S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 17, 2018 #21 Turn it off, but leave Kaspersky running: https://support.microsoft.com/en-us/help/4027187/windows-turn-off-windows-defender-antivirus
Turn it off, but leave Kaspersky running: https://support.microsoft.com/en-us/help/4027187/windows-turn-off-windows-defender-antivirus
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 17, 2018 #22 Well, I ran it anyway and ran it with all kinds of stuff turned off in Kaspersky. ************************************************************** Fix result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018 Ran by Jean T (17-03-2018 14:18:03) Run:1 Running from C:\Users\Jean T\Desktop\FRST64and fixlist.txt Loaded Profiles: Jean T (Available Profiles: Jean T & btott) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: cmd: fsutil resource setautoreset true %SystemDrive%\ cmd: attrib -r -s -h %SystemRoot%\System32\Config\TxR\* cmd: del %SystemRoot%\System32\Config\TxR\* cmd: attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.tm* cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.blf cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending] c:\windows\winsxs\reboot.xml ***************** Restore point was successfully created. ========= fsutil resource setautoreset true %SystemDrive%\ ========= The operation completed successfully. ========= End of CMD: ========= ========= attrib -r -s -h %SystemRoot%\System32\Config\TxR\* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\Config\TxR\* ========= C:\WINDOWS\System32\Config\TxR\*, Are you sure (Y/N)? Y C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.0.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.1.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.2.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.3.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.blf The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TM.blf The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000001.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms The process cannot access the file because it is being used by another process. ========= End of CMD: ========= ========= attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.tm* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.blf ========= Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.blf ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms ========= Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.regtrans-ms ========= End of CMD: ========= HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired => not found HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied. "c:\windows\winsxs\reboot.xml" => not found Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-03-2018 14:21:40) Result of scheduled keys to remove after reboot: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied. ==== End of Fixlog 14:21:40 ====
Well, I ran it anyway and ran it with all kinds of stuff turned off in Kaspersky. ************************************************************** Fix result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018 Ran by Jean T (17-03-2018 14:18:03) Run:1 Running from C:\Users\Jean T\Desktop\FRST64and fixlist.txt Loaded Profiles: Jean T (Available Profiles: Jean T & btott) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: cmd: fsutil resource setautoreset true %SystemDrive%\ cmd: attrib -r -s -h %SystemRoot%\System32\Config\TxR\* cmd: del %SystemRoot%\System32\Config\TxR\* cmd: attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.tm* cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.blf cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending] c:\windows\winsxs\reboot.xml ***************** Restore point was successfully created. ========= fsutil resource setautoreset true %SystemDrive%\ ========= The operation completed successfully. ========= End of CMD: ========= ========= attrib -r -s -h %SystemRoot%\System32\Config\TxR\* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\Config\TxR\* ========= C:\WINDOWS\System32\Config\TxR\*, Are you sure (Y/N)? Y C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.0.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.1.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.2.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.3.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.blf The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TM.blf The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000001.regtrans-ms The process cannot access the file because it is being used by another process. C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms The process cannot access the file because it is being used by another process. ========= End of CMD: ========= ========= attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.tm* ========= ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.blf ========= Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.blf ========= End of CMD: ========= ========= del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms ========= Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.regtrans-ms ========= End of CMD: ========= HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired => not found HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied. "c:\windows\winsxs\reboot.xml" => not found Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-03-2018 14:21:40) Result of scheduled keys to remove after reboot: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied. ==== End of Fixlog 14:21:40 ====
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 17, 2018 #23 Any change in regards to WU?
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 17, 2018 #24 No. It restarted once during the FRST64 running, and then I restarted it after I put the Kaspersky settings back on it. I still am told the following: I am so sorry, but I have to leave the computer for a few hours. I appreciate your help. Tomorrow we will be traveling and I will not have access to internet until later in the evening. I will sign in to see if you have any other thoughts. Thank you. Jean Attachments After runningFRST.docx 150.9 KB · Views: 2
No. It restarted once during the FRST64 running, and then I restarted it after I put the Kaspersky settings back on it. I still am told the following: I am so sorry, but I have to leave the computer for a few hours. I appreciate your help. Tomorrow we will be traveling and I will not have access to internet until later in the evening. I will sign in to see if you have any other thoughts. Thank you. Jean
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 17, 2018 #25 No problem. Post whenever you can. Have a safe trip. When able do the following so I can gather more info. FRST Fix NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system 1. Please download Farbar Recovery Scan Tool and save it to your Desktop. Note: You need to run the 64-bit Version so please ensure you download that one. 2. Download attached file and save it to the Desktop. Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop). 3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator. 4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. 5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply. Attachments fixlist.txt 70 bytes · Views: 17
No problem. Post whenever you can. Have a safe trip. When able do the following so I can gather more info. FRST Fix NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system 1. Please download Farbar Recovery Scan Tool and save it to your Desktop. Note: You need to run the 64-bit Version so please ensure you download that one. 2. Download attached file and save it to the Desktop. Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop). 3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator. 4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. 5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 25, 2018 #26 Good evening. I have posted the log from what you asked me to do in our communication on 3/17 @ 3:05 pm.View attachment Fixlog.txt
Good evening. I have posted the log from what you asked me to do in our communication on 3/17 @ 3:05 pm.View attachment Fixlog.txt
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #27 Hello again! Retrieve Components Hive 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. 2. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. 3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. 4. The file will likely be too large to upload here so please upload toa file sharing service and just provide the link here.
Hello again! Retrieve Components Hive 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. 2. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. 3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. 4. The file will likely be too large to upload here so please upload toa file sharing service and just provide the link here.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #28 I am unable to find the Components file. View attachment Configuration32BitFileResults.docx
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #29 Go into this folder: C:\Windows\System32\Config and take a screenshot of its contents.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #30 View attachment Configuration32BitFileResults_2.docx
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #31 Why did you do that? I have requested that you only browse to that folder: C:\Windows\System32\Config and provide a screenshot, nothing else. Do not modify permissions or do anything but the things I tell you to do in order to prevent damage.
Why did you do that? I have requested that you only browse to that folder: C:\Windows\System32\Config and provide a screenshot, nothing else. Do not modify permissions or do anything but the things I tell you to do in order to prevent damage.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #32 I'm sorry. I did not do anything. When I browsed to the folder, this is what I got.View attachment Configuration32BitFileResults_3.docx
I'm sorry. I did not do anything. When I browsed to the folder, this is what I got.View attachment Configuration32BitFileResults_3.docx
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #33 OK, that is normal, hit Continue.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #34 View attachment Configuration32BitFileResults_4.docx
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #35 OK, this is strange. Are you logged on as Admin? If not, please log on as admin and try to access the folder again.
OK, this is strange. Are you logged on as Admin? If not, please log on as admin and try to access the folder again.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #36 View attachment Configuration32BitFileResults_5.docx
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #37 What's this now? Why do you have CMD open?
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #38 I thought that was how I ran as the Administrator.
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 Mar 26, 2018 #39 Nope, you have to check if your account have administrator privileges. 1. Click Start. 2. Click your user picture (not your user name). Your status will be displayed.
Nope, you have to check if your account have administrator privileges. 1. Click Start. 2. Click your user picture (not your user name). Your status will be displayed.
J jeanmarie Active member Joined Mar 12, 2018 Posts 35 Mar 26, 2018 #40 I found my picture. I clicked on it. It says I am the administrator. COMPONENTS.zip - Google Drive