[SOLVED] Windows 7 corruption and SURT asks for updates that do not exist

Rename FRST64.exe into English.exe. FRST will now use English in the log files.
Right-click English.exe and run the tool as administrator.
Note: Ensure that the Addition.txt check box is checked at the bottom of the form within the Optional Scan area.
Press the Scan button.
Please wait for the tool to finish. It will produce two logfiles called FRST.txt and Addition.txt in the same directory the tool is run from (which should be the desktop)
Post the logfiles FRST.txt and Addition.txt as attachment in your next reply.
 
Notes on addition.txt

The hosts file was made by Spybot Search and Destroy. I used to have that program in 2012 (I don't currently have it). It had a function to use that to block known malware sites. I later forgot about that and left it there.

On CodeIntegrity, I used to have a faulty hard drive, which I later replaced while copying the entire old disk to the new one.
 

Attachments

The log file FRST.txt isn't complete.

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.
  1. Download the attachment fixlist.txt and save it to your desktop.
  2. Right-click on English.exe and select "Run as administrator".
  3. Press the Fix button.
  4. The tool will now process fixlist.txt.
  5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  7. Post the logfile Fixlog.txt as attachment in your next reply.

Step 2:
Start the System Update Readiness Tool (SURT) again.
On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply.
 

Attachments

But you attached an SFCfix.zip instead of a fixlist.txt. Anyways, here is a new, fresh FRST.txt
 

Attachments

Last edited:
Oops, sorry for the confusion. Your new attachment FRST.txt is complete.
Ignore all steps in message #23.

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.
  • Download the attachment SFCFix.zip and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.

Step 2:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.
  1. Download the attachment fixlist.txt and save it to your desktop.
  2. Right-click on FRST64.exe and select "Run as administrator".
  3. Press the Fix button.
  4. The tool will now process fixlist.txt.
  5. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  6. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
  7. Post the logfile Fixlog.txt as attachment in your next reply.

Step 3:
Start the System Update Readiness Tool (SURT) again.
On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply.
 

Attachments

The antivirus picked up FRST as malware right during the fix and stopped it. I placed FRST under an exception to ignore it. Should I run it again? This is what it did before getting stopped as fixlog.


This is the SFCfix log:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2020-09-12 16:23:45.036
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Usuario\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7600.16759_none_4c3364ced902738a
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16759_none_b7f8323aaeb6e757
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c

Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7600.16759_none_4c3364ced902738a\mscorjit.dll to C:\Windows\winsxs\amd64_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7600.16759_none_4c3364ced902738a\mscorjit.dll.
Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16759_none_b7f8323aaeb6e757\mscordacwks.dll to C:\Windows\winsxs\amd64_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16759_none_b7f8323aaeb6e757\mscordacwks.dll.
Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\adtschema.dll.mui to C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\adtschema.dll.mui.
Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\auditpol.exe.mui to C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\auditpol.exe.mui.
Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\msaudite.dll.mui to C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\msaudite.dll.mui.
Successfully copied file C:\Users\Usuario\AppData\Local\niemiro\Archive\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\msobjs.dll.mui to C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c\msobjs.dll.mui.

Successfully restored ownership for C:\Windows\winsxs\amd64_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7600.16759_none_4c3364ced902738a
Successfully restored permissions on C:\Windows\winsxs\amd64_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7600.16759_none_4c3364ced902738a
Successfully restored ownership for C:\Windows\winsxs\amd64_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16759_none_b7f8323aaeb6e757
Successfully restored permissions on C:\Windows\winsxs\amd64_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7600.16759_none_b7f8323aaeb6e757
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_es-es_b880901589c0966c
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 144 datablocks.
Finish time: 2020-09-12 16:23:47.017
Script hash: 6zBUjBZeXrQnTlpp3onbXJJhCQz8cwiCByauT8oe35Q=
----------------------EOF-----------------------
 

Attachments

The antivirus picked up FRST as malware right during the fix and stopped it.
Some AV programs do. FRST is a legit program. You may also disable the real-time protection temporarily when using FRST.

The file Fixlog.txt is not complete, please post it again.
 
I know some AVs can stop FRST. I have indeed used it before on this very same computer and AV, but it only picked it now for some reason. Now it finished properly and rebooted this computer.
 

Attachments

Well done. One item to fix in the CheckSur log.

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.
  • Download the attachment SFCFix.zip and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.

Step 2:
Start the System Update Readiness Tool (SURT) again.
On completion, attach the logfile C:\Windows\Logs\CBS\CheckSUR.log to your next reply.
 

Attachments

Out of curiosity, I did an sfc /scannow and it came up with it saying it found some damaged files and managed to fix them and will apply after reboot.
 

Attachments

I did an sfc /scannow and it came up with it saying it found some damaged files and managed to fix them and will apply after reboot.
Run SFC /SCANNOW again after the reboot and report the result.
 
You can ignore the moving files lines.
Check Windows Update and report the result.
 
After booting a second time, Windows could not load "the event editing registry" (popup are in Spanish, so it was something like that). It doesn't show up in Event Viewer, since it says that events aren't logged. It also booted up in low resolution mode.

Restarted again, same thing happened and here is the whole message:


"Failed to connect to a windows service.


Windows could not connect to the System Event Notification Service service. This problem prevents limited users from logging on to the system. As an administrative user, you can review the System Event Log for details about why the service didn't respond."
 
Last edited:
Typed in "netsh winsock reset", rebooted and it got fixed. Computer now also boots and shuts down much faster.
 
Check the machine the next few days and report the result.
 
This can be a bit late, but I noticed that sometimes, the computer will get some sort of lag or memory leak-ish event, in which the computer will not start new processes (opening new programs, new tabs on internet browser, etc), but the current ones will work well and won't lag. After around 5 minutes or so, it will stop lagging and load all the processes "on waiting list". It did not happen before.
 
Download
51ab99ff51ec9-CrystalDiskInfo.png
CrystalDiskInfo.zip and save it on your desktop.
Extract the .zip file into a new folder.
In this new folder, run the tool DiskInfo.
When the tool is finished, it will show some information about the hard disc.
Note: Resize the window so that all information is visible.
Take a screenshot. Read this on how to take a screenshot.
Upload the image file to a file-sharing site and post the download link.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top