Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Error 1935 when trying to install some programs


  • Please log in to reply
14 replies to this topic

#1 kb9jlo

kb9jlo

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 10 March 2015 - 01:15 PM

Windows 8.1 64 bit, factory install. 

 

Problem first appeared when trying to install Office 2013

'Error 1935. An error occured during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF608EEBDB}. HRESULT: 0x800703EE'

 

I'm getting the error trying to install VMware vSphere PowerCLI. I've tried older and newer versions. It always gets almost to the very end of the install, get's this error and then rolls back the install. See attachments.

 

I've tried everything I can think of. I've Googled this error every which way I could search and can't come up with anything. There are a myriad of posts about the 1935 error. I did narrow down the HRESULT portion: 

Code  HRESULT      Description                                                                                                                              #Define

1006- 0x800703EE  The volume for a file has been externally altered so that the opened file is no longer valid.   ERROR_FILE_INVALID

I got this from: http://joshpoley.blogspot.com/2011/09/hresults-facilitywin32.html

 

Anybody have any ideas?

I've cleaned, virus scanned, cleaned some more, emptied temp folders, MalwareBytes, etc...

I really don't want to re-install Windows.

 

From the Googling I suspect it is a MS library of some sort or some misbehaving .Net piece but don't know where to start.

 

 

 

Attached File  Capture1.JPG   39.39KB   0 downloadsAttached File  Capture2.JPG   45.86KB   0 downloadsAttached File  Capture3.JPG   41.47KB   0 downloads


I also discovered this site:

http://blogs.msdn.com/b/astebner/archive/2004/11/10/255346.aspx

 

But I didn't know what to do with it.



BC AdBot (Login to Remove)

 


m

#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 10 March 2015 - 08:10 PM

Hi kb9jlo :)

It seems that these errors are related to the .NET Framework and/or the C++ Redistributable packages. Let's see if we can find anything about this on your system.

3Al62Pm.pngMiniToolBox
  • Download MiniToolBox and move the executable file to your Desktop;
  • Execute MiniToolBox and check the following options:
    • List Installed Programs;
    • List Last 10 Event Viewer Errors;
      Yjt97o0.png
  • Once this is done, click on Go and wait for the scan to complete;
  • Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:09:00 AM

Posted 10 March 2015 - 09:35 PM

This problem (Error 1935) occurs because of certain third-party programs and background programs that are running on the computer.

For example, this problem may be caused by programs such as WinTools, WinEasy, WebSearch, Easy Installer, System Mechanic, and HP Component Manager.

 

Follow the directions by Member Aura, and there may be unwanted programs for you to remove (usually minor infections).

 

Thank you -



#4 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 09:58 AM

Aura, here you go:

(BTW, thanks I was at the non-destructive reinstall stage yesterday...)  :lmao:

MiniToolBox by Farbar  Version: 09-03-2015

Ran by dlr (administrator) on 11-03-2015 at 09:53:23
Running from "C:\Users\dlr\Desktop"
Microsoft Windows 8.1 Pro  (X64)
Model: 10A90016US Manufacturer: LENOVO
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (03/10/2015 04:54:01 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
 
 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
.
 
Error: (03/10/2015 00:32:00 PM) (Source: MsiInstaller) (User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"
 
Error: (03/10/2015 00:26:07 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
 
 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
.
 
Error: (03/06/2015 10:43:56 AM) (Source: Application Hang) (User: )
Description: The program LSC.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1d60
 
Start Time: 01d0582381e3d1cc
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe
 
Report Id: 9859f932-c417-11e4-be8f-4439c438d2cb
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (03/05/2015 09:00:58 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
 
 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
.
 
Error: (03/02/2015 03:38:03 AM) (Source: Perflib) (User: )
Description: rdyboost4
 
Error: (02/26/2015 02:21:54 PM) (Source: MsiInstaller) (User: BLDD)
Description: Product: Acronis True Image 2014 -- Error 1935. An error occurred during the installation of assembly 'Microsoft.VC80.CRT,publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762",processorArchitecture="amd64"'. Please refer to Help and Support for more information. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, component: {844EFBA7-1C24-93B2-A01F-C8B3B9A1E18E}
 
Error: (02/25/2015 04:06:37 PM) (Source: MsiInstaller) (User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"
 
Error: (02/25/2015 03:59:24 PM) (Source: MsiInstaller) (User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"
 
Error: (02/25/2015 03:29:26 PM) (Source: MsiInstaller) (User: BLDD)
Description: Product: VMware vSphere CLI -- Error 1935.An error occurred during the installation of assembly component {844EFBA7-1C24-93B2-A01F-C8B3B9A1E18E}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.VC80.CRT,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64"
 
 
System errors:
=============
Error: (03/11/2015 06:39:00 AM) (Source: DCOM) (User: BLDD)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 
Error: (03/11/2015 06:38:30 AM) (Source: DCOM) (User: BLDD)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
Error: (03/10/2015 05:00:27 PM) (Source: DCOM) (User: BLDD)
Description: application-specificLocalActivation{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}{C3B65D83-FB15-4E3F-BA04-097D1E2B5AC1}BLDDdlrS-1-5-21-1734160231-911049067-755368405-1118LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (03/10/2015 04:54:35 PM) (Source: DCOM) (User: BLDD)
Description: application-specificLocalActivation{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}{C3B65D83-FB15-4E3F-BA04-097D1E2B5AC1}BLDDdlrS-1-5-21-1734160231-911049067-755368405-1118LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (03/10/2015 04:53:16 PM) (Source: DCOM) (User: BLDD)
Description: application-specificLocalActivation{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}{C3B65D83-FB15-4E3F-BA04-097D1E2B5AC1}BLDDdlrS-1-5-21-1734160231-911049067-755368405-1118LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (03/10/2015 03:21:44 PM) (Source: Service Control Manager) (User: )
Description: The Acronis Sync Agent Service service failed to start due to the following error: 
%%2
 
Error: (03/10/2015 03:19:29 PM) (Source: Service Control Manager) (User: )
Description: The Acronis Scheduler2 Service service failed to start due to the following error: 
%%2
 
Error: (03/10/2015 03:18:55 PM) (Source: Service Control Manager) (User: )
Description: The Hyper-V Virtual Machine Management service did not shut down properly after receiving a preshutdown control.
 
Error: (03/10/2015 03:18:22 PM) (Source: DCOM) (User: BLDD)
Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030}
 
Error: (03/10/2015 03:18:22 PM) (Source: DCOM) (User: BLDD)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}
 
 
Microsoft Office Sessions:
=========================
Error: (03/10/2015 04:54:01 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
 
Error: (03/10/2015 00:32:00 PM) (Source: MsiInstaller)(User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (03/10/2015 00:26:07 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
 
Error: (03/06/2015 10:43:56 AM) (Source: Application Hang)(User: )
Description: LSC.exe0.0.0.01d6001d0582381e3d1cc4294967295C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe9859f932-c417-11e4-be8f-4439c438d2cb
 
Error: (03/05/2015 09:00:58 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
 
System Error:
Access is denied.
 
Error: (03/02/2015 03:38:03 AM) (Source: Perflib)(User: )
Description: rdyboost4
 
Error: (02/26/2015 02:21:54 PM) (Source: MsiInstaller)(User: BLDD)
Description: Product: Acronis True Image 2014 -- Error 1935. An error occurred during the installation of assembly 'Microsoft.VC80.CRT,publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762",processorArchitecture="amd64"'. Please refer to Help and Support for more information. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, component: {844EFBA7-1C24-93B2-A01F-C8B3B9A1E18E}(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (02/25/2015 04:06:37 PM) (Source: MsiInstaller)(User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (02/25/2015 03:59:24 PM) (Source: MsiInstaller)(User: BLDD)
Description: Product: VMware vSphere PowerCLI -- Error 1935.An error occurred during the installation of assembly component {303994BA-6487-47AE-AF1D-7AF6088EEBDB}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (02/25/2015 03:29:26 PM) (Source: MsiInstaller)(User: BLDD)
Description: Product: VMware vSphere CLI -- Error 1935.An error occurred during the installation of assembly component {844EFBA7-1C24-93B2-A01F-C8B3B9A1E18E}. HRESULT: 0x800703EE. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.VC80.CRT,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64"(NULL)(NULL)(NULL)(NULL)(NULL)
 
 
 
 PowerDVD Create 10 (x32 Version: 10.0.1.2704 - CyberLink Corp.) Hidden
=========================== Installed Programs ============================
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 16.0.0.273 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Refresh Manager (x32 Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Advanced LAN Scanner v1.0 BETA 1 (HKLM-x32\...\Advanced LAN Scanner v1.0 BETA 1) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
Cisco WebEx Meetings (HKCU\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Citrix Online Launcher (HKLM-x32\...\{3D5F07C3-1B93-47F8-9F8A-DE8E47BF1669}) (Version: 1.0.209 - Citrix)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
ConnectionUtility (x32 Version: 2.0.0 - EMC Corporation) Hidden
CyberLink Power2Go 7 (x32 Version: 7.0.0.3901a - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5119.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.5119.52 - CyberLink Corp.) Hidden
CyberLink PowerProducer 5.5 (x32 Version: 5.5.3.5114 - CyberLink Corp.) Hidden
FileLocator Lite 2010 (64-bit) (HKLM\...\FileLocator Lite (64-bit)_is1) (Version:  - )
Freemake Video Converter version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GoToMeeting 7.1.2.2417 (HKCU\...\GoToMeeting) (Version: 7.1.2.2417 - CitrixOnline)
Intel AppUp® center (HKLM-x32\...\Intel AppUp® center 41900) (Version: 3.8.0.41900.72 - Intel)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1010 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel® Network Connections Drivers (HKLM\...\PROSet) (Version: 19.1 - Intel)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3907 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel® Rapid Storage Technology (Version: 12.5.0.1066 - Intel Corporation) Hidden
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.31.13 - Oracle Corporation) Hidden
LanFlow (HKLM-x32\...\LanFlow) (Version: 6.0 - Pacestar Software)
LBAI (HKLM-x32\...\{C5C91B7B-38A6-40B7-84D6-E44885E44B13}_is1) (Version: 1.0.0.8 - Lenovo Group Limited)
Lenovo Dependency Package (HKLM-x32\...\Lenovo Dependency Package_is1) (Version: 1.5.23.0 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{4C2B6F96-3AED-4E3F-8DCE-917863D1E6B1}) (Version: 2.7.003.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.06.0016 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0007.00 - Lenovo)
LogMeIn (HKLM-x32\...\{9905E4C1-14D8-4522-88FE-FD00B51A20DC}) (Version: 4.1.4408 - LogMeIn, Inc.)
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.14.3 - Marvell)
Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
mRemote (HKLM-x32\...\mRemote) (Version:  - )
Nero 8 Micro v8.3.6.0 (HKLM-x32\...\Nero8360_Micro_is1) (Version:  - www.nero.com)
Nitro Pro 8 (HKLM\...\{461D1871-A4D4-4FF6-8E8E-ED8CA4177986}) (Version: 8.5.7.3 - Nitro)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}_is1) (Version: 3.01.0006 - Lenovo Group Limited)
PowerDVD Create (HKLM-x32\...\InstallShield_{DE485075-8CD3-4A1E-9ABC-6412EBA44872}) (Version: 10.0 - CyberLink Corp.)
PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6844 - Realtek Semiconductor Corp.)
Realtek USB Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30143 - Realtek Semiconductor Corp.)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
View Management Utility (HKLM\...\View Management Utility_is1) (Version: 3.0.1.20121226 - Lenovo Inc.)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VMware Client Integration Plug-in 5.1.0 (HKLM-x32\...\{75C2AA97-2B81-462C-BAA2-7FEF416C3160}) (Version: 5.1.0.1060500 - VMware, Inc.)
VMware Client Integration Plug-in 5.5.0 (HKLM-x32\...\{837E9923-05EA-4091-A4EE-6FB10CEEE099}) (Version: 5.5.0.1280541 - VMware, Inc.)
VMware Horizon View Client (HKLM\...\{7D083B52-2E0D-450F-AEA8-2FBF2599D64E}) (Version: 2.3.3.18259 - VMware, Inc.)
VMware Remote Console Plug-in 5.1 (HKLM-x32\...\{10BA75D4-F1F6-41DC-A052-3AFA3209AA80}) (Version: 0.0.1 - VMware, Inc.)
VMware VIX (HKLM-x32\...\{F99FC179-EA67-4BBC-8955-BDDA0CB94B88}) (Version: 1.12.4.48173 - VMware, Inc.)
VMware vSphere Client 5.5 (HKLM-x32\...\{4CFB0494-2E96-4631-8364-538E2AA91324}) (Version: 5.5.0.3165 - VMware, Inc.)
WaveEditor (x32 Version: 1.0.1.4514 - CyberLink Corp.) Hidden
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinSCP 5.5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5.5 - Martin Prikryl)
Yawcam 0.4.1 (HKLM-x32\...\{8FE96B14-E1F9-47BF-8BA1-A81467CD259B}_is1) (Version:  - )
 
**** End of log ****


#5 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 11 March 2015 - 10:01 AM

This isn't a new Windows installation isn't it? Also, I can see that you have no Microsoft .NET Framework installed. Let's see if we can find it via Windows Updates first.

rONW46K.pngCheck for Windows Updates
Follow the instructions below to check for available Windows Updates and install them:
  • Click on the Windows Start Menu and select Control Panel;
  • From there, click on System and Security and select Windows Updates;
  • Click on the Check for updates button in the left-pane;
  • Wait for the scan to complete and see which updates are found, Recommended Updates and Recommended Updates (or Optional Updates);
  • Click on X Important Updates (X being the number of updates being found) and make sure that they are all checked;
  • Install every Important Updates found and restart your computer once it's done;

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#6 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:09 AM

No, not new installation. It is Windows 8.1 so assumed .Net was already on there. In updates the only .Net is the new .Net update.

 

I'm running updates now. Will reboot and report back.



#7 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 11 March 2015 - 10:11 AM

By default, .NET Framework 3.5 should be there if enabled in the "Turn on and off Windows features". Versions above this one needs to be installed manually or via the Windows Updates.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#8 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:15 AM

By default, .NET Framework 3.5 should be there if enabled in the "Turn on and off Windows features". Versions above this one needs to be installed manually or via the Windows Updates.

OK, I see. Well my "Turn on and off Windows Features" is broke also. It's blank. Won't fill in. I was running that issue down yesterday too. I kept coming up against the 

[0x800703EE  The volume for a file has been externally altered so that the opened file is no longer valid.   ERROR_FILE_INVALID] issue...

I can't run a 'sfc /scannow' or the DISM utility either.

 

adding this link...

http://www.thewindowsclub.com/windows-resource-protection-could-not-start-the-repair-service


Edited by kb9jlo, 11 March 2015 - 10:16 AM.


#9 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 11 March 2015 - 10:16 AM

What happens when you try to run a SFC scan or a DISM one?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#10 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:22 AM

 I will send 3 responses.

DISM:

 

C:\WINDOWS\system32>Dism /Online /Cleanup-Image /ScanHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
 
Error: 1006
 
The volume for a file has been externally altered so that the opened file is no longer valid.
 
The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log


#11 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:24 AM

DISM log for today...

 

2015-03-11 10:19:21, Info                  DISM   PID=1648 TID=5536 Scratch directory set to 'C:\Users\dlr\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2015-03-11 10:19:21, Info                  DISM   PID=1648 TID=5536 DismCore.dll version: 6.3.9600.17031 - CDISMManager::FinalConstruct
2015-03-11 10:19:21, Info                  DISM   PID=1648 TID=5536 Successfully loaded the ImageSession at "C:\WINDOWS\System32\Dism" - CDISMManager::LoadLocalImageSession
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Manager: PID=1648 TID=5536 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: 
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: <----- Starting Dism.exe session ----->
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: 
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: Host machine information: OS Version=6.3.9600, Running architecture=amd64, Number of processors=8
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: Dism.exe version: 6.3.9600.17031
2015-03-11 10:19:21, Info                  DISM   DISM.EXE: Executing command line: Dism  /Online /Cleanup-Image /ScanHealth
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Getting Provider FolderManager - CDISMProviderStore::GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Loading Provider from location C:\WINDOWS\System32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:21, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Connecting to the provider located at C:\WINDOWS\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:21, Info                  DISM   DISM Manager: PID=1648 TID=5536 physical location path: C:\ - CDISMManager::CreateImageSession
2015-03-11 10:19:21, Info                  DISM   DISM Manager: PID=1648 TID=5536 Copying DISM from "C:\WINDOWS\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2015-03-11 10:19:22, Info                  DISM   DISM Manager: PID=1648 TID=5536 Successfully loaded the ImageSession at "C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E" - CDISMManager::LoadRemoteImageSession
2015-03-11 10:19:22, Info                  DISM   DISM Image Session: PID=3012 TID=6124 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\OSProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:22, Info                  DISM   DISM OS Provider: PID=3012 TID=6124 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM OS Provider: PID=3012 TID=6124 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM OS Provider: PID=3012 TID=6124 Host OS verion is 6.3 - CDISMOSServiceManager::SetDllSearchPath
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\LogProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\PEProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Warning               DISM   DISM Provider Store: PID=3012 TID=6124 Failed to Load the provider: C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Manager: PID=1648 TID=5536 Image session successfully loaded from the temporary location: C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E - CDISMManager::CreateImageSession
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Getting Provider OSServices - CDISMProviderStore::GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM.EXE: Target image information: OS Version=6.3.9600.17477, Image architecture=amd64
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Getting the collection of providers from an image provider store type. - CDISMProviderStore::GetProviderCollection
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\CbsProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:22, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:22, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2015-03-11 10:19:22, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2015-03-11 10:19:28, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Loaded servicing stack for online use only. - CDISMPackageManager::RefreshInstanceAndLock
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\MsiProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\MsiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\IntlProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\IntlProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\IBSProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\IBSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\DmiProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\DmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM OS Provider: PID=3012 TID=6124 Successfully loaded the hive. - CDISMOSServiceManager::DetermineBootDrive
2015-03-11 10:19:28, Info                  DISM   DISM Driver Manager: PID=3012 TID=6124 Further logs for driver related operations can be found in the target operating system at %WINDIR%\inf\setupapi.offline.log - CDriverManager::Initialize
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\UnattendProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\UnattendProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\Wow64provider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Warning               DISM   DISM Provider Store: PID=3012 TID=6124 Failed to get the IDismObject Interface - CDISMProviderStore::Internal_LoadProvider(hr:0x80004002)
2015-03-11 10:19:28, Warning               DISM   DISM Provider Store: PID=3012 TID=6124 Failed to Load the provider: C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\Wow64provider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x80004002)
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\SmiProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\SmiProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\EmbeddedProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Warning               DISM   DISM Provider Store: PID=3012 TID=6124 Failed to Load the provider: C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\EmbeddedProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\AppxProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\AppxProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\AssocProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\AssocProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\GenericProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\GenericProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has not previously been encountered.  Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Loading Provider from location C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\TransmogProvider.dll - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Connecting to the provider located at C:\Users\dlr\AppData\Local\Temp\E650015B-C67B-48A2-BCE7-3522118EA56E\TransmogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2015-03-11 10:19:28, Info                  DISM   DISM Transmog Provider: PID=3012 TID=6124 Current image session is [ONLINE] - CTransmogManager::GetMode
2015-03-11 10:19:28, Info                  DISM   DISM Transmog Provider: PID=3012 TID=6124 Audit Mode: [No] - CTransmogManager::Initialize
2015-03-11 10:19:28, Info                  DISM   DISM Transmog Provider: PID=3012 TID=6124 GetProductType: ProductType = [WinNT] - CTransmogManager::GetProductType
2015-03-11 10:19:28, Info                  DISM   DISM Transmog Provider: PID=3012 TID=6124 Product Type: [WinNT] - CTransmogManager::Initialize
2015-03-11 10:19:28, Info                  DISM   DISM Transmog Provider: PID=3012 TID=6124 Product Type ServerNT : [No] - CTransmogManager::Initialize
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Log Provider
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: OSServices
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Package Manager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Package Manager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: MsiManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: MsiManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IntlManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: IntlManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: IBSManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DriverManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DriverManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: DISM Unattend Manager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: DISM Unattend Manager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: SmiManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AppxManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AppxManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: AssocManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: AssocManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: GenericManager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: GenericManager.
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Attempting to add the commands from provider: Edition Manager
2015-03-11 10:19:28, Info                  DISM   DISM.EXE: Succesfully registered commands for the provider: Edition Manager.
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Getting Provider DISM Package Manager - CDISMProviderStore::GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Provider has previously been initialized.  Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2015-03-11 10:19:28, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Processing the top level command token(cleanup-image). - CPackageManagerCLIHandler::Private_ValidateCmdLine
2015-03-11 10:19:28, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Attempting to route to appropriate command handler. - CPackageManagerCLIHandler::ExecuteCmdLine
2015-03-11 10:19:28, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Routing the command... - CPackageManagerCLIHandler::ExecuteCmdLine
2015-03-11 10:19:28, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 CBS session options=0x4100! - CDISMPackageManager::Internal_Finalize
2015-03-11 10:19:48, Error                 DISM   DISM Package Manager: PID=3012 TID=6124 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x800703ee)
2015-03-11 10:19:48, Error                 DISM   DISM Package Manager: PID=3012 TID=6124 Failed processing package changes with session option CbsSessionOptionDetectStoreCorruption - CDISMPackageManager::ScanHealth(hr:0x800703ee)
2015-03-11 10:19:48, Error                 DISM   DISM Package Manager: PID=3012 TID=6124 Failed to restore the image health. - CPackageManagerCLIHandler::ProcessCmdLine_CleanupImage(hr:0x800703ee)
2015-03-11 10:19:48, Error                 DISM   DISM Package Manager: PID=3012 TID=6124 Failed while processing command cleanup-image. - CPackageManagerCLIHandler::ExecuteCmdLine(hr:0x800703ee)
2015-03-11 10:19:48, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Further logs for online package and feature related operations can be found at %WINDIR%\logs\CBS\cbs.log - CPackageManagerCLIHandler::ExecuteCmdLine
2015-03-11 10:19:48, Error                 DISM   DISM.EXE: DISM Package Manager processed the command line but failed. HRESULT=800703EE
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Package Manager: PID=3012 TID=6124 Finalizing CBS core. - CDISMPackageManager::Finalize
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(MsiManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: MsiManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(IntlManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: IntlManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(IBSManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: IBSManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(DriverManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: DriverManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(DISM Unattend Manager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: DISM Unattend Manager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(SmiManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: SmiManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(AppxManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: AppxManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(AssocManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: AssocManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(GenericManager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: GenericManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Finalizing the servicing provider(Edition Manager) - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: Edition Manager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=3012 TID=6124 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM.EXE: Image session has been closed. Reboot required=no.
2015-03-11 10:19:48, Info                  DISM   DISM.EXE: 
2015-03-11 10:19:48, Info                  DISM   DISM.EXE: <----- Ending Dism.exe session ----->
2015-03-11 10:19:48, Info                  DISM   DISM.EXE: 
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2015-03-11 10:19:48, Info                  DISM   DISM Provider Store: PID=1648 TID=5536 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider


#12 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:25 AM

Last but not least SFC.....

 

C:\WINDOWS\system32>sfc /scannow
 
Windows Resource Protection could not start the repair service.


#13 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 11 March 2015 - 10:28 AM

Seems like your Windows installation is failing on you. I would try refreshing your Windows 8 and see if it fixes all the various issues you have (because there's obviously more than one problem here):

http://www.gizmag.com/how-to-windows-8-pc-refresh-reset/32801/

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#14 kb9jlo

kb9jlo
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 11 March 2015 - 10:32 AM

OK, I was going to try this:

https://www.winhelp.us/non-destructive-reinstall-of-windows-8-and-8-1.html

 

I can't do a refresh since I never set that up in the first place... Backups who needs backups?

Not that I can't easily replace everything. I just hate going back if I don't have to.

 

Does the "non-destructive-reinstall" have any hopes of success?

 

I think this happened somehow on the upgrade from 8 to 8.1...

 

Thanks for all the help. At least we tried.



#15 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,203 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:00 PM

Posted 11 March 2015 - 10:37 AM

It's basically the same as I suggested, except that you're doing it from an installation media. So yes it'll work, and maybe even better than a refresh. Well, we didn't try a lot, but considering the errors you're being thrown, it might be easier (and also faster) to just do a "non-destructive" reinstallation.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users