Internet Explorer 10 will not roll back to IE-9. Help!

[NoelDP]

OK - here's the first pair of removals...

Open Regedit
Navigate to the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_0.0.0.0_none_8c1ac95af2d41939

You'll see there are a number of entries in the right pane - you need to delete the following ones ONLY.


"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-121_neutral_LDR"
"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-122_neutral_GDR"

To do this, you'll have to take ownership of the Key and subkeys/values, give Administrators permissions on the key, delete the entries, then return ownership of the key to SYSTEM


When complete, please run CheckSUR again, and post the new results.

 

[Condorito]

Here it is. And yes; a Happy 2014, BTW!

 

[NoelDP]

Phew! finally got it right

Still waiting on my advisor - but then he's a college lad and it was New Year's Eve.....

I'm going to do some research/testing now we have a 'clean' hive and see what I can find.

back tomorrow, probably


Ignore that load of rubbish - I was posting to the wrong thread!

back in a minute or two, after I clear my head

 

[NoelDP]

Great - you got that right!

Now we need to do the same thing with these pairings

[B]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_0.0.0.0_none_8c1cc9eef2d24be7 [/B]
delete the following
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-119_neutral_LDR"[/B]
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-120_neutral_GDR"[/B]

[B]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_0.0.0.0_none_8c1dca38f2d1653e[/B]
delete the following
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-117_neutral_LDR"[/B]
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-118_neutral_GDR"[/B]

[B]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\wow64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_0.0.0.0_none_966f73ad2734db34[/B]
delete the following
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-121_neutral_LDR"[/B]
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-122_neutral_GDR"[/B]

[B]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_0.0.0.0_none_2ffe2e6b3a74dab1[/B]
delete the following
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-119_neutral_LDR"[/B]
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-120_neutral_GDR"[/B]

[B]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_0.0.0.0_none_2fff2eb53a73f408[/B]
delete the following
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-117_neutral_LDR"[/B]
[B]"Package_54_for_KB2791765~31bf3856ad364e35~amd64~~6.1.1.2.2791765-118_neutral_GDR"[/B]

Once you've done that lot, please run another CheckSUR and post the log.

With luck that should leave us with just the two hardest entries to deal with - and I have yet to work out the best way to do them

 

[Condorito]

Sorry, was AFK again, by other obligations. Back now.

Okay, those deletions are done and I am running a SUR check right now. Will post when ready. However, there is one thing I must confess is disturbing me a bit. I do not seem to be able to return ownership of those keys to SYSTEM after doing those deletions. The option for SYSTEM in the list of "possible owners" is not there, under the owner tab. All I am doing is setting it back to read-only on administrator.

Now, the last time I did anything with regedit for something was way back on Windows 98, if I am not mistaken, and I do not remember all this "ownership" business. It is something akin to chmod in Linux, but drawing such comparisons is probably dangerous. How do I reset them to SYSTEM?

Thanks in advance.

 

[Condorito]

Well, that was quick this time. Here's the log.

 

[NoelDP]

Here's the remaining errors....

Checking Component Watchlist
(f) CBS Watchlist Component Missing 0x80070002 amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_0.0.0.0_none_db68530cde5b7446 Package_75_for[COLOR=red][B]_B2813430[/B][/COLOR]~31bf3856ad364e35~amd64~~6.1.1.4 Package registry presence failed, possibly an orphaned package on package watchlist
(f) CBS Watchlist Component Missing 0x80070002 x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_0.0.0.0_ar-sa_5d612fbc3d6e26f5 [COLOR=red][B]Package75[/B][/COLOR]_for_KB2813430~31bf3856ad364e35~amd64~~6.1.1.4 Package registry presence failed, possibly an orphaned package on package watchlist
Checking Packages
Checking Component Store
(f) CSI Missing Deployment Key 0x00000000 microsoft-w..-deployment_31bf3856ad364e35_6.1.7600.16385_86f5b67405fdc54f HKLM\Components\CanonicalData\Deployments

To reset ownership back to SYSTEM...
highlight the key
right-click and select permissions
Click on Advanced
Click on the Owner tab
Click on the 'Other users or groups' button
Type
System
and click the 'check names' button - it should change to SYSTEM
click OK once
put a tick in the 'Replace owner on subcontainers and objects' box
Click OK out

Job Done

More about the remaining errors in a few minutes.

 

[NoelDP]

The remaining Watchlist errors are the result of bitflips in the registry. The red-highlighted sections show where the problems are.
The problem with this type of error is that it's most likely to make the key totally invulnerable to manipulation within regedit, since it can't modify something it can't read in the first place.

Please attempt the same procedure on the following Keys - I expect you to get errors when modifying the permissions for access, in which case simply back out and try the next.

If anything works, run another CheckSUR and post the results.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_0.0.0.0_none_db68530cde5b7446

delete ONLY the entry for

Package_75_for_B2813430~31bf3856ad364e35~amd64~~6.1.1.4 (it may have an extension '.Trigger_1' appended)

DO NOT delete any entry for 'Package_75_for_KB2813430....'

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_0.0.0.0_ar-sa_5d612fbc3d6e26f5

delete ONLY the entry for

Package75_for_KB2813430~31bf3856ad364e35~amd64~~6.1.1.4 (it may have an extension '.Trigger_1' appended)

DO NOT delete any entry for 'Package_75...'

 

[Condorito]

To reset ownership back to SYSTEM...
highlight the key
right-click and select permissions
Click on Advanced
Click on the Owner tab
Click on the 'Other users or groups' button
Type
System
and click the 'check names' button - it should change to SYSTEM
click OK once
put a tick in the 'Replace owner on subcontainers and objects' box
Click OK out

Job Done

Thank you! I figured it might be that, but did not want to go off "experimenting" at this stage of the game (possibly ruining all your excellent and patient work) without asking, first. I am glad I did, as I would most likely NOT have done...

put a tick in the 'Replace owner on subcontainers and objects' box

No problems with the deletions, down to one error now. Here's the log...



.

 

[NoelDP]

Great - that one is theoretically easier to fix, because Admin users already have the rights - but I suspect that the problem is not that the entry is 'missing' but that it's been corrupted.


I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or SkyDrive) and post a link.

 

[Condorito]

Here's the requested components file.

 

[Ex_Brit]

Interesting thread. I'm surprised that IE10 (& indeed IE11 which it should be to be safer) reset to 'Compatibility View for all sites' wouldn't work for you.
You're a brave person allowing your security to be compromised just to please one company.
I'm curious, do you have SP1 installed?

 

[NoelDP]

Interesting thread. I'm surprised that IE10 (& indeed IE11 which it should be to be safer) reset to 'Compatibility View for all sites' wouldn't work for you.
You're a brave person allowing your security to be compromised just to please one company.
I'm curious, do you have SP1 installed?

Please enlighten me - WTF are you talking about?

 

[Ex_Brit]

Not that the question was directed at you, I'm asking a simple question.

I always am concerned when I see people compromising their security for whatever reason.

 

[Condorito]

Interesting thread. I'm surprised that IE10 (& indeed IE11 which it should be to be safer) reset to 'Compatibility View for all sites' wouldn't work for you.
You're a brave person allowing your security to be compromised just to please one company.
I'm curious, do you have SP1 installed?

Well, the fact of the matter is that I have no option but to please that company. It is absurd that, with their scope of action and options to create a specialized, downloadable from their site only to registered users application for viewing technical data and drawings, they elected to use a particular OS's browser (and three now "defunct" versions of it, at that, 9 being the newest! :shock for the viewing of said data. Surely, a completely stand alone, non-reliant application with a custom viewer would have been a more intelligent creation on their part. The present application works off-line (it also includes some required plugins that download with the main package) and the browser is merely the interface used for the display. Beats me why they do it this way, really. Some back channel agreement with MS, or something? I don't know.

All that aside, however; the exercise here listed in this thread has unveiled a problem that existed with my installation of Windows 7, which has impeded either rolling back to IE9 or even "rolling forward" to IE11, and has been causing issues with my updates on and off all along (even after re-installing the OS on an occasion to attempt to start afresh). That it is finally being addressed and solved here is PURE GOLD!

It seems to be a buggy retail Windows 7 that I got, or it does not like my hardware set up, or something, as it has always been a trifle problematic, especially updates and the odd BSOD (about two or three times a week), which is also an issue I would one day like to go after.

As for security, I would use a different, completely up to date browser, like FF (as right now). Pity, it seems that IE9 and IE10 cannot live side by side in harmony on one system. However, I do most of my normal online browsing from Linux, anyway.


_

 

[Ex_Brit]

That's a pity but it looks like you are forced to at least try what you are doing. Just having IE9 installed makes a system less secure than if IE11 was installed even if it's not the default browser, however, yuo can't even get that far by the looks of it.

Have you tried a system repair or run SFC /Scannow to see if Windows can heal itself and then perhaps the help you've been getting here might work?

 

[Condorito]

Have you tried a system repair or run SFC /Scannow to see if Windows can heal itself and then perhaps the help you've been getting here might work?

Yes, done both before. There is even some evidence of my usage of sfc /scannow earlier on this same thread. At the moment I do not want to try anything new or different until what is happening here already is taken to its conclusion. Thanks just the same!

 

[Ex_Brit]

Well good luck.

 

[NoelDP]

I've uploaded a file - MDK2.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it to your desktop.
Right-click on the saved file and select Extract all...
Save it to the default location
This should create a file MDK2.reg

Now open an Elevated Command Prompt, and run the following command

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS

... You should get a 'success' message
Close the Command Prompt window

right-click on the MDK2.reg file, and select Merge
Accept the warnings, - you should then get a 'Success' message.
Close all windows, and reboot.


Run CheckSUR again, and post the new report.

 

[Condorito]

Here it is.