[SOLVED] Error 8007312; SFC /scannow and SfcFix Both Clean

Thanks. Please do the following.

File Identification
1. Run FRST by Right-Clicking on the file and choosing Run as administrator. You can use the one that is on your desktop for this purpose.
2. Copy/Paste components;software;COMCTL32.dll;autorun.dll into the Search box of the FRST window.
3. Click the Search Files button.
4. When the search is done it will open a notepad window with the results. Can you copy/paste the contents of this window into your next post?
 
Farbar Recovery Scan Tool (x86) Version: 29-06-2016
Ran by Joe (2016-07-01 23:05:59)
Running from C:\Users\Joe\Desktop
Boot Mode: Normal

================== Search Files: "components;software;COMCTL32.dll;autorun.dll" =============

C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:54] 1680896 ____A (Microsoft Corporation) 885E18B2D0A445FB637850282530EB72 [File is digitally signed]

C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18837_none_3b90d8dc36473182\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:56] 0530432 ____A (Microsoft Corporation) 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\Windows\System32\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:56] 0530432 ____A () 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\Windows\System32\config\components
[2009-07-13 22:03][2016-06-30 17:20] 19398656 ____A () 469DBF91D618DF1B3B919A0D6FAC447A [File not signed]

C:\Windows\System32\config\software
[2009-07-13 22:03][2016-07-01 23:02] 49807360 ____A () [File not signed]

C:\Windows\System32\config\RegBack\SOFTWARE
[2015-08-26 22:46][2016-07-01 01:52] 49754112 ____A () [File not signed]

C:\Windows\RegBak\JOE-PC\6-27-2016\Windows\System32\config\software
[2016-06-27 13:48][2016-06-27 13:48] 50069504 ____A () [File not signed]

C:\Windows\RegBak\JOE-PC\6-26-2016\Windows\System32\config\components
[2016-06-26 14:31][2016-06-26 12:39] 19398656 ____A () D4D51A408BF9413723EAB895F44A3AC9 [File not signed]

C:\Windows\RegBak\JOE-PC\6-26-2016\Windows\System32\config\software
[2016-06-26 14:31][2016-06-26 14:30] 49807360 ____A () [File not signed]

C:\Windows\erdnt\Hiv-backup\SOFTWARE
[2015-05-07 15:52][2015-09-30 13:38] 49238016 ____A () [File not signed]

C:\Windows\erdnt\cache\comctl32.dll
[2015-05-07 16:13][2015-04-24 13:56] 0530432 ____A (Microsoft Corporation) 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23039_none_2b1a83ee457cfdf3\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:57] 1680896 ____A (Microsoft Corporation) F7F754DDAA6AF9D3F3549F7013BFDF70 [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:54] 1680896 ____A (Microsoft Corporation) 885E18B2D0A445FB637850282530EB72 [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.23039_none_ee6532a082bc3b56\comctl32.dll
[2015-08-27 16:59][2015-04-24 14:00] 0530432 ____A (Microsoft Corporation) 71DD9528DD7D36EB853020401D66089D [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:56] 0530432 ____A (Microsoft Corporation) 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.23039_none_3c1c4e5d4f63373c\comctl32.dll
[2015-08-27 16:59][2015-04-24 14:00] 0530432 ____A (Microsoft Corporation) 71DD9528DD7D36EB853020401D66089D [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18837_none_3b90d8dc36473182\comctl32.dll
[2015-08-27 16:59][2015-04-24 13:56] 0530432 ____A (Microsoft Corporation) 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\RegBak\JOE-PC\6-27-2016\Windows\System32\config\software
[2016-06-27 13:48][2016-06-27 13:48] 50069504 ____A () [File not signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\RegBak\JOE-PC\6-26-2016\Windows\System32\config\components
[2016-06-26 14:31][2016-06-26 12:39] 19398656 ____A () D4D51A408BF9413723EAB895F44A3AC9 [File not signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\RegBak\JOE-PC\6-26-2016\Windows\System32\config\software
[2016-06-26 14:31][2016-06-26 14:30] 49807360 ____A () [File not signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\erdnt\Hiv-backup\SOFTWARE
[2015-05-07 15:52][2015-09-30 13:38] 49238016 ____A () [File not signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\erdnt\cache\comctl32.dll
[2015-05-07 16:13][2015-04-24 13:56] 0530432 ____A (Microsoft Corporation) 58788565442368B0615DDAF1D452B843 [File is digitally signed]

C:\RegBackup\JOE-PC\6.29.2016_7.04.52-PM\C\Windows\System32\Config\components
[2016-06-29 19:04][2016-06-29 19:04] 19251200 ____A () 263482AC1D30396AC52BF538436FA4B5 [File not signed]

C:\RegBackup\JOE-PC\6.29.2016_7.04.52-PM\C\Windows\System32\Config\software
[2016-06-29 19:04][2016-06-29 19:04] 49901568 ____A () [File not signed]

C:\RegBackup\JOE-PC\6.16.2016_9.18.37-AM\C\Windows\System32\Config\components
[2016-06-16 09:18][2016-06-16 09:18] 19120128 ____A () 06991B4BBFEEAA3A30B06DD93ED5F133 [File not signed]

C:\RegBackup\JOE-PC\6.16.2016_9.18.37-AM\C\Windows\System32\Config\software
[2016-06-16 09:18][2016-06-16 09:18] 49573888 ____A () [File not signed]

C:\RegBackup\JOE-PC\5.7.2016_6.36.52-PM\C\Windows\System32\Config\components
[2016-05-07 18:36][2016-05-07 18:36] 20799488 ____A () E300C87B246A09A6BF785B6F1DB4E474 [File not signed]

C:\RegBackup\JOE-PC\5.7.2016_6.36.52-PM\C\Windows\System32\Config\software
[2016-05-07 18:36][2016-05-07 18:37] 49278976 ____A () [File not signed]

C:\RegBackup\JOE-PC\5.21.2016_6.19.24-PM\C\Windows\System32\Config\components
[2016-05-21 18:19][2016-05-21 18:19] 20799488 ____A () D95C6010BC7D91C041DA4FE272B798E6 [File not signed]

C:\RegBackup\JOE-PC\5.21.2016_6.19.24-PM\C\Windows\System32\Config\software
[2016-05-21 18:19][2016-05-21 18:19] 50216960 ____A () [File not signed]

C:\RegBackup\JOE-PC\4.13.2016_12.44.25-AM\C\Windows\System32\Config\components
[2016-04-13 00:44][2016-04-13 00:44] 20566016 ____A () 47D9CA3CCE839A48F375576E53BCE1DF [File not signed]

C:\RegBackup\JOE-PC\4.13.2016_12.44.25-AM\C\Windows\System32\Config\software
[2016-04-13 00:44][2016-04-13 00:44] 49586176 ____A () [File not signed]

C:\RegBackup\JOE-PC\3.30.2016_8.27.12-PM\C\Windows\System32\Config\components
[2016-03-30 20:27][2016-03-30 20:27] 20566016 ____A () 8DD934F71A2979E812C474ED51443956 [File not signed]

C:\RegBackup\JOE-PC\3.30.2016_8.27.12-PM\C\Windows\System32\Config\software
[2016-03-30 20:27][2016-03-30 20:27] 49373184 ____A () [File not signed]

====== End of Search ======
 
Looks OK. Please do the following.

Boot Your Failed Machine with USB Drive
 1. Insert the USB Drive into your Failed computer (should already be plugged in)
2. Shut down this computer.
3. Ensure that your system is configured to boot 1st from the USB Drive before your main hard drive. There are variations on how to do this depending on what machine you have
however a couple links that show the general steps can be found here and here.
4. Once the BIOS is set to boot from the USB Drive, when you boot your machine with the USB Drive plugged in you should get a message asking you to hit any key to boot from the USB.
Go ahead and do this.
5. When it's fully loaded you will be at a prompt as follows: x:\windows\system32

Let me know when you are here.
 
Good. Type FRST in the command prompt and hit enter.

The FRST program should open. If it does, click the Fix button.

It will run for a few seconds and then notepad will open. Near the bottom of the notepad file it should say 39 file(s) copied.

Let me know.
 
OK. Remove the USB drive and boot normally. Once booted, please do the following. I understand it may error out right away but I would still like to see the log if it does. I'm also going to turn in for the evening but will check in the morning for the log. Have a good evening.

SFC Scan

  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
SFC /scannow got to 41% then it quit with the message "Windows Resource Protection found corruption it could not fix..." Here is the log:

cbs.txt - Google Drive

I hope we made progress today. Talk to you tomorrow. Thanks.
 
Yes we made progress. We couldn't even get SFC to run and now it gets to 41% so this is good. But just to set expectations I still don't know if what we will do will result in fixing your machine completely but I'm going to try.

Code: 
2016-07-01 23:51:15, Error                 CSI    000000cd (F) STATUS_OBJECT_NAME_NOT_FOUND #1919865# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES), oa = @0x62e0c8->OBJECT_ATTRIBUTES {s:24; rd:NULL; on:[120]"\??\C:\Windows\WinSxS\x86_microsoft-windows-i..l-keyboard-00000452_31bf3856ad364e35_6.1.7600.16385_none_e7898fb4c542d3a7"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0x62e0e8, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000034]
2016-07-01 23:51:15, Error                 CSI    000000ce@2016/7/2:03:51:15.271 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2016-07-01 23:51:18, Error                 CSI    000000cf (F) STATUS_OBJECT_NAME_NOT_FOUND #1919864# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingDirectory(...)[gle=0xd0000034]
2016-07-01 23:51:18, Error                 CSI    000000d0 (F) STATUS_OBJECT_NAME_NOT_FOUND #1919863# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingDirectory(flags = 0, da = (SYNCHRONIZE), oa = @0x62e4ac->SIL_OBJECT_ATTRIBUTES {s:20; on:"x86_microsoft-windows-i..l-keyboard-00000452_31bf3856ad364e35_6.1.7600.16385_none_e7898fb4c542d3a7"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)
[gle=0xd0000034]

Please do the following. If you get an error (which I suspect you may) then do Step#2 instead. Only do Step#2 if you get an error in Step#1.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCScript.txt, and save this to your Desktop.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
  5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - File Identification
1. Run FRST by Right-Clicking on the file and choosing Run as administrator. You can use the one that is on your desktop for this purpose.
2. Copy/Paste KBDUKX.DLL into the Search box of the FRST window.
3. Click the Search Files button.
4. When the search is done it will open a notepad window with the results. Can you copy/paste the contents of this window into your next post?
 

Attachments

Farbar Recovery Scan Tool (x86) Version: 02-07-2016
Ran by Joe (2016-07-02 11:09:43)
Running from C:\Users\Joe\Desktop
Boot Mode: Normal

SFCFix still won't run. Got the 0xc0150004 error again. What exactly does that mean?


================== Search Files: "kbdukx.dll" =============

C:\Windows\System32\KBDUKX.DLL
[2009-07-13 19:25][2009-07-13 21:06] 0007168 ____A (Microsoft Corporation) B75E305F88A7755B824D96C78B573EB2 [File is digitally signed]

====== End of Search ======
 
Got the 0xc0150004 error again. What exactly does that mean?
Click to expand...
Basically it means a file is missing or corrupt. Please do the following.

File Identification
1. Run FRST by Right-Clicking on the file and choosing Run as administrator. You can use the one that is on your desktop for this purpose.
2. Copy/Paste msvcp80.dll into the Search box of the FRST window.
3. Click the Search Files button.
4. When the search is done it will open a notepad window with the results. Can you copy/paste the contents of this window into your next post?
 
Farbar Recovery Scan Tool (x86) Version: 02-07-2016
Ran by Joe (2016-07-02 12:44:13)
Running from C:\Users\Joe\Desktop
Boot Mode: Normal

================== Search Files: "msvcp80.dll" =============

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcp80.dll
[2015-08-27 00:12][2015-08-27 00:12] 0548864 ____A (Microsoft Corporation) 4C8A880EABC0B4D462CC4B2472116EA1 [File not signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll
[2015-08-27 00:12][2015-08-27 00:12] 0554832 ____A (Microsoft Corporation) 0B3595A4FF0B36D68E5FC67FD7D70FDC [File is digitally signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad\msvcp80.dll
[2015-08-27 00:12][2015-08-27 00:12] 0548864 ____A (Microsoft Corporation) 2BC650257FB0867ABD54FD460EC2BAFC [File not signed]

====== End of Search ======
 
Btw, I don't have access to Internet Options on IE (I click on it but nothing happens) so that's a big problem. Did you notice the "restrictions" in IE on the full FRST I ran a couple days ago? Anything that can be done there? Thanks.
 
Btw, I don't have access to Internet Options on IE (I click on it but nothing happens) so that's a big problem. Did you notice the "restrictions" in IE on the full FRST I ran a couple days ago? Anything that can be done there? Thanks.
Click to expand...
Yes I did notice and yes we can take care of but it is very minor in comparison to what we are dealing with now. We can address that if we are able to get your machine healthy again.

After the fix below, there will be a file named perms on your desktop. Don't delete this file. We will need it later.


Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST by Right-Clicking on the file and choosing Run as administrator. In your case it may already be open.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

You must log in or register to reply here.
Back
Top