[SOLVED] Windows 10 not updating

fettsvett201 said:
Ran SFC /SCANNOW. Stopped at 76%. CBS.log attached.
Click to expand...
It's still complaining about that same file for some reason, could you please provide your COMPONENTS hive using the following instructions:

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or SendSpace and then just provide the link in your reply.
 
Thanks, could you please open an elevated command prompt and then enter the following command:

Rich (BB code): 
fsutil hardlink list C:\Windows\WinSxS\wow64_microsoft-windows-dot3gpui_31bf3856ad364e35_10.0.19041.746_none_7dd5922827f647c9\dot3gpui.dll

Please post the output in your next post.
 
If haven't done so, could you also please complete a full scan with Windows Defender? I would also suggest that you run a full scan with the latest version of MBAM (Malwarebytes) too.
 
Please remove the following Chrome extensions:

Rich (BB code): 
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) 
CHR Extension: (Avast Online Security & Privacy)

Could you also please run the attached fix script kindly prepared by @DR M, this will remove the remains of Avast and resolve some of the other issues identified from the FRST scan.

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Last edited:
Output as requested: \Windows\WinSxS\wow64_microsoft-windows-dot3gpui_31bf3856ad364e35_10.0.19041.746_none_7dd5922827f647c9\dot3gpui.dll

Avast extensions removed.

Malware Bytes Installed (not ran yet).

Ran FRST64 with fixlist. Fixlog.txt attached.

Doing a full scan with Windows Defender. ETA to completion is around 35 hours. Once completed, I will do a full scan with malware bytes.

Thank you all again for the assistance.

EDIT: Defender went down to 29 hours so I imagine it wont take that long (though there are a LOT of files on here so I wouldn't be surprised).
 

Attachments

Last edited:
fettsvett201 said:
Output as requested: \Windows\WinSxS\wow64_microsoft-windows-dot3gpui_31bf3856ad364e35_10.0.19041.746_none_7dd5922827f647c9\dot3gpui.dll
Click to expand...
Thanks and that would explain why SFC isn't repairing the version in the WOW64 directory, the hardlink is missing between the two files. It looks like dot3gpui.dll might actually be a folder now rather than a file too? That is very strange.

Okay, let me know how it goes, hopefully it will come back as clean.

Could you please run the attached FRST64 script too to remove the rest of the Avast entries from your COMPONENTS hive?
 

Attachments

Ran latest fixlist as requested. Fixlog enclosed.

Windows defender found two exploits, but they are part of my forensic tool set. However, they were from a few years ago so I deleted them. Running malware bytes now.

Went to the filepath for the .dll file and it appears to be there. It doesn't look corrupted the same way the other .dll file was. I zipped up a copy of the folder containing the .dll file and enclosed it.
 

Attachments

Thank you, did you check these directory paths as well?

Rich (BB code): 
C:\WINDOWS\SysWOW64\wlandlg.dll
C:\WINDOWS\SysWOW64\dot3gpui.dll
 
Malware bytes was clean.

Both .dll files inside SysWOW64 are corrupted and look like folders. But they can't be opened nor copied/moved.

I enclosed a screenshot showing what they look like. I will have to use a linux OS to remove the files. I can place them in a .zip file if you want to take a look at them.
 

Attachments

  • dll files.png
    dll files.png
    74.6 KB · Views: 8
No that's okay, please remove them if you can and then check them again from Windows. Afterwards, please run SFC and see if they're added back as .dlls.
 
Erased both files using Paladin (bootable Linux Forensic OS).

Ran SFC /SCANNOW.

Code: 
C:\WINDOWS\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

The system file repair changes will take effect after the next reboot.

Enclosed CBS.log inside zip file.
 

Attachments

It looks like SFC has failed to repair wlandlg.dll but it might have repaired dot3gpui.dll. Could you please check if dot3gpui.dll is now an actual file?

SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

Afterwards, please run SFC again and then post the CBS log if it fails.
 

Attachments

Using the program "Everything", I located wlandlg.dll was corrupted at file path:

C:\Windows\WinSxS\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5

Seeing that this is one of the file paths being replaced in the latest SFCFix.zip, I extracted the correct .dll file. I then used Paladin to remove the corrupted .dll file and replaced it with the correct .dll file. I did it myself as replacing the file in Windows OS would have not been possible.

dot3gpui.dll appears correct at all locations.

Ran SFCFix with the latest zip file.

Code: 
SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-05-12 10:55:53.278
Microsoft Windows 10 Insider Slow, Build 19042 - amd64
Using .zip script file at E:\Fetts\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5\wlandlg.dll
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll
Successfully took permissions for file or folder C:\WINDOWS\WinSxS
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll

Successfully created directory tree \\?\C:\WINDOWS\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\ScreenClipping.
Successfully created directory tree \\?\C:\WINDOWS\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274.

Successfully copied file C:\Users\Fetts\AppData\Local\niemiro\Archive\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5\wlandlg.dll to C:\WINDOWS\WinSxS\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5\wlandlg.dll.
WARNING: File C:\WINDOWS\WinSxS\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll was not backed up as that would replace the current backup.
Successfully copied file C:\Users\Fetts\AppData\Local\niemiro\Archive\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll to C:\WINDOWS\WinSxS\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll.
Successfully copied file C:\Users\Fetts\AppData\Local\niemiro\Archive\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\ScreenClipping\ScreenClipping.dll to C:\WINDOWS\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\ScreenClipping\ScreenClipping.dll.
Successfully copied file C:\Users\Fetts\AppData\Local\niemiro\Archive\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\IMETIP.DLL to C:\WINDOWS\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\IMETIP.DLL.
WARNING: File C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll was not backed up as that would replace the current backup.
The file \\?\C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll is in use and must be replaced over a reboot.

Successfully pended file for replace over reboot: \\?\C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll

Successfully restored ownership for C:\WINDOWS\WinSxS\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5\wlandlg.dll
Successfully restored permissions on C:\WINDOWS\WinSxS\wow64_microsoft-windows-wlan-dialog_31bf3856ad364e35_10.0.19041.746_none_f7fc6a3480d4f2d5\wlandlg.dll
Successfully restored ownership for C:\WINDOWS\WinSxS\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll
Successfully restored permissions on C:\WINDOWS\WinSxS\wow64_microsoft-windows-m..-activesyncprovider_31bf3856ad364e35_10.0.19041.746_none_a7b9026d89f6bd59\ActiveSyncProvider.dll
Successfully restored ownership for C:\WINDOWS\WinSxS
Successfully restored permissions on C:\WINDOWS\WinSxS
PowerCopy:: directive completed successfully.




Reboot:: directive completed successfully.




PostRebootCorruptionDetection::
No hash verification failures detected.
PostRebootCorruptionDetection:: directive completed successfully.




PostRebootRestorePermissions::
Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.746_none_2ff5b6fc2ca4d7d4\TaskFlowUI.dll
PostRebootRestorePermissions:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 21 datablocks.
Finish time: 2022-05-12 10:57:30.529
----------------------EOF-----------------------

Ran sfc scannow

Code: 
Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files and successfully repaired them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

CSB attached. Both .Dll files look fine now. Did a "everything" search for all .dll files. None of the icons looked like a folder so hopefully the corruption is gone.

Also, not to jinx myself, but its been 20 minutes and a screen refresh has not happened (It would have happened at least 7 or 8 times by now). My computer was pretty unusable as it happened every few minutes. If a browser was the active window at the time of the refresh, it would freeze. Any audio that was playing would continue to play, but everything else was frozen. I would have to close the windows (seen as unresponsive) and open again to work again. Working on anything was infuriating. I didn't dare run a game as I didn't want to see the results.

If nothing else and what happened here fixed that issue alone, I am super psyched and thankful.
 

Attachments

Your CBS log looks to be fine to me, could you please run SFC one time just to be certain?

I'm glad that the freezing and strange refreshing appears to have subsided, I suspect that it may have been the Avast drivers which were still loading in the background.
 
As you also been able to update successfully, then you shouldn't have any further update problems. I've marked this thread as solved for now.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top