Failed Windows Update, error 80070490 re kb2904266

Page 3 of 7 FirstFirst 12345 ... LastLast

  1. Posts : 32
    w7 home premium x64
    Thread Starter
       #21

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\jhg>ICACLS C:\Windows\System32\winload.exe /grant "NT Service\TrustedIn
    staller": (F) Administrators: (F)
    processed file: C:\Windows\System32\winload.exe
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\System32\bootres.dll /grant "NT Service\TrustedIn
    staller": (F) Administrators: (F)
    processed file: C:\Windows\System32\bootres.dll
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\System32\winresume.exe /grant "NT Service\Trusted
    Installer": (F) Administrators: (F)
    processed file: C:\Windows\System32\winresume.exe
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\System32\en-us\winload.exe.mui /grant "NT Service
    \TrustedInstaller": (F) Administrators: (F)
    processed file: C:\Windows\System32\en-us\winload.exe.mui
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>


    the last line required a carriage return to execute

    will reboot and retry sfc....

    (thanks for the continued help it is appreciated)
      My Computer


  2. Posts : 32
    w7 home premium x64
    Thread Starter
       #22

    ssdd (same s**** different day)

    still crashes out at 12%

    new log uploaded
      My Computer


  3. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #23

    I'm in the pub ;-) back later
      My Computer


  4. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #24

    Still the same errors...
    Code:
    POQ 14 ends.
    2013-12-24 11:52:59, Info                  CSI    00000047 [SR] Verify complete
    2013-12-24 11:53:00, Info                  CSI    00000048 [SR] Verifying 100 (0x0000000000000064) components
    2013-12-24 11:53:00, Info                  CSI    00000049 [SR] Beginning Verify and Repair transaction
    2013-12-24 11:53:06, Info                  CSI    0000004a Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a\winload.exe.mui do not match actual file [l:30{15}]"winload.exe.mui" :
      Found: {l:32 b:6CpGVfb9MPZoTuUaPuafHwcCGHeBFkJH+xcdg82LAkU=} Expected: {l:32 b:cmwSqv8cz72kYk/6vIX3ilsW3b/9aHFLa3Kl4oI7S0c=}
    2013-12-24 11:53:06, Info                  CSI    0000004b [SR] Cannot repair member file [l:30{15}]"winload.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2013-12-24 11:53:06, Info                  CSI    0000004c [SR] Cannot repair member file [l:34{17}]"winresume.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    2013-12-24 11:53:07, Info                  CSI    0000004d [SR] Cannot repair member file [l:22{11}]"winload.exe" of Microsoft-Windows-BootEnvironment-OS-Loader, Version = 6.1.7601.17556, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    2013-12-24 11:53:07, Info                  CSI    0000004e Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winresume.exe do not match actual file [l:26{13}]"winresume.exe" :
      Found: {l:32 b:aMvPINGEMpR26cXvuqwsY0sv9Ae4YKXPvYQeGffIrKQ=} Expected: {l:32 b:q/QceurYa0/05GsiGj2dNYGUx3/+0EeA7Llwmazl14c=}
    2013-12-24 11:53:07, Info                  CSI    0000004f [SR] Cannot repair member file [l:26{13}]"winresume.exe" of Microsoft-Windows-BootEnvironment-OS-Loader, Version = 6.1.7601.17556, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2013-12-24 11:53:09, Info                  CSI    00000050 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll do not match actual file [l:22{11}]"bootres.dll" :
      Found: {l:32 b:ReXcZNSQJueSnZpf1sYtXafgiI1kHeQuWND6ofd/LiA=} Expected: {l:32 b:nmNUQWwRA/uURB6jR9IGRrN4iyr6A5gvHCV5deSEDFw=}
    2013-12-24 11:53:09, Info                  CSI    00000051 [SR] Cannot repair member file [l:22{11}]"bootres.dll" of Microsoft-Windows-BootRes, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2013-12-24 11:53:10, Error                 CSI    00000052 (F) STATUS_ACCESS_DENIED #1025246# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound), handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ), oa = @0x14ac9d0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[131]"\SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winload.exe"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0x14aca80, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT), eab = NULL, eal = 0, disp = Invalid)
    [gle=0xd0000022]
    2013-12-24 11:53:10, Error                 CSI    00000053@2013/12/24:11:53:10.096 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_ACCESS_DENIED originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
    [gle=0x80004005]
    2013-12-24 11:53:10, Error                 CSI    00000054 (F) STATUS_ACCESS_DENIED #1025245# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingFile(...)[gle=0xd0000022]
    2013-12-24 11:53:10, Error                 CSI    00000055 (F) STATUS_ACCESS_DENIED #1025244# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingFile(flags = (MissingFileIsOk), da = (FILE_GENERIC_READ), oa = @0x14ad000->SIL_OBJECT_ATTRIBUTES {s:40; on:"winload.exe"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_SYNCHRONOUS_IO_NONALERT|FILE_NON_DIRECTORY_FILE), file = NULL, disp = Invalid)
    [gle=0xd0000022]
    2013-12-24 11:53:10, Error                 CSI    00000056 (F) STATUS_ACCESS_DENIED #1024576# from PrimitiveInstaller::CCoordinator::RepairComponent(Component = Microsoft-Windows-BootEnvironment-OS-Loader, Version = 6.1.7601.17556, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral)[gle=0xd0000022]
    I wonder if the problem lies in the winsxs folder itself, rather than the System32 folder?

    Please run the following commands, and we'll have a look-see...

    Code:
     
    ICACLS C:\Windows\WinSxS
    ICACLS C:\Windows\Winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a\winload.exe.mui
    ICACLS C:\Windows\Winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winload.exe
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winresume.exe
    .
    Post the results.

    If that shows no problems up, then we may be in rootkit territory
      My Computer


  5. Posts : 32
    w7 home premium x64
    Thread Starter
       #25

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\jhg>CACLS C:\Windows\WinSxS
    C:\Windows\winsxs NT SERVICE\TrustedInstaller: (OI)(CI)F
    BUILTIN\Administrators: (OI)(IO)F
    BUILTIN\Administrators: (CI)F
    NT AUTHORITY\SYSTEM: (OI)(IO)F
    NT AUTHORITY\SYSTEM: (CI)F
    Everyone: (OI)(IO)F
    Everyone: (CI)F
    BUILTIN\Users: (OI)(IO)F
    BUILTIN\Users: (CI)F


    C:\Users\jhg>ICACLS C:\Windows\Winsxs\amd64_microsoft-windows-b..os-loader.resou
    rces_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a\winload.exe.mui
    C:\Windows\Winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_en-us_d28dabacfdb4dd1a\winload.exe.mui BUILTIN\Administrators: (
    F)

    NT SERVICE\TrustedInstal
    ler: (F)

    jhg-acer-i3\jhg: (F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs\amd64_microsoft-windows-b..vironment-os-lo
    ader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winload.exe
    C:\Windows\Winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e3
    5_6.1.7601.17556_none_b923808583650cfb\winload.exe jhg-acer-i3\jhg: (F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-bootres_31bf3856ad
    364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll
    C:\Windows\WinSxS\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.1751
    4_none_9d42c69298905ee5\bootres.dll BUILTIN\Administrators: (F)

    NT SERVICE\TrustedInstaller: (F)

    jhg-acer-i3\jhg: (F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..vironment-os-lo
    ader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winresume.exe
    C:\Windows\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e3
    5_6.1.7601.17556_none_b923808583650cfb\winresume.exe BUILTIN\Administrators: (F)

    NT SERVICE\TrustedInstaller
    : (F)

    jhg-acer-i3\jhg: (F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>
      My Computer


  6. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #26

    Something has definitely been having fun with the permissions on the Winsxs folder and its contents. :(
    I think we need to do some root-and-branch tidying-up there, but I'm uncertain how to go about it.

    First off, we need to reset the folder itself so that it only has the proper permissions - it currently is wide open to tampering by literally anyone.

    ICACLS C:\Windows\Winsxs /remove Everyone
    ICACLS C:\Windows\Winsxs /grant:r "NT AUTHORITY\SYSTEM":(OI)(CI)(RX) /inheritance:e
    ICACLS C:\Windows\Winsxs /grant:r "NT SERVICE\TrustedInstaller":(OI)(CI)(F) /inheritance:e
    ICACLS C:\Windows\Winsxs /grant:r Administrators:(OI)(CI)(RX) /inheritance:e
    ICACLS C:\Windows\Winsxs /grant:r Users:(OI)(CI)(RX) /inheritance:e
    ICACLS C:\windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
    ICACLS C:\Windows\Winsxs

    Let's first see whether that does everything it should, and then work on the content (if necessary - this should make some changes there also)

    Run those commands in an Elevated Command Prompt, and post the output.
    Last edited by NoelDP; 25 Dec 2013 at 13:31. Reason: remove smileys
      My Computer


  7. Posts : 32
    w7 home premium x64
    Thread Starter
       #27

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\jhg>ICACLS C:\Windows\Winsxs /remove Everyone
    processed file: C:\Windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs /grant:r "NT AUTHORITY\SYSTEM"OI)(CI)(RX
    ) /inheritance:e
    processed file: C:\Windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs /grant:r "NT SERVICE\TrustedInstaller"OI
    )(CI)(F) /inheritance:e
    processed file: C:\Windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX) /inhe
    ritance:e
    processed file: C:\Windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs /grant:r UsersOI)(CI)(RX) /inheritance:e

    processed file: C:\Windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
    processed file: C:\windows\Winsxs
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>ICACLS C:\Windows\Winsxs
    C:\Windows\Winsxs BUILTIN\UsersOI)(CI)(RX)
    BUILTIN\AdministratorsOI)(CI)(RX)
    NT AUTHORITY\SYSTEMOI)(CI)(RX)
    NT SERVICE\TrustedInstallerOI)(CI)(F)
    BUILTIN\AdministratorsOI)(IO)(F)
    BUILTIN\AdministratorsCI)(F)
    NT AUTHORITY\SYSTEMOI)(IO)(F)
    NT AUTHORITY\SYSTEMCI)(F)
    BUILTIN\UsersOI)(IO)(F)
    BUILTIN\UsersCI)(F)
    NT SERVICE\TrustedInstallerI)(F)
    NT SERVICE\TrustedInstallerI)(CI)(IO)(F)
    CREATOR OWNERI)(OI)(CI)(IO)(F)
    BUILTIN\AdministratorsI)(OI)(IO)(F)
    BUILTIN\AdministratorsI)(CI)(F)
    NT AUTHORITY\SYSTEMI)(OI)(IO)(F)
    NT AUTHORITY\SYSTEMI)(CI)(F)
    EveryoneI)(OI)(IO)(F)
    EveryoneI)(CI)(F)
    BUILTIN\UsersI)(OI)(IO)(F)
    BUILTIN\UsersI)(CI)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\jhg>
      My Computer


  8. Posts : 32
    w7 home premium x64
    Thread Starter
       #28

    malware bytes anti rootkit came up clean
      My Computer


  9. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #29

    Yikes - the winsxs folder permissions are a true mess now!
    The switches I used were supposed to tidy things up rather than complicate them.
    Even the simple Remove command didn't work as expected....
    I'm going to have to play and see if I can repro this effect somehow.
    Back later
      My Computer


  10. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #30

    My fault - I misunderstood the inheritance switch :(
    Please run the following commands

    Takeown /F C:\Windows\Winsxs /A
    ICACLS C:\Windows\Winsxs /inheritance:d
    ICACLS C:\Windows\Winsxs /remove:g Everyone
    ICACLS C:\Windows /remove Everyone
    ICACLS C:\Windows\Winsxs /Remove:g Users
    ICACLS C:\Windows\Winsxs /grant Users:(OI)(CI)RX
    ICACLS C:\Windows\Winsxs /Remove:g "NT SERVICE\TrustedInstaller"
    ICACLS C:\Windows\Winsxs /grant "NT SERVICE\TrustedInstaller":(OI)(CI)F
    ICACLS C:\Windows\Winsxs /Remove:g "NT AUTHORITY\SYSTEM"
    ICACLS C:\Windows\Winsxs /grant "NT AUTHORITY\SYSTEM":(OI)(CI)RX
    ICACLS C:\Windows\Winsxs /grant:r Administrators (OI)(IO)F
    ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
    ICACLS C:\Windows\Winsxs

    with any luck it should look a little better now - post the results
      My Computer


 
Page 3 of 7 FirstFirst 12345 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:40.
Find Us