[SOLVED] Need Help With Corrupt File SFC Can't Fix

[jbiv99]

Hello,

Was wondering if anyone out there could help me repair this corrupt file. CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe I can't seem to delete it and I tried copying a rundll32.exe file from my lap top to the C:\Windows\System32 folder and that did not fix this corrupt file. Any help would be greatly appreciated in this matter. I have also attached a copy of my cbs.log file from my sfc run and a copy of my sfcfix results. I am running Windows 7 SP1 64 bit system with 1 tb hard drive and 4gb of ram.

Thank You in advance for your time in this matter,
Regards,
John

 

[SleepyDude]

Hi John welcome to Sysnative,


Lets start by taking care of that file...

SFCFix Script

!!! WARNING !!! The following fix is only relevant for this system and no other, applying this fix on another computer will not work and most likely will cause problems...

• Download SFCFix.exe (by Niemiro) and save it to the Desktop
• Download the file SFCFIX.ZIP, attached below, and save this to your Desktop
• On your Desktop, make sure you have the two files:
  
  SFCFix.exe and
  
  SFCFIX.zip
• Drag the file SFCFIX.zip onto the file SFCFix.exe and release it
• The SFCFix tool will process the script
• Upon completion, a log file SFCFix.txt should be created on your Desktop
• Open the SFCFix.txt log and copy & paste the contents to your post

 

[jbiv99]

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-05-10 20:43:59.221
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Clarita\Desktop\SFCFIX.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe to C:\Windows\WinSxS\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe.
Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7601.23755_none_da6bed36226a053d\rundll32.exe
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2019-05-10 20:44:00.172
Script hash: v21wAssc+omiBpzSzdm0Fk2ZSPpCxFr8K8FKhzZ052Y=
----------------------EOF-----------------------
I think this did the trick! I extracted and ran that rundll32 .exe file you sent me and did 2 sfc /scannow and it fixed corrupt files and the second run didn't find any bad files. You are the best!!! Thank You soooooooooo much! I been pulling my hair out trying to resolve this issue. I can't thank you enough. Hope to speak to you in the future.

Regards,
John

 

[jbiv99]

Sorry Sleepy Dude,
I may have spoke to soon. What does (SURT total detected corruption count: 4) mean??? Do I still have corrupt files? I have ran sfcfix and still coming up with 4 corrupt files, I think. I have attached sfcfix.txt info. below and also the cbs.log file. I hope you can help me with this issue also. You seem to have solved the corrupt rundll32 .exe file. Thank you so much for your time in this matter and sorry to bother you with these issues.

Regards,
John

 

[SleepyDude]

Hi,

According with the first SFCFix log surt found also some corruptions... please do the following:


System Update Readiness Tool (SUR)

• Download the System Update Readiness Tool (x64) and save it to some place, its a big download and eventually we need to run it several times, please keep the file
• Run the tool. Its like an Update but it can take a long time to do the work. You will get an Installation Complete screen when it's done running
• Please attach to your post the log from the following location: C:\Windows\Logs\CBS\CheckSUR.log
  Note: If the file is too big please Zip it and upload the ZIP file to a service like Dropbox, Google Drive, OneDrive or upload to SendSpace and just provide the link for the file here.

 

[jbiv99]

Hello,

Sorry for the delay. I ran the system update readiness tool (sur) and attached a copy of the CheckSUR.log for your review. It wasn't that long so I didn't Zip it to a service as mentioned above. Not sure how to zip a file. I hope this can help you figure out the issues I'm having. Have a good night and thank you again for all your help. My computer is running way faster already with the first issue fixed as well.

 

[SleepyDude]

Hi,

Thanks for the log, usually the Checksur.log is small so its ok to attach.

The rundll32.exe is a file frequently used by the system that's why you notice the difference.

SFCFix Script

!!! WARNING !!! The following fix is only relevant for this system and no other, applying this fix on another computer will not work and most likely will cause problems...

• Download SFCFix.exe (by Niemiro) and save it to the Desktop
• Download the file SFCFIX.ZIP, attached below, and save this to your Desktop
• On your Desktop, make sure you have the two files:
  
  SFCFix.exe and
  
  SFCFIX.zip
• Drag the file SFCFIX.zip onto the file SFCFix.exe and release it
• The SFCFix tool will process the script
• Upon completion, a log file SFCFix.txt should be created on your Desktop
• Open the SFCFix.txt log and copy & paste the contents to your post

 

[jbiv99]

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-05-12 12:41:21.430
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Clarita\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\Temp\CheckSur\Servicing\Packages
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_1463_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.cat to C:\Windows\Temp\CheckSur\Servicing\Packages\package_1463_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.cat.
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_1463_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.mum to C:\Windows\Temp\CheckSur\Servicing\Packages\package_1463_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.mum.
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_235_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.cat to C:\Windows\Temp\CheckSur\Servicing\Packages\package_235_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.cat.
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_235_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.mum to C:\Windows\Temp\CheckSur\Servicing\Packages\package_235_for_kb4088881~31bf3856ad364e35~amd64~~6.1.1.4.mum.
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_459_for_kb4343900~31bf3856ad364e35~amd64~~6.1.1.5.cat to C:\Windows\Temp\CheckSur\Servicing\Packages\package_459_for_kb4343900~31bf3856ad364e35~amd64~~6.1.1.5.cat.
Successfully copied file C:\Users\Clarita\AppData\Local\niemiro\Archive\Packages\package_459_for_kb4343900~31bf3856ad364e35~amd64~~6.1.1.5.mum to C:\Windows\Temp\CheckSur\Servicing\Packages\package_459_for_kb4343900~31bf3856ad364e35~amd64~~6.1.1.5.mum.
Successfully restored ownership for C:\Windows\Temp\CheckSur\Servicing\Packages
Successfully restored permissions on C:\Windows\Temp\CheckSur\Servicing\Packages
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 6 datablocks.
Finish time: 2019-05-12 12:41:23.178
Script hash: xHItfRHfp3jUpGjpwUSljkfnXIuTaUoTvq3vCYA2JDQ=
----------------------EOF-----------------------

Hello,

I saved and ran the files you asked and the results are posted above. Do you think that did the trick or is there something more that has to be done? Have a great day and look forward to your reply.

Thanks again so much for all your help,
You've been great!!!!!

 

[SleepyDude]

Hi,

Thanks for the log. I will tell you when I think all is good.

You are welcome by the way.

In the last steps we only provided some files for SURT to work so please repeat the steps from post #5 and post the new Checksur.log.

Also run SFCFIX without dragging any script and let the tool check the system, please post the new log SFCFix.txt

 

[jbiv99]

Hello,

Ran the 2 programs and posted the logs below for your review. Thanks!
☺

 

[SleepyDude]

Hi,

We need to use a different tool now...

Search with Farbar Recovery Scan Tool (FRST)

• Download FRST or FRST x64 and save it to the Desktop.
  (Please pick the version that matches your operating system's bit type. If you don't know which version matches your system, try FRST if it say that is not compatible with your OS you have to use FRST64)
• open the Command Prompt as Administrator (Tutorial)
• type the command:
  

  dism /online /Get-FeatureInfo /FeatureName:TFTP|find "."

• wait for the command to finish with "The operation completed successfully" or equivalent
• close the window "Administrator: Command Prompt"
• Execute FRST/FRST64 right click on the icon
  
  and choose Run as Administrator. Make sure all other windows are closed.
  (When the Tool opens for the first time you must click Yes on the disclaimer.)
  
  
• On the Search box (1) type or Copy & Paste the following text:
  

  KB4088881

• Press the Search Registry button.
• Wait for the search to finish FRST will produce a log called (SearchReg.txt) in the same directory the Tool is run from.
• Please attach the log to your post.

 

[jbiv99]

Hi,

Your links for the Farbar Recovery Scan Tool (FRST) when I clicked them the page could not be found. I did find another place to download it from and did the command prompt command as an administrator and everything ran smooth. The results are in the below log. I think the SP1 download files are corrupt from some previous research I did????

 

[SleepyDude]

Hi,

Sorry about the link for FRST I didn't notice that Bleeping blocked the direct download...

The remaining errors are related with a Preview update, lets try to remove it...


Uninstall Update Manually

Press

+ X and click Open Command Prompt (Admin)
type or Copy & Paste the command:

wusa /uninstall /KB:4088881

Let me know the result.

 

[jbiv99]

Hi,

Not a problem about the link for FRST. I tried to manually uninstall that update but got a message that the update was not installed. Please see my screen shot below.

 

[jbiv99]

I also did a search in installed updates and came up with nothing!

 

[SleepyDude]

Hi,

No problem we user FRST to remove the references do the update.


Farbar Recovery Scan Fix

!!! WARNING !!! The following fix is only relevant for this system and no other, running the script on another computer will not work and may cause problems...

• Download the file attached and save it to the Desktop as fixlist.txt
  (It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work!)
• Execute FRST/FRST64 right click on the icon
  
  and choose Run as Administrator. Make sure all other windows are closed.
  
  
• Press the Fix button just once and Wait. After the fix the system needs to restart if the tool does not request it please Restart the computer.
• The tool will make a log (Fixlog.txt) on the same location as FRST/FRST64 please post it in your next reply.

 

[jbiv99]

Hello,
I downloaded the file you attached in your last post to my desktop as instructed. FRST64 is also on my desktop. I ran the Farbar Recovery Scan Fix Tool as an administrator and made sure all my windows were closed. I clicked the fix button and the program just keeps running. I left it running all night last night and it never finished running. As soon as the fix is started the fixlog appears on my desktop. I attached it below. Also attaching a screen shot of the Farbar Recovery Scan Fix Tool running and running and running.

 

[SleepyDude]

Hi,

Please close FRST64, only now I notice that you are running a very old version of the program from 2017!

Please delete FRST64 and download a new fresh copy from:
Downloading Farbar Recovery Scan Tool

Run the fix again.

 

[jbiv99]

Hello,

Thanks for the updated FRST64 file. I downloaded it to my desktop and I went to properties and clicked on the unblock option under the security tab. I think that's why the 2017 version wasn't working. I ran the fix and it took almost 3 hours but finally finished. I restarted my computer and attached the results of the Fixlog below for your review. We are getting there!

 

[SleepyDude]

Hi,

Thanks for the log. The problem with FRST from 2017 is that this tool is constantly improving and some of the commands I used wasn't supported by the 2017 version...

Please repeat the steps from post #5 and provide the new checksur.log.