SFCFIX : Some corruptions could not be fixed automatically

[Admaaaaa]

File attached.

 

[PeterJ]

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Attach the logfile Fixlog.txt to your next reply.

Step 2:
Remove Update Manually

1. Click on the Start button and in the search box, type Command Prompt.
2. When you see Command Prompt on the list, right-click on it and select Run as administrator.
3. When command prompt opens, copy and paste the following command into it, then press enter.
   wusa /uninstall /KB:5014738
4. Let me know if it says it was successful or if there are any errors.

 

[Admaaaaa]

Fixlog.txt is attached. It's saying 5014738 is not installed when i run the command after fixlog had been completed.

 

[PeterJ]

FRST Registry Search

1. Click the Start button and choose Control Panel.
2. In the upper right corner ensure the View by: is set to Category.
3. Select the Programs group.
4. Click the Turn Windows features on or off link. This will bring up the Server Manager or Windows Features dialog.
   Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps. You can minimize it if you wish but keep it open.
   
   
5. Right-click on the file FRST64.exe and choose Run as administrator.
6. Copy and paste KB5014738 into the Search box and click the Search Registry button.
7. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
8. You may close any remaining open windows now.

 

[Admaaaaa]

I've copied it in below as it's only a single line.





Farbar Recovery Scan Tool (x64) Version: 30-08-2022
Ran by Admin (29-09-2022 17:12:28)
Running from C:\Users\Admin\Desktop
Boot Mode: Normal

================== Search Registry: "KB5014738" ===========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\KB5014738-MappingPackage~31bf3856ad364e35~amd64~~9600.20402.1.18]

====== End of Search ======

 

[PeterJ]

Did you perform step 4 as mentioned ?

 

[Admaaaaa]

Yes, it's still open.

 

[PeterJ]

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Attach the logfile Fixlog.txt to your next reply.

Step 2:
Earlier you said:

in event viewer i'm getting an application crash for sdiagnhost.exe (every time i boot up windows).

Does that still happen ?

 

[Admaaaaa]

It was doing, i've run the fixlist.txt file and below is the response. 5 minutes after the restart and it's not yet popped up, i'll respond if/when it does.








Fix result of Farbar Recovery Scan Tool (x64) Version: 30-08-2022
Ran by Admin (29-09-2022 21:39:20) Run:2
Running from C:\Users\Admin\Desktop
Loaded Profiles: Admin
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\KB5014738-MappingPackage~31bf3856ad364e35~amd64~~9600.20402.1.18]

*****************

Processes closed successfully.
Restore point was successfully created.
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\KB5014738-MappingPackage~31bf3856ad364e35~amd64~~9600.20402.1.18" => removed successfully


The system needed a reboot.

==== End of Fixlog 21:39:35 ====

 

[PeterJ]

Okay.

 

[Admaaaaa]

It's just popped up again now.

 

[PeterJ]

Restart the machine.
If it happens again perform the instructions in message #31 again.

 

[Admaaaaa]

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-09-30 18:17:47.555
Microsoft Windows 8.1 Update 3 - amd64
Using .txt script file at C:\Users\Admin\Desktop\SFCFixScript.txt [1]




FileScan::
[0: 1] C:\Windows\WinSxS\amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_0b30df96304ee82e\sdiagnhost.exe
Expected: UNKNOWN Found: DVGVKuh3ceJlQR89WM5OPNKJSWnFWRLxqdUILyzqnA0=
Expected: 6.3.9600.17415 Found: Version number not available.
Successfully traced component amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_0b30df96304ee82e.
Package_873_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-2600_neutral_GDR4



[1: 1] C:\Windows\WinSxS\wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_158589e864afaa29\sdiagnhost.exe
Expected: UNKNOWN Found: XgtCaDuUIw2Ezid74EETbdSVZcc1lqOhRVIZnmJdxoY=
Expected: 6.3.9600.17415 Found: Version number not available.
Successfully traced component wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_158589e864afaa29.
Package_1610_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-4807_neutral_GDR4



[2: 2] C:\Windows\WinSxS\amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_0bb7924b496f2252\sdiagnhost.exe
Expected: UNKNOWN Found: YorCyAvtQeot8Q359QhL15g0Rkgdp4Bs6RskoXVsKaw=
Expected: 6.3.9600.20512
Failed to trace component amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_0bb7924b496f2252 with return code -1.

[C:\Windows\System32\sdiagnhost.exe]


[3: 2] C:\Windows\WinSxS\wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_160c3c9d7dcfe44d\sdiagnhost.exe
Expected: UNKNOWN Found: UVhSfuwkWKxUBUlxkHRyzsopy4JXa/kOlxMTiHncM/w=
Expected: 6.3.9600.20512
Failed to trace component wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_160c3c9d7dcfe44d with return code -1.

[C:\Windows\SysWOW64\sdiagnhost.exe]
FileScan:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 20 datablocks.
Finish time: 2022-09-30 18:17:58.288
Script hash: WmsdklPkWkc8pld34MsK0GqhpTKLFfHYYCjaido/J6k=
----------------------EOF-----------------------

 

[PeterJ]

FRST Registry Search

1. Click the Start button and choose Control Panel.
2. In the upper right corner ensure the View by: is set to Category.
3. Select the Programs group.
4. Click the Turn Windows features on or off link. This will bring up the Windows Features dialog.
   Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps. You can minimize it if you wish but keep it open.
   
   
5. Right-click on the file FRST64.exe and choose Run as administrator.
6. Copy and paste KB5008263 into the Search box and click the Search Registry button.
7. When the scan is complete, a message will display that 'SearchReg.txt' is saved in the same folder FRST was started from. Notepad will open this file also. Close Notepad and attach the file 'SearchReg.txt' to your next reply.
8. You may close any remaining open windows now.

 

[Admaaaaa]

Searchreg.txt for kb5008263

 

[PeterJ]

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the attachment fixlist.txt and save it to your desktop.
2. Right-click on FRST64.exe and select "Run as administrator".
3. Press the Fix button.
4. The tool will now process fixlist.txt.
5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
7. Attach the logfile Fixlog.txt to your next reply.

Step 2:
Restart the machine.
Perform the instructions in message #31 again.

 

[Admaaaaa]

Ran the fix then restarted, just run sfcfix and SFCFix.txt is below, fixlog.txt is attached.





SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-10-01 21:25:34.464
Microsoft Windows 8.1 Update 3 - amd64
Using .txt script file at C:\Users\Admin\Desktop\SFCFixScript.txt [2]




FileScan::
[0: 1] C:\Windows\WinSxS\amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_0b30df96304ee82e\sdiagnhost.exe
Expected: UNKNOWN Found: DVGVKuh3ceJlQR89WM5OPNKJSWnFWRLxqdUILyzqnA0=
Expected: 6.3.9600.17415 Found: Version number not available.
Successfully traced component amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_0b30df96304ee82e.
Package_873_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-2600_neutral_GDR4



[1: 1] C:\Windows\WinSxS\wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_158589e864afaa29\sdiagnhost.exe
Expected: UNKNOWN Found: XgtCaDuUIw2Ezid74EETbdSVZcc1lqOhRVIZnmJdxoY=
Expected: 6.3.9600.17415 Found: Version number not available.
Successfully traced component wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.17415_none_158589e864afaa29.
Package_1610_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-4807_neutral_GDR4



[2: 2] C:\Windows\WinSxS\amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_0bb7924b496f2252\sdiagnhost.exe
Expected: UNKNOWN Found: YorCyAvtQeot8Q359QhL15g0Rkgdp4Bs6RskoXVsKaw=
Expected: 6.3.9600.20512
Failed to trace component amd64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_0bb7924b496f2252 with return code -1.

[C:\Windows\System32\sdiagnhost.exe]


[3: 2] C:\Windows\WinSxS\wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_160c3c9d7dcfe44d\sdiagnhost.exe
Expected: UNKNOWN Found: UVhSfuwkWKxUBUlxkHRyzsopy4JXa/kOlxMTiHncM/w=
Expected: 6.3.9600.20512
Failed to trace component wow64_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.3.9600.20512_none_160c3c9d7dcfe44d with return code -1.

[C:\Windows\SysWOW64\sdiagnhost.exe]
FileScan:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 20 datablocks.
Finish time: 2022-10-01 21:26:06.419
Script hash: WmsdklPkWkc8pld34MsK0GqhpTKLFfHYYCjaido/J6k=
----------------------EOF-----------------------

 

[PeterJ]

Do you still see the error about sdiagnhost.exe ?

 

[Admaaaaa]

Unfortunately popped up again. I've attached a couple of screenshots from event viewer


The faulting paths (from error_2) indicate the problem is at:

Faulting application path: C:\WINDOWS\System32\sdiagnhost.exe
Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Manaa57fc8cc#\828e7a69baf5179fd3982bf8cfd68159\System.Management.Automation.ni.dll

 

[Admaaaaa]

Is it worth me running DISM again to see what the log throws out?