S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 1, 2016 #21 Here the link to CBS file Microsoft services Also, Happy New Year!! :thumbsup2:
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 1, 2016 #22 Happy New Year to you too :) I see, it's my mistake. I added the good values to the key, but forgot to remove the bad one. Oupsies Here, let's fix this. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFixScript.txt and move the file to your Desktop; Note: Make sure that the file is named SFCFixScript.txt, do not rename it. Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFixScript.txt
Happy New Year to you too :) I see, it's my mistake. I added the good values to the key, but forgot to remove the bad one. Oupsies Here, let's fix this. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFixScript.txt and move the file to your Desktop; Note: Make sure that the file is named SFCFixScript.txt, do not rename it. Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFixScript.txt
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 1, 2016 #23 SFCFix version 2.4.5.0 by niemiro. Start time: 2016-01-02 03:44:51.100 Microsoft Windows 7 Service Pack 1 - amd64 Using .txt script file at C:\Users\GATEWAY\Desktop\SFCFixScript.txt [0] RegistryScript:: Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. RegistryScript:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2016-01-02 03:44:51.553 Script hash: 1i4L5fb9DH17Ms4M4bVpkm95BzBdmzPvgsFJdbXYDP0= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2016-01-02 03:44:51.100 Microsoft Windows 7 Service Pack 1 - amd64 Using .txt script file at C:\Users\GATEWAY\Desktop\SFCFixScript.txt [0] RegistryScript:: Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-TerminalServicesClient~31bf3856ad364e35~amd64~de-DE~0.0.0.0. RegistryScript:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2016-01-02 03:44:51.553 Script hash: 1i4L5fb9DH17Ms4M4bVpkm95BzBdmzPvgsFJdbXYDP0= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 1, 2016 #24 Alright, now let's run SURT for what will be hopefully the last time :) System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
Alright, now let's run SURT for what will be hopefully the last time :) System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 2, 2016 #25 I took a peek and it seems to be no error this time https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!180&authkey=!AMqrr-ywEkJerYk&ithint=file,log
I took a peek and it seems to be no error this time https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!180&authkey=!AMqrr-ywEkJerYk&ithint=file,log
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 2, 2016 #26 Finally! Alright, time to move on and run a SFC scan. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.
Finally! Alright, time to move on and run a SFC scan. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 2, 2016 #27 I tried to run it but it giving me this error "Windows Resource Protection could not perform the requested operation." :s6:
I tried to run it but it giving me this error "Windows Resource Protection could not perform the requested operation." :s6:
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 2, 2016 #28 Can you run it again, wait until the error message appears, and still upload the CBS.log file for me so I can see why it cannot run the scan? :)
Can you run it again, wait until the error message appears, and still upload the CBS.log file for me so I can see why it cannot run the scan? :)
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 2, 2016 #29 Do you mean I have to run sfc /scannow again for the error message then go to logs folder and upload "CBS.log" right? My CBS.log is about 1.5GB, is that the right file? View attachment 18327
Do you mean I have to run sfc /scannow again for the error message then go to logs folder and upload "CBS.log" right? My CBS.log is about 1.5GB, is that the right file? View attachment 18327
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 2, 2016 #30 Yes that's it :) If you want, you can rename it to CBS_old.log and run SFC again, it'll create a new one which will be less big.
Yes that's it :) If you want, you can rename it to CBS_old.log and run SFC again, it'll create a new one which will be less big.
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 2, 2016 #31 The file is considerably smaller after archive, I didn't expect it will be this different(1.5GB to 75MB...) so here's the link :) Microsoft services
The file is considerably smaller after archive, I didn't expect it will be this different(1.5GB to 75MB...) so here's the link :) Microsoft services
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 3, 2016 #32 It looks to me that it's still a 1.5GB file :/ Is it possible to rename the CBS.log to something else, run a new SFC scan, and make sure that the new CBS.log that will be created have a smaller size?
It looks to me that it's still a 1.5GB file :/ Is it possible to rename the CBS.log to something else, run a new SFC scan, and make sure that the new CBS.log that will be created have a smaller size?
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 4, 2016 #33 You said if I want so I thought it might be better to use the big old one since it became quite small after archived Here's the new one https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!182&authkey=!AMxZhu0BV702_HA&ithint=file,txt
You said if I want so I thought it might be better to use the big old one since it became quite small after archived Here's the new one https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!182&authkey=!AMxZhu0BV702_HA&ithint=file,txt
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 6, 2016 #34 All good :) Alright, follow the instructions below please. Windows Repair All-In-One NOTE: Before following to step below, please disable your Antivirus software or any other real-time security software that you have enabled. Boot in Safe Mode with Networking; Download the portable version of Windows Repair All-In-One; Move the file (archive) on your Desktop, and extract it there; Go in the tweaking.com_windows_repair_aio folder, then Tweaking.com - Windows Repair folder, right-click on Repair_Windows.exe and select Run as Administrator; From there, click on the Next button until you are presented with an Open Repairs button and click on it; Let the Registry back up complete, and move on to the check-list window; Click on the Unselect All button at the bottom, then check the following items: Reset Service Permissions; Restore Important Windows Services; Set Windows Services To Default Startup; Once done, click on the Start Repairs button and let the scan execute; If you are being prompted with a Security Warning, allow it to go through; Once the repair is complete, it'll ask you to restart your computer, please do it;
All good :) Alright, follow the instructions below please. Windows Repair All-In-One NOTE: Before following to step below, please disable your Antivirus software or any other real-time security software that you have enabled. Boot in Safe Mode with Networking; Download the portable version of Windows Repair All-In-One; Move the file (archive) on your Desktop, and extract it there; Go in the tweaking.com_windows_repair_aio folder, then Tweaking.com - Windows Repair folder, right-click on Repair_Windows.exe and select Run as Administrator; From there, click on the Next button until you are presented with an Open Repairs button and click on it; Let the Registry back up complete, and move on to the check-list window; Click on the Unselect All button at the bottom, then check the following items: Reset Service Permissions; Restore Important Windows Services; Set Windows Services To Default Startup; Once done, click on the Start Repairs button and let the scan execute; If you are being prompted with a Security Warning, allow it to go through; Once the repair is complete, it'll ask you to restart your computer, please do it;
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 7, 2016 #35 Done! :) What should I do next?
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 7, 2016 #36 Try to run SFC again, and this time see if it can complete. You can upload the CBS.log after even if it fails.
Try to run SFC again, and this time see if it can complete. You can upload the CBS.log after even if it fails.
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 7, 2016 #37 Alright, here's the log https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!183&authkey=!AP7WlJ8wNkM_t2Q&ithint=file,txt
Alright, here's the log https://onedrive.live.com/redir?resid=7E25DA1AD994EBDC!183&authkey=!AP7WlJ8wNkM_t2Q&ithint=file,txt
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 7, 2016 #38 Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; On your Desktop, right-click and select New, then Text Document. Give it the name SFCFixScript (it should be a .txt) extension; Open the SFCFixScript.txt file you just created, and copy/paste the following in it; Code: Trace:: amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7601.18277_none_1b961a901cff2fb8 amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_19a301ec1fe29647 Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply;
Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; On your Desktop, right-click and select New, then Text Document. Give it the name SFCFixScript (it should be a .txt) extension; Open the SFCFixScript.txt file you just created, and copy/paste the following in it; Code: Trace:: amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7601.18277_none_1b961a901cff2fb8 amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_19a301ec1fe29647 Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply;
S Sandwitch Active member Joined Dec 22, 2015 Posts 27 Jan 7, 2016 #39 SFCFix version 2.4.5.0 by niemiro. Start time: 2016-01-08 01:31:46.744 Microsoft Windows 7 Service Pack 1 - amd64 Using .txt script file at C:\Users\GATEWAY\Desktop\SFCFixScript.txt [0] Trace:: Successfully traced component amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7601.18277_none_1b961a901cff2fb8. Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.2862966-231_neutral_GDR17 Failed to trace component amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_19a301ec1fe29647 with return code -2. Trace:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2016-01-08 01:31:47.041 Script hash: kwhwStE8RuVTg6nqE1A4Yt+qLWuJvS1fPJ3ht22y6DY= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2016-01-08 01:31:46.744 Microsoft Windows 7 Service Pack 1 - amd64 Using .txt script file at C:\Users\GATEWAY\Desktop\SFCFixScript.txt [0] Trace:: Successfully traced component amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7601.18277_none_1b961a901cff2fb8. Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.2862966-231_neutral_GDR17 Failed to trace component amd64_microsoft-windows-capi2-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_19a301ec1fe29647 with return code -2. Trace:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 4 datablocks. Finish time: 2016-01-08 01:31:47.041 Script hash: kwhwStE8RuVTg6nqE1A4Yt+qLWuJvS1fPJ3ht22y6DY= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Jan 7, 2016 #40 Follow the instructions below please. Uninstall a Windows Update - Command Prompt Follow the instructions below to uninstall a Windows Update manually via the command prompt. On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below (you can copy/paste it, to paste in the command prompt, right-click inside it and select Paste): Code: wusa /uninstall /KB:2862966 Let me know the outcome of the command: either it uninstall the update or either it says that the update isn't installed on the system;
Follow the instructions below please. Uninstall a Windows Update - Command Prompt Follow the instructions below to uninstall a Windows Update manually via the command prompt. On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below (you can copy/paste it, to paste in the command prompt, right-click inside it and select Paste): Code: wusa /uninstall /KB:2862966 Let me know the outcome of the command: either it uninstall the update or either it says that the update isn't installed on the system;