[SOLVED] ScanNow- Win Resource Protection Found Corrupt Files But Was Unable ...

[JoeFromSD]

Hi Folks, so I have some corrupted files it looks like. I don't know what caused it but suspect it was the recent Win update, or maybe because I ran the JRT tool from Malwarebytes.
Malwarebytes | Junkware Removal Tool

I ran Scannow like my Topic says and I have the CBS log.

I looked at Event Viewer and see some Warnings, Error and Critical.

I know just enough about computing ti get myself in trouble! So I hope someone can advise me!

I did a system restore and that partially helped. My computer is running OK, but doing a R click on image files takes a minute and a half to open up, my Outlook email takes a lot longer to open.

 

[JoeFromSD]

I forgot to say that I'm using Win 7 if that matters.

 

[JoeFromSD]

I tried to run the Perfmon twice but get this timed out message, but here's the BSOD Info even though I haven't had an BSODs.

 

[JoeFromSD]

well I tried generating the perfmon report in safe mode with cmd prompt, but it said The system cannot find the path specified,

sure hope someone can help with this, since I don't have a BSOD issue, should I post my question somewhere else??

 

[JoeFromSD]

Here's my CBS Log folks, hope someone can take a look

 

[JoeFromSD]

I just left clicked my recycle bin and it took over a minute to open, and also, in my folders (and recycle bin), and the items (image files, docs Etc) look different, and now my recycle bin icon has changed to a plain white rectangle with a folder corner ..

also, r clicking anything takes alot longer to open up.

 

[JoeFromSD]

Darn, my computer just restarted by itself ..

 

[JoeFromSD]

Darn, I hope someone can take a look at this for me, now I can't rename or delete folders.

here's the Event Viewer after that last restart my computer did on it's own.

 

[JoeFromSD]

If I've posted this in the wrong forum could a Mod please move it, I really need to get this fixed.

 

[zcomputerwiz]

CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll
CORRUPT: C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll
CORRUPT: C:\Windows\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

View attachment SFCFix.zip

SFC Scan

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   sfc /scannow
   
   Wait for this to finish before you continue
   
   copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
   
   
4. This will create a file, cbs.txt on your Desktop. Please zip and attach this to your next post.

 

[JoeFromSD]

Right on Computer Wiz! But I don't understand the request of where to put the

 

[JoeFromSD]

OK, here's the SFCFix text, but when I run command prompt, and right click it, I get the hour glass for two minutes, then the screen goes blue, and my desktop comes back up, with nowhere to run as Admin.

I am So glad you're helping me!

SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-09-28 13:22:38.344
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Joe\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\actionqueue.dll.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setupugc.exe.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\winsetup.dll.mui

Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui to C:\Windows\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll to C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll to C:\Windows\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\actionqueue.dll.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\actionqueue.dll.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setupugc.exe.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setupugc.exe.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui.
Successfully copied file C:\Users\Joe\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\winsetup.dll.mui to C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\winsetup.dll.mui.

Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_905283bdc3e1d2d8\W32UIRes.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..on-wizard-framework_31bf3856ad364e35_6.1.7601.17514_none_1478eaa56818c3c0\spwizimg.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\actionqueue.dll.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\actionqueue.dll.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\audit.exe.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\oobeldr.exe.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setup.exe.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setupugc.exe.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\setupugc.exe.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\W32UIRes.dll.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\windeploy.exe.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\WinLGDep.dll.mui
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\winsetup.dll.mui
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-s..component.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dd7048d7d357ea1b\winsetup.dll.mui
PowerCopy:: directive completed successfully.

 

[JoeFromSD]

I was able to generate that CBS log a few days ago, here it is!

 

[zcomputerwiz]

Glad to help!

Ok, let's try another way.

On your keyboard, press the Control+Shift+Escape (Ctrl Shift Esc) keys at the same time. This should launch Task Manager.
Click File, then choose Run new task.
In the text box, type 'cmd' without the quotes, then check the box Create this task with administrative privileges.
If the 'create this task with administrative privileges' box cannot be checked, close the run box, click the Processes tab, then click 'show processes from all users' and try the new task option again.
Click OK.

This should open a new command window.

SFC Scan

1. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   sfc /scannow
   
   Wait for this to finish before you continue
   
   copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
2. This will create a file, cbs.txt on your Desktop. Please zip and attach this to your next post.

 

[JoeFromSD]

darn, I don't see a 'create this task with administrative privileges' box ..

 

[JoeFromSD]

OK, managed to do it! I missed the part about 'show processes from all users'

 

[zcomputerwiz]

Looks good :thumbsup2:

Bugcheck code 26 indicates a CDFS problem. Bug Check 0x26: CDFS_FILE_SYSTEM - Windows 10 hardware dev
Do you have any virtual CD/DVD products installed like Daemon Tools etc?

 

[JoeFromSD]

Darn, not what I wanted to hear .. I haven't used my dvd or cd on this fairly new custom built computer so I probably don't have any virtual CD products, I certainly didn't install any when this problem started.

darn ..

I see in that link, Windows 10, I have Win 7.

should I do any of these fixes??-
To debug this problem: Use the .cxr (Display Context Record) command with Parameter 3, and then use kb (Display Stack Backtrace).
To resolve a disk corruption problem: Check Event Viewer for error messages from SCSI and FASTFAT (System Log) or Autochk (Application Log) that might help pinpoint the device or driver that is causing the error. Try disabling any virus scanners, backup programs, or disk defragmenter tools that continually monitor the system. You should also run hardware diagnostics supplied by the system manufacturer. For details on these procedures, see the owner's manual for your computer. Run Chkdsk /f /r to detect and resolve any file system structural corruption. You must restart the system before the disk scan begins on a system partition.
To resolve a nonpaged pool memory depletion problem: Add new physical memory to the computer. This will increase the quantity of nonpaged pool memory available to the kernel.

 

[JoeFromSD]

"Check Event Viewer for error messages from SCSI and FASTFAT (System Log) or Autochk (Application Log) that might help pinpoint the device or driver that is causing the error"

can you check these event viewer events for me??

I do have CCleaner monitoring the system as well as malwarebytes, but I've had them all along.

 

[zcomputerwiz]

Save Event Logs

1. Click Start, and point to Programs.
2. Point to Administrative Tools, and then click Event Viewer.
3. Right-click the System log file.
4. Click Save Log File As.
5. Type a name for the file and browse to your Desktop, then click Save.
6. Right click on the file and choose Send To... -> Compressed (zipped) folder.
7. Attach the zip with your reply.