Error when running sfcfix.exe : Entry Point Not Found

[wasinu]

zcomputerwiz

I'd like to take a look at the event logs.

Event Log Collection

• Download VEW by Vino Rosso here: VEW.EXE
• Right click the file and select Run as administrator and click Continue or Allow at the User Account Control Prompt.
• Click the check boxes next to Application and System located under Select log to query on the upper left.
• Under Select type to list on the right click the boxes next to Error, Warning and Critical (not XP).
• Under Number or date of events select Number of events and type 20 in the box next to 1 to 20 and click Run.
• Once it finishes it will display a log file in notepad.
• Copy and paste its entire contents into your next reply.

VIEW (Vino Rosso) log + Full System Event Log
Thank you

 

[zcomputerwiz]

Please make sure you back up any important data on this server ASAP.
The event logs indicate problems (read failures, disk missing) with one of the physical disks and possible problems with the storage backplane.
Because of this the virtual disk (raid array) is in a degraded state.

Is there a single enclosure with three disks in this server and one virtual disk?

If this server is under warranty, I would recommend contacting Dell support to find out which drive has problems and replace it.

 

[wasinu]

Please make sure you back up any important data on this server ASAP.
The event logs indicate problems (read failures, disk missing) with one of the physical disks and possible problems with the storage backplane.
Because of this the virtual disk (raid array) is in a degraded state.

Is there a single enclosure with three disks in this server and one virtual disk?

If this server is under warranty, I would recommend contacting Dell support to find out which drive has problems and replace it.

Oh! Thank you very much, I will try to contact with DELL how to deal with this problem



C:\Windows\System32>omreport storage pdisk controller=0
List of Physical Disks on Controller PERC H710 Adapter (Slot 6)


Controller PERC H710 Adapter (Slot 6)
ID : 0:1:0
Status : Ok
Name : Physical Disk 0:1:0
State : Online
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 558.38 GB (599550590976 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL70===
Part Number : CN05XTFH======
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8C0E91


ID : 0:1:1
Status : Non-Critical
Name : Physical Disk 0:1:1
State : Foreign
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 0.00 GB (0 bytes)
Available RAID Disk Space : 558.38 GB (599550590976 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL70===
Part Number : CN05XTFH==========
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8BF995


ID : 0:1:2
Status : Ok
Name : Physical Disk 0:1:2
State : Online
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 558.38 GB (599550590976 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL70===
Part Number : CN05XTFH====
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8C177D


C:\Windows\System32>

 

[zcomputerwiz]

[COLOR=#161616]ID : 0:1:1[/COLOR]
[COLOR=#161616]Status : Non-Critical[/COLOR]
[COLOR=#161616]Name : Physical Disk 0:1:1[/COLOR]
[COLOR=#161616]State : Foreign[/COLOR]
[COLOR=#161616]Revision : ESF7[/COLOR]
[COLOR=#161616]Capacity : 558.38 GB (599550590976 bytes)[/COLOR]
[COLOR=#161616]Used RAID Disk Space : 0.00 GB (0 bytes)[/COLOR]
[COLOR=#161616]Available RAID Disk Space : 558.38 GB (599550590976 bytes)[/COLOR]
[COLOR=#161616]Vendor ID : DELL(tm)[/COLOR]
[COLOR=#161616]Product ID : ST3600957SS[/COLOR]

This is the disk with the problems. It is Disk 1, they are numbered 0,1,2.
I don't know which slot this is in the enclosure, the physical numbering doesn't necessarily match the logical numbering.
Looks like they are all Seagate ST3600957.

The drive is not recognized as a member of the array (foreign).

If the virtual disk was created using RAID level 5 it is very important that the problem be resolved as soon as possible.
RAID 5 can tolerate a single disk failure, but if either of the other two disks that are online at this point develop problems it will result in data loss.

If I recall correctly, OpenManage allows you to blink the disk indicator LED so you can determine which drive it is when the replacement arrives.

 

[wasinu]

I have already fixed the foreign disk in the 3 disks raid array , follow this link
How-To : Replace dead / faulty drive in Dell PERC RAID array | Hall Of Tips
and now all of disks are in ready state.



C:\Windows\System32>omreport storage vdisk controller=0
Virtual Disk 0 on Controller PERC H710 Adapter (Slot 6)


Controller PERC H710 Adapter (Slot 6)
ID : 0
Status : Ok
Name : Virtual Disk 0
State : Ready
Hot Spare Policy violated : Not Assigned
Encrypted : No
Layout : RAID-5
Size : 1,116.75 GB (1199101181952 bytes)
Associated Fluid Cache State : Not Applicable
Device Name : Windows Disk 0
Bus Protocol : SAS
Media : HDD
Read Policy : Adaptive Read Ahead
Write Policy : Write Through
Cache Policy : Not Applicable
Stripe Element Size : 64 KB
Disk Cache Policy : Disabled


C:\Windows\System32>omreport storage pdisk
Error! Required parameter missing: controller






C:\Windows\System32>omreport storage pdisk controller=0
List of Physical Disks on Controller PERC H710 Adapter (Slot 6)


Controller PERC H710 Adapter (Slot 6)
ID : 0:1:0
Status : Ok
Name : Physical Disk 0:1:0
State : Online
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 558.38 GB (599550590976 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL7=======
Part Number : CN05XT==========
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8C0E91


ID : 0:1:1
Status : Ok
Name : Physical Disk 0:1:1
State : Online
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 558.38 GB (599550590976 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL7=====
Part Number : CN05XTFH===========
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8BF995


ID : 0:1:2
Status : Ok
Name : Physical Disk 0:1:2
State : Online
Power Status : Spun Up
Device Name : Not Available
Bus Protocol : SAS
Media : HDD
Part of Cache Pool : Not Applicable
Device Life Remaining : Not Applicable
Remaining Rated Write Endurance : Not Applicable
Failure Predicted : No
Revision : ESF7
Driver Version : Not Applicable
Model Number : Not Applicable
Certified : Yes
Encryption Capable : Yes
Encrypted : No
Progress : Not Applicable
Mirror Set ID : Not Applicable
Capacity : 558.38 GB (599550590976 bytes)
Used RAID Disk Space : 558.38 GB (599550590976 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : DELL(tm)
Product ID : ST3600957SS
Serial No. : 6SL7=====
Part Number : CN05XTFH=============
Negotiated Speed : 6.00 Gbps
Capable Speed : 6.00 Gbps
Device Write Cache : Not Applicable
Manufacture Day : 02
Manufacture Week : 37
Manufacture Year : 2013
SAS Address : 5000C5006B8C177D


=============================================

I also fixed the file system too.

C:\Windows\System32>sfc /scannow


Beginning system scan. This process will take some time.


Beginning verification phase of system scan.
Verification 100% complete.


Windows Resource Protection did not find any integrity violations.
=============================================

Now I can run sfcfix (with no script). This is the log result.

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-10-24 21:18:32.357
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Not using a script file.




AutoAnalysis::
FIXED: Corruption at C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\utc.app.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\utc.app.json.
FIXED: Corruption at C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\telemetry.ASM-WindowsDefault.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\telemetry.ASM-WindowsDefault.json.


SUMMARY: All detected corruptions were successfully repaired.
AutoAnalysis:: directive completed successfully.


Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-10-24 21:19:15.074

==========================================
But I still found this 2 error msg.

 

[wasinu]

update:
I have tried to replace and register the WININET.DLL in system32 folder from version 11.00.9600.17126 (30/5/2014) to a newest one which located in other folders which show version 11.0.9600.18057 (16/09/2015). After I unlock the original file and replace with a new one , I can use event viewer, computer mamagement, DNS ,gpedit.msc,active directory service (not perform 100%) ,...but I still can not use enterprise manager (error: not enough storage is available to complete this operation). I can not run sfcfix too, show error ...HttpIsHostHstsEnabled..WININET.dll... If I run sfc /scannow , It will replace wininet.dll to the original one (11.00.9600.17126) and then I can not use the mmc related came back again.

Thank you,

 

[zcomputerwiz]

Check if you can uninstall and reinstall IE 11, that might fix the file version issue.

 

[wasinu]

I have tried to uninstall IE11 several times but not success.

Uninstall from "view installed update"


or from command line
FORFILES /P %WINDIR%\servicing\Packages /M Microsoft-Windows-InternetExplorer-*11.*.mum /c "cmd /c echo Uninstalling package @fname && start /w pkgmgr /upfname /quiet /norestart


How can I solve this problem?
Thank you

 

[zcomputerwiz]

Try to uninstall IE 11 from Installed Updates, then when it fails zip and attach C:\Windows\Logs\CBS\CBS.log, C:\Windows\IE11_uninst.log, and C:\Windows\IE11_main.log with your reply.

 

[wasinu]

Try to uninstall IE 11 from Installed Updates, then when it fails zip and attach C:\Windows\Logs\CBS\CBS.log, C:\Windows\IE11_uninst.log, and C:\Windows\IE11_main.log with your reply.

Attachment
- CBS.log
- windowsupdate.log

IE11_main.log in c:\windows\ ==> file not change for 2 years

 

[zcomputerwiz]

Looks like failure to uninstall is related to that 'not enough storage' error message.

I'd like to take a look at the event logs again.

Event Log Collection

• Download VEW by Vino Rosso here: VEW.EXE
  
• Right click the file and select Run as administrator and click Continue or Allow at the User Account Control Prompt.
  
• Click the check boxes next to Application and System located under Select log to query on the upper left.
  
• Under Select type to list on the right click the boxes next to Error, Warning and Critical (not XP).
  
• Under Number or date of events select Number of events and type 20 in the box next to 1 to 20 and click Run.
  
• Once it finishes it will display a log file in notepad.
  
• Copy and paste its entire contents into your next reply.

 

[wasinu]

update event viewer yesterday

Thank you,

 

[zcomputerwiz]

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Update service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Management Instrumentation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Shell Hardware Detection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Remote Desktop Configuration service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The System Event Notification Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 28/10/2015 23:47:34
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Task Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

Please check if these services are running:

Windows Update
Windows Management Instrumentation
Shell Hardware Detection
Remote Desktop Configuration
System Event Notification Service
Task Scheduler

If any of those services are not running, try to start them.

Let me know the result.

 

[wasinu]

Windows Update
Windows Management Instrumentation
Shell Hardware Detection
Remote Desktop Configuration
System Event Notification Service
Task Scheduler

If any of those services are not running, try to start them.

Let me know the result.[/QUOTE]

All of these services are already running . [status=started,startup type=automatic"

 

[zcomputerwiz]

Would it be possible to uninstall your Trend Micro antivirus for troubleshooting purposes?