Failed updates "WindowsUpdate_8007370B" "WindowsUpdate_dt000"

Not too bad -

Code:

Summary:
Seconds executed: 703
 Found 8 errors
 Fixed 6 errors
  CSI Corrupt Component Keyform Total count: 1
  CSI Corrupt Identity Total count: 5
  Fixed: CSI Corrupt Identity.  Total count: 5
  CSI Payload File Missing Total count: 1
  CSI F Mark Missing Total count: 1
  Fixed: CSI F Mark Missing.  Total count: 1

Just the one corrupt Keyform remains - the payload file we have to deal with differently anyhow

I'll try and get to that sometime today.

I ran sfc /scannow in safe mode and the log file said that it couldn't be replaced as the stored file is corrupt, or something to that affect. They had a virus on their system a while back, which was removed by either MBAM or Avira Antivirus, perhaps the installshield files were corrupted back then?

That's possible. Pnce we have the registry sorted, we'll go back and fix whatever files we find in both CheckSUR and SFC (hopefully in one operation!

(thanks for the rep!)
Back later...

I've uploaded a file - ophac.zip - to my OneDrive at Noel's OneDrive

Please download and save it to your desktop.

Right-click on the file and select Extract All, andsave to the default destination (which should be a folder on the desktop)

Create a new System Restore point

Open an Elevated Command Prompt, and run the following commands.

Code:

 IF EXIST C:\Windows\System32\config\COMPONENTS.OLD1DEL C:\Windows\System32\config\COMPONENTS.OLD1
REN C:\Windows\System32\config\COMPONENTSCOMPONENTS.OLD1
COPY"%userprofile%\desktop\ophac\COMPONENTS" C:\Windows\System32\config
  
 
.

If you get an error with any command, STOP THERE - donot reboot! - post for instructions.

Assuming all commands go OK, reboot, and run anotherCheckSUR scan - post the new CheckSUR.log file.

Hi Noel,
I've been away for a couple of days, but just had a chance to follow your last post. Thanks again for posting!
This is a copy of the last CheckSUR.log file after completing your last instructions.

Here's the Summary...

Code:

Summary:
Seconds executed: 1143
 Found 31 errors
 Fixed 29 errors
  CSI Corrupt Component Keyform Total count: 1
  CSI Corrupt Identity Total count: 4
  Fixed: CSI Corrupt Identity.  Total count: 4
  CSI Payload File Missing Total count: 1
  CSI F Mark Missing Total count: 25
  Fixed: CSI F Mark Missing.  Total count: 25

...so all the registry errors are fixed, at least.

There's one payload file missing:

Code:

 Line 21: (f) CSI Payload File Missing 0x00000000 _isdel.exe wow64_microsoft-windows-i..llshield-wow64-main_31bf3856ad364e35_6.1.7600.16385_none_ca61f601a4548b8e

Please run an SFC /SCANNOW, and post the new CBS.log file (compressed!)

<edit> - I also just spotted this...

Code:

CSI Corrupt Component Keyform Total count: 1

which is unfixed, still

Code:

 Line 30: (f) CSI Corrupt Component Keyform 0x00000000 identity amd64_4a5d5q29c6f7f65e24c414ac03c88e99_31bf3856ad364e35_6.1.7601.22616_none_f5c72c9e3d5bf927 identity and keyform do not match; keyform is wrong.

I'll try and fix that with a simple registry patch.

SFC /SCANNOW complete, logfile compressed and attached.
Attachment 362872

I noticed quite a few windows updates were successfully installed over the last couple of days, so it does seem to be improving :)

Good - SFC only found the same error as CheckSUR did...

Code:

 Line 40839: 2015-06-16 19:34:29, Info                  CSI    00001834 [SR] Repairing 1 components
 Line 40840: 2015-06-16 19:34:29, Info                  CSI    00001835 [SR] Beginning Verify and Repair transaction
 Line 40841: 2015-06-16 19:34:29, Info                  CSI    00001836 [SR] Cannot repair member file [l:20{10}]"_isdel.exe" of Microsoft-Windows-InstallShield-WOW64-Main, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

I'll post a fix later.

Thank you!

I've uploaded a file - ophad.zip - to my OneDrive at Noel'sOneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract

Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option'Repair my Computer'

Pick that

You'll have to log in with your username and password.

Pick the option to use a Command Prompt

At the prompt type

DIR C:\ophad
hit the enter key- if you get a 'Not Found' error try

DIR D:\ophad
or
DIR E:\ophad

The drive letter in use when you find the folder will need to be substituted (for<drive>)into the following command...

XCOPY <drive>:\ophad <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time) and when the prompt returns, type

EXIT

and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt

then reboot and upload the new CBS.log file to your reply