Thread: Windows Resource Protection found corrupt files but was unable to fix some of

Hello chester_mand, welcome to Sysnative!

Let's get some logs:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
  5. Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u.../Scripts/~Generic/Collect/CBS/SFCFix.txt?dl=1

Tom
 
Hello chester_mand, welcome to Sysnative!

Let's get some logs:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
  5. Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u.../Scripts/~Generic/Collect/CBS/SFCFix.txt?dl=1

Tom

Hi Tom,

Thank you very much for your reply and help. Here is the log.
Code:
SFCFix version 2.1.2.0 by niemiro.
Start time: 2014-03-09 14:56:16.267
Using .txt script file at C:\Users\user\Desktop\SFCFix.txt
 
 
 
 
Collect:: directive completed successfully.
 
 
 
 
Successfully processed all directives.
SFCFix version 2.1.2.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2014-03-09 14:57:28.277
----------------------EOF-----------------------
 
Last edited by a moderator:
Hi Chester,

Thanks, that's perfect. The logs have come through with no problems and I can see the issue now. I've got to go to the gym now so I'll post this here, ready for me to fix when I get back later:

Code:
=================================
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 23.0
2014-03-02 17:32

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages
(f)	CBS MUM Missing	0x00000002	servicing\Packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum		

Checking Component Store
(f)	CSI Payload File Missing	0x00000000	iassvcs.dll	x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2	
(f)	CSI Store Directory Missing	0x00000002	winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\	x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2	
(fix)	CSI Store Directory Missing	CSI Store Directory Created	C:\Windows\winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\

Summary:
Seconds executed: 2238
 Found 3 errors
 Fixed 1 errors
  CSI Payload File Missing Total count: 1
  CBS MUM Missing Total count: 1
  CSI Store Directory Missing Total count: 1
  Fixed: CSI Store Directory Missing.  Total count: 1

Unavailable repair files:
	servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum
	servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.cat


Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18592.
Processor architecture: x86.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18592&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.

Code:
2014-03-02 23:21:01, Info                  CSI    000001f4 [SR] Repairing 2 components
2014-03-02 23:21:01, Info                  CSI    000001f5 [SR] Beginning Verify and Repair transaction
2014-03-02 23:21:01, Info                  CSI    000001f6 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=} Expected: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=}
2014-03-02 23:21:01, Info                  CSI    000001f7 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001f8 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=} Expected: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=}
2014-03-02 23:21:01, Info                  CSI    000001f9 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fa WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fb WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fc Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=} Expected: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=}
2014-03-02 23:21:01, Info                  CSI    000001fd [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fe Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=} Expected: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=}
2014-03-02 23:21:01, Info                  CSI    000001ff [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    00000200 WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    00000201 WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral

Tom
 
Hi Chester,

Thanks, that's perfect. The logs have come through with no problems and I can see the issue now. I've got to go to the gym now so I'll post this here, ready for me to fix when I get back later:

Code:
=================================
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 23.0
2014-03-02 17:32

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages
(f)    CBS MUM Missing    0x00000002    servicing\Packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum        

Checking Component Store
(f)    CSI Payload File Missing    0x00000000    iassvcs.dll    x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2    
(f)    CSI Store Directory Missing    0x00000002    winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\    x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2    
(fix)    CSI Store Directory Missing    CSI Store Directory Created    C:\Windows\winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\

Summary:
Seconds executed: 2238
 Found 3 errors
 Fixed 1 errors
  CSI Payload File Missing Total count: 1
  CBS MUM Missing Total count: 1
  CSI Store Directory Missing Total count: 1
  Fixed: CSI Store Directory Missing.  Total count: 1

Unavailable repair files:
    servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum
    servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.cat


Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18592.
Processor architecture: x86.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18592&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.

Code:
2014-03-02 23:21:01, Info                  CSI    000001f4 [SR] Repairing 2 components
2014-03-02 23:21:01, Info                  CSI    000001f5 [SR] Beginning Verify and Repair transaction
2014-03-02 23:21:01, Info                  CSI    000001f6 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=} Expected: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=}
2014-03-02 23:21:01, Info                  CSI    000001f7 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001f8 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=} Expected: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=}
2014-03-02 23:21:01, Info                  CSI    000001f9 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fa WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fb WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fc Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=} Expected: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=}
2014-03-02 23:21:01, Info                  CSI    000001fd [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fe Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=} Expected: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=}
2014-03-02 23:21:01, Info                  CSI    000001ff [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    00000200 WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    00000201 WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral

Tom

Thank you very much Tom. Wow that's really great to hear although I have no idea what the hell those codes are saying lol!~
 
Note to Tom (please bear with us chester_mand, thank you for your patience):

I'm pretty sure I got the SURT already in this post, although do double check me: https://www.sysnative.com/forums/wi...-but-was-unable-to-fix-some-of.html#post67816

The SFC still needs actioning, either leaving or uninstalling the update, but the biggest problem is the continued failure with error code 0xC8000643. I consider this to be equal to code 643, which is ERROR_INSTALL_FAIL, and the entire WindowsUpdate.log block is as follows:

Code:
2014-03-03 16:28:17:993 1164 1290 AU Triggering AU detection through DetectNow API
2014-03-03 16:28:17:993 1164 1290 AU Triggering Online detection (interactive)
2014-03-03 16:28:17:994 1164 10e4 AU #############
2014-03-03 16:28:17:994 1164 10e4 AU ## START ##  AU: Search for updates
2014-03-03 16:28:17:994 1164 10e4 AU #########
2014-03-03 16:28:17:997 1164 10e4 AU <<## SUBMITTED ## AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:17:998 1164 16ac Agent *************
2014-03-03 16:28:17:998 1164 16ac Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-03-03 16:28:17:998 1164 16ac Agent *********
2014-03-03 16:28:17:998 1164 16ac Agent   * Online = Yes; Ignore download priority = No
2014-03-03 16:28:17:998 1164 16ac Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-03-03 16:28:17:998 1164 16ac Agent   * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2014-03-03 16:28:17:998 1164 16ac Agent   * Search Scope = {Machine}
2014-03-03 16:28:18:001 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:011 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:119 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:128 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:136 1164 16ac Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at [URL]http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab[/URL]
2014-03-03 16:28:18:136 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-03-03 16:28:18:145 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:247 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-03-03 16:28:18:255 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:256 1164 16ac Setup Checking for agent SelfUpdate
2014-03-03 16:28:18:256 1164 16ac Setup Client version: Core: 7.6.7600.256  Aux: 7.6.7600.256
2014-03-03 16:28:18:259 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:268 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:306 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:315 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:319 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-03-03 16:28:18:328 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:655 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-03-03 16:28:18:664 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:667 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-03-03 16:28:18:676 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:714 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-03-03 16:28:18:723 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:742 1164 16ac Setup Determining whether a new setup handler needs to be downloaded
2014-03-03 16:28:18:742 1164 16ac Setup SelfUpdate handler is not found.  It will be downloaded
2014-03-03 16:28:18:742 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:827 1164 16ac Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:827 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:846 1164 16ac Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:847 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:875 1164 16ac Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:876 1164 16ac Setup SelfUpdate check completed.  SelfUpdate is NOT required.
2014-03-03 16:28:29:951 1164 16ac Agent   * WARNING: Exit code = 0xC8000643
2014-03-03 16:28:29:951 1164 16ac Agent *********
2014-03-03 16:28:29:951 1164 16ac Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-03-03 16:28:29:951 1164 16ac Agent *************
2014-03-03 16:28:29:951 1164 16ac Agent WARNING: WU client failed Searching for update with error 0xc8000643
2014-03-03 16:28:29:951 1164 a90 AU >>##  RESUMED  ## AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:29:951 1164 a90 AU   # WARNING: Search callback failed, result = 0xC8000643
2014-03-03 16:28:29:951 1164 a90 AU   # WARNING: Failed to find updates with error code C8000643
2014-03-03 16:28:29:951 1164 a90 AU #########
2014-03-03 16:28:29:951 1164 a90 AU ##  END  ##  AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:29:951 1164 a90 AU #############
2014-03-03 16:28:29:951 1164 a90 AU Need to show Unable to Detect notification
2014-03-03 16:28:29:952 1164 a90 AU AU setting next detection timeout to 2014-03-03 21:28:29
2014-03-03 16:28:29:952 1164 a90 AU Setting AU scheduled install time to 2014-03-04 03:00:00
2014-03-03 16:28:34:951 1164 16ac Report REPORT EVENT: {0CD6D0E0-1065-4DC6-BD5A-B50818435EAB} 2014-03-03 16:28:29:950-0000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 c8000643 AutomaticUpdates Failure Software Synchronization Windows Update Client failed to detect with error 0xc8000643.
2014-03-03 16:28:34:957 1164 16ac Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-03-03 16:28:34:957 1164 16ac Report WER Report sent: 7.6.7600.256 0xc8000643 00000000-0000-0000-0000-000000000000 Scan 101 Unmanaged
2014-03-03 16:28:34:957 1164 16ac Report CWERReporter finishing event handling. (00000000)

Any ideas?
 
Note to Tom (please bear with us chester_mand, thank you for your patience):

I'm pretty sure I got the SURT already in this post, although do double check me: https://www.sysnative.com/forums/wi...-but-was-unable-to-fix-some-of.html#post67816

The SFC still needs actioning, either leaving or uninstalling the update, but the biggest problem is the continued failure with error code 0xC8000643. I consider this to be equal to code 643, which is ERROR_INSTALL_FAIL, and the entire WindowsUpdate.log block is as follows:

Code:
2014-03-03 16:28:17:993 1164 1290 AU Triggering AU detection through DetectNow API
2014-03-03 16:28:17:993 1164 1290 AU Triggering Online detection (interactive)
2014-03-03 16:28:17:994 1164 10e4 AU #############
2014-03-03 16:28:17:994 1164 10e4 AU ## START ##  AU: Search for updates
2014-03-03 16:28:17:994 1164 10e4 AU #########
2014-03-03 16:28:17:997 1164 10e4 AU <<## SUBMITTED ## AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:17:998 1164 16ac Agent *************
2014-03-03 16:28:17:998 1164 16ac Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-03-03 16:28:17:998 1164 16ac Agent *********
2014-03-03 16:28:17:998 1164 16ac Agent   * Online = Yes; Ignore download priority = No
2014-03-03 16:28:17:998 1164 16ac Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-03-03 16:28:17:998 1164 16ac Agent   * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2014-03-03 16:28:17:998 1164 16ac Agent   * Search Scope = {Machine}
2014-03-03 16:28:18:001 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:011 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:119 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:128 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:136 1164 16ac Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at [URL]http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab[/URL]
2014-03-03 16:28:18:136 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-03-03 16:28:18:145 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:247 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2014-03-03 16:28:18:255 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:256 1164 16ac Setup Checking for agent SelfUpdate
2014-03-03 16:28:18:256 1164 16ac Setup Client version: Core: 7.6.7600.256  Aux: 7.6.7600.256
2014-03-03 16:28:18:259 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:268 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:306 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2014-03-03 16:28:18:315 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:319 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-03-03 16:28:18:328 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:655 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2014-03-03 16:28:18:664 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:667 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-03-03 16:28:18:676 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:714 1164 16ac Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2014-03-03 16:28:18:723 1164 16ac Misc  Microsoft signed: Yes
2014-03-03 16:28:18:742 1164 16ac Setup Determining whether a new setup handler needs to be downloaded
2014-03-03 16:28:18:742 1164 16ac Setup SelfUpdate handler is not found.  It will be downloaded
2014-03-03 16:28:18:742 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:827 1164 16ac Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:827 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:846 1164 16ac Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:847 1164 16ac Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256"
2014-03-03 16:28:18:875 1164 16ac Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256" is already installed.
2014-03-03 16:28:18:876 1164 16ac Setup SelfUpdate check completed.  SelfUpdate is NOT required.
2014-03-03 16:28:29:951 1164 16ac Agent   * WARNING: Exit code = 0xC8000643
2014-03-03 16:28:29:951 1164 16ac Agent *********
2014-03-03 16:28:29:951 1164 16ac Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
2014-03-03 16:28:29:951 1164 16ac Agent *************
2014-03-03 16:28:29:951 1164 16ac Agent WARNING: WU client failed Searching for update with error 0xc8000643
2014-03-03 16:28:29:951 1164 a90 AU >>##  RESUMED  ## AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:29:951 1164 a90 AU   # WARNING: Search callback failed, result = 0xC8000643
2014-03-03 16:28:29:951 1164 a90 AU   # WARNING: Failed to find updates with error code C8000643
2014-03-03 16:28:29:951 1164 a90 AU #########
2014-03-03 16:28:29:951 1164 a90 AU ##  END  ##  AU: Search for updates [CallId = {40215DBC-A0E2-4534-85B6-8F046A019336}]
2014-03-03 16:28:29:951 1164 a90 AU #############
2014-03-03 16:28:29:951 1164 a90 AU Need to show Unable to Detect notification
2014-03-03 16:28:29:952 1164 a90 AU AU setting next detection timeout to 2014-03-03 21:28:29
2014-03-03 16:28:29:952 1164 a90 AU Setting AU scheduled install time to 2014-03-04 03:00:00
2014-03-03 16:28:34:951 1164 16ac Report REPORT EVENT: {0CD6D0E0-1065-4DC6-BD5A-B50818435EAB} 2014-03-03 16:28:29:950-0000 1 148 101 {00000000-0000-0000-0000-000000000000} 0 c8000643 AutomaticUpdates Failure Software Synchronization Windows Update Client failed to detect with error 0xc8000643.
2014-03-03 16:28:34:957 1164 16ac Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-03-03 16:28:34:957 1164 16ac Report WER Report sent: 7.6.7600.256 0xc8000643 00000000-0000-0000-0000-000000000000 Scan 101 Unmanaged
2014-03-03 16:28:34:957 1164 16ac Report CWERReporter finishing event handling. (00000000)

Any ideas?

Any update or good news for me Richard and Tom???
 
Hi Chester,

Thanks, that's perfect. The logs have come through with no problems and I can see the issue now. I've got to go to the gym now so I'll post this here, ready for me to fix when I get back later:

Code:
=================================
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 23.0
2014-03-02 17:32

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages
(f)    CBS MUM Missing    0x00000002    servicing\Packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum        

Checking Component Store
(f)    CSI Payload File Missing    0x00000000    iassvcs.dll    x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2    
(f)    CSI Store Directory Missing    0x00000002    winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\    x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2    
(fix)    CSI Store Directory Missing    CSI Store Directory Created    C:\Windows\winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.18005_none_e4680adfbcddcca2\

Summary:
Seconds executed: 2238
 Found 3 errors
 Fixed 1 errors
  CSI Payload File Missing Total count: 1
  CBS MUM Missing Total count: 1
  CSI Store Directory Missing Total count: 1
  Fixed: CSI Store Directory Missing.  Total count: 1

Unavailable repair files:
    servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.mum
    servicing\packages\Package_for_KB978207_client~31bf3856ad364e35~x86~~6.0.1.0.cat


Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18592.
Processor architecture: x86.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18592&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.

Code:
2014-03-02 23:21:01, Info                  CSI    000001f4 [SR] Repairing 2 components
2014-03-02 23:21:01, Info                  CSI    000001f5 [SR] Beginning Verify and Repair transaction
2014-03-02 23:21:01, Info                  CSI    000001f6 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=} Expected: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=}
2014-03-02 23:21:01, Info                  CSI    000001f7 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001f8 Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=} Expected: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=}
2014-03-02 23:21:01, Info                  CSI    000001f9 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fa WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fb WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    000001fc Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000Uninstall.mof do not match actual file [l:42{21}]"Wdf01000Uninstall.mof" :
  Found: {l:32 b:Yt1Cj1cn2TiRYuRVf4giD3Kg40g43GBdTTr4ip5TNCI=} Expected: {l:32 b:Khw6Snu1wJ++GNIoY6yxl9I9YcMFd1DIgoHfKZafkno=}
2014-03-02 23:21:01, Info                  CSI    000001fd [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-03-02 23:21:01, Info                  CSI    000001fe Hashes for file member \??\C:\Windows\system32\wbem\Wdf01000.mof do not match actual file [l:24{12}]"Wdf01000.mof" :
  Found: {l:32 b:rjBJp3JUDkwqQn/7E5mVEcjWSk0b/GPJ4b/7QWTo3N8=} Expected: {l:32 b:ew+xsUJbni5eIvJoq16I+phaGGLWets5I4YF9P6gDL0=}
2014-03-02 23:21:01, Info                  CSI    000001ff [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-03-02 23:21:01, Info                  CSI    00000200 WARNING: File [l:42{21}]"Wdf01000Uninstall.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-03-02 23:21:01, Info                  CSI    00000201 WARNING: File [l:24{12}]"Wdf01000.mof" in [l:56{28}]"\??\C:\Windows\system32\wbem" switching ownership
    Old: Microsoft-Windows-WDF-Kernel Library-MOF, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
    New: Microsoft-Windows-WDF-Kernel Library, Version = 6.0.6002.18574, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral

Tom


Richard, Tom????? Any news....??? I really do need help.....
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top