Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

DISM.exe /RestoreHealth Produces Error 0x800f081f


  • Please log in to reply
21 replies to this topic

#1 Big Benny

Big Benny

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 02 August 2015 - 08:40 PM

I recently upgraded to Windows 10 and I've been having some issues.

 

I have done this troubleshooting so far:

1. sfc /scannow

Result: Windows Resource Protection found corrupt files but was unable to fix them.

 

2. dism.exe /online /cleanup-image /scanhealth

Result: operation successful

 

3. dism.exe /online /cleanup-image /restorehealth

Result: Error 0x800f081f

 

4. Went into gpedit.msc and enabled "Specify settings for optinoal component installation and component repair"

5. Enabled "Contact Windows Update directly to download repair content

6. Restarted computer

7. Re-ran 1-3

Result: Error 0x800f081f

 

8. Ran the SFCfix provided here (http://www.bleepingcomputer.com/forums/t/576561/dism-restorehealth-error-0x800f0906-that-i-cannot-find-source-file-for/)

9. Re-ran 1-3

Result: Same

 

10. Ran dism /online /cleanup-image /StartComponentCleanup

Result: Successful

 

11. Re-ran 1-3

Result: Same

 

Any ideas?

 

DISM /restorehealth log file and SFC log file attached

Attached Files

  • Attached File  CBS.zip   809.25KB   4 downloads
  • Attached File  dism.log   1.1MB   1 downloads


BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 02 August 2015 - 08:44 PM

Hi Big Benny :)

Follow the instructions below please.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 02 August 2015 - 08:53 PM

Here is the log file from SFCFix:

 

 

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-02 20:52:08.882
Microsoft Windows 8.1  - amd64
Using .zip script file at C:\Users\CrystalAcid\Desktop\SFCFix.zip [1]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json

Successfully copied file C:\Users\CrystalAcid\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json to C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json.
Successfully copied file C:\Users\CrystalAcid\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json to C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json.

Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2015-08-02 20:52:09.113
Script hash: u/XcPQ2yAlCsHh/kkBZ3OSvSBpcxnCEFqjpE0eFPDGU=
----------------------EOF-----------------------



#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 02 August 2015 - 08:55 PM

Are you sure it's the right log? The SFCFix archive I provided doesn't contain the two files that were fixed in it.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 02 August 2015 - 08:57 PM

Are you sure it's the right log? The SFCFix archive I provided doesn't contain the two files that were fixed in it.

You're right. Here is the log

 

PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png

Successfully copied file C:\Users\CrystalAcid\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png to C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png.

Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2015-08-02 20:57:24.938
Script hash: 3U6xSlIXTGFuVEo2YnEkAlXoQKXaoPZ3x0jExwwYaDY=



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 02 August 2015 - 08:58 PM

That makes sense now. Follow the instructions below please.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 02 August 2015 - 09:10 PM

Here is the link to the cbs.txt

 

https://drive.google.com/file/d/0B48MDBJnDDdtcEZIREJBdlVpcVE/view?usp=sharing



#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 02 August 2015 - 09:16 PM

The replacement worked (the hash for the file matches the one of the file I gave you), however it's expecting another one. Give me a bit of time to investigate this. I'll ask my colleagues over at Sysnative if there's anything we should do for Windows 10 file replacement, since it's new for all of us.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 02 August 2015 - 09:19 PM

Alrighty. Thanks, Aura



#10 orbitalfenestra

orbitalfenestra

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 03 August 2015 - 11:27 AM

I've picked an interest at this. I think Windows 10 pro RTM is flawed and even with a clean install I have this error
0x800f081f I tried restorehealth online and local and it "cannot find the source" Can we really do something about it or should we just forget it?



#11 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 03 August 2015 - 11:51 AM

Alright Big Benny follow the instructions below please.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#12 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 03 August 2015 - 06:43 PM

Thank you, Aura.

 

Here are the results from the SFCFix

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-03 18:35:23.907
Microsoft Windows 8.1  - amd64
Using .zip script file at C:\Users\CrystalAcid\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png

WARNING: File C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png was not backed up as that would replace the current backup.
Successfully copied file C:\Users\CrystalAcid\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png to C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png.

Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.10240.16397_none_19381f0c8accd5dd\MicrosoftEdgeSquare44x44.scale-125_contrast-white.png
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2015-08-03 18:35:24.051
Script hash: lHiUclLaAPRkygJyfPTgnJl5dTQGRm2Zq0miqSYOf38=

 

And the CBS is attached. It looks like SFC did not find any integrity violations this time even though it did in all the others.

 

https://drive.google.com/file/d/0B48MDBJnDDdtRDA4Z3FFa2pyYnM/view?usp=sharing



#13 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 03 August 2015 - 06:45 PM

Your CBS.log indeed returned as clean. Do you want to try DISM /RestoreHealth next?

EndqYRa.pngDISM - Fixing Component Store Corruption
Follow the instructions below to run a DISM scan on your system:
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command DISM /Online /Cleanup-Image /RestoreHealth and press on Enter;
  • Let the scan run until the end (100%);
  • Copy the C:\Windows\Logs\DISM folder and C:\Windows\Logs\CBS\CBS.log file on your Desktop, then right-click on it, go to Send to... and select Compressed .zip archive;
  • Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#14 Big Benny

Big Benny
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:51 PM

Posted 03 August 2015 - 06:48 PM

I just ran the DISM /restorehealth and it, finally, completed successfully. Hopefully that will resolve the problem I started troubleshooting in the first place (not mentioned in the OP)

 

Thank you for the help!


Edited by Big Benny, 03 August 2015 - 06:48 PM.


#15 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,544 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:51 PM

Posted 03 August 2015 - 06:49 PM

No problem Big Benny, you're welcome :)

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users