Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

WIndows Update Error 80248014


  • Please log in to reply
62 replies to this topic

#1 Neil Bradley

Neil Bradley

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 02 August 2016 - 09:03 PM

Custom Built Windows 7 Pro x64 box.

 

Been working great for several years and now having issues with Windows update.

 

My Troubleshooting so far:

 

1)  Downloaded and ran Fixit for windows updates.

2)  Downloaded and ran System Readiness tool -- nothing found

3)  Ran Windows update troubleshooter from control panel - told me to run system readiness tool :(

4) SFC /Scannow    SFC got to 28% and aborted with "Windows Resource Protection could not perform the required operation".

5) Scanned pc with malwarebytes and trend micro antivirus - clean.

 

Now I am coming to the 'experts' here :)

 

 

 

 

 

 



BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 02 August 2016 - 09:14 PM

Hi Neil Bradley :)

Let's see why SFC is hanging. Even if it hangs, please upload the CBS.txt for me anyway.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1 and Windows 10, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 02 August 2016 - 10:05 PM

Thank you for the quick response!

 

cbs.txt:   https://www.dropbox.com/s/3y95ei2rk802tpp/cbs.txt?dl=0



#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 03 August 2016 - 07:12 AM

Did the scan stop at 28%?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 03 August 2016 - 08:56 AM

  1. Yes - 28%.  
  2. I re-ran a sfc this morning.  It completed, but had the following error:
  3. Windows resource protection found corrupt files but was unable to fix some of them.  Details are included in the cbs.log.

Here is a link to the new cbs.log file.  It's much larger than the other one - 129mb.

 

 

https://www.dropbox.com/s/y8i4ch69g4v5m4i/cbs1.txt?dl=0



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 03 August 2016 - 09:41 PM

Sorry for the delay Neil. I didn't have access to the files I needed at work. SFC cannot replace some payloads associated with Windows Update, hence why it's crashing. Here goes :)

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
    mMabJGT.gif
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 03 August 2016 - 10:46 PM

Here is sfcfix.txt contents:

 

SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-08-03 22:30:28.512
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\User2\Desktop\SFCFix.zip [0]
 
 
 
 
PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll
 
Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat to C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat.
Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll to C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll.
 
Successfully restored ownership for C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat
Successfully restored permissions on C:\Windows\winsxs\amd64_prnok002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd8f9cb5e2f6c390\prnok002.cat
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll
PowerCopy:: directive completed successfully.
 
 
 
 
Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2016-08-03 22:44:29.350
Script hash: 4+iWcJGnjMQdwkujpqZ2hLAxN3YvSw0GIBFNyuirLvk=
----------------------EOF-----------------------


#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 04 August 2016 - 06:50 AM

Alright, now try to run SFC again and provide me the CBS.txt log after. Let me know if it still stops at 28%.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 04 August 2016 - 10:06 AM

Not much success.

 

Ran the files as instructed.   Tried to run SFC, told me I had a repair operation pending.  I rebooted computer.

During startup, Windows attempted to install 5 updates, computer hung on 5th one.  After 6 hours, hard booted machine.

Upon reboot, windows attempted to install 128 updates, got to 5th, and failed.  Reverted updates.  

Got to Desktop, and attempted to run sfc again, said repair option pending.

Rebooted, no updates installed, got to desktop

Ran sfc and it completed, with same error as before:  Windows resource protection found corrupt files but was unable to fix some of them.  Details are included in the cbs.log.

Checked windows update history, NO history present, like we have a clean install of windows.  Only option is to check for updates..  I have NOT tried to check for updates until I hear from you.

 

CBS2.TXT link below.

 

https://www.dropbox.com/s/o83slx81rhxvzws/cbs2.txt?dl=0


Edited by Neil Bradley, 04 August 2016 - 10:07 AM.


#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 04 August 2016 - 04:22 PM

Alright, more corrupt files. We might have to repeat the process a few times to fix them all.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
    mMabJGT.gif
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 04 August 2016 - 05:08 PM

REAL fast run of sfcfix.

 

SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-08-04 17:06:41.233
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\User2\Desktop\SFCFix.zip [0]
 
 
 
 
PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
 
Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll to C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll.
 
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
PowerCopy:: directive completed successfully.
 
 
 
 
Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2016-08-04 17:06:41.988
Script hash: U0gEJacLRJZtJk7TL5gLhit/uHeY0+T9VukelpdFTiw=
----------------------EOF-----------------------


#12 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 04 August 2016 - 05:41 PM

Good :) Please run SFC again and provide me the new CBS.txt log.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#13 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 04 August 2016 - 06:21 PM

Completed sfc.  Faster run than before, but still same error.

 

https://www.dropbox.com/s/2bqm9il7aagymun/CBS.3.txt?dl=0



#14 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:48 AM

Posted 06 August 2016 - 10:12 AM

Here goes:

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
    mMabJGT.gif
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#15 Neil Bradley

Neil Bradley
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 06 August 2016 - 04:20 PM

SFC Fix aborted.  Log below

SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-08-06 16:18:41.329
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\User2\Desktop\SFCFix (1).zip [0]
 
 
 
 
PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
 
Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe to C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe.
WARNING: File C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\User2\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll to C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll.
 
Failure code returned from icacls process in RestoreFromDataBlock function for file or folder C:\Windows\winsxs\msil_narrator_31bf3856ad364e35_6.1.7601.17514_none_e18f9f5aaa2eda72\narrator.exe. Error code 0xC0000005.
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-d..ndwritingrecognizer_31bf3856ad364e35_6.1.7600.16385_none_87e91581545b7860\mshwjpnrIME.dll
PowerCopy:: directive failed to complete successfully.
 
 
 
 
Failed to process all directives successfully.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2016-08-06 16:18:47.179
Script hash: OCHP4mgZQMKCqcK7LsYSRjaZMyycT12153sjd1H+HUY=
----------------------EOF-----------------------





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users