Error 0x8004xFE21. IRST drivers dont work

[NoelDP]

Sorry for the silence - I've been fighting a Cryptolocker infection on a friend's machine.

Back later...

 

[NoelDP]

The 247 error is common with the error pattern you have, so I'm not surprised by it.

Please carry on with the SFC /SCANNOW and post the rest of the data anyhow.

 

[velouki]

So when I check for updates in windows update (after waiting 5 minutes for the window to actually appear) it comes up with a window saying that it cannot check for updates as the service is not running.

The CBS report is attached.

 

[NoelDP]

The problem here appears to be related to the SPP service somehow -

2014-01-08 01:18:54, Info                  CSI    00000008 CSI Store 2944656 (0x00000000002cee90) initialized
2014-01-08 01:18:54, Info                  CBS    Session: 6464_12781551 initialized by client SPP.
2014-01-08 01:18:56, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-01-08 01:18:56, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]

- but I have no idea how.

We have recently had some problems with permissions surfacing - perhaps this is another example.

Please open an Elevated Command Prompt, and run the following commands, and post the results...


ICACLS C:\Windows
ICACLS C:\Windows\System32
ICACLS C:\Windows\System32\spp
ICACLS C:\Windows\servicing
ICACLS C:\Windows\winsxs


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[velouki]

Here it is,

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ICACLS C:\Windows
C:\Windows NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\System32
C:\Windows\System32 NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\System32\spp
C:\Windows\System32\spp NT SERVICE\TrustedInstallerI)(F)
NT SERVICE\TrustedInstallerI)(CI)(IO)(F)
NT AUTHORITY\SYSTEMI)(F)
NT AUTHORITY\SYSTEMI)(OI)(CI)(IO)(F)
BUILTIN\AdministratorsI)(F)
BUILTIN\AdministratorsI)(OI)(CI)(IO)(F)
BUILTIN\UsersI)(RX)
BUILTIN\UsersI)(OI)(CI)(IO)(GR,GE)
CREATOR OWNERI)(OI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\servicing
C:\Windows\servicing NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerOI)(CI)(IO)(F)
NT AUTHORITY\SYSTEMRX)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(GR,GE)
BUILTIN\AdministratorsRX)
BUILTIN\AdministratorsOI)(CI)(IO)(GR,GE)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\winsxs
C:\Windows\winsxs NT SERVICE\TrustedInstallerOI)(CI)(F)
BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>