question

JohnOomen-2541 avatar image
0 Votes"
JohnOomen-2541 asked JohnOomen-2541 answered

Windows 10 update rolled back user profile

Hi.

One of my clients reports he was prompted to run a Windows update when shutting down his W10Pro workstation last night Oct 20, 2021.

This morning they logged on and found that their system appeared to have rolled back to a point in the past, guessing about 6 months ago.

All credentials had been removed and I had to reconfigure his emails in Outlook.

Looking at the Windows update history, there was no evidence of any updates being run yesterday. The last update installed was 21H1 on Oct 14 which was successful.

The event logs show multiple identical Critical entries on Oct 20, between 05.15pm (the time the shutdown was requested and updates started) and 05.27pm.

0x3d55: package family microsoft.oneconnect_8wekyb3d8bbwe runtime information is corrupted

There were also multiple 'access history in hive - \C:\Users<theAccountInQuestion>\AppData\Local\Microsoft\Windows\???? was cleared updating ?? keys and creating ?? modified pages.' entries.

There is an active AV on the system and I've run a malware scan over the system which returned a clean result.

I'm not sure I'm chasing a rouge Windows update or something more sinister.

Thanks in advance for any help there is.

Regards

John

windows-10-general
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Is this device domain-joined?
What Anti-Malware are you using?
Was there any other installation before this problem started?
Does the user have the administrator permission?

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hello JohnOomen,

By de description it sounds like a corruption of the harddrive,

Could you check first the health (re-run until comes clean) with: CHKDSK /V /F

Then run a Windows image repair using DISM https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/repair-a-windows-image




--If the reply is helpful, please Upvote and Accept as answer--

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JohnOomen-2541 avatar image
0 Votes"
JohnOomen-2541 answered

Thanks for this.
Sorry for the delay.
I've run a CHKDSK on the system and nothing was reported as needing repairing and the SSD is reported as being healthy. The system is running fine that I can see.
The system also hasn't found any Windows updates since Oct 14.
Not much more to do except to watch it carefully.

Thanks for you help.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.