger the Windows 10 upgrade via Windows Update. If the upgrade fails, upload the two files below for me as fast as possible please.

C:\Windows\WindowsUpdate.log
C:\Windows\Logs\CBS\CBS.log

Toots · Aug 6, 2015

Aura said:
Alright so DISM cameback clean. Let's see if we can force Windows 10 to install now.

SoftwareDistribution - Rename
Follow the instructions below to rename the folders in SoftwareDistribution.

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);

On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);

Enter the commands below one at the time (press Enter to send it);

net stop wuauserv

ren %SystemRoot%\SoftwareDistribution\Download DL.bak

net start wuauserv

wuauclt.exe /updatenow

This will trigger the Windows 10 upgrade via Windows Update. If the upgrade fails, upload the two files below for me as fast as possible please.

C:\Windows\WindowsUpdate.log
C:\Windows\Logs\CBS\CBS.log

Aura,
Windows 10 would not install, error 80200056.
Please advise.
Toots

Aura · Aug 6, 2015

Upload the following files for me to review please.

C:\Windows\WindowsUpdate.log
C:\Windows\Logs\CBS\CBS.log

Toots · Aug 6, 2015

Aura said:
Upload the following files for me to review please.

C:\Windows\WindowsUpdate.log
C:\Windows\Logs\CBS\CBS.log

Here they are but had to stop Softthinks Agent Service to enable me to copy the Update file.

https://www.dropbox.com/s/3kbzozpl1znmboa/CBS.log?dl=0
https://www.dropbox.com/s/zdcyrqrrcsu0bp7/WindowsUpdate.log?dl=0

Aura · Aug 6, 2015

Follow the instructions below please.

MiniToolBox

Download MiniToolBox and move the executable file to your Desktop;
Right-click on MiniToolBox.exe and select

Run as Administrator;
Check the following options:
- List Installed Programs;
- List Last 10 Event Viewer Errors;
Once this is done, click on Go and wait for the scan to complete;
Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

Toots · Aug 6, 2015

Aura said:
Follow the instructions below please.

MiniToolBox

Download MiniToolBox and move the executable file to your Desktop;

Right-click on MiniToolBox.exe and select

Run as Administrator;

Check the following options:

List Installed Programs;

List Last 10 Event Viewer Errors;

Once this is done, click on Go and wait for the scan to complete;

Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

Here is the copy of the scan but I noticed the "Only Problems" was not checked. Should I redo it?

MiniToolBox by Farbar Version: 25-07-2015 01
Ran by Beth (administrator) on 06-08-2015 at 09:59:03
Running from "C:\Users\Beth\Downloads"
Microsoft Windows 8.1 (X64)
Model: XPS 8500 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************
========================= Event log errors: ===============================
Application errors:
==================
Error: (08/06/2015 09:25:30 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54504ade
Exception code: 0x80000003
Fault offset: 0x000b8ef2
Faulting process id: 0x248c
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Faulting package full name: IEXPLORE.EXE4
Faulting package-relative application ID: IEXPLORE.EXE5
Error: (08/05/2015 03:19:43 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Error: (08/05/2015 01:50:05 PM) (Source: Application Error) (User: )
Description: Faulting application name: pcdrsysinfocsmi.p5x, version: 6.0.6032.39, time stamp: 0x4ffe56d2
Faulting module name: MSVCR90.dll, version: 9.0.30729.8387, time stamp: 0x51ea1bbd
Exception code: 0x40000015
Fault offset: 0x000000000004267f
Faulting process id: 0x171c
Faulting application start time: 0xpcdrsysinfocsmi.p5x0
Faulting application path: pcdrsysinfocsmi.p5x1
Faulting module path: pcdrsysinfocsmi.p5x2
Report Id: pcdrsysinfocsmi.p5x3
Faulting package full name: pcdrsysinfocsmi.p5x4
Faulting package-relative application ID: pcdrsysinfocsmi.p5x5
Error: (08/05/2015 01:05:02 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Error: (08/05/2015 08:33:59 AM) (Source: Microsoft-Windows-User Profiles Service) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Error: (08/04/2015 03:18:06 PM) (Source: Application Error) (User: )
Description: Faulting application name: pcdrsysinfocsmi.p5x, version: 6.0.6032.39, time stamp: 0x4ffe56d2
Faulting module name: MSVCR90.dll, version: 9.0.30729.8387, time stamp: 0x51ea1bbd
Exception code: 0x40000015
Fault offset: 0x000000000004267f
Faulting process id: 0x804
Faulting application start time: 0xpcdrsysinfocsmi.p5x0
Faulting application path: pcdrsysinfocsmi.p5x1
Faulting module path: pcdrsysinfocsmi.p5x2
Report Id: pcdrsysinfocsmi.p5x3
Faulting package full name: pcdrsysinfocsmi.p5x4
Faulting package-relative application ID: pcdrsysinfocsmi.p5x5
Error: (08/04/2015 03:07:13 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Error: (08/03/2015 12:48:50 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Error: (08/03/2015 09:23:51 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54504ade
Exception code: 0x80000003
Fault offset: 0x000b8ef2
Faulting process id: 0x9d4
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Faulting package full name: IEXPLORE.EXE4
Faulting package-relative application ID: IEXPLORE.EXE5
Error: (08/03/2015 09:23:25 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54504ade
Exception code: 0x80000003
Fault offset: 0x000b8ef2
Faulting process id: 0x9d4
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Faulting package full name: IEXPLORE.EXE4
Faulting package-relative application ID: IEXPLORE.EXE5

System errors:
=============
Error: (08/06/2015 08:17:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246007: Microsoft.ZuneMusic.
Error: (08/06/2015 08:17:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246010: Microsoft.Reader.
Error: (08/06/2015 08:17:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246010: Microsoft.ZuneVideo.
Error: (08/05/2015 03:29:13 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070057: Microsoft.Reader.
Error: (08/05/2015 03:17:38 PM) (Source: Service Control Manager) (User: )
Description: The EaseUS Agent Service service failed to start due to the following error:
%%2
Error: (08/05/2015 03:17:10 PM) (Source: Application Popup) (User: )
Description: \SystemRoot\SysWow64\Drivers\PzWDM.sys
Error: (08/05/2015 03:17:32 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 3:02:35 PM on ‎8/‎5/‎2015 was unexpected.
Error: (08/05/2015 02:36:21 PM) (Source: DCOM) (User: HARRY)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (08/05/2015 02:35:55 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070057: Microsoft.Reader.
Error: (08/05/2015 02:35:51 PM) (Source: DCOM) (User: HARRY)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Microsoft Office Sessions:
=========================
Error: (08/06/2015 09:25:30 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbKERNELBASE.dll6.3.9600.1741554504ade80000003000b8ef2248c01d0d053b8d64213C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\SYSTEM32\KERNELBASE.dllfd4a5ce9-3c46-11e5-bfe5-bc855631c1c2
Error: (08/05/2015 03:19:43 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT AUTHORITY)
Description: The system cannot find the file specified.
Error: (08/05/2015 01:50:05 PM) (Source: Application Error)(User: )
Description: pcdrsysinfocsmi.p5x6.0.6032.394ffe56d2MSVCR90.dll9.0.30729.838751ea1bbd40000015000000000004267f171c01d0cfaf89b44c53C:\Program Files\Dell Support Center\pcdrsysinfocsmi.p5xC:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dllc8e25957-3ba2-11e5-bfe4-bc855631c1c2
Error: (08/05/2015 01:05:02 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT AUTHORITY)
Description: The system cannot find the file specified.
Error: (08/05/2015 08:33:59 AM) (Source: Microsoft-Windows-User Profiles Service)(User: NT AUTHORITY)
Description: The system cannot find the file specified.
Error: (08/04/2015 03:18:06 PM) (Source: Application Error)(User: )
Description: pcdrsysinfocsmi.p5x6.0.6032.394ffe56d2MSVCR90.dll9.0.30729.838751ea1bbd40000015000000000004267f80401d0cef2a9477228C:\Program Files\Dell Support Center\pcdrsysinfocsmi.p5xC:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dllea66e9a4-3ae5-11e5-bfe2-bc855631c1c2
Error: (08/04/2015 03:07:13 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT AUTHORITY)
Description: The system cannot find the file specified.
Error: (08/03/2015 12:48:50 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT AUTHORITY)
Description: The system cannot find the file specified.
Error: (08/03/2015 09:23:51 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbKERNELBASE.dll6.3.9600.1741554504ade80000003000b8ef29d401d0cdf7cd1286bfC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\SYSTEM32\KERNELBASE.dll42bb98ab-39eb-11e5-bfe0-bc855631c1c2
Error: (08/03/2015 09:23:25 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbKERNELBASE.dll6.3.9600.1741554504ade80000003000b8ef29d401d0cdf7cd1286bfC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\SYSTEM32\KERNELBASE.dll336e0a58-39eb-11e5-bfe0-bc855631c1c2

CodeIntegrity Errors:
===================================
Date: 2015-08-05 16:35:37.387
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 16:35:36.996
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 16:35:36.746
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 16:35:36.043
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:45.435
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:45.279
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:45.123
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:44.966
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:44.826
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 15:12:44.669
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

=========================== Installed Programs ============================
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adolix Outlook Express Backup v3.1 (HKLM-x32\...\AdolixOEBackup_is1) (Version: - Adolix)
AM-DeadLink 4.6 (HKLM-x32\...\aignesamdeadlink_is1) (Version: 4.6 - www.aignes.com)
AOMEI Backupper (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536C09D}_is1) (Version: - AOMEI Technology Co., Ltd.)
AOMEI Partition Assistant Pro Edition 5.5 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-5498165BF300}_is1) (Version: - AOMEI Technology Co., Ltd.)
Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)
bestadblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: - )
Bubble Shooter v3.07 (HKLM-x32\...\BShooter3_is1) (Version: - )
Casper 8.0 (HKLM\...\{6A58EB2E-5883-4515-910D-699C4396797B}) (Version: 8.0.4422 - Future Systems Solutions, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.00 - Piriform)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
Cool Timer 3.3 (HKLM-x32\...\Cool Timer_is1) (Version: - )
CPUID CPU-Z 1.66 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CutThePrice (HKLM-x32\...\{A2C98B47-B5F4-94AA-281D-4135416774CF}) (Version: - )
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.8.1.71 - Dell Inc.)
Dell Support Center (HKLM\...\PC-Doctor for Windows) (Version: 3.2.6032.39 - PC-Doctor, Inc.)
Dll-Files Fixer (HKLM-x32\...\Dll-Files Fixer_is1) (Version: 3.1.81 - Dll-Files.com)
Dropbox (HKCU\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
DSC/AA Factory Installer (HKLM\...\{F7A70D00-F283-45C8-B163-49EC365D7E27}) (Version: 3.2.6032.39 - PC-Doctor, Inc.) Hidden
EaseUS Partition Master 9.2.1 Professional (HKLM-x32\...\EaseUS Partition Master Professional Edition_is1) (Version: - EaseUS)
EaseUS Todo Backup Home 8.2 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 8.2 - CHENGDU YIWO Tech Development Co., Ltd)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 3.3.1.518 - Foxit Software Company)
jv16 PowerTools 2014 (HKLM-x32\...\jv16 PowerTools 2014) (Version: - Macecraft Software)
Karen's Directory Printer (HKLM-x32\...\Karen's Directory Printer) (Version: 5.3.0.2 - Karen Kenworthy)
Kodi (HKCU\...\Kodi) (Version: - XBMC-Foundation)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version: - )
NVIDIA 3D Vision Controller Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)
NVIDIA Graphics Driver 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
OE Classic 2.31 (HKLM-x32\...\OEClassic) (Version: 2.31 - OE Classic)
ONES (E) (HKLM-x32\...\ONES(E)) (Version: - )
Outlook Express 6 (HKLM-x32\...\Outlook Express 6) (Version: - )
Password Recovery Bundle 2014 (HKLM-x32\...\Password Recovery Bundle 2014_is1) (Version: - Top Password Software, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.)
SIW Pro Edition (GOTD) (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2015.01.08 - Topala Software Solutions)
SlimComputer (HKLM-x32\...\{574BF026-4487-4051-BCE5-83C4E40AAF6D}) (Version: 1.3.30878 - SlimWare Utilities, Inc.)
Soft Organizer version 3.51 (HKLM-x32\...\Soft Organizer_is1) (Version: 3.51 - ChemTable Software)
Spell Check Anywhere (HKLM-x32\...\Spell Check Anywhere6.0) (Version: 6.0 - TG Enterprises, Inc.)
TeraCopy 2.3 beta 2 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
**** End of log ****

Aura · Aug 8, 2015

It seems like there's malicious programs installed on your system. Before I continue assisting you, I would like you to get checked over in our Security section. In order to do so, follow the instructions in the thread below.

https://www.sysnative.com/forums/security-arena/2507-malware-removal-posting-instructions.html

Once you've been decleared clean by one of our helpers, we'll continue where we left off :)

Corrine · Aug 11, 2015

Sending Toots back to you, Aura.

Aura · Aug 11, 2015

Thank you Corrine :) Alright Toots, let me know when you're ready to upgrade again.

Cbspersist Files Cannot install Win10

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Active member

Sysnative Staff, Security Analyst

Administrator, Microsoft MVP, Security Analyst

Sysnative Staff, Security Analyst

Administrator,
Microsoft MVP,
Security Analyst