New
#21
Sorry for the silence - I've been fighting a Cryptolocker infection on a friend's machine.
Back later...
Sorry for the silence - I've been fighting a Cryptolocker infection on a friend's machine.
Back later...
The 247 error is common with the error pattern you have, so I'm not surprised by it.
Please carry on with the SFC /SCANNOW and post the rest of the data anyhow.
So when I check for updates in windows update (after waiting 5 minutes for the window to actually appear) it comes up with a window saying that it cannot check for updates as the service is not running.
The CBS report is attached.
The problem here appears to be related to the SPP service somehow -
- but I have no idea how.Code:2014-01-08 01:18:54, Info CSI 00000008 CSI Store 2944656 (0x00000000002cee90) initialized 2014-01-08 01:18:54, Info CBS Session: 6464_12781551 initialized by client SPP. 2014-01-08 01:18:56, Info CBS Warning: Unrecognized packageExtended attribute. 2014-01-08 01:18:56, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
We have recently had some problems with permissions surfacing - perhaps this is another example.
Please open an Elevated Command Prompt, and run the following commands, and post the results...
ICACLS C:\Windows
ICACLS C:\Windows\System32
ICACLS C:\Windows\System32\spp
ICACLS C:\Windows\servicing
ICACLS C:\Windows\winsxs
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Here it is,
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>ICACLS C:\Windows
C:\Windows NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32
C:\Windows\System32 NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\spp
C:\Windows\System32\spp NT SERVICE\TrustedInstallerI)(F)
NT SERVICE\TrustedInstallerI)(CI)(IO)(F)
NT AUTHORITY\SYSTEMI)(F)
NT AUTHORITY\SYSTEMI)(OI)(CI)(IO)(F)
BUILTIN\AdministratorsI)(F)
BUILTIN\AdministratorsI)(OI)(CI)(IO)(F)
BUILTIN\UsersI)(RX)
BUILTIN\UsersI)(OI)(CI)(IO)(GR,GE)
CREATOR OWNERI)(OI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\servicing
C:\Windows\servicing NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerOI)(CI)(IO)(F)
NT AUTHORITY\SYSTEMRX)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(GR,GE)
BUILTIN\AdministratorsRX)
BUILTIN\AdministratorsOI)(CI)(IO)(GR,GE)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\winsxs
C:\Windows\winsxs NT SERVICE\TrustedInstallerOI)(CI)(F)
BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>