[SOLVED] Problems with Sfc.exe

[Sysnative Windows Update]

Do you have the key in question?

 

[Lanneret]

If you mean the WSearchIdxPi that I asked about, yes it is there.

 

[Sysnative Windows Update]

Can you get me another SFC with ProcMon enabled, but don't enable it right away, but rather closer to failure. I am going to need CBS.log as well.

 

[Lanneret]

OK, I enabled ProcMon when sfc scan was at approx. 96%. cbs.txt uploaded. Logfile.PML zipped and at:

PML_Logfile.zip - Google Drive

 

[Sysnative Windows Update]

If you check for updates, does it find any? If so, which?

 

[Lanneret]

No important updates are available. 44 optional updates:

I believe I checked on the NVIDIA update and it was a false positive so I ignored it.....

 

[Lanneret]

Sorry about last post. Only 44 optional updates:

 

[Lanneret]

 

[Sysnative Windows Update]

Please open Command Prompt as Admin and enter the following:

ICACLS c:\Windows\System32\SearchIndexer.exe /grant administrators:F

If the command succeeds, please try SFC Scan again.

 

[Lanneret]

C:\Windows\System32>ICACLS c:\Windows\System32\SearchIndexer.exe /grant administrators:F

c:\Windows\System32\SearchIndexer.exe: Access is denied.
Successfully processed 0 files; Failed processing 1 files

 

[Sysnative Windows Update]

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[Lanneret]

Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by dbridges (18-05-2018 23:08:45) Run:2
Running from C:\Users\dbridges\Desktop
Loaded Profiles: dbridges (Available Profiles: dbridges & AdminX & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
SetDefaultPermissions: C:\Windows\System32\searchindexer.exe

*****************

SetDefaultPermissions: C:\Windows\System32\searchindexer.exe => Error: No automatic fix found for this entry.

==== End of Fixlog 23:08:45 ====

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[Sysnative Windows Update]

Step#1 - ChkDsk Scan
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.
3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk /f and then press enter.
6. Chkdsk will start to run. Please allow it to finish.
7. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
8. Right-click this file and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.

 

[Lanneret]

Says the voume is in use and offers to do the chkdsk upon reboot. This is with all apps & Explorer windows closed. Should I just let it do that and then forward the log ?

Step#1 - ChkDsk Scan
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.
3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk /f and then press enter.
6. Chkdsk will start to run. Please allow it to finish.
7. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
8. Right-click this file and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.

 

[Sysnative Windows Update]

Yes.

 

[Lanneret]

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 5/19/2018 2:04:10 PM >------
Category: 0
Computer Name: dbridges-HP
Event Code: 1001
Record Number: 23928
Source Name: Microsoft-Windows-Wininit
Time Written: 05-19-2018 @ 19:02:58
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
342272 file records processed.

File verification completed.
847 large file records processed.

0 bad file records processed.

0 EA records processed.

127 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
423838 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
342272 file SDs/SIDs processed.

Cleaning up 1317 unused index entries from index $SII of file 0x9.
Cleaning up 1317 unused index entries from index $SDH of file 0x9.
Cleaning up 1317 unused security descriptors.
Security descriptor verification completed.
40784 data files processed.

CHKDSK is verifying Usn Journal...
41249056 USN bytes processed.

Usn Journal verification completed.
Windows has checked the file system and found no problems.

959781887 KB total disk space.
242548764 KB in 299404 files.
178796 KB in 40785 indexes.
0 KB in bad sectors.
481871 KB in use by the system.
65536 KB occupied by the log file.
716572456 KB available on disk.

4096 bytes in each allocation unit.
239945471 total allocation units on disk.
179143114 allocation units available on disk.

Internal Info:
00 39 05 00 e9 30 05 00 48 71 09 00 00 00 00 00 .9...0..Hq......
97 04 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------
Category: 0
Computer Name: dbridges-HP
Event Code: 1001
Record Number: 9327
Source Name: Microsoft-Windows-Wininit
Time Written: 12-07-2017 @ 21:01:12
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
The attribute of type 0x80 and instance tag 0x4 in file 0x195c8
has allocated length of 0xc0000 instead of 0xd0000.
Deleting corrupt attribute record (128, "")
from file record segment 103880.
Cleaning up instance tags for file 0x1fba0.
189696 file records processed.

File verification completed.
898 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
255926 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
189696 file SDs/SIDs processed.

Cleaning up 493 unused index entries from index $SII of file 0x9.
Cleaning up 493 unused index entries from index $SDH of file 0x9.
Cleaning up 493 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 103880.
33117 data files processed.

CHKDSK is verifying Usn Journal...
37440328 USN bytes processed.

Usn Journal verification completed.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

959781887 KB total disk space.
112932292 KB in 141862 files.
88000 KB in 33117 indexes.
0 KB in bad sectors.
323363 KB in use by the system.
65536 KB occupied by the log file.
846438232 KB available on disk.

4096 bytes in each allocation unit.
239945471 total allocation units on disk.
211609558 allocation units available on disk.

Internal Info:
00 e5 02 00 90 ab 02 00 1a f5 04 00 00 00 00 00 ................
43 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 C...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------

 

[Sysnative Windows Update]

Please check if SFC works now.

 

[Lanneret]

 

[Sysnative Windows Update]

Attach CBS.log.

 

[Lanneret]

Here is cbs log:

cbs0519_1600.txt - Google Drive