PAINT stopped working (today) and will neither uninstall or re-install (Windows 11 up to date)

Question

PAINT stopped working (today) and will neither uninstall or re-install (Windows 11 up to date)

Kevin Cook 0

I use PAINT daily and today ... while I was using it ... the window closed ... and when I tried to reopen it ... it would not reopen

I searched for solutions and decided to uninstall and reinstall ... as there are no permanent setting that will need to be reset

I chose to UNINSTALL from SETTINGS > INSTALLED APPS ...

When I goto the MS Store to reinstall the app ... it downloads ... and tries to install but eventually says ERROR ... we are aware of the issue and are working to fix it. Try again later

I have tried everything from using DISM to restorehealth and manual install of PAINT ... with no results

Does anyone have any suggestions?

Kevin Cook 0 Reputation points

2026-07-15T13:38:34.5233333+00:00

I installed the 2 security updates that came out today ... I then tried the install again ... same results

I disabled McAfee and ran wsreset -i ... it came back to the prompt with no output

I then ran

Get-AppxPackage -AllUsers Microsoft.MSPaint | Remove-AppxPackage -AllUsers

which also came back to the prompt with no output

Next I tried the install from the store ... and it errored again
David-M 121.9K Reputation points Independent Advisor

2026-07-15T13:50:14.25+00:00

Thanks for the update.

Since the store reset and the registration commands didn't bypass the block, it confirms that the Windows application database has a deeper registry conflict. Rather than spending more time troubleshooting complex command-line errors, the most reliable and painless way to resolve this is to proceed with the In-place Upgrade.

This process is completely safe. It reinstalls Windows 11 using the official ISO file while keeping 100% of your personal files, settings, and installed programs. Crucially, since Paint is a default Windows application, the upgrade will automatically rebuild the Microsoft Store framework and reinstall a fresh, working copy of Paint for you. You won't even need to run any commands afterward.

Please let me know how it goes.

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-16T14:33:47.94+00:00

Just on a side note for future readers ...

As a workaround until I can restore W11 Paint.ext

I installed and am using CLASSIC PAINT by Winareo ... it is 32 bit so is a bit clunky and has trouble with large photos ... otherwise it works well enough to get me by
Chris Knapp 0 Reputation points

2026-07-31T20:19:21.2133333+00:00
None of this worked for me, turned out after running procmon it was an access denied in registry for heic image. Ran the below to resolve.

$key = 'Registry::HKEY_CURRENT_USER\Software\Classes.heic'

$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name

$acl = Get-Acl -LiteralPath $key

$rule = New-Object System.Security.AccessControl.RegistryAccessRule(

$currentUser, [System.Security.AccessControl.RegistryRights]::FullControl, [System.Security.AccessControl.InheritanceFlags]::ContainerInherit, [System.Security.AccessControl.PropagationFlags]::None, [System.Security.AccessControl.AccessControlType]::Allow

)

$acl.SetAccessRule($rule)

Set-Acl -LiteralPath $key -AclObject $acl

Answer recommended by moderator

Kevin Cook 0

I was able to reinstall MSPaint

Ran the install from MS Store
Looked in event viewer Windows Logs -> SYSTEM for the error

Installation Failure: Windows failed to install the following update with error 0x80073CF6: 9PCFS5B6T72H-Microsoft.Paint.

Looked up the error

Per the Google AI

a) wsreset (again)

b) dism /Online /Remove-Capability /CapabilityName:Microsoft.Windows.MSPaint~~~~0.0.1.0

c) tried dism /Online /Add-Capability /CapabilityName:Microsoft.Windows.MSPaint~~~~0.0.1.0

This command failed even after trying several different ways

d) ran Get-AppxPackage Microsoft.MSPaint | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}

e) restarted machine (this may be what I have missed in the past)

f) Once it was up ... I searched for MSPAINT ... and it was there and would run

It is still disturbing that I cannot do an in-place install ... but I think that will have to wait for another time as I am getting behind on the things I need to edit

Thank you David and Bryce for all the help

Now to reinstall McAfee ... I will let you know if this somehow disables Paint

0 comments

6 additional answers

Your answer

Kevin Cook 0 Reputation points

2026-07-15T13:38:34.5233333+00:00

I installed the 2 security updates that came out today ... I then tried the install again ... same results

I disabled McAfee and ran wsreset -i ... it came back to the prompt with no output

I then ran

Get-AppxPackage -AllUsers Microsoft.MSPaint | Remove-AppxPackage -AllUsers

which also came back to the prompt with no output

Next I tried the install from the store ... and it errored again
David-M 121.9K Reputation points Independent Advisor

2026-07-15T13:50:14.25+00:00

Thanks for the update.

Since the store reset and the registration commands didn't bypass the block, it confirms that the Windows application database has a deeper registry conflict. Rather than spending more time troubleshooting complex command-line errors, the most reliable and painless way to resolve this is to proceed with the In-place Upgrade.

This process is completely safe. It reinstalls Windows 11 using the official ISO file while keeping 100% of your personal files, settings, and installed programs. Crucially, since Paint is a default Windows application, the upgrade will automatically rebuild the Microsoft Store framework and reinstall a fresh, working copy of Paint for you. You won't even need to run any commands afterward.

Please let me know how it goes.

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-16T14:33:47.94+00:00

Just on a side note for future readers ...

As a workaround until I can restore W11 Paint.ext

I installed and am using CLASSIC PAINT by Winareo ... it is 32 bit so is a bit clunky and has trouble with large photos ... otherwise it works well enough to get me by
Chris Knapp 0 Reputation points

2026-07-31T20:19:21.2133333+00:00

None of this worked for me, turned out after running procmon it was an access denied in registry for heic image. Ran the below to resolve.

$key = 'Registry::HKEY_CURRENT_USER\Software\Classes.heic'

$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name

$acl = Get-Acl -LiteralPath $key

$rule = New-Object System.Security.AccessControl.RegistryAccessRule(

$currentUser, [System.Security.AccessControl.RegistryRights]::FullControl, [System.Security.AccessControl.InheritanceFlags]::ContainerInherit, [System.Security.AccessControl.PropagationFlags]::None, [System.Security.AccessControl.AccessControlType]::Allow

)

$acl.SetAccessRule($rule)

Set-Acl -LiteralPath $key -AclObject $acl

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 2

David-M 121.9K Independent Advisor

Sorry for the delay in reply. I've been offline.

Thanks for the details

I looked up that error and instructions for it ... I went to Settings> Apps and looked for Microsoft Store ... and it is not even installed

The reason you could not find Microsoft Store under "Settings > Apps > Installed Apps" is due to a recent change in Windows 11. Microsoft moved core system apps, including the Microsoft Store, out of the standard "Installed Apps" list. They are now located under a separate section:

"Settings > System > System Components".

Holding for now ... Should I run ... wsreset -i

Running wsreset -i is still the perfect step to re-register its background services.

If wsreset -i completes and you still encounter the same 0x80073cf6 registration error when running the Paint installation command, it indicates a deeper conflict in the system's AppX database. In that case, the most reliable and painless solution is the In-place Upgrade to rebuild the database from scratch.

This process reinstalls Windows 11 using the official ISO file while keeping 100% of your personal files, settings, and installed programs completely safe.

Here are the steps:

(Temporarily disable McAfee during the entire procedure.)

1 = Download the ISO file to perform the procedure:

Access the link below;

https://www.microsoft.com/en-us/software-download/windows11

Under Download Windows 11 Disk Image (ISO) for x64 devices, click Select download and select Windows 11 (multi-edition ISO for x64 devices);
Click Download;
Choose the language and click on Confirm;
Then, click 64-bit Download.
Wait for the download to finish and proceed to the procedure below.

2 = After downloading the ISO, do the following:

Double-click the ISO to run;

(After running the ISO, you may need to double-click the Setup file to start the procedure.)

On the Install Windows 11 screen, uncheck I want to help make the installation of Windows better and select Change how Windows Setup downloads updates;
On the next screen, select Not right now and click Next;
Accept the terms of use;
On the Ready to install screen, select Choose what to keep and select what you want to keep.

(It is in this step that you must check Keep personal files and apps so that all your data is kept.)

Click on Install and wait for the procedure to finish. Your computer may restart several times.

Once the upgrade is complete, check if the Microsoft Store opens normally. Since Paint is a default Windows application, it should already be installed and ready to use in your Start menu.

If you get any errors or the problem persists, please let me know.

Feel free to ask any questions you may have.

Kevin Cook 0 Reputation points

2026-07-16T13:49:52.41+00:00

I am having problems with the ISO install ... do you want to continue here or use another thread ... or take it private?
David-M 121.9K Reputation points Independent Advisor

2026-07-16T13:53:54.9366667+00:00

Ideally, we should continue interacting in this thread.

What exactly happened? Did an error appear? If so, what was the error and at which specific step?

Looking forward to your reply.
Kevin Cook 0 Reputation points

2026-07-16T13:59:04.8833333+00:00

No problem ... Things are proceeding now ... I will let you know the results
David-M 121.9K Reputation points Independent Advisor

2026-07-16T14:01:32.3933333+00:00

That's a good sign.

If something unexpected happens, let me know.
Kevin Cook 0 Reputation points

2026-07-16T15:18:59.52+00:00
Kevin Cook 0 Reputation points

2026-07-16T15:31:44.1566667+00:00

Did Disk Cleanup and cleaned up temp folders .. 71gb free

Tried the store again ... it got to 100% then failed
David-M 121.9K Reputation points Independent Advisor

2026-07-16T16:54:50.78+00:00

Please share the log files "Setupact.log" and "Setuperr.log" stored in the following folders.

C:\$Windows.~BT\Sources\Panther

C:\$Windows.~BT\Sources\Rollback

Copy the files or folders to your desktop or another easily accessible folder and store them in a ZIP file. Then, upload the ZIP file to the cloud (OneDrive) and choose it to get the link.

Post the link to the ZIP file here so I can have a look.

Looking forward to your reply.
Kevin Cook 0 Reputation points

2026-07-16T17:17:47.3066667+00:00

I think I may have deleted what you are looking for during the Disk Cleanup as I am not finding any \Sources\ directories
Kevin Cook 0 Reputation points

2026-07-16T17:21:26.76+00:00

I dont even have a $Windows.~BT directory ... I have a $Windows.~WS directory though ... but is is over a year old
David-M 121.9K Reputation points Independent Advisor

2026-07-16T17:46:33.4166667+00:00
Since the $Windows.~BT folder is deeply hidden, standard Disk Cleanup does not always delete it, and Windows Search cannot index or find it.

Please try accessing the folders directly first using this method:

Open File Explorer.

Copy the path below, paste it directly into the address bar at the very top (where it shows the folder path, not the search bar), and press Enter:

C:\$Windows.~BT\Sources\Panther\

If the folder opens, locate "setupact.log" and "setuperr.log", then copy them to your Desktop.

Do the same for this path:

C:\$Windows.~BT\Sources\Rollback\

If the files are found, please zip and share them.

If Windows displays an error saying the folder cannot be found, it means they were indeed permanently deleted. In that case, please proceed with running the In-place Upgrade one more time. The rollback process will automatically recreate these folders and generate a fresh set of logs for analysis.

Regarding the file you shared: This file directly in C:\Windows is only the initialization logs from when the Setup wizard is first opened on the desktop. Unfortunately, it doesn't help in this specific case.

Looking forward to your reply.
Kevin Cook 0 Reputation points

2026-07-16T18:55:15.3633333+00:00

I long ago disabled hidden files ...

When I check for the directories they truly are gone

I will try the process again
David-M 121.9K Reputation points Independent Advisor

2026-07-16T18:59:30.7933333+00:00

Thanks for the clarification.

In this case, any corrupted cache or leftover installation files from the previous attempt have been completely cleared.

Because of this, there is a chance the In-place Upgrade might succeed on this next attempt.

However, if it fails again, collect the files and share them with me so I can analyze them and see how to work around this.

Please let me know how it goes.

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-16T20:30:08.63+00:00

we had a power outage about 1:30 into the install ... I was able to reboot ... and am restarting the install without cleaning up the files ... there were Panther files (I saved them) and no Rollback files
Kevin Cook 0 Reputation points

2026-07-16T20:31:21.7+00:00

this time I have moved the taskbar to my secondary screen ... and have task manager open so I can monitor the CPU of the setup process
Kevin Cook 0 Reputation points

2026-07-16T21:44:57.2733333+00:00

Here are the requested files

https://drive.google.com/file/d/16Mj2vSA5y44BNzhc8bwCEnP8Eg9X9fDE/view?usp=sharing
Kevin Cook 0 Reputation points

2026-07-16T21:52:25.3366667+00:00

Same error
Kevin Cook 0 Reputation points

2026-07-16T22:21:30.03+00:00

I have researched and found that this can be caused by McAfee being installed ... I have looked up the instructions for removing it and will await your advice
Kevin Cook 0 Reputation points

2026-07-16T22:45:23.0366667+00:00

Checked Device Manager ... no red

Intel(R) Turbo Boost Max Technology 3.0 Driver has a yellow

Device status: this device cannot start (Code 10)

Upon research ... this is expected and can be removed if desired
Kevin Cook 0 Reputation points

2026-07-17T10:26:47.8166667+00:00

I removed McAfee ... rebooted ... tried the install of Paint from the MS Store ... and it errored at the same point

I then reinstalled McAfee
David-M 121.9K Reputation points Independent Advisor

2026-07-17T12:37:03.6466667+00:00
Thanks for the details.

I analyzed the logs you shared. One interesting thing I found is an error related to conflicts with third-party security software. I found a specific mention of software called "Spybot 3", though it could also be McAfee. Even with its modules disabled, it might be negatively affecting the system during the upgrade.

Based on what I found in the logs and the details you provided, I suggest doing the following:

1 = Because of the sudden power loss, the hidden temporary folders contain corrupted files. They need to be deleted:

Go to your C: drive and permanently delete these folders if they exist: C:\$WINDOWS.~BT and C:\$WINDOWS.~WS.

Note: If there is a permission error, boot Windows into Safe Mode to delete them.

2 = As I said above, the log shows critical failures while trying to migrate firewall rules from third-party software, including existing security layers, specifically linked to Spybot 3 and network filter drivers.

Uninstall Spybot completely.

Uninstall McAfee through the Control Panel.

Since a standard uninstallation leaves residual drivers, run the official "McAfee Consumer Product Removal (MCPR)" tool immediately after the initial uninstall to ensure no network filter drivers block the update phase.

3 = The driver showing a yellow warning triangle (Code 10) can block the SAFE_OS boot phase.

Open Device Manager.

Right-click the affected Intel(R) Turbo Boost Max Technology 3.0 driver.

Select Disable device. It will be re-enabled and updated automatically after a successful Windows update.

4 = Repair system files and clear pending actions. This will help clean the pending registry state:

Open Command Prompt (CMD) as an Administrator.

Run this command to revert any pending update blocks:

dism /online /cleanup-image /revertpendingactions

Next, run these repair commands:

DISM /Online /Cleanup-Image /RestoreHealth sfc /scannow

Restart (not shutdown) the computer.

After performing these procedures, try the in-place upgrade again.

Please let me know how it goes.

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-17T14:49:34.6+00:00

re: Spybot ... it is a separate program from McAfee ... I uninstalled it

re: C:$WINDOWS.~BT and C:$WINDOWS.~WS both exist .. both deleted no permissions issue

re: McAfee ... it was uninstalled via Control Panel after the last failure

re: Intel(R) Turbo Boost Max Technology 3.0 driver. ... disabled ...
should it not be removed as it can never start?

re: dism /online /cleanup-image /revertpendingactions ... ran successfully

re: DISM /Online /Cleanup-Image /RestoreHealth ran successfully

re: sfc /scannow ran successfully

rebooting now

==============================================================

Command line output:

Windows PowerShell

Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> dism /online /cleanup-image /revertpendingactions

Deployment Image Servicing and Management tool

Version: 10.0.26100.8737

Image Version: 10.0.26200.8875

Reverting pending actions from the image...

The operation completed. Revert of pending actions will be attempted after the reboot.

The operation completed successfully.

PS C:\WINDOWS\system32> DISM /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool

Version: 10.0.26100.8737

Image Version: 10.0.26200.8875

[==========================100.0%==========================] The restore operation completed successfully.

The operation completed successfully.

PS C:\WINDOWS\system32> sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.
Kevin Cook 0 Reputation points

2026-07-17T14:56:21.66+00:00

Reboot successful ... Starting in place upgrade again
Kevin Cook 0 Reputation points

2026-07-17T16:14:23.37+00:00

I will upload the files again
Kevin Cook 0 Reputation points

2026-07-17T16:20:10.4833333+00:00

https://drive.google.com/file/d/11xh7-J5AJxDVu_nJDSOvbQotIvlfSK_M/view?usp=sharing
Kevin Cook 0 Reputation points

2026-07-17T16:22:32.93+00:00

Reinstalled McAfee
David-M 121.9K Reputation points Independent Advisor

2026-07-17T16:55:48.2833333+00:00
Thanks for the details.

For now, I suggest you do not reinstall McAfee.

The logs confirm that the installation is still failing with that error due to driver conflicts. This may be because the standard McAfee uninstallation via Control Panel is not thorough enough; it leaves behind hidden, deep-level kernel drivers that continue to block the Windows Safe Boot process. Based on other information I found in the logs, I believe there are leftover Spybot firewall rules and outdated firmware.

Therefore, I suggest doing the following:

Remove McAfee entirely using the official developer tool. Simply using the Control Panel does not cut it for major Windows upgrades. Download and run the McAfee Consumer Product Removal (MCPR) tool from the official McAfee website to completely purge those hidden remnants. Do not reinstall it until the upgrade is fully finished. There is no need to worry about being unprotected, as Windows Security automatically takes over system protection the exact moment a third-party antivirus is removed.

Even though Spybot was uninstalled, Based on the logs, leftover registry keys and files are still triggering the upgrade error. Using Revo Uninstaller is an excellent choice here. Install the free version of Revo Uninstaller and run its Advanced Scan feature to completely find and delete all remaining Spybot folders, files, and registry entries.

These upgrade logs show a critical failure when attempting to migrate corrupted firewall rules left behind by Spybot. To resolve this, open Command Prompt as an administrator and execute this exact command: netsh advfirewall reset. This completely restores the firewall to its factory default state and wipes out the problematic rules.

Additional suggestions:

Update the BIOS and critical system drivers: Visit the motherboard manufacturer website to download and flash the latest BIOS update, and make sure the system Chipset and Bluetooth drivers are fully updated as well, as I found evidence that these drivers, when outdated, may cause issues when upgrading.

Before starting the next upgrade attempt, completely disconnect the internet connection (unplug the Ethernet cable and disconnect from Wi-Fi). Run the installation using an ISO file and select the option to not download updates during the setup. This prevents Windows from fetching conflicting generic drivers during the process. Also, make sure to unplug any external peripherals connected to the PC during the upgrade, such as external hard drives, printers, or USB dongles, leaving only the keyboard and mouse connected.

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-17T23:00:29.07+00:00

Thank you for the replies ... I will get back to you with detailed results as soon as I can ... The next couple of days are kind of busy for me so it may take some time
Kevin Cook 0 Reputation points

2026-07-17T23:16:29.03+00:00

I have used REVO in the past to remove things that did not properly remove ... BUT ... it would show the app (in this case SPYBOT) in its list ... What do you suggest I do if Spybot does not show up in the list

EDIT: I have now installed and run REVO ... Spybot is not among the listed programs under ALL PROGRAMS ... neither is Microsoft PAINT which I hoped could be removed and then I could try again with the STORE ... From what I can see ... the Advanced mode is only offered when uninstalling from the list ... should I reinstall Spybot and then remove it?
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-18T00:31:55.3266667+00:00

Hi Kevin,

Sorry for cutting in but given the number of issues shown in your logs, a clean install is the most reliable and time‑efficient solution. The upgrade is failing due to several independent problems: leftover McAfee kernel drivers, corrupted Spybot firewall rules, migration plugin failures, registry permission errors, and Store app deployment corruption. Any one of these can block a Windows upgrade, and your logs show all of them occurring at once.

Because the SafeOS boot environment is failing to start, Windows Setup cannot proceed with the upgrade. At this point, repairing each subsystem individually would take significantly longer than performing a clean install. A clean install removes all corrupted firewall rules, leftover antivirus drivers, broken registry entries, and damaged Store app manifests, giving you a completely clean and stable baseline.

If your data is backed up, a clean install is the fastest and most reliable way to get Windows 11 working normally again.

Of course, you can try manually to repair the damage but the hours that takes, fyi Paint will not show in Revo along with the leftovers from Spybot.
Kevin Cook 0 Reputation points

2026-07-18T01:24:09.65+00:00

HI Bryce ... sure ... I understand ... and I would consider it if this incarnation did not have so many things to reinstall ... including my own home written apps
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-18T07:51:10.4133333+00:00

based on your issues from the errors you posted I have formatted a check list using AI that might help to manually clean up your computer to a working state. I find a list formatted this way is easier to work from, hope it helps.

USE CMD Admin for the codes as AI didn't make that clear.

https://copilot.microsoft.com/shares/pages/RtTNkfw9E5Q384CaHkhaR

Sorry David for butting in and some of the info you have posted already.
Kevin Cook 0 Reputation points

2026-07-18T10:52:30.6266667+00:00

Many thanks Bryce

At present I am stuck using Revo ... as Spybot is not currently installed and I would like to use Revo to clean up any stray directories / Registry entries ... BUT ... I am not finding a way to search as Spybot is not currently installed and I am not finding a search

EDIT: I found SPYBOT when doing a FORCED UNINSTALL ... but I will double check the 4 directories and Registry entries just to be sure as Revo says that there are no leftover items ... and I found that to be untrue as at least the directories are still there
David-M 121.9K Reputation points Independent Advisor

2026-07-18T14:06:44.6266667+00:00
Great catch. You are entirely right to double-check. Revo's "Forced Uninstall" is a brilliant tool, but it relies on specific registry strings. Since those 4 directories are still intact, the ghost registry entries and corrupted firewall rules are likely still present, which are probably blocking the Windows upgrade.

I suggest doing the following:

Try to delete those 4 directories manually via File Explorer.

If Windows throws an "Access Denied" or "File in use" error, restart the PC in Safe Mode and delete them from there.

Safe Mode prevents residual Spybot drivers from loading, unlocking the folders for deletion.

Once the folders are gone, remember to execute the firewall reset command mentioned earlier.

Open Command Prompt as an Administrator.

Execute this exact command: netsh advfirewall reset

Once Spybot is completely cleared out, remember to also run the official "McAfee Consumer Product Removal (MCPR)" tool to ensure those hidden kernel drivers are gone too.

Take the time you need; there is absolutely no rush. Provide an update on how the manual file cleanup goes whenever a chance to look at it comes up!

Feel free to ask any questions you may have.
Kevin Cook 0 Reputation points

2026-07-18T14:20:55.5766667+00:00
Here is what I have done so far ... now I have to leave for appointments

I have combined David and Bryces suggestions and have

1)

a) ran MCPR.exe to remove McAfee - executed without error Reboot b) ran Device Security Core Isolation YELLOW - Memory Integrity YELLOW - Local Security Authority ALL OTHER SECURITY FEATURES OK (NO BITLOCKER)

POWERSHELL - netsh advfirewall reset ok

Created and saved MSINFO32 and saved

REVO found nothing when doing a forced uninstall

a) Checked for directories

a) Program Files (x76)

removed Spybot - Search & Destroy removed Spybot - Search & Destroy 2

b) Program Files

No Spybot directores

c) C:\Users<YourName>\AppData\Local\Spybot

No Spybot

d) C:\Users<YourName>\AppData\Roaming\Spybot

No Spybot

Searched /USES for any more spybot references and removed them

Regedit a) Created restore point b) HKEY_LOCAL_MACHINE\SOFTWARE\Spybot - Search & Destroy - Does not exist c) HKEY_CURRENT_USER\SOFTWARE\Spybot - Search & Destroy - Does not exist d) Searched Regedit for Spybot references
Empty extension entries License key entry Internet Settings Entries << Did not remove them >>

a) deleted C:$WINDOWS.~BT b) POWERSHELL
i) PS C:\WINDOWS\system32> takeown /f "HKLM\SYSTEM\Setup\Upgrade" /a ERROR: The system cannot find the path specified.

Downloaded a fresh iso https://www.microsoft.com/en-us/software-download/windows11

Disconnected Internet

Disconnected devices

Take backup

Did not flash bios yet

Ran setup.exe again just to see if anything changed

Seems to be the same error but McAfee and Spybbot seem to be gone now

Results https://drive.google.com/file/d/1LOzr0SC107NKRXXtpRlTfPvEx1oB0mXH/view?usp=sharing
Kevin Cook 0 Reputation points

2026-07-18T14:30:22.2566667+00:00

Here is the text from above

https://drive.google.com/file/d/1Qs9HNOwryiJEVB6jZVMUNnTVDbbW1XZA/view?usp=drive_link
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-19T08:37:39.3366667+00:00
when searching the regedit, delete anything that is from spybot.

use CMD admin for netsh advfirewall reset

Can you repair these so they are green

Core Isolation

YELLOW - Memory Integrity

YELLOW - Local Security Authority

PowerShell admin use the following and post back if any drivers are listed

Get-WmiObject Win32_PnPSignedDriver | Where-Object { $_.IsSigned -eq $false } | Select-Object DeviceName, DriverProviderName, DriverVersion, InfName
Kevin Cook 0 Reputation points

2026-07-19T10:09:11.71+00:00

At this point I am reluctant to make any more changes as everything seems to be working except for the in-place upgrade

Memory Integrity is the only one that is yellow and the driver conflict is the driver for my SSD
Kevin Cook 0 Reputation points

2026-07-19T10:10:11.5766667+00:00

It seems that MS has deleted my steps that resolved the MSPaint install
_AW_ 68,651 Reputation points Volunteer Moderator

2026-07-19T13:49:12.2066667+00:00

@Kevin Cook that post is at https://learn.microsoft.com/en-us/answers/c/2742201
Kevin Cook 0 Reputation points

2026-07-19T15:13:39.0266667+00:00

Interesting ... I wonder why I received a warning on the screen and an email about it being a violation
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-19T19:10:43.9766667+00:00

Sorry Kevin, the system here sometimes does that. Can you update just SSD driver.

The PS code I gave only lists drivers that do not work with Core Isolation, it does not alter your computer.

Did paint work in the end?
Kevin Cook 0 Reputation points

2026-07-19T19:25:51.9866667+00:00

re: The driver ... "The best drivers for your device are already installed"

re: Paint ... yes it is working
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-19T20:13:21.9766667+00:00

Was that using Windows Update, using the manufacturer drivers are best, Windows Update or using device manager doesn't put in the best drivers imo.

Which SSD model are you using.
Kevin Cook 0 Reputation points

2026-07-19T21:19:19.0833333+00:00

At present I need to catch up on my photos as I have a deadline so I wont be making any changes for the moment

Samsung SSD 860 EVO 1TB
BryceSor 5,480 Reputation points Volunteer Moderator

2026-07-20T02:23:44.8833333+00:00

Windows supplies those drivers which are 10.0.26100.8521 on my system

Have you got Samsung Magician installed which can update firmware and keep an eye on the drive

https://semiconductor.samsung.com/consumer-storage/magician/

Sorry for this last post. 😊
Kevin Cook 0 Reputation points

2026-07-20T02:26:48.5966667+00:00

No Problem Bryan and thank you again

Answer 3

David-M 121.9K Independent Advisor

Thanks for the clarifications.

McAfee is almost certainly causing this issue. On your specific version of Windows 11, McAfee's security features can easily conflict with how the Microsoft Store installs apps. When Paint crashed, McAfee may have blocked Windows from saving the app files properly. Now, Windows is confused; it thinks Paint is still installed, but the files are actually gone. This "ghost" state may be what is blocking the Microsoft Store from reinstalling it.

To fix this, you can temporarily disable McAfee, clear the system's memory of the "ghost" Paint app, and install a fresh copy:

Temporarily disable all protection modules in your McAfee antivirus (such as Real-Time Scanning and Firewall). Because third-party antivirus interfaces change frequently, please consult the official McAfee support documentation if you are unsure how to turn off these modules.
Right-click the Start button, select "Terminal (Admin)" or "PowerShell (Admin)", paste the following command, and press Enter to clear the broken Paint registration:

Get-AppxPackage -AllUsers *Microsoft.MSPaint* | Remove-AppxPackage -AllUsers

Press the "Windows Key + R", type wsreset.exe, and press Enter. Wait about 10 seconds for the blank window to close and the Microsoft Store to open, then close the Store.
Go back to your Admin PowerShell window, paste the following command, and press Enter to install a clean copy of Paint directly:

winget install 9PCFS5B6T72H --source msstore

If prompted to agree to terms, type Y and press Enter.

Once Paint is installed and opening normally, remember to turn all McAfee protection modules back on immediately to keep your computer secure.

If the problem persists, please let me know, and I will provide another method.

Feel free to ask any questions you may have.

Kevin Cook 0 Reputation points

2026-07-14T21:15:28.9233333+00:00
Temporarily disable all protection modules in your McAfee antivirus (such as Real-Time Scanning and Firewall). Because third-party antivirus interfaces change frequently, please consult the official McAfee support documentation if you are unsure how to turn off these modules.

Done ... Real-Time Protection disabled ... Firewall not setup

Right-click the Start button, select "Terminal (Admin)" or "PowerShell (Admin)", paste the following command, and press Enter to clear the broken Paint registration: Get-AppxPackage -AllUsers *Microsoft.MSPaint* | Remove-AppxPackage -AllUsers

Done

Press the "Windows Key + R", type wsreset.exe, and press Enter. Wait about 10 seconds for the blank window to close and the Microsoft Store to open, then close the Store.

Done

Go back to your Admin PowerShell window, paste the following command, and press Enter to install a clean copy of Paint directly: winget install 9PCFS5B6T72H --source msstore

RESULTS

PS C:\WINDOWS\system32> winget install 9PCFS5B6T72H --source msstore

The msstore source requires that you view the following agreements before using.

Terms of Transaction: https://aka.ms/microsoft-store-terms-of-transaction

The source requires the current machine's 2-letter geographic region to be sent to the backend service to function properly (ex. "US").

Do you agree to all the source agreements terms?

[Y] Yes [N] No: Y

Found Paint [9PCFS5B6T72H] Version Unknown

This package is provided through Microsoft Store. WinGet may need to acquire the package from Microsoft Store on behalf of the current user.

Agreements for Paint [9PCFS5B6T72H] Version Unknown

Version: Unknown

Publisher: Microsoft Corporation

Publisher Url: http://windows.microsoft.com

License: https://go.microsoft.com/fwlink/?LinkId=529064

Privacy Url: https://go.microsoft.com/fwlink/?LinkId=521839

Copyright: (c) Microsoft Corporation

Agreements:

Category: Multimedia design

Pricing: Freemium

Free Trial: No

Terms of Transaction: https://aka.ms/microsoft-store-terms-of-transaction

Seizure Warning: https://aka.ms/microsoft-store-seizure-warning

Store License Terms: https://aka.ms/microsoft-store-license

The publisher requires that you view the above information and accept the agreements before installing.

Do you agree to the terms?

[Y] Yes [N] No: Y

Starting package install...

███████████████████████████ 90%

Failed to install or upgrade Microsoft Store package. Error code: 0x80073cf6
Kevin Cook 0 Reputation points

2026-07-14T21:19:10.7+00:00

I looked up that error and instructions for it ... I went to Settings> Apps and looked for Microsoft Store ... and it is not even installed
Kevin Cook 0 Reputation points

2026-07-14T21:22:52.8966667+00:00

Holding for now ... Should I run ... wsreset -i
Kevin Cook 0 Reputation points

2026-07-16T17:25:13.9666667+00:00

I find the two files in question in c:/Windows ... with todays date ... but Setuperr.log is empty

Setupact.log is here https://drive.google.com/file/d/1n7XmoED1ewZ1sIi4btU1r1MfqcsFK-gm/view?usp=sharing

Answer 4

David-M 121.9K Independent Advisor

Hi. I'm David, and I'm happy to help you.

To be able to assist you better, please clarify the following:

Do you have a third-party antivirus installed? (e.g., Kaspersky, McAfee, Avast, etc.) If yes, which one?
Do you have any VPN software installed? (Even if it's not running at the moment) If yes, which one?

Also. What is the version and "OS Build" of your Windows 11?

Press "Windows + R", type winver, and click OK.

If you prefer, share a screenshot. Use the shortcut "Windows + Shift + S" to use the screenshot tool.

Be sure to censor your email address if it appears. The Microsoft Q&A is public.

Looking forward to your reply.

Kevin Cook 0 Reputation points

2026-07-14T16:46:58.1166667+00:00
To be able to assist you better, please clarify the following:

Do you have a third-party antivirus installed? (e.g., Kaspersky, McAfee, Avast, etc.) If yes, which one?

McAfee

Do you have any VPN software installed? (Even if it's not running at the moment) If yes, which one?

No

Also. What is the version and "OS Build" of your Windows 11?

26200.8655