Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Installation of Windows 10 results in error code 80070005


  • Please log in to reply
33 replies to this topic

#1 ubtchanova

ubtchanova

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 04 August 2015 - 10:32 AM

Hello. I am having the same issues with the Windows 10 upgrade as TheDude has previously reported.  In fact, last I checked the upgrade had made 30 unsuccessful attempts to upgrade.

 

I was thinking - and am a non-technically inclined senior citizen - that when I logon to my system I logon on using an @outlook.com address.  Could it be that my system is waiting for me to log on to a "local" account or something?

 

I tried the creation tool... clicked run and "poof," nothing. I even created a USB flash drive with the upgrade on it using our laptop computer.  But after the install began I was asked for the "product key;" wouldn't you know that the product key ended in AEOEM (or some such characters), but the upgrade told me it wasn't a valid product key.

 

So I contacted Dell... so much for paid support; worthless as teets on a boar hog.  They referred me to Microsoft, who, after keeping me on hold for some time, had me run MSCONFIG, go to the services tab, check hide all Microsoft services, and then hit apply.... Only problem? The MSCONFIG window said "not responding!"

 

The Microsoft tech said for $99 she'd be happy to elevate my tech support for one item for 30 days. I said no thanks, that was too much $$$ when they couldn't even guarantee that whatever they might do would correct the issue.  (Besides, it seems there are many folks encountering the same issues I am with the upgrade, so this can't be "just" my computer.)

 

Equipment: Dell XPS 8700, i7 processor, 24Gb RAM, 256Gb SSD



BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 04 August 2015 - 10:46 AM

Hi ubtchanova :)

Let's see if we can get the upgrade to install on your system. Follow the instructions below please.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 malynensi

malynensi

  • Members
  • 145 posts
  • OFFLINE
  •  
  • Local time:04:26 AM

Posted 04 August 2015 - 10:48 AM

Lots of people reported like this prior to the installation of Windows 10. This is one of the reason why I don't want to install it on my computer. I'm afraid to lose it with just a single installation that would ruin everything.



#4 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 04 August 2015 - 10:54 AM

Aura,

 

Will provide this info this evening... away from that computer at this time.  Thank you!



#5 AstroPete

AstroPete

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:26 AM

Posted 04 August 2015 - 12:00 PM

Hi!

I am also struggling to overcome the error 80070005 when installing Windows 10. I have tried several of the 'solutions' that can be found on the web. None have solved the problem. I will therefore watch this thread with interest for a  possible solution.



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 04 August 2015 - 12:09 PM

Hi AstroPete :)

The fixes I'm going to attempt in this thread are unique to the system I'm working on, so if you want to receive the same kind of assistance, I'll ask you to create your own thread in this section so I can assist you. Other than that, you could just monitor it and if I find a solution, you can create a thread after and I'll adapt it to your system.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 04 August 2015 - 06:36 PM

Aura,

 

I am running the sfc /scannow at this time. I don't understand what you mean by "Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;"

 

Why don't I just attach the cbs.txt file using the Attach Files capability here?



#8 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 04 August 2015 - 06:44 PM

cbs.txt file is attached.Attached File  cbs.txt   3.19MB   3 downloads



#9 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 04 August 2015 - 06:50 PM

Because sometimes the CBS.log is so big that it cannot be attached here :) Follow the instructions below please.

myjIXnC.pngSFCFix - Run Only
Follow the instructions below to download and execute SFCFix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Right-click on SFCFix.exe and select Spcusrh.pngRun as Administrator;
  • Follow the instructions displayed in the console;
  • On completion, a log will open in Notepad. Copy and paste the content of that log in your next reply;
    Note: The log (SFCFix.txt) will be created in the same directory where SFCFix is run if it doesn't open automatically on completion.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#10 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 04 August 2015 - 09:08 PM

Results of running SFCFix.exe:

 

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-04 22:05:16.912
Microsoft Windows 8.1 Update 3 - amd64
Not using a script file.




AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-08-04 22:06:57.823
----------------------EOF-----------------------



#11 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 04 August 2015 - 09:15 PM

Hum that's weird. Alright, run SFC and SFCFix back to back. No need to give me the CBS.log, just the SFCFix log at the end.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, run SFCFix like instructed below;
myjIXnC.pngSFCFix - Run Only
Follow the instructions below to download and execute SFCFix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Right-click on SFCFix.exe and select Spcusrh.pngRun as Administrator;
  • Follow the instructions displayed in the console;
  • On completion, a log will open in Notepad. Copy and paste the content of that log in your next reply;
    Note: The log (SFCFix.txt) will be created in the same directory where SFCFix is run if it doesn't open automatically on completion.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#12 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 05 August 2015 - 06:26 PM

Here ya go, ran SFC first, then SFCFix immediately afteward.

Attached Files



#13 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 05 August 2015 - 08:28 PM

Sourced all the files from my VM in one go :) Follow the instructions below please.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#14 ubtchanova

ubtchanova
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:26 PM

Posted 05 August 2015 - 08:46 PM

Here ya go... content of SFCFix.txt.

 

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-05 21:45:06.355
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at C:\Users\Jim\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.0.9600.17924_none_727599a0c5aa6bf4\wow64_ieframe.ptxml
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_29632f75d189cfd1\iesysprep.dll
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iernonce.dll
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iesetup.dll
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_44f77dd12bb05f4f\occache.dll
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_3d3315ae318bca67\ieUnatt.exe
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_d0e7ac7d1a541176\ieetwproxystub.dll
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_21163f9d39b4ddc7\mshtml.tlb
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_672b04e620ead87e\mshta.exe
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.ASM-WindowsDefault.json
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_1f0e85239d290dd6\iesysprep.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iernonce.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iesetup.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_3aa2d37ef74f9d54\occache.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_32de6b5bfd2b086c\ieUnatt.exe
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_c693022ae5f34f7b\ieetwproxystub.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_16c1954b05541bcc\mshtml.tlb
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_5cd65a93ec8a1683\mshta.exe

Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.0.9600.17924_none_727599a0c5aa6bf4\wow64_ieframe.ptxml to C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.0.9600.17924_none_727599a0c5aa6bf4\wow64_ieframe.ptxml.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_29632f75d189cfd1\iesysprep.dll to C:\Windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_29632f75d189cfd1\iesysprep.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iernonce.dll to C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iernonce.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iesetup.dll to C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iesetup.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_44f77dd12bb05f4f\occache.dll to C:\Windows\winsxs\wow64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_44f77dd12bb05f4f\occache.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_3d3315ae318bca67\ieUnatt.exe to C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_3d3315ae318bca67\ieUnatt.exe.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_d0e7ac7d1a541176\ieetwproxystub.dll to C:\Windows\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_d0e7ac7d1a541176\ieetwproxystub.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_21163f9d39b4ddc7\mshtml.tlb to C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_21163f9d39b4ddc7\mshtml.tlb.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_672b04e620ead87e\mshta.exe to C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_672b04e620ead87e\mshta.exe.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.ASM-WindowsDefault.json to C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.ASM-WindowsDefault.json.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json to C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_1f0e85239d290dd6\iesysprep.dll to C:\Windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_1f0e85239d290dd6\iesysprep.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iernonce.dll to C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iernonce.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iesetup.dll to C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iesetup.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_3aa2d37ef74f9d54\occache.dll to C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_3aa2d37ef74f9d54\occache.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_32de6b5bfd2b086c\ieUnatt.exe to C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_32de6b5bfd2b086c\ieUnatt.exe.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_c693022ae5f34f7b\ieetwproxystub.dll to C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_c693022ae5f34f7b\ieetwproxystub.dll.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_16c1954b05541bcc\mshtml.tlb to C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_16c1954b05541bcc\mshtml.tlb.
Successfully copied file C:\Users\Jim\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_5cd65a93ec8a1683\mshta.exe to C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_5cd65a93ec8a1683\mshta.exe.

Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.0.9600.17924_none_727599a0c5aa6bf4\wow64_ieframe.ptxml
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.0.9600.17924_none_727599a0c5aa6bf4\wow64_ieframe.ptxml
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_29632f75d189cfd1\iesysprep.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_29632f75d189cfd1\iesysprep.dll
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iernonce.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iernonce.dll
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iesetup.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_d3a1cac97606930c\iesetup.dll
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_44f77dd12bb05f4f\occache.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_44f77dd12bb05f4f\occache.dll
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_3d3315ae318bca67\ieUnatt.exe
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_3d3315ae318bca67\ieUnatt.exe
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_d0e7ac7d1a541176\ieetwproxystub.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_d0e7ac7d1a541176\ieetwproxystub.dll
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_21163f9d39b4ddc7\mshtml.tlb
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_21163f9d39b4ddc7\mshtml.tlb
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_672b04e620ead87e\mshta.exe
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_672b04e620ead87e\mshta.exe
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.ASM-WindowsDefault.json
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\telemetry.ASM-WindowsDefault.json
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17842_none_90da81a4dac50d54\utc.app.json
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_1f0e85239d290dd6\iesysprep.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.0.9600.17905_none_1f0e85239d290dd6\iesysprep.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iernonce.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iernonce.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iesetup.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.9600.17905_none_c94d207741a5d111\iesetup.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_3aa2d37ef74f9d54\occache.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.9600.17905_none_3aa2d37ef74f9d54\occache.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_32de6b5bfd2b086c\ieUnatt.exe
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.9600.17905_none_32de6b5bfd2b086c\ieUnatt.exe
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_c693022ae5f34f7b\ieetwproxystub.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.0.9600.17905_none_c693022ae5f34f7b\ieetwproxystub.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_16c1954b05541bcc\mshtml.tlb
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.0.9600.17924_none_16c1954b05541bcc\mshtml.tlb
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_5cd65a93ec8a1683\mshta.exe
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.0.9600.17905_none_5cd65a93ec8a1683\mshta.exe
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 19 datablocks.
Finish time: 2015-08-05 21:45:12.678
Script hash: Kqb1q98E0TPArvjn7h0ZA0MtkSXP7Y1t9eb5wdLSlrI=
----------------------EOF-----------------------



#15 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,633 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:11:26 PM

Posted 05 August 2015 - 08:49 PM

Good, let's see if SFC accept these replacements.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users