Can only boot with disabled driver signature enforcement after crash

astric69 said:

I did a system restore again. Rebooted several times successfully. Those two unsigned drivers were still on there. So it seems that those are not the issue. Then I ran Windows updates again. It failed the 2018-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4074588) still. It also installed the (KB890830) Windows Malicious Software Removal Tool x64 - February 2018. It appears that all of the machines have installed this and failed on the other.

I am also getting this error from Windows Update:

• 2018-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4074588) - Error 0x800f081f

octabrain said:

Hello,

sorry for the late response, but I didn't receive any notification emails about answers here (I got them for the first few replies), so I didn't think anyone posted here...
I ran DISM before and after sfc. I ran both of them a couple of times.
I do have a Windows 10 installation DVD.

The cbs.txt file contains the following lines:
2018-02-25 09:54:48, Info CSI 00000006 [SR] Verifying 1 components
2018-02-25 09:54:48, Info CSI 00000007 [SR] Beginning Verify and Repair transaction
2018-02-25 09:54:48, Info CSI 0000000b [SR] Verify complete
2018-02-25 09:54:48, Info CSI 0000000c [SR] Verifying 1 components
2018-02-25 09:54:48, Info CSI 0000000d [SR] Beginning Verify and Repair transaction
2018-02-25 09:54:48, Info CSI 0000000f [SR] Verify complete
2018-02-25 09:54:48, Info CSI 00000010 [SR] Verifying 1 components
2018-02-25 09:54:48, Info CSI 00000011 [SR] Beginning Verify and Repair transaction
2018-02-25 09:54:49, Info CSI 00000015 [SR] Verify complete
2018-02-25 09:54:49, Info CSI 00000016 [SR] Verifying 1 components
2018-02-25 09:54:49, Info CSI 00000017 [SR] Beginning Verify and Repair transaction
2018-02-25 09:54:49, Info CSI 0000001b [SR] Verify complete

Hi @octabrain

Are those only lines of text contains within CBS.txt file if they are then there are no Windows system files that are corrupted. Can please you give me the names of the unsigned drives?

Please try below programs one at time.

Download and run the Windows Update Troubleshooter.
https://support.microsoft.com/en-us/...troubleshooter


Automatically reset Windows Update components
https://support.microsoft.com/en-us/kb/971058

FreeBooter said:

Hi @octabrain

Are those only lines of text contains within CBS.txt file if they are then there are no Windows system files that are corrupted. Can please you give me the names of the unsigned drives?

Please try below programs one at time.

Download and run the Windows Update Troubleshooter.
https://support.microsoft.com/en-us/...troubleshooter


Automatically reset Windows Update components
https://support.microsoft.com/en-us/kb/971058

Yes, they are the only lines in Cbs.txt.

If I run sigverif now it only shows
- bthport.sys version: 10.0.16299.64
as unsigned.

When I first posted the thread there were two unsigned drivers:
- basicrenderer.sys version: 10.0.16299.19
- bthport.sys version: 10.0.16299.64

I ran the Windows Update Troubleshooter and I get the following result:

Windows Update components must be repaired Windows Update components must be repaired One or more Windows Update components are configured incorrectly.

Not fixed

http://www.ocwoc.com/bk/windows_troubleshooting/update_troubleshooter.pdf

I tried following the steps to reset Windows Update. But it fails at:
3. Delete the qmgr*.dat files. To do this, at a command prompt, type the following command, and then press Enter: Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"

I get the error message "The system cannot find the path specified.".
There is also no folder "Application Data" in my "ProgramData" folder, which %ALLUSERSPROFILE% references.
I searched for qmgr*.dat files in the explorer. But it didn't find any.
Does that mean I can just skip that step and continue with the next step or does that show some problem?

octabrain said:

If I run sigverif now it only shows
- bthport.sys version: 10.0.16299.64
as unsigned.

You could just delete it from \System32\Drivers and run sfc again. That should copy the (hopefully) correct version from WinSxS. If you do this and it fails then please delete CBS.log, run sfc again and then zip and upload the whole CBS.log.

Alternatively, as I've got file version 10.0.16299.248, if you can get windows update working then that should also fix it. As the troubleshooter doesn't work you could try the script here Reset Windows Update in Windows 10 Windows 10 Tutorials

Or you could do a repair install or wait a couple of weeks for 1803 which will definitely replace it

When I did the system restore, those same two drivers were still unsigned. I could reboot as normal. When I went to run windows updates it tried to install those two updates I mentioned earlier and failed the Feature but was successful on the February Malicious Software Removal Tool one.

Also I was wrong earlier. Every one of the computers I have had this issue on have been upgraded from 10 Home to 10 Pro.

Running a system reset with keeping files will fix the issue but need to reinstall all programs. Even running updates again does not break it.

We also use Trend Micro Worry Free antivirus.

astric69 said:

Running a system reset with keeping files will fix the issue but need to reinstall all programs.

In place upgrade (sometimes called "repair install") doesn't involve reinstalling programs though. Download your current version ISO, mount it and click on setup.exe. Takes 20 minutes or so after you downloaded the ISO and all your programs, apps and data are retained. You just have to re-do you tweaks.

Repair Install Windows 10 with an In-place Upgrade Windows 10 Tutorials

lx07 said:

In place upgrade (sometimes called "repair install") doesn't involve reinstalling programs though. Download your current version ISO, mount it and click on setup.exe. Takes 20 minutes or so after you downloaded the ISO and all your programs, apps and data are retained. You just have to re-do you tweaks.

Repair Install Windows 10 with an In-place Upgrade Windows 10 Tutorials

I'll try this on the next one that goes down.

Find this article interesting, I think this might be useful for you to boot with disabled driver signature enforcement How To Fix / Disable Driver Signature Enforcement Windows 10

FreeBooter said:

Did you execute Dism command after Sfc command finish executing?

Do you have Windows 10 Installation DVD if not can you download the Windows 10 ISO image using Media Creation Tool?


Please open the Command Prompt by typing cmd.exe into Start Menu, right-click on Cmd.exe, and open it as an administrator.

Type following command and press Enter key.

Code:

Findstr  /c:"[SR]" %SystemRoot%\Logs\CBS\CBS.log  > %UserProfile%\Desktop\Cbs.txt

Please attached the Cbs.txt file stored at the Desktop to your next post.