[SOLVED] Is efnnouse.exe a virus?

Thanks for the info. Hang in there.

Please do a Clean Boot of your machine by following the article below. If you are still in a clean boot from last time then you don't have to repeat this step.
https://support.microsoft.com/en-us/kb/929135

Then please follow the instructions below.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-07-06 12:23:44.085
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at C:\Users\Monica\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll

Successfully copied file C:\Users\Monica\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll to C:\windows\winsxs\amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll.

Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll
Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2015-07-06 12:23:47.055
Script hash: 3ylnk3QBXc71SegytQzPBjvIS+xhJbZszh9IleuL84Y=
----------------------EOF-----------------------
 
Excellent job. Please do the following one more time so I can verify the corruption is resolved. Again do this from a clean boot state.

Step#1 - DISM /RestoreHealth Scan
Warning:this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Right-click on the Start
    w8start.png
    button and select Command Prompt (Admin)
  2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
    Dism /Online /Cleanup-Image /RestoreHealth
  3. Once it finishes, copy and paste the following into the command-prompt window and press Enter. If prompted to overwrite the existing file go ahead.
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please zip/upload to this thread.
    Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
BrianDrab said:
Excellent job. Please do the following one more time so I can verify the corruption is resolved. Again do this from a clean boot state. Step#1 - DISM /RestoreHealth Scan Warning:this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Right-click on the Start
    w8start.png
    button and select Command Prompt (Admin)
  2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter Dism /Online /Cleanup-Image /RestoreHealth
  3. Once it finishes, copy and paste the following into the command-prompt window and press Enter. If prompted to overwrite the existing file go ahead. copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please zip/upload to this thread. Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Click to expand...
The process was stuck in the image version for 6 mins. before to show a 20%. Now, continue there since 13 mins ago.
 
I'm sorry, the system can't find the source to the wim, and I tried to fix it, but I can't understand what should I do, because the explanation that microsoft has is very confusing. I think that without to fix that we could not repair anything. I'll appreciate your help doing that. I have a recovery section in my hard drive under the letter D:, but I don't know how to use it. One time I tried, and received an error saying that the source must be in an active disk. The problem, I think, is that this partition was done by HP when configured the computer and it's not active. Following the instructions from Microsoft, I tried now to open the group policy, and it's not found by the explorer search. If you give me the instructions step by step, I will do it. Thanks.
 
You don't have to find the source to the wim. You are correct that the message is confusing but don't worry, I'll walk you through it. It's just telling us that one or more files are missing which is what we will fix.

Please do the following.

SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
BrianDrab said:
You don't have to find the source to the wim. You are correct that the message is confusing but don't worry, I'll walk you through it. It's just telling us that one or more files are missing which is what we will fix.

Please do the following.

SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Click to expand...

I don't really know what happens with this PC. Just now it freeze completely, the mmc stop responding, and I had to restart it by the button because the Task Manager and the mouse stopped responding. Now I can't paste anything, because the browser stop responding. I switched to IE thinking that the problem was with Firefox, but here also happened. I will try once again:

https://www.dropbox.com/s/tvlvz6t1738lcqp/cbs.txt?dl=0

Great, now worked!
 
We still have this corrupted file to deal with
Code: 
(p) CSI Payload Corrupt   amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll

Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Items for your next post
1. SFCFix.txt
2. CBS.txt
 

Attachments

BrianDrab said:
We still have this corrupted file to deal with
Code: 
(p) CSI Payload Corrupt   amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll

Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Items for your next post
1. SFCFix.txt
2. CBS.txt
Click to expand...

https://www.dropbox.com/s/t8q7iyksd62zseh/dism.log?dl=0
 
MONKA said:
BrianDrab said:
We still have this corrupted file to deal with
Code: 
(p) CSI Payload Corrupt   amd64_microsoft-windows-e..host-shellnamespace_31bf3856ad364e35_6.3.9600.16441_none_9581223139116792\WorkFoldersRes.dll

Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Items for your next post
1. SFCFix.txt
2. CBS.txt
Click to expand...

https://www.dropbox.com/s/t8q7iyksd62zseh/dism.log?dl=0
Click to expand...

https://www.dropbox.com/s/tvlvz6t1738lcqp/cbs.txt?dl=0
 
Actually, the computer is reacting a little faster. However, windows continue opening already freeze and after a few seconds, start working. Also the mouse has issues with the right click. Firefox stop working when I make a right click, or try to paste something and I have to restart it. Do I works the mouse with 2 drivers? I deleted the second one because was changing the cursor back every time I restart the computer, and did nothing when I disabled. Should I install it back?
 
Yes. it do the same. And the system was3 or 4 minutes to restart.
 
OK, please boot your machine into Safe Mode With Networking and let me know if the you have the same symptoms.

Safe Mode With Networking
1. Right-click on the Start
w8start.png
button and choose Run.
2. In the Open box type msconfig and click OK.
3. The System Configuration window will appear.
4. Select the Boot tab and put a check in the Safe boot box by clicking it. Also click on the Network radio button.
5. Click OK and you will be prompted to reboot your machine. Click the Restart button.
Capture.JPG
 
Well, the computer looks fine in safe mode, although Firefox freeze when I tried to paste the cbs text. The right click however worked fine, and the windows opened fast and fine.
 
Thanks for the info. While in Safe Mode with Networking, please do the following.

Step#1 - DISM /RestoreHealth Scan
Warning:this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Right-click on the Start
    w8start.png
    button and select Command Prompt (Admin)
  2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
    Dism /Online /Cleanup-Image /RestoreHealth
  3. Once it finishes, copy and paste the following into the command-prompt window and press Enter. If prompted to overwrite the existing file go ahead.
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please zip/upload to this thread.
    Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top