[SOLVED] Problems with Sfc.exe

[Sysnative Windows Update]

Please launch FRST again and enter Searchindexer.exe into the Search box and then press the Search Files button. Attach Search.txt here.

 

[Lanneret]

Here 'tis.

Please launch FRST again and enter Searchindexer.exe into the Search box and then press the Search Files button. Attach Search.txt here.

 

[Sysnative Windows Update]

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[Lanneret]

Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by dbridges (22-05-2018 09:17:17) Run:3
Running from C:\Users\dbridges\Desktop
Loaded Profiles: dbridges & Administrator (Available Profiles: dbridges & AdminX & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
C:\Windows\System32\SearchIndexer.exe
*****************

Restore point was successfully created.
Could not move "C:\Windows\System32\SearchIndexer.exe" => Scheduled to move on reboot.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-05-2018 09:22:12)

C:\Windows\System32\SearchIndexer.exe => Could not move

==== End of Fixlog 09:22:12 ====

 

[Sysnative Windows Update]

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[Lanneret]

Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by dbridges (23-05-2018 13:10:32) Run:4
Running from C:\Users\dbridges\Desktop
Loaded Profiles: dbridges (Available Profiles: dbridges & AdminX & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
Unlock: C:\Windows\System32\SearchIndexer.exe
C:\Windows\System32\SearchIndexer.exe
*****************

Restore point was successfully created.
Processes closed successfully.
"C:\Windows\System32\SearchIndexer.exe" => could not be unlocked
Could not move "C:\Windows\System32\SearchIndexer.exe" => Scheduled to move on reboot.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 23-05-2018 13:13:14)

C:\Windows\System32\SearchIndexer.exe => Could not move

==== End of Fixlog 13:13:14 ====

 

[Lanneret]

Hey, I just discovered something on my system that's disturbing. I operate with my user account with admin rights (which may be why I'm having problems) :-( and I have also setup a separate Admin account (AdminX), but the default Admin account is disabled. A moment ago I tried to do a "Run As" on an executable and got an error. Long story short, when I checked although it says Administrator under my user account and under the AdminX account neither appears to have admin rights - when I go to "Change account type on either of them they show to be Standard user (see 1st screenshot below) and if I attempt to change the account type to Admin the Change Account Type button is greyed out (2nd screenshot). I tried this logged on my account, the AdminX account and even enabled the default Admin account and the same situation applied in all three cases.......??

 

[Sysnative Windows Update]

Yes, as suspected, there's something extremely wrong with your system permissions and you are having very strange and difficult issues to resolve. I personally think they were caused by the plethora of useless software we have uninstalled since the beginning.

 

[Lanneret]

A lot of that software was downloaded for a one time specific use, I probably should have then uninstalled it. Do you have any more ideas to resolve my problems or do you feel a non-destructive install is the best way to go. As I mentioned I'm not looking forward to that as the MS site doesn't seem to recognize the key from the MS sticker on my HP PC.....

 

[Sysnative Windows Update]

We could try getting you to Win10...

 

[Lanneret]

Not a fan.....

 

[Sysnative Windows Update]

Okay then, we'll give something else a shot:

Step#1 - FRST Scan

1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.

2. Copy it to your USB drive.
3. Boot to recovery environment.
4. Launch CMD and launch FRST64.exe from the USB.
5. Press Scan button.
6. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the USB)
7. Please attach the log back here.

 

[Lanneret]

FRST64 log attached. Once again I appreciate your expertise and persistence with this problem......:confused2:

 

[Sysnative Windows Update]

Good.

Please copy the attached fixlist.txt onto the root of your USB drive and repeat the process for the recovery environment.
Launch FRST64 again, but this time hit Fix and wait for it to finish.
Attach Fixlog.txt.

 

[Lanneret]

OK, looks promising:

Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by SYSTEM (27-05-2018 06:21:46) Run:5
Running from K:\
Boot Mode: Recovery
==============================================

fixlist content:
*****************
BootExecute: autocheck autochk * ??
GroupPolicy: Restriction ? <==== ATTENTION
HKLM-x32\...\Run: [NWEReboot] => [X]
HKLM-x32\...\Run: [] => [X]
C:\Windows\System32\SearchIndexer.exe
*****************

HKLM\System\ControlSet001\Control\Session Manager\\BootExecute => value restored successfully
C:\Windows\System32\GroupPolicy\Machine => moved successfully
C:\Windows\System32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NWEReboot" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\" => removed successfully
C:\Windows\System32\SearchIndexer.exe => moved successfully

==== End of Fixlog 06:21:47 ====

 

[Sysnative Windows Update]

Run SFC Scan and attach CBS.log.

 

[Lanneret]

cbs log attached....

 

[Sysnative Windows Update]

Please do this again:

Step#1 - FRST Scan

1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.

2. Copy it to your USB drive.
3. Boot to recovery environment.
4. Launch CMD and launch FRST64.exe from the USB.
5. Press Scan button.
6. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the USB)
7. Please attach the log back here.

 

[Lanneret]

FRST log attached...

 

[Sysnative Windows Update]

Please run the FRST Scan while the PC is booted up