Windows 10: Can't update Windows 10 Anniversary

TechBrolo.a is a type of rogue malware which ransoms your system, telling you to call a number to have it fixed of infections. Luckily, it doesn't automatically encrypt all your files. Once you call the number, the scammers remote into your system and wreak all kinds of havoc, then demand a credit card payment to fix things. They also have been installing a SysKey password to prevent Windows from loading.
Rogue:JS/TechBrolo.A

That's good news. *Smile
Please go back into Defender, scroll down the detections, make sure they are all the same. If they're not, please let me know what else was detected. Then, select all those quarantined items and select Delete.

EDIT: Please try to uninstall ByteFence from installed programs, if you can.

Then, run TDSSKiller, selecting all boxes (from bottom to top), and let it reboot to properly run the scan. Let me know if it finds anything/post the log.

Then please download and run the Sophos Virus Removal Tool.
Sophos Virus Removal Tool Download

Let me know if it finds anything. This is a thorough scan and will take quite some time. Be sure your external drive(s) is attached so it is scanned as well, as the scanner doesn't give you options.

 

Please be sure you see the EDIT in the above post. Thanks. *Smile

 

Ok. Good to know.

That entry was the only one. 5-6 of exactly the same thing.. No other detections.

I tried both Add/Remove programs and CCleaner. Nothing to uninstall.

Did this last night and again today. Clean as a whistle.

Clean



What do you think? Ready to proceed to the repair tool?

 

Just ran this one too. Everything matched

 

Yep! Let's do this! *Wink

 

Done

Complete. NO INTEGRITY VIOLATIONS FOUND

Results came back. No errors on the drives.

Here are the results
Code: ┌────────────────────────────────────────────────────────────────────────────────┐ │ Tweaking.com - Windows Repair v3.9.12 - Pre-Scan │ Computer: LUKE (Windows 10 Home 10.0.14393.222 ) (64-bit) │ [Started Scan - 10/9/2016 10:54:02 PM] └────────────────────────────────────────────────────────────────────────────────┘ ┌────────────────────────────────────────────────────────────────────────────────┐ │ Scanning Windows Packages Files. │ Started at (10/9/2016 10:54:02 PM) │ │ No problems were found with the Packages Files. │ │ Files Checked & Verified: 7,316 │ │ Done Scanning Windows Packages Files.(10/9/2016 10:54:35 PM) └────────────────────────────────────────────────────────────────────────────────┘ ┌────────────────────────────────────────────────────────────────────────────────┐ │ Scanning Reparse Points. │ Started at (10/9/2016 10:54:35 PM) │ │ Missing Default Reparse Point: (Original Path: C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files) (Target Path: C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache) │ A Default Reparse Point is missing and this can cause problems on the system. │ │ Missing Default Reparse Point: (Original Path: C:\Users\Default\Cookies) (Target Path: C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies) │ A Default Reparse Point is missing and this can cause problems on the system. │ │ Problems were found with the Reparse Points. │ You can use the Repair Reparse Points Tool at the bottom of this Window to try and fix these problems. │ │ Files & Folders Searched: 219,894 │ Reparse Points Found: 52 │ │ Done Scanning Reparse Points.(10/9/2016 10:54:44 PM) └────────────────────────────────────────────────────────────────────────────────┘ ┌────────────────────────────────────────────────────────────────────────────────┐ │ Checking Environment Variables. │ Started at (10/9/2016 10:54:44 PM) │ │ No problems were found with the Environment Variables. │ │ Done Checking Environment Variables. (10/9/2016 10:54:44 PM) └────────────────────────────────────────────────────────────────────────────────┘ ┌────────────────────────────────────────────────────────────────────────────────┐ │ [Finished Scan - 10/9/2016 10:54:44 PM] │ │ [x] Scan Complete - Problems Found! │ [x] │ [x] You can use the Repair Reparse Points or Repair Environment Variables tools at the bottom of this Window if needed. │ [x] │ [x] While problems have been found, you can still run the repairs in the program. │ [x] But for the best results it is recommended to fix the problems reported in this scan if possible. └────────────────────────────────────────────────────────────────────────────────┘[/quote]

Stop here and report the results. I will make another post with repair steps to run, but don't run them until we've determined if this scan shows repairs needed, and what they are, and decide if we should do them or not.[/QUOTE]

 

Please go ahead and run the fix for the missing reparse points.

 

Code: ┌─────────────────────────────────┐ │[STARTED] [10/9/2016 11:14:45 PM]│ └─────────────────────────────────┘ Running Repair on C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files [x] Command to Run: Create Default Reparse Point (This Is A Default Windows Reparse Point, Lets Put It Back The Way It Should Be) [x] Calling Checking If Link Folder Exists [x] Link Folder Does Exist, We need to remove it as we can't make Reparse Points for exisiting folders. [x] Setting Owner On Folder (So We Have A Better Chance For Permission To Remove It). [x] Calling RemoveDirectoryW (Only Removes Empty Folders, Just In Case) [x] Remove Folder Done. [x] Type is JUNCTION, Calling: mklink /J "C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files" "C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache" [x] Setting Owner To System And Everyone Read Access To Denied (This Is The Default) To The Link Folder: C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files Running Repair on C:\Users\Default\Cookies [x] Command to Run: Create Default Reparse Point (This Is A Default Windows Reparse Point, Lets Put It Back The Way It Should Be) [x] Calling Checking If Link Folder Exists [x] Link Folder Does Exist, We need to remove it as we can't make Reparse Points for exisiting folders. [x] Setting Owner On Folder (So We Have A Better Chance For Permission To Remove It). [x] Calling RemoveDirectoryW (Only Removes Empty Folders, Just In Case) [x] Remove Folder Done. [x] Type is JUNCTION, Calling: mklink /J "C:\Users\Default\Cookies" "C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies" [x] Setting Owner To System And Everyone Read Access To Denied (This Is The Default) To The Link Folder: C:\Users\Default\Cookies ┌──────────────────────────────────┐ │[FINISHED] [10/9/2016 11:14:49 PM]│ └──────────────────────────────────┘[/quote]

 

Great. Now please run it (the pre-scan) again, to make sure the reparse points are correct and nothing else shows up.

 

Re-Scan complete. No problems found. Trying a windows update right now

 

Great. But I suspect this will have nothing to do with the Windows Update problem....
Go ahead and move on to the repairs. Remember to be in Safe Mode, run them once, boot into regular mode, wait about 5 minutes for things to settle down, back into Safe Mode, and run them again. The log will be available in the log tab - please be sure to post that after the first run, then again after the second run.

 

Code: Memory Before Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 15.94 GB Memory Used: 1.79 GB(11.2085%) Memory Avail.: 14.15 GB -------------------------------------------------------------------------------- Cleaning Memory Before Starting Repairs... Memory After Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 15.94 GB Memory Used: 1.43 GB(8.9928%) Memory Avail.: 14.50 GB -------------------------------------------------------------------------------- Starting Repairs... Started at (10/9/2016 11:44:55 PM) Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair... Total Missing 'InstallDate' Fixed: 59 01 - Reset Registry Permissions Restore Windows 7/8/10 Default Registry Permissions Start (10/9/2016 11:44:56 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\hku.7z Done, 0.19 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\hklm.7z Done, 2.25 seconds. Running Repair Under System Account Done (10/9/2016 11:47:38 PM) Reset File Permissions: C: C: & Sub Folders Start (10/9/2016 11:47:38 PM) Running Repair Under Current User Account Done (10/9/2016 11:48:44 PM) Reset File Permissions Restore Windows 7/8/10 Default File Permissions Start (10/9/2016 11:48:44 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\default.7z Done, 0.13 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\profile.7z Done, 0.16 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\program_files.7z Done, 0.3 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\program_files_x86.7z Done, 0.14 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\programdata.7z Done, 0.14 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\windows.7z Done, 1.09 seconds. Running Repair Under Current User Account Done (10/9/2016 11:49:51 PM) 03 - Reset Service Permissions Start (10/9/2016 11:49:51 PM) Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:49:55 PM) 04 - Register System Files Start (10/9/2016 11:49:55 PM) Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:50:18 PM) 05 - Repair WMI Start (10/9/2016 11:50:18 PM) Starting Security Center So We Can Export The Security Info. Exporting Antivirus Info... Exporting 3rd Party Firewall Info... Running Repair Under Current User Account Done (10/9/2016 11:51:30 PM) 06 - Repair Windows Firewall Start (10/9/2016 11:51:30 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:51:58 PM) 07 - Repair Internet Explorer Start (10/9/2016 11:51:58 PM) Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:52:10 PM) 10 - Remove Policies Set By Infections Start (10/9/2016 11:52:10 PM) Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:52:12 PM) 15 - Repair Proxy Settings Start (10/9/2016 11:52:12 PM) Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:52:14 PM) 17 - Repair Windows Updates Start (10/9/2016 11:52:14 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Setting Windows Updates Files That Are In Use To Be Removed At Next Boot. Done (10/9/2016 11:52:31 PM) 21 - Repair MSI (Windows Installer) Start (10/9/2016 11:52:31 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:52:39 PM) 26 - Restore Important Windows Services Start (10/9/2016 11:52:39 PM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/9/2016 11:52:43 PM) Cleaning up empty logs... All Selected Repairs Done. Done at (10/9/2016 11:52:43 PM) Total Repair Time: 00:07:50 ...YOU MUST RESTART YOUR SYSTEM...[/quote]

 

[/quote] Thank you. I'm not seeing #2 Reset File Permissions (Should show C drive only)? Never mind. It's there, just not numbered like the rest..

 

One question: Do you have any other user accounts on the system besides the one you use?

 

Here are the results of scan 2. I probably waited 15 minutes in regular mode before taking a crack at #2 (back to safe mode).

Code: Tweaking.com - Windows Repair v3.9.12 -------------------------------------------------------------------------------- System Variables -------------------------------------------------------------------------------- OS: Windows 10 Home OS Architecture: 64-bit OS Version: 10.0.14393.222 OS Service Pack: Computer Name: LUKE Windows Drive: C:\ Windows Path: C:\WINDOWS Program Files: C:\Program Files Program Files (x86): C:\Program Files (x86) Current Profile: C:\Users\Luke Berger Current Profile SID: S-1-5-21-4232256137-3942767270-2832098513-1001 Current Profile Classes: S-1-5-21-4232256137-3942767270-2832098513-1001_Classes Profiles Location: C:\Users Profiles Location 2: C:\WINDOWS\ServiceProfiles Local Settings AppData: C:\Users\Luke Berger\AppData\Local -------------------------------------------------------------------------------- System Information -------------------------------------------------------------------------------- System Up Time: 0 Days 00:01:37 Process Count: 37 Commit Total: 1.26 GB Commit Limit: 18.31 GB Commit Peak: 1.36 GB Handle Count: 14030 Kernel Total: 276.50 MB Kernel Paged: 188.00 MB Kernel Non Paged: 88.51 MB System Cache: 633.60 MB Thread Count: 744 -------------------------------------------------------------------------------- Memory Before Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 15.94 GB Memory Used: 1.40 GB(8.7905%) Memory Avail.: 14.54 GB -------------------------------------------------------------------------------- Cleaning Memory Before Starting Repairs... Memory After Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 15.94 GB Memory Used: 1.17 GB(7.3264%) Memory Avail.: 14.77 GB -------------------------------------------------------------------------------- Starting Repairs... Started at (10/10/2016 12:12:56 AM) Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair... Total Missing 'InstallDate' Fixed: 0 01 - Reset Registry Permissions Restore Windows 7/8/10 Default Registry Permissions Start (10/10/2016 12:12:57 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\hku.7z Done, 0.19 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\hklm.7z Done, 2.27 seconds. Running Repair Under System Account Done (10/10/2016 12:15:46 AM) Reset File Permissions: C: C: & Sub Folders Start (10/10/2016 12:15:46 AM) Running Repair Under Current User Account Done (10/10/2016 12:16:54 AM) Reset File Permissions Restore Windows 7/8/10 Default File Permissions Start (10/10/2016 12:16:54 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\default.7z Done, 0.13 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\profile.7z Done, 0.16 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\program_files.7z Done, 0.31 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\program_files_x86.7z Done, 0.14 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\programdata.7z Done, 0.14 seconds. Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\windows.7z Done, 1.11 seconds. Running Repair Under Current User Account Done (10/10/2016 12:18:00 AM) 03 - Reset Service Permissions Start (10/10/2016 12:18:00 AM) Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:18:04 AM) 04 - Register System Files Start (10/10/2016 12:18:04 AM) Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:18:27 AM) 05 - Repair WMI Start (10/10/2016 12:18:27 AM) Starting Security Center So We Can Export The Security Info. Exporting Antivirus Info... Exporting 3rd Party Firewall Info... Running Repair Under Current User Account Done (10/10/2016 12:19:58 AM) 06 - Repair Windows Firewall Start (10/10/2016 12:19:58 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:20:26 AM) 07 - Repair Internet Explorer Start (10/10/2016 12:20:26 AM) Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:20:38 AM) 10 - Remove Policies Set By Infections Start (10/10/2016 12:20:38 AM) Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:20:40 AM) 15 - Repair Proxy Settings Start (10/10/2016 12:20:40 AM) Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:20:42 AM) 17 - Repair Windows Updates Start (10/10/2016 12:20:42 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.13 seconds. Running Repair Under Current User Account Running Repair Under System Account Setting Windows Updates Files That Are In Use To Be Removed At Next Boot. Done (10/10/2016 12:20:58 AM) 21 - Repair MSI (Windows Installer) Start (10/10/2016 12:20:58 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.14 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:21:06 AM) 26 - Restore Important Windows Services Start (10/10/2016 12:21:06 AM) Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\10\services.7z Done, 0.14 seconds. Running Repair Under Current User Account Running Repair Under System Account Done (10/10/2016 12:21:11 AM) Cleaning up empty logs... All Selected Repairs Done. Done at (10/10/2016 12:21:11 AM) Total Repair Time: 00:08:16 ...YOU MUST RESTART YOUR SYSTEM...[/quote]
I should probably mention this as well. This started after running the first time around;








Thanks for all the help tonight Simrick, but I gotta hit the hay. We can finish the rest tomorrow.