Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Turn it off, but leave Kaspersky running: https://support.microsoft.com/en-us/help/4027187/windows-turn-off-windows-defender-antivirus
[SOLVED] Have been unable to update Windows since December 20th, 2017
- Thread starter jeanmarie
- Start date
- Status
Well, I ran it anyway and ran it with all kinds of stuff turned off in Kaspersky.
**************************************************************
Fix result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by Jean T (17-03-2018 14:18:03) Run:1
Running from C:\Users\Jean T\Desktop\FRST64and fixlist.txt
Loaded Profiles: Jean T (Available Profiles: Jean T & btott)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
cmd: fsutil resource setautoreset true %SystemDrive%\
cmd: attrib -r -s -h %SystemRoot%\System32\Config\TxR\*
cmd: del %SystemRoot%\System32\Config\TxR\*
cmd: attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.tm*
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.blf
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending]
c:\windows\winsxs\reboot.xml
*****************
Restore point was successfully created.
========= fsutil resource setautoreset true %SystemDrive%\ =========
The operation completed successfully.
========= End of CMD: =========
========= attrib -r -s -h %SystemRoot%\System32\Config\TxR\* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\Config\TxR\* =========
C:\WINDOWS\System32\Config\TxR\*, Are you sure (Y/N)? Y
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.0.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.1.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.2.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.3.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.blf
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TM.blf
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000001.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms
The process cannot access the file because it is being used by another process.
========= End of CMD: =========
========= attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.tm* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.blf =========
Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.blf
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms =========
Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.regtrans-ms
========= End of CMD: =========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired => not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied.
"c:\windows\winsxs\reboot.xml" => not found
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-03-2018 14:21:40)
Result of scheduled keys to remove after reboot:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied.
==== End of Fixlog 14:21:40 ====
**************************************************************
Fix result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by Jean T (17-03-2018 14:18:03) Run:1
Running from C:\Users\Jean T\Desktop\FRST64and fixlist.txt
Loaded Profiles: Jean T (Available Profiles: Jean T & btott)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
cmd: fsutil resource setautoreset true %SystemDrive%\
cmd: attrib -r -s -h %SystemRoot%\System32\Config\TxR\*
cmd: del %SystemRoot%\System32\Config\TxR\*
cmd: attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.tm*
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.blf
cmd: del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending]
c:\windows\winsxs\reboot.xml
*****************
Restore point was successfully created.
========= fsutil resource setautoreset true %SystemDrive%\ =========
The operation completed successfully.
========= End of CMD: =========
========= attrib -r -s -h %SystemRoot%\System32\Config\TxR\* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\Config\TxR\* =========
C:\WINDOWS\System32\Config\TxR\*, Are you sure (Y/N)? Y
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.0.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.1.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.2.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.3.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d0-a514-11e7-a94e-ec0d9a05c860}.TxR.blf
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TM.blf
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000001.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\WINDOWS\System32\Config\TxR\{47a6a0d1-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms
The process cannot access the file because it is being used by another process.
========= End of CMD: =========
========= attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.tm* =========
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.blf =========
Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.blf
========= End of CMD: =========
========= del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms =========
Could Not Find C:\WINDOWS\System32\SMI\Store\Machine\*.regtrans-ms
========= End of CMD: =========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired => not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied.
"c:\windows\winsxs\reboot.xml" => not found
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-03-2018 14:21:40)
Result of scheduled keys to remove after reboot:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending => could not remove. Access Denied.
==== End of Fixlog 14:21:40 ====
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Any change in regards to WU?
No. It restarted once during the FRST64 running, and then I restarted it after I put the Kaspersky settings back on it. I still am told the following:
I am so sorry, but I have to leave the computer for a few hours. I appreciate your help.
Tomorrow we will be traveling and I will not have access to internet until later in the evening. I will sign in to see if you have any other thoughts. Thank you.
Jean
I am so sorry, but I have to leave the computer for a few hours. I appreciate your help.
Tomorrow we will be traveling and I will not have access to internet until later in the evening. I will sign in to see if you have any other thoughts. Thank you.
Jean
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
No problem. Post whenever you can. Have a safe trip. When able do the following so I can gather more info.
FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
Good evening. I have posted the log from what you asked me to do in our communication on 3/17 @ 3:05 pm.View attachment Fixlog.txt
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Hello again!
Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload toa file sharing service and just provide the link here.
Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload toa file sharing service and just provide the link here.
I am unable to find the Components file.
View attachment Configuration32BitFileResults.docx
View attachment Configuration32BitFileResults.docx
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Go into this folder: C:\Windows\System32\Config and take a screenshot of its contents.
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Why did you do that? I have requested that you only browse to that folder: C:\Windows\System32\Config and provide a screenshot, nothing else. Do not modify permissions or do anything but the things I tell you to do in order to prevent damage.
I'm sorry. I did not do anything. When I browsed to the folder, this is what I got.View attachment Configuration32BitFileResults_3.docx
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
OK, that is normal, hit Continue.
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
OK, this is strange. Are you logged on as Admin? If not, please log on as admin and try to access the folder again.
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
What's this now? Why do you have CMD open?
Sysnative Windows Update
Inactive
- Oct 9, 2014
- 741
Nope, you have to check if your account have administrator privileges.
1. Click Start.
2. Click your user picture (not your user name). Your status will be displayed.
1. Click Start.
2. Click your user picture (not your user name). Your status will be displayed.
I found my picture. I clicked on it. It says I am the administrator.
COMPONENTS.zip - Google Drive
COMPONENTS.zip - Google Drive
- Status
Has Sysnative Forums helped you? Please consider donating to help us support the site!