[8.1Pro x64] Empty Windows Features dialog box

O

obliviouspup

Active member
Joined
Jan 4, 2018
Posts
27
Hi there,

I'm helping a friend to install a software that requires .NET Frameworks 3.5 installed. As it says on the title, when I open Programs and Features > Turn Windows feature on/off to install .NET Frameworks, it shows a blank list. According to Speccy, the machine has .NET Framework 4.6 installed, but the software installation wizard determines that the Windows doesn't have .NET Framework installed.


I consulted Google and tried several things to fix the problem:

1. Run sfc /scannow command as admin
Didn't work. Issuing the command returns "Windows Resource Protection could not start the repair service."

2. Run dism /online /cleanup-image /restorehealth
Didn't work either. It gives the following error

"Error: 3
The directory C:\Windows does not appear to be a valid Windows directory. Ensure that the /WinDir option that is specified is valid. For more information, refer to the help by running DISM.exe /WinDir /?."
Running the command dism /online /? gives the same error.

3. Refresh Windows
"There was a problem refreshing/resetting your PC, No changes were made"


Can anyone please help me fix this issue?
Thank you in advance.

This is my Speccy link
http://speccy.piriform.com/results/Zr88CxkXc7nHT1AqdoacNwB
And this is my CBS file
CBS.zip - Google Drive

 
Hello and welcome

Due to the precise nature of your corruption, you will receive help from a user named SleepyDude. He's one of our senior trainees here who's in his final phase of his studies and needs to gain some real world experience in specific areas of Windows Update. This means that he'll be assisting you, but that I will first need to double check and approve his fixes before he posts them to you. If anything this is a good thing for you because it means that you've got at least two of us watching over your thread, but it will unfortunately add a slight delay between each reply. I hope that you understand and can accept the need for us to train up new members in this way in order to carry on doing what we do here, however, if for any reason you object to this setup, I will happily take on your thread myself.

Thank you very much for your understanding. We'll be with you very shortly.
 
Thanks for the reply, Brian. Sure, I understand about the situation and I'd be glad to support your decision. I hope it can be a good practice for him as well.
 
Hi,

Try this please.

Press
windows8_key.png
+ X and click Open Command Prompt (Admin)
type:
Code: 
sc start trustedinstaller

After this command you should get a result similar to:
Read More:

Let me know if you see a different result.

Next type:
Code: 
sfc /scannow
 
Hi SleepyDude,

I've got different result

"C:\Windows\system32>sc start trustedinstaller
[SC] StartService FAILED 1056:


An instance of the service is already running."

And the sfc /scannow still not working
 
Hi,

After the sc start command with the result "An instance of the service is already running." when you try to run sfc /scannow the error is the same? if the error is different please post the exact message.
 
Hi,

Follow the Microsoft Instructions for Windows 8.1 available on this link to perform a Clean Boot, restart the system on this mode and try to run SFC /scannow

If SFC refuses to run please post the new CBS log.
 
Hi,

Please revert the changes you did to boot in Clean Mode and Restart Windows.


Farbar Recovery Scan Tool (FRST)
  • Download FRST or FRST x64 and save it to the Desktop.
    (Please pick the version that matches your operating system's bit type. If you don't know which version matches your system, try FRST if it say that is not compatible with your OS you have to use FRST64
  • Execute FRST/FRST64 right click on the icon
    FRST.gif
    and choose Run as Administrator. Make sure all other windows are closed.
    (When the Tool opens for the first time you must click Yes on the disclaimer.)
    FRST.png
  • Press Scan button.
  • It will produce a log called (FRST.txt) in the same directory the Tool is run from.
  • The first time the Tool is run, it makes also another log (Addition.txt).
  • Please attach both logs to your post.
 
Hi,

The FRST log show evidences of Malware and also that you have a HackTool KMSpico installed that must be remove to continue receiving help because its probably the source of the Windows problems reported.


If you agree with this please uninstall KMSPICO. You can do this via Start > Control Panel > Add Remove Programs (XP) or Start > Control Panel > Programs and Features (Vista / 7 / 8 / 10) locate the program on the list, right-click on the entry and select Uninstall.


FRST Fix

!!! WARNING !!! The following fix is only relevant for this system and no other, running the script on another computer will not work and may cause problems...

  • Open Notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
    (To do this highlight the contents of the box, right click on it and select copy.)
  • Right-click in the open Notepad and select Paste.
  • Save it on the Desktop as fixlist.txt
    (It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work!)
    Start::
    CreateRestorePoint:
    CloseProcesses:
    R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [File not signed]
    S3 cpuz143; C:\Users\ruben\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48952 2018-01-04] (CPUID) <==== ATTENTION
    2017-12-20 03:50 - 2017-02-18 14:46 - 000000000 ____D C:\Program Files\KMSpico
    2017-12-20 01:37 - 2017-02-18 14:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
    Task: {8D65761F-898D-4CCC-BD89-DAAD8FCEE17F} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
    Task: C:\Windows\Tasks\8173z72S77u9083.job => rundll32.exe C:\ProgramData\8173z72S77u9083\8173z72S77u9083.dll <==== ATTENTION
    C:\ProgramData\8173z72S77u9083
    FirewallRules: [{4269B20F-B073-4CF5-A6B5-4433FC69264A}] => (Allow) C:\Windows\system32\rundll32.exe
    FirewallRules: [{498C21F9-04DE-48C7-AB9E-EAE7509FF009}] => (Allow) C:\Windows\System32\rundll32.exe
    FirewallRules: [{26D8FBAF-76E3-4B6B-ABDD-4E3AAB4A5789}] => (Allow) C:\Windows\System32\rundll32.exe
    EmptyTemp:
    Hosts:
    End::
    Click to expand...
  • Run FRST/FRST64 and press the Fix button just once and Wait. After the fix the system needs to restart if the tool does not request it please Restart the computer.
  • The tool will make a log (Fixlog.txt) on the same location as FRST/FRST64 please post it in your next reply.
 
Bad news, still running into the same error.
"Windows Resource Protection could not start the repair service."
 
Ok. Lets do a deeper check...

Scan with ESET On-line Scanner

Download Eset On-line Scanner, run the tool and follow the prompts to install the program.
ESET_Scan.png

  • UNCHECK the box's Remove found threats and Scan Archives.
  • Click on Advanced Settings, an check the options:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Disable your AntiVirus and AntiSpyware applications to speedup the scan
    (If you have difficulty properly disabling your security programs, refer to this link)
  • Click Start and then wait for the scan to finish (it will take some time).
    The virus signature database will begin to download and the Scan will start automatically. Be patient this make take some time depending on the speed of your Internet Connection.
  • Once the scan is completed, close the program
  • Use Notepad to open the log file located at C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt
  • Copy and paste the log contents to your reply
  • Enable your AntiVirus and AntiSpyware applications
 
Here you go:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=14e288a78d774c41b5b779ef7e6442a2
# end=init
# utc_time=2018-01-08 11:31:59
# local_time=2018-01-08 03:31:59 (-0800, Pacific Standard Time)
# country="Canada"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 35997
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=14e288a78d774c41b5b779ef7e6442a2
# end=updated
# utc_time=2018-01-08 11:36:29
# local_time=2018-01-08 03:36:29 (-0800, Pacific Standard Time)
# country="Canada"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=14e288a78d774c41b5b779ef7e6442a2
# engine=35997
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2018-01-08 11:51:59
# local_time=2018-01-08 03:51:59 (-0800, Pacific Standard Time)
# country="Canada"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode_1='Avast Antivirus'
# compatibility_mode=801 16777213 66 100 0 3889629 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 18331210 140250412 0 0
# scanned=173472
# found=4
# cleaned=0
# scan_time=929
sh=B1C1CCA92942D6ED85007C15E68B4B8139C094B5 ft=1 fh=f4c4565889321c8c vn="a variant of MSIL/HackTool.IdleKMS.E potentially unsafe application" ac=I fn="C:\FRST\Quarantine\C\Program Files\KMSpico\KMSELDI.exe"
sh=01C3CCF030C03BB1A91FEF4736B4CF21F872B260 ft=1 fh=50e262090ccf340c vn="a variant of MSIL/HackTool.IdleKMS.E potentially unsafe application" ac=I fn="C:\FRST\Quarantine\C\Program Files\KMSpico\Service_KMS.exe"
sh=6EF8310627537B1D24409574BC3C398CD97C474C ft=1 fh=8f545065e84edd76 vn="Win64/HackKMS.D potentially unsafe application" ac=I fn="C:\Windows\SECOH-QAD.dll"
sh=66C72019EAFA41BBF3E708CC3824C7C4447BDAB6 ft=1 fh=0a46a8abafa4da1b vn="Win64/HackKMS.C potentially unsafe application" ac=I fn="C:\Windows\SECOH-QAD.exe"
 
Hi,

Two more files that need to go and another Scan...

Farbar Recovery Scan Fix

!!! WARNING !!! The following fix is only relevant for this system and no other, running the script on another computer will not work and may cause problems...

  • Open Notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
    (To do this highlight the contents of the box, right click on it and select copy.)
  • Right-click in the open Notepad and select Paste.
  • Save it on the Desktop as fixlist.txt
    (It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work!)
    Start::
    CreateRestorePoint:
    CloseProcesses:
    C:\Windows\SECOH-QAD.dll
    C:\Windows\SECOH-QAD.exe
    EmptyTemp:
    End::
    Click to expand...
  • Run FRST/FRST64 and press the Fix button just once and Wait. After the fix the system needs to restart if the tool does not request it please Restart the computer.
  • The tool will make a log (Fixlog.txt) on the same location as FRST/FRST64 please post it in your next reply.

You have an outdated version of Malwarebytes Anti-Malware version 2.2.1.1043 please Uninstall using the Control Panel.


Install and Run Malwarebytes
  • Please download Malwarebytes' Anti-Malware from here
  • Double Click the mb3-setup-{version}.exe
    MBAM2.jpg
    and follow the prompts to install the program
  • Then click Finish and wait for the program to load
  • Click Close on the 14-day Premium Trial pop-up
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu
    (If another update of the definitions is available, it will be implemented before the rest of the scanning procedure)
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart the computer when prompted to do so.
  • If the program didn't ask for a Reboot, Click on Export Summary and select Copy to Clipboard. Paste the content in your next reply
To retrieve the Malwarebytes Anti-Malware scan log information after Reboot
  • Run Malwarebytes again
  • on the left side menu Click on Reports
  • locate the event named Scan Report on the list with the most recent date
  • check the corresponding box and click View Report
  • Click the Export button and select Copy to Clipboard. Paste the content in your next reply
 
Fixlog file View attachment Fixlog.txt

Malwarebytes didn't detect anything, here's the log
Malwarebytes
Malwarebytes | Free Cyber Security & Anti-Malware Software


-Log Details-
Scan Date: 1/9/18
Scan Time: 1:42 PM
Log File: 099feb92-f586-11e7-b6fb-b8763f441ed4.json
Administrator: Yes


-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.3660
License: Trial


-System Information-
OS: Windows 8.1
CPU: x64
File System: NTFS
User: ruben_laptop\ruben


-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 246618
Threats Detected: 0
(No malicious items detected)
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 0 min, 31 sec


-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect


-Scan Details-
Process: 0
(No malicious items detected)


Module: 0
(No malicious items detected)


Registry Key: 0
(No malicious items detected)


Registry Value: 0
(No malicious items detected)


Registry Data: 0
(No malicious items detected)


Data Stream: 0
(No malicious items detected)


Folder: 0
(No malicious items detected)


File: 0
(No malicious items detected)


Physical Sector: 0
(No malicious items detected)




(end)
 
Hi,

Logs look good thanks.

Let's check some windows critical services...

ยป Farbar Service Scanner (FSS) log

Download Farbar Service Scanner and save the file to the Desktop.
  • Run FSS
  • Check all the options
  • click Scan
Post the generated log in your reply.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top