J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 23, 2022 #41 Done. Attachments Fixlog.txt 1.8 KB · Views: 5
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 24, 2022 #42 Hi. Please do the following now: Capture Process Monitor Trace 1. Download and run Process Monitor. Leave this running while you perform the next steps. 2. Try updating the system just like you have in the past. 3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square icon on the toolbar as shown below. 4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine. 5. Zip up and provide the link to the LogFile.PML file. Examples of services to upload to are Dropbox or OneDrive or WeTransfer.
Hi. Please do the following now: Capture Process Monitor Trace 1. Download and run Process Monitor. Leave this running while you perform the next steps. 2. Try updating the system just like you have in the past. 3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square icon on the toolbar as shown below. 4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine. 5. Zip up and provide the link to the LogFile.PML file. Examples of services to upload to are Dropbox or OneDrive or WeTransfer.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 25, 2022 #43 The problem is that it fails during the shutdown/reboot process, so it isn't possible to keep that app running, nor save any results from it.
The problem is that it fails during the shutdown/reboot process, so it isn't possible to keep that app running, nor save any results from it.
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 26, 2022 #44 Hi. Let's change a tool's option, so we can take data from the boot-time activity. Run Procmon.exe. Select Options -> Enable Boot Logging. A Enable Boot Logging dialog will come up. Just click OK. Create a folder on your desktop named BootLog. Try updating the system just like you have in the past. Let the system reboot. Wait until the system starts and come back to the Desktop (it may take up to 15 minutes) and run Procmon.exe again. A message box will come up telling you that a log of boot-time activity was created and ask if you wish to save it. Click Yes and save to the BootLog folder on your desktop. This may take some time as it converts the boot-time data. Allow it to finish. The name (unless changed) will be LogFile.PML. Zip up the entire BootLog folder on your desktop and upload to a file sharing service of your choice for my review. Examples of services to upload to are Dropbox or OneDrive or SendSpace.
Hi. Let's change a tool's option, so we can take data from the boot-time activity. Run Procmon.exe. Select Options -> Enable Boot Logging. A Enable Boot Logging dialog will come up. Just click OK. Create a folder on your desktop named BootLog. Try updating the system just like you have in the past. Let the system reboot. Wait until the system starts and come back to the Desktop (it may take up to 15 minutes) and run Procmon.exe again. A message box will come up telling you that a log of boot-time activity was created and ask if you wish to save it. Click Yes and save to the BootLog folder on your desktop. This may take some time as it converts the boot-time data. Allow it to finish. The name (unless changed) will be LogFile.PML. Zip up the entire BootLog folder on your desktop and upload to a file sharing service of your choice for my review. Examples of services to upload to are Dropbox or OneDrive or SendSpace.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 27, 2022 #45 Uploaded to my account. https://www.dropbox.com/s/gd5khwwp51pgjvt/Bootlog.zip?dl=1
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 27, 2022 #46 Thanks. SFCFixScript.txt NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system Download the attached file, SFCFixScript.txt, and save this to your Desktop. Save any open documents and close all open windows. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it. SFCFix will now process the script. Upon completion, a log should be created on your Desktop: SFCFix.txt. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse. Attachments SFCFixScript.txt 118 bytes · Views: 7
Thanks. SFCFixScript.txt NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system Download the attached file, SFCFixScript.txt, and save this to your Desktop. Save any open documents and close all open windows. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it. SFCFix will now process the script. Upon completion, a log should be created on your Desktop: SFCFix.txt. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 27, 2022 #47 SFCFix version 3.0.2.1 by niemiro. Start time: 2022-08-27 22:04:01.565 Microsoft Windows 10 Build 19044 - amd64 Using .txt script file at C:\Users\dutta\Desktop\SFCFixScript.txt [] RegistryScript:: Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. Successfully imported registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. RegistryScript:: directive completed successfully. Successfully processed all directives. SFCFix version 3.0.2.1 by niemiro has completed. Currently storing 224 datablocks. Finish time: 2022-08-27 22:04:01.679 ----------------------EOF-----------------------
SFCFix version 3.0.2.1 by niemiro. Start time: 2022-08-27 22:04:01.565 Microsoft Windows 10 Build 19044 - amd64 Using .txt script file at C:\Users\dutta\Desktop\SFCFixScript.txt [] RegistryScript:: Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. Successfully imported registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1. RegistryScript:: directive completed successfully. Successfully processed all directives. SFCFix version 3.0.2.1 by niemiro has completed. Currently storing 224 datablocks. Finish time: 2022-08-27 22:04:01.679 ----------------------EOF-----------------------
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 27, 2022 #48 Hi, JayNDT. Try to update again now. If the update fails again, please post: 1. The new CBS log 2. The file here: C:\Windows\Inf\setupapi.dev.log
Hi, JayNDT. Try to update again now. If the update fails again, please post: 1. The new CBS log 2. The file here: C:\Windows\Inf\setupapi.dev.log
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 27, 2022 #49 Sorry about this, it seems my machine is being very difficult. Stops at 1% again, with no change. Attachments CBS.zip 15.6 MB · Views: 1 setupapi.dev.log 3.3 MB · Views: 2
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 28, 2022 #50 Retrieve SYSTEM Hive Please download the Freeware RegBak from here: Acelogix Software - Download products You will find it at the bottom of the page that the link brings you to. Go ahead and install this program and accept all the defaults. After the last install screen the program should open. Click the New Backup button. Accept the defaults and simply click Start. When it says Finished successfully, click the Close button. This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup... This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named SYSTEM. Copy this file to your Desktop. Now right click on the file on your desktop and select Send to > Compressed (zipped) folder. Then please upload the zip file(s) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or OneDrive or WeTransfer and then just provide the link in your reply. You can close any open windows you have as well as the RegBak program now.
Retrieve SYSTEM Hive Please download the Freeware RegBak from here: Acelogix Software - Download products You will find it at the bottom of the page that the link brings you to. Go ahead and install this program and accept all the defaults. After the last install screen the program should open. Click the New Backup button. Accept the defaults and simply click Start. When it says Finished successfully, click the Close button. This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup... This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named SYSTEM. Copy this file to your Desktop. Now right click on the file on your desktop and select Send to > Compressed (zipped) folder. Then please upload the zip file(s) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or OneDrive or WeTransfer and then just provide the link in your reply. You can close any open windows you have as well as the RegBak program now.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 28, 2022 #51 The zip file fit here, so I've attached it. Attachments SYSTEM.zip 4.1 MB · Views: 3
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 28, 2022 #52 SYSTEM Hive Replacement with RegBak Warning: This fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. Close all open programs and save all your work. You will need to reboot the machine during this process. Download the attached SYSTEM - JayNDT.ZIP. Right-click on SYSTEM - JayNDT.ZIP and select Extract All.... Ensure the "Show extracted files when complete" checkbox is checked and click the Extract button. The SYSTEM hive will be extracted. You will see the file named SYSTEM (no extension) Copy the SYSTEM hive to where you previously saved a backup. It should be (C:\Windows\RegBak\PC-NAME\DATE\Windows\System32\Config) Overwrite the one that is currently there when prompted. Open RegBak by click Start and selecting Registry Backup and Restore. Highlight the backup in the list (it should be the one date today), and press Restore. Click Start. RegBak will reboot your computer to complete the restore process. Let me know if the hive was replaced or if there were any errors. Attachments SYSTEM - JayNDT.zip 4.1 MB · Views: 2
SYSTEM Hive Replacement with RegBak Warning: This fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. Close all open programs and save all your work. You will need to reboot the machine during this process. Download the attached SYSTEM - JayNDT.ZIP. Right-click on SYSTEM - JayNDT.ZIP and select Extract All.... Ensure the "Show extracted files when complete" checkbox is checked and click the Extract button. The SYSTEM hive will be extracted. You will see the file named SYSTEM (no extension) Copy the SYSTEM hive to where you previously saved a backup. It should be (C:\Windows\RegBak\PC-NAME\DATE\Windows\System32\Config) Overwrite the one that is currently there when prompted. Open RegBak by click Start and selecting Registry Backup and Restore. Highlight the backup in the list (it should be the one date today), and press Restore. Click Start. RegBak will reboot your computer to complete the restore process. Let me know if the hive was replaced or if there were any errors.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 28, 2022 #53 Looks like it was restored normally, no errors, should I try to update my computer now?
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 28, 2022 #54 Yes, please.
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 29, 2022 #55 Got an error message in the Windows Update settings: There were some problems installing updates, but we’ll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0xe0000003) Retried and actually managed to capture the LogFile.bml file during the update, if it helps. https://www.dropbox.com/s/17tvbwmm7tz9bt3/Logfile.zip?dl=1 CBS logs also attached. Attachments CBS.zip 18.4 MB · Views: 6
Got an error message in the Windows Update settings: There were some problems installing updates, but we’ll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0xe0000003) Retried and actually managed to capture the LogFile.bml file during the update, if it helps. https://www.dropbox.com/s/17tvbwmm7tz9bt3/Logfile.zip?dl=1 CBS logs also attached.
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 29, 2022 #56 Hello. We are afraid that it is going to be another driver issue. Therefore, we need this file again: C:\Windows\Inf\setupapi.dev.log
Hello. We are afraid that it is going to be another driver issue. Therefore, we need this file again: C:\Windows\Inf\setupapi.dev.log
J JayNDT Well-known member Joined Jun 14, 2022 Posts 66 Aug 29, 2022 #57 NP. Attachments setupapi.dev.log 36.5 KB · Views: 5
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 29, 2022 #58 Run Deployment Image Servicing and Management (DISM) Click on the Start button and in the search box, type Command Prompt When you see Command Prompt on the list, right-click on it and select Run as administrator Enter the command below and press on Enter; Code: DISM /Online /Cleanup-Image /RestoreHealth Let the scan run until the end (100%). Depending on your system, it can take some time. Please post here the result you got (a screenshot).
Run Deployment Image Servicing and Management (DISM) Click on the Start button and in the search box, type Command Prompt When you see Command Prompt on the list, right-click on it and select Run as administrator Enter the command below and press on Enter; Code: DISM /Online /Cleanup-Image /RestoreHealth Let the scan run until the end (100%). Depending on your system, it can take some time. Please post here the result you got (a screenshot).
DR M Sysnative Staff, Security Analyst Staff member Joined Feb 12, 2015 Posts 1,876 Aug 29, 2022 #60 Let's give another try to update now. If it fails again, please attach a fresh CBS log and your COMPONENT hive. Upload your COMPONENTS Hive Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. If the file is too large to upload here, upload the file to www.wetransfer.com or Dropbox or OneDrive or SendSpace, and post the link in your next reply.
Let's give another try to update now. If it fails again, please attach a fresh CBS log and your COMPONENT hive. Upload your COMPONENTS Hive Navigate to C:\Windows\System32\Config and locate the COMPONENTS file. Please copy this file to your desktop. Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop. If the file is too large to upload here, upload the file to www.wetransfer.com or Dropbox or OneDrive or SendSpace, and post the link in your next reply.