D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 12, 2015 #41 The progress bar is showing no progress on the installation for SURT
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 12, 2015 #44 Alright, only two payloads left to replace :) Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
Alright, only two payloads left to replace :) Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 13, 2015 #45 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-13 00:11:51.754 Microsoft Windows 7 - amd64 Using .zip script file at C:\Users\Dillon\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246\themeui.dll to C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246\themeui.dll. Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248\prevhost.exe to C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248\prevhost.exe. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 3 datablocks. Finish time: 2015-09-13 00:11:53.079 Script hash: 4UpQIhDzDQozZb+wi+GZKSedaSiKQ0o5S2aB8vYezkQ= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-13 00:11:51.754 Microsoft Windows 7 - amd64 Using .zip script file at C:\Users\Dillon\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246\themeui.dll to C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246\themeui.dll. Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248\prevhost.exe to C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248\prevhost.exe. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.17514_none_8706005e79c34246 Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.21663_none_a1b5f77730c54248 PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 3 datablocks. Finish time: 2015-09-13 00:11:53.079 Script hash: 4UpQIhDzDQozZb+wi+GZKSedaSiKQ0o5S2aB8vYezkQ= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #46 Alright let's see if these replacements are accepted by SFC. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright let's see if these replacements are accepted by SFC. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 13, 2015 #47 It gets to 12% and then says it cant perform the requested operation.
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #48 Alright, run SFC again, and when you get the error message, upload the C:\Windows\Logs\CBS\CBS.log file for me please.
Alright, run SFC again, and when you get the error message, upload the C:\Windows\Logs\CBS\CBS.log file for me please.
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #50 Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 13, 2015 #51 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-13 20:43:41.944 Microsoft Windows 7 - amd64 Using .zip script file at C:\Users\Dillon\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll to C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll. Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2015-09-13 20:43:42.933 Script hash: dz2XPlicdjPt694dnMTIbXVj9NjPjdBLqL5hiVB37uE= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-13 20:43:41.944 Microsoft Windows 7 - amd64 Using .zip script file at C:\Users\Dillon\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll Successfully copied file C:\Users\Dillon\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll to C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll. Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2015-09-13 20:43:42.933 Script hash: dz2XPlicdjPt694dnMTIbXVj9NjPjdBLqL5hiVB37uE= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #52 Alright, let's try to run SFC again and see if it can get more far now. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright, let's try to run SFC again and see if it can get more far now. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 13, 2015 #53 https://www.dropbox.com/s/4mfitrtjq45zrnw/cbs.txt?dl=0
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #54 Did the SFC scan get to 100% this time?
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 13, 2015 #56 Alright. The SFC scan returned indications of corrupt manifests, so we'll run SURT once more to validate that. But that, please restart your computer. System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
Alright. The SFC scan returned indications of corrupt manifests, so we'll run SURT once more to validate that. But that, please restart your computer. System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 14, 2015 #58 Weird, SURT didn't return any corrupt manifests. Was the message at the end of the SFC scan similar to "Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log"?
Weird, SURT didn't return any corrupt manifests. Was the message at the end of the SFC scan similar to "Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log"?
D dc92 Well-known member Joined Aug 26, 2015 Posts 101 Sep 14, 2015 #59 I don't remember a message like that, just that it finished and where to find the log.
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 14, 2015 #60 Let's replace the two corrupt manifests. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
Let's replace the two corrupt manifests. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip