[SOLVED] Windows 10 Pro 20H2 (19042.630) update error

Bobbby · Jan 1, 2025

A long time ago, I used Comodo on this PC.
I dont use any anti-virus now, only defender from Windows itself.
I still use comodo on a laptop, which updated to 22H2 easily.
I use TotalUninstaller to track each installation. This is, because I cannot afford to reset the intire system on this maschine and loosing settings of many programs.
I use Acronis to backup system. With Acronis there is also some randsome-shield, which I use as a protection.

Attached the 2 logfiles

Maxstar · Jan 1, 2025

Rich (BB code):

COMODO Internet Security Premium (HKLM\...\{37AD632E-994D-4944-B57D-A80852BCB96D}) (Version: 12.0.0.6818 - COMODO Security Solutions Inc.)

AV: COMODO Antivirus (Enabled - Out of date) {9E3E06E3-F8E0-3C44-2336-BBD8AF8F84B8}
AS: COMODO Advanced Protection (Enabled - Up to date) {255FE707-DEDA-33CA-1986-80AAD408CE05}
FW: COMODO Firewall (Enabled) {A60587C6-B28F-3D1C-0869-12ED515CC3

1. It seems Comodo Internet Security is still installed but out-of-date.
2. Please use the Comodo Uninstaller Tool to remove it. (direct link)
3. Reboot the system and run FRST again to provide the fresh logs.

Start the

Farbar Recovery Scan Tool again.

Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
Right-click to run the tool as administrator.
Note: Ensure that the Addition.txt check box is checked at the bottom of the form within the Optional Scan area.
Press the Scan button.
Please wait for the tool to finish. It will produce two logfiles called FRST.txt and Addition.txt in the same directory the tool is run from (which should be the desktop)
Post the logfiles FRST.txt and Addition.txt as attachment in your next reply.

Bobbby · Jan 1, 2025

Hopefully comodo was removed completly now.
Scanned after restart, attached results.

Maxstar · Jan 1, 2025

Rich (BB code):

IFEO\SppExtComObj.exe: [Debugger] C:\WINDOWS\SECOH-QAD.exe
Task: {E23E58E6-99C1-49CA-953F-4FE67398FDB1} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe  (Keine Datei)

In the logs I've also seen a KMS toolkit to activate Windows or have you used it for Microsoft Office Home and Business 2019?

Do you agree that we remove those entry's from the system?

Bobbby · Jan 1, 2025

Actually, I don`t really remember.
MS Office 2019 was activated finally with the help of some Microsoft support via phone.
How can I check if I still use this KMS?
I am using MS Office 2019.

Maxstar · Jan 1, 2025

Bobbby said:
How can I check if I still use this KMS?

You cannot, but I will provide a fix tomorrow to remove a lot of remnants of COMODO.

Bobbby · Jan 1, 2025

I did some investigation together with chatGPT.
It looks like that I am not using KMS, not for Office 2019, and probably also not for Windows.
I used the following cmd in the office 16 folder were Excel 19 is located:

Code:

C:\Program Files\Microsoft Office\root\Office16>cscript ospp.vbs /dstatus
Microsoft (R) Windows Script Host, Version 5.812
Copyright (C) Microsoft Corporation. Alle Rechte vorbehalten.

---Processing--------------------------
---------------------------------------
PRODUCT ID: 00000-00000-00000-AA000 (changed to anonymize)
SKU ID: 2123fff-a23d-276c-bf33-e123456db82e (changed to anonymize)
LICENSE NAME: Office 19, Office19HomeBusiness2019R_Grace edition
LICENSE DESCRIPTION: Office 19, RETAIL(Grace) channel
BETA EXPIRATION: 01.01.1601
LICENSE STATUS:  ---NOTIFICATIONS---
ERROR CODE: 0xC004F009
ERROR DESCRIPTION: The Software Licensing Service reported that the grace period expired.
Last 5 characters of installed product key: J46MR
---------------------------------------
PRODUCT ID: 12345-12345-12345-AA123 (changed to anonymize)
SKU ID: 1fe11eef-1eed-1111-1a11-d1111df11cac (changed to anonymize)
LICENSE NAME: Office 19, Office19HomeBusiness2019R_Retail edition
LICENSE DESCRIPTION: Office 19, RETAIL channel
BETA EXPIRATION: 01.01.1601
LICENSE STATUS:  ---LICENSED---
Last 5 characters of installed product key: 123FG
---------------------------------------
---------------------------------------
---Exiting-----------------------------

C:\Program Files\Microsoft Office\root\Office16>

Regarding Windows I found that it is "OEM: DM"

I think, all traces of KMS for (Office and Windows) could be removed.
I any case, I am saving a backup from the current system using Acronis True Image.

Maxstar · Thursday at 3:55 AM

Hi,

This looks good, so here's the fix to remove the KMS entry's and the remnants of COMODO.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST.exe and select "Run as administrator".
Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

Bobbby · Thursday at 5:10 AM

done

I wonder what exactly is meant by exceptions (Ausnahmen),
that all ticked checkerboxes are exceptions, or that un-ticked checkerboxes are eceptions while deleting stuff?

Windows Update brings 0xc1900204

Maxstar · Thursday at 5:17 AM

These options only relate to a scan just to filter some sections, but they have nothing to do with a fix! Fore more information see the public tutorial at Bleeping Computer.

Please provide the latest CBS logs.

Bobbby · Thursday at 6:02 AM

Here the fresh CBS

Maxstar · Thursday at 6:07 AM

Rich (BB code):

2025-01-02 11:03:30, Info                  CSI    00000035 Warning: Unable to repair manifest for component ([l:100 ml:140]'amd64_microsoft-windows-appx-deployment-server_31bf3856ad364e35_10.0.19041.610_none_3f63051c1564584a') from backups directory with disposition (2). A backup file may not exist or may be corrupt. Falling back to WU.
2025-01-02 11:03:39, Error                 CSI    00000036@2025/1/2:10:03:39.894 (F) Attempting to mark store corrupt with category [l:15 ml:16]'CorruptManifest'[gle=0x80004005]

Here's the next fix.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

Save any work you have open, and close all programs.
Download the attachment SFCFix.zip and save it to your desktop.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Post the logfile (SFCFix.txt) as attachment in your next reply.

Afterwards attempt to update and post the result. If it fails attach a new copy of the CBS logs.

Bobbby · Thursday at 7:11 AM

Update Error changed: 0xc1900204

Maxstar · Thursday at 7:18 AM

Follow these instructions to remove an update.

Open the Start menu of Windows and type the command CMD
When you see Command Prompt on the list, right-click on it and select Run as administrator.
When command prompt opens, copy and paste the following command into it, then press enter.

Code:

wusa /uninstall /KB:4579311

Let me know if it says it was successful or you get the message: The update KB4579311 is not installed on this computer.

Bobbby · Thursday at 7:28 AM

done, I got the message that the update is not installed.

Maxstar · Thursday at 7:30 AM

Export CBS (Component Based Servicing) hive

Click on the Start button and type regedit
When you see regedit on the list, right-click on it and select Run as administrator.
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
Code:
```
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
```
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*).
Name this file ComponentBasedServicing (with no file extension) and save it to your Desktop.
Right-click on the saved file and choose Send > Compressed (zipped) Folder.
Attach the .ZIP file to your next post.
If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.

Bobbby · Thursday at 7:38 AM

Here the ComponentBasedServicing

Maxstar · Thursday at 7:41 AM

KB4579311 is partially removed from the system, so please do the following.

Use the

Farbar Recovery Scan Tool again.

Open the startmenu and type the command cmd.
After you find the Command Prompt, right click on it and select Run as Administrator.
Copy and paste the following into the Command Prompt and press enter.

Code:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

Copy and paste the following (code) into the Search box and click the Search Registry button.

Code:

KB4579311

When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
Post the logfile SearchReg.txt as attachment in your next reply.

Bobbby · Thursday at 8:00 AM

SearchReg.txt atached as zip

Maxstar · Thursday at 8:03 AM

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST.exe and select "Run as administrator".
Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

[SOLVED] Windows 10 Pro 20H2 (19042.630) update error

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Active member

Moderator, Windows Update Expert, Security Analyst

Active member

Moderator, Windows Update Expert, Security Analyst

Attachments

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Attachments

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Active member

Moderator, Windows Update Expert, Security Analyst

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Active member

Attachments

Moderator, Windows Update Expert, Security Analyst

Attachments