Internet Explorer 10 will not roll back to IE-9. Help!

OK - here's the first pair of removals...

Open Regedit
Navigate to the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_0.0.0.0_none_8c1ac95af2d41939

You'll see there are a number of entries in the right pane - you need to delete the following ones ONLY.


"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-121_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-122_neutral_GDR"

To do this, you'll have to take ownership of the Key and subkeys/values, give Administrators permissions on the key, delete the entries, then return ownership of the key to SYSTEM


When complete, please run CheckSUR again, and post the new results.

Here it is. And yes; a Happy 2014, BTW!

Phew! finally got it right :)

Still waiting on my advisor - but then he's a college lad and it was New Year's Eve.....

I'm going to do some research/testing now we have a 'clean' hive and see what I can find.

back tomorrow, probably :)


Ignore that load of rubbish - I was posting to the wrong thread!

back in a minute or two, after I clear my head :)

Great - you got that right!

Now we need to do the same thing with these pairings

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_0.0.0.0_none_8c1cc9eef2d24be7 
delete the following
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-119_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-120_neutral_GDR"

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_0.0.0.0_none_8c1dca38f2d1653e
delete the following
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-117_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-118_neutral_GDR"

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\wow64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_0.0.0.0_none_966f73ad2734db34
delete the following
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-121_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-122_neutral_GDR"

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_0.0.0.0_none_2ffe2e6b3a74dab1
delete the following
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-119_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-120_neutral_GDR"

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_0.0.0.0_none_2fff2eb53a73f408
delete the following
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-117_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-118_neutral_GDR"

Once you've done that lot, please run another CheckSUR and post the log.

With luck that should leave us with just the two hardest entries to deal with - and I have yet to work out the best way to do them

Sorry, was AFK again, by other obligations. Back now.

Okay, those deletions are done and I am running a SUR check right now. Will post when ready. However, there is one thing I must confess is disturbing me a bit. I do not seem to be able to return ownership of those keys to SYSTEM after doing those deletions. The option for SYSTEM in the list of "possible owners" is not there, under the owner tab. All I am doing is setting it back to read-only on administrator.

Now, the last time I did anything with regedit for something was way back on Windows 98, if I am not mistaken, and I do not remember all this "ownership" business. It is something akin to chmod in Linux, but drawing such comparisons is probably dangerous. How do I reset them to SYSTEM?

Thanks in advance.

Well, that was quick this time. Here's the log.

Here's the remaining errors....

Code:

Checking Component Watchlist
(f) CBS Watchlist Component Missing 0x80070002 amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_0.0.0.0_none_db68530cde5b7446 Package_75_for_B2813430~31bf3856ad364e35~amd64~~6.1.1.4 Package registry presence failed, possibly an orphaned package on package watchlist
(f) CBS Watchlist Component Missing 0x80070002 x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_0.0.0.0_ar-sa_5d612fbc3d6e26f5 Package75_for_KB2813430~31bf3856ad364e35~amd64~~6.1.1.4 Package registry presence failed, possibly an orphaned package on package watchlist
Checking Packages
Checking Component Store
(f) CSI Missing Deployment Key 0x00000000 microsoft-w..-deployment_31bf3856ad364e35_6.1.7600.16385_86f5b67405fdc54f HKLM\Components\CanonicalData\Deployments

To reset ownership back to SYSTEM...
highlight the key
right-click and select permissions
Click on Advanced
Click on the Owner tab
Click on the 'Other users or groups' button
Type
System
and click the 'check names' button - it should change to SYSTEM
click OK once
put a tick in the 'Replace owner on subcontainers and objects' box
Click OK out

Job Done :)

More about the remaining errors in a few minutes.

The remaining Watchlist errors are the result of bitflips in the registry. The red-highlighted sections show where the problems are.
The problem with this type of error is that it's most likely to make the key totally invulnerable to manipulation within regedit, since it can't modify something it can't read in the first place.

Please attempt the same procedure on the following Keys - I expect you to get errors when modifying the permissions for access, in which case simply back out and try the next.

If anything works, run another CheckSUR and post the results.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_0.0.0.0_none_db68530cde5b7446

delete ONLY the entry for

Package_75_for_B2813430~31bf3856ad364e35~amd64~~6.1.1.4 (it may have an extension '.Trigger_1' appended)

DO NOT delete any entry for 'Package_75_for_KB2813430....'

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_0.0.0.0_ar-sa_5d612fbc3d6e26f5

delete ONLY the entry for

Package75_for_KB2813430~31bf3856ad364e35~amd64~~6.1.1.4 (it may have an extension '.Trigger_1' appended)

DO NOT delete any entry for 'Package_75...'

NoelDP said:

To reset ownership back to SYSTEM...
highlight the key
right-click and select permissions
Click on Advanced
Click on the Owner tab
Click on the 'Other users or groups' button
Type
System
and click the 'check names' button - it should change to SYSTEM
click OK once
put a tick in the 'Replace owner on subcontainers and objects' box
Click OK out

Job Done :)

Thank you! I figured it might be that, but did not want to go off "experimenting" at this stage of the game (possibly ruining all your excellent and patient work) without asking, first. I am glad I did, as I would most likely NOT have done...

put a tick in the 'Replace owner on subcontainers and objects' box

No problems with the deletions, down to one error now. Here's the log...



.

Great - that one is theoretically easier to fix, because Admin users already have the rights - but I suspect that the problem is not that the entry is 'missing' but that it's been corrupted.


I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or SkyDrive) and post a link.