Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: New Infinity Stealer malware grabs macOS data via ClickFix lures

Featured Deal: Learn 71 languages in one science-backed app while it’s on sale

Latest Buyer's Guide: Best VPNs in 2025

WIndows Update Error 80248014

Started by Neil Bradley , Aug 02 2016 09:03 PM

Next
»

Please log in to reply

62 replies to this topic

#1 Neil Bradley

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 02 August 2016 - 09:03 PM

Custom Built Windows 7 Pro x64 box.

Been working great for several years and now having issues with Windows update.

My Troubleshooting so far:

1) Downloaded and ran Fixit for windows updates.

2) Downloaded and ran System Readiness tool -- nothing found

3) Ran Windows update troubleshooter from control panel - told me to run system readiness tool

4) SFC /Scannow SFC got to 28% and aborted with "Windows Resource Protection could not perform the required operation".

5) Scanned pc with malwarebytes and trend micro antivirus - clean.

Now I am coming to the 'experts' here

Back to top

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 02 August 2016 - 09:14 PM

Hi Neil Bradley

Let's see why SFC is hanging. Even if it hangs, please upload the CBS.txt for me anyway.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1 and Windows 10, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.

Back to top

#3 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 02 August 2016 - 10:05 PM

Thank you for the quick response!

cbs.txt: https://www.dropbox.com/s/3y95ei2rk802tpp/cbs.txt?dl=0

Back to top

#4 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 03 August 2016 - 07:12 AM

Did the scan stop at 28%?

Back to top

#5 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 03 August 2016 - 08:56 AM

Yes - 28%.
I re-ran a sfc this morning. It completed, but had the following error:
Windows resource protection found corrupt files but was unable to fix some of them. Details are included in the cbs.log.

Here is a link to the new cbs.log file. It's much larger than the other one - 129mb.

https://www.dropbox.com/s/y8i4ch69g4v5m4i/cbs1.txt?dl=0

Back to top

#6 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 03 August 2016 - 09:41 PM

Sorry for the delay Neil. I didn't have access to the files I needed at work. SFC cannot replace some payloads associated with Windows Update, hence why it's crashing. Here goes

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

Back to top

#7 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 03 August 2016 - 10:46 PM

Here is sfcfix.txt contents:

SFCFix version 3.0.0.0 by niemiro.

Start time: 2016-08-03 22:30:28.512

Microsoft Windows 7 Service Pack 1 - amd64

Using .zip script file at C:\Users\User2\Desktop\SFCFix.zip [0]

PowerCopy::

Successfully took permissions for file or folder C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat

Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll

Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat to C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat.

Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll to C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll.

Successfully restored ownership for C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat

Successfully restored permissions on C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll

Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll

PowerCopy:: directive completed successfully.

Successfully processed all directives.

SFCFix version 3.0.0.0 by niemiro has completed.

Currently storing 2 datablocks.

Finish time: 2016-08-03 22:44:29.350

Script hash: 4+iWcJGnjMQdwkujpqZ2hLAxN3YvSw0GIBFNyuirLvk=

----------------------EOF-----------------------

Back to top

#8 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 04 August 2016 - 06:50 AM

Alright, now try to run SFC again and provide me the CBS.txt log after. Let me know if it still stops at 28%.

Back to top

#9 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 04 August 2016 - 10:06 AM

Not much success.

Ran the files as instructed. Tried to run SFC, told me I had a repair operation pending. I rebooted computer.

During startup, Windows attempted to install 5 updates, computer hung on 5th one. After 6 hours, hard booted machine.

Upon reboot, windows attempted to install 128 updates, got to 5th, and failed. Reverted updates.

Got to Desktop, and attempted to run sfc again, said repair option pending.

Rebooted, no updates installed, got to desktop

Ran sfc and it completed, with same error as before: Windows resource protection found corrupt files but was unable to fix some of them. Details are included in the cbs.log.

Checked windows update history, NO history present, like we have a clean install of windows. Only option is to check for updates.. I have NOT tried to check for updates until I hear from you.

CBS2.TXT link below.

https://www.dropbox.com/s/o83slx81rhxvzws/cbs2.txt?dl=0

Edited by Neil Bradley, 04 August 2016 - 10:07 AM.

Back to top

#10 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 04 August 2016 - 04:22 PM

Alright, more corrupt files. We might have to repeat the process a few times to fix them all.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

Back to top

#11 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 04 August 2016 - 05:08 PM

REAL fast run of sfcfix.

SFCFix version 3.0.0.0 by niemiro.

Start time: 2016-08-04 17:06:41.233

Microsoft Windows 7 Service Pack 1 - amd64

Using .zip script file at C:\Users\User2\Desktop\SFCFix.zip [0]

PowerCopy::

Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll to C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll.

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

PowerCopy:: directive completed successfully.

Successfully processed all directives.

SFCFix version 3.0.0.0 by niemiro has completed.

Currently storing 3 datablocks.

Finish time: 2016-08-04 17:06:41.988

Script hash: U0gEJacLRJZtJk7TL5gLhit/uHeY0+T9VukelpdFTiw=

----------------------EOF-----------------------

Back to top

#12 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 04 August 2016 - 05:41 PM

Good

Please run SFC again and provide me the new CBS.txt log.

Back to top

#13 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 04 August 2016 - 06:21 PM

Completed sfc. Faster run than before, but still same error.

https://www.dropbox.com/s/2bqm9il7aagymun/CBS.3.txt?dl=0

Back to top

#14 Aura

Bleepin' Special Ops

Malware Response Team
19,709 posts
OFFLINE

Gender:Male
Local time:04:50 PM

Posted 06 August 2016 - 10:12 AM

Here goes:

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

Back to top

#15 Neil Bradley

Topic Starter

Members
57 posts
OFFLINE

Local time:02:50 PM

Posted 06 August 2016 - 04:20 PM

SFC Fix aborted. Log below

SFCFix version 3.0.0.0 by niemiro.

Start time: 2016-08-06 16:18:41.329

Microsoft Windows 7 Service Pack 1 - amd64

Using .zip script file at C:\Users\User2\Desktop\SFCFix (1).zip [0]

PowerCopy::

Successfully took permissions for file or folder C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe

Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe to C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe.

WARNING: File C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll was not backed up as that would replace the current backup.

Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll to C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll.

Failure code returned from icacls process in RestoreFromDataBlock function for file or folder C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe. Error code 0xC0000005.

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll

PowerCopy:: directive failed to complete successfully.

Failed to process all directives successfully.

SFCFix version 3.0.0.0 by niemiro has completed.

Currently storing 4 datablocks.

Finish time: 2016-08-06 16:18:47.179

Script hash: OCHP4mgZQMKCqcK7LsYSRjaZMyycT12153sjd1H+HUY=

----------------------EOF-----------------------