[SOLVED] [Win7Pro] SFC contains corrupted files that even SFCFix could not fix

You can ignore the ones related to Avast. Please do the following which should get you all fixed up.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - System Update Readiness Tool (SUR)
1. Download and run the following file.
2. When it asks you if you wish to install, please answer yes. Note: It could take 15 minutes or more to run. Please don't cancel.
3. You will get an Installation Complete screen when it's done running.
4. Please attach the log from the following location. C:\Windows\Logs\CBS\CheckSUR.log
Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

Step#3 - SFC Scan


  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 

Attachments

Here's the output of SFCFix:
Code: 
SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-04-05 22:13:55.306
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Administrator\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\windows\Temp\CheckSur\Winsxs\Manifests

Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17239_none_cfa4afb8fdb82165.manifest to C:\windows\Temp\CheckSur\Winsxs\Manifests\amd64_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17239_none_cfa4afb8fdb82165.manifest.

Successfully restored ownership for C:\windows\Temp\CheckSur\Winsxs\Manifests
Successfully restored permissions on C:\windows\Temp\CheckSur\Winsxs\Manifests
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 13 datablocks.
Finish time: 2017-04-05 22:13:55.499
Script hash: 28Y7w8iR8w+24m2CjAfrHUDV8yQddrTIo44bGTEPbKg=
----------------------EOF-----------------------

Here's the output for SURT:
View attachment CheckSUR.log

And here's the CBS.txt
 
Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

Alrighty, here's the output for SFCFix:
Code: 
SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-04-05 23:22:47.334
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Administrator\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\windows\Winsxs
Successfully took permissions for file or folder C:\windows\Temp\CheckSur\Winsxs\Manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest

Failed to copy file C:\Users\Administrator\AppData\Local\niemiro\Archive\Manifests to C:\windows\Winsxs\Manifests with error code ERROR_ACCESS_DENIED.
Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest to C:\windows\Temp\CheckSur\Winsxs\Manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest.

Successfully restored ownership for C:\windows\Winsxs
Successfully restored permissions on C:\windows\Winsxs
Successfully restored ownership for C:\windows\Temp\CheckSur\Winsxs\Manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest
Successfully restored permissions on C:\windows\Temp\CheckSur\Winsxs\Manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest
PowerCopy:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 15 datablocks.
Finish time: 2017-04-05 23:22:54.354
Script hash: 7nExoDQs6am09k71JocHJXVP9sLcNnlfTnTFj3yXV00=
----------------------EOF-----------------------
 
OK, I see the issue. Please do the following.

System Update Readiness Tool (SUR)
 1. Download and run the following file.
2. When it asks you if you wish to install, please answer yes. Note: It could take 15 minutes or more to run. Please don't cancel.
3. You will get an Installation Complete screen when it's done running.
4. Please attach the log from the following location. C:\Windows\Logs\CBS\CheckSUR.log
Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Thanks. The following again please.

SFC Scan

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.


Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
File system permission corruption. Let's fix it. Please do the following.

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Here's the output of Fixlog.txt:
Code: 
Fix result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Administrator (06-04-2017 00:16:26) Run:1
Running from C:\Users\Administrator\Desktop
Loaded Profiles: Administrator (Available Profiles: Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
c:\windows\winsxs\manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest
*****************

c:\windows\winsxs\manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest => moved successfully

==== End of Fixlog 00:16:26 ====
 
Thanks. The following again please.

SFC Scan

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Good. Almost there.

System Update Readiness Tool (SUR)
 1. Download and run the following file.
2. When it asks you if you wish to install, please answer yes. Note: It could take 15 minutes or more to run. Please don't cancel.
3. You will get an Installation Complete screen when it's done running.
4. Please attach the log from the following location. C:\Windows\Logs\CBS\CheckSUR.log
Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
This should come back clean now and we should be done. :smile9:
SFC Scan

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Alrighty, here's the output. And it still didn't quite come back clean.
View attachment cbs - 1.zip

This time, looks like there is a file hash mismatch, as seen in the cbs.txt:
Code: 
2017-04-06 01:11:48, Info                  CSI    00000347 Looking for manifest in Backup Dir...
2017-04-06 01:11:48, Error                 CSI    00000348 (F) Unable to load manifest for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7"[gle=0x80004005]
2017-04-06 01:11:48, Error                 CSI    00000349@2017/4/5:15:11:48.880 (F) d:\win7sp1_gdr\base\wcp\componentstore\storelayout.cpp(2714): Store corruption detected in function ComponentStore::CRawStoreLayout::FetchManifestContent expression: 0
  FileHashMismatch on resource [128]"\winsxs\manifests\amd64_microsoft-windows-g..it-snapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_06d49e4cea0604a7.manifest"[gle=0x80004005]
 
Wishful thinking I guess. OK, please do the following.

Step#1 - ChkDsk Scan
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.
ElevateCommandPrompt.JPG

3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk and then press enter.
6. Chkdsk will start to run. Please allow it to finish. You will know it is running when you see text as follows.
Chkdsk.JPG


7. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
8. Right-click this file and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.
 
Before I start chkdsk scan, I'd just like to point out that ListChkdskResult.exe no longer exists on Dropbox, it probably was deleted.
 
Here is the output of ListChkdskResult.exe:
Code: 
ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 6/04/2017 1:44:06 AM >------
Category: 0
Computer Name: Wendy-HP
Event Code: 26212
Record Number: 5402331
Source Name: Chkdsk
Time Written: 04-05-2017 @ 15:42:33
Event Type: Information
User: 
Message: Chkdsk was executed in read-only mode on a volume snapshot.  

Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows .

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
Cleaning up instance tags for file 0x21ab7.
  227072 file records processed.                                         

File verification completed.
  1093 large file records processed.                                   

  0 bad file records processed.                                     

  2 EA records processed.                                           

  45 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  293188 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  227072 file SDs/SIDs processed.                                        

Cleaning up 1231 unused index entries from index $SII of file 0x9.
Cleaning up 1231 unused index entries from index $SDH of file 0x9.
Cleaning up 1231 unused security descriptors.
Security descriptor verification completed.
  33059 data files processed.                                           

CHKDSK is verifying Usn Journal...
  37548136 USN bytes processed.                                            

Usn Journal verification completed.
Windows has checked the file system and found no problems.

 476098559 KB total disk space.
 235167184 KB in 184490 files.
    133188 KB in 33060 indexes.
         0 KB in bad sectors.
    349027 KB in use by the system.
     65536 KB occupied by the log file.
 240449160 KB available on disk.

      4096 bytes in each allocation unit.
 119024639 total allocation units on disk.
  60112290 allocation units available on disk.

-----------------------------------------------------------------------
 
You must log in or register to reply here.
Back
Top