[SOLVED] Windows 7 SP1 update error code 800B0100

[ajgab]

Hopefully it took

 

[Aura]

Now it's the Pretty_Peacook.jpg file that is corrupt again, but I think I know what's happening. Follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

• Download SFCFix and move the executable on your Desktop;
• Download the attached SFCFix.zip and move the archive to your Desktop;
  Note: Make sure that the file is named SFCFix.zip, do not rename it.
• Save any work you have open, and close every programs;
• Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  
  
• SFCFix will launch, let it complete;
• Once done, a file will appear on your Desktop, called SFCFix.txt;
• Open the file, then copy and paste its content in your next reply;

View attachment SFCFix.zip

 

[ajgab]

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-11 09:13:40.272
Microsoft Windows 7 - amd64
Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [1]








PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg


WARNING: File C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg was not backed up as that would replace the current backup.
Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg to C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg.


Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-09-11 09:13:40.774
Script hash: KcQ33jRuStP7D/MqdzGh4KZrCFHwn4S4ebNuXW35LXc=
----------------------EOF-----------------------

 

[Aura]

Alright, a new SFC scan to see if this is finally solved.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

• On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select
  
  Run as Administrator
• On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
• On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
• Enter the command below and press on Enter;
  

  sfc /scannow

  Note: There's a space between "sfc" and "/scannow";
• Once the scan is complete, enter the command below and press on Enter
  

  copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

• A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

 

[ajgab]

OK lets hope this worked

 

[ajgab]

Curious to know where we are since the last file I sent you?
thxs

 

[Aura]

I reported the issue to my teacher to get more insight on it, here's what's happening basically:

Really, really weird issue here. To sum it up, two corruptions keep on coming back: notepad.exe.mui and Pretty_Peacook.jpg. First it's notepad.exe.mui, so I fix it using SFCFix, and after the OP runs SFC, the Pretty_Peacook.jpg corruption shows up. So I replace it using SFCFix, make the OP run SFC again, and then the notepad.exe.mui corruption comesback, again.

Here's what's weird. Here's the notepad.exe.mui corruption below:

2015-09-11 09:27:40, Info                  CSI    00000303 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui do not match actual file [l:30{15}]"notepad.exe.mui" :
  Found: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=} Expected: {l:32 b:o2tSWlTNsLpfCP+I3R4E0Dz7Z4HwNtMMweSbWEZCHTw=}

And here's the one for Pretty_Peacook.jpg.

2015-09-11 08:50:54, Info                  CSI    00000303 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:o2tSWlTNsLpfCP+I3R4E0Dz7Z4HwNtMMweSbWEZCHTw=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}

Notice anything? Check the hashes. The hash found for notepad.exe.mui matches the expected hash of Pretty_Peacook.jpg, and the expected hash of notepad.exe.mui is the hash found for Pretty_Peacook.jpg.

The hash for the PrettyPeacook.jpg file that I have is:

tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=

The ash for the notepad.exe.mui file that I have is:

o2tSWlTNsLpfCP+I3R4E0Dz7Z4HwNtMMweSbWEZCHTw=

 

[Aura]

Alright follow the instructions below please.

Step#1 - ChkDsk Scan
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.

3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk and then press enter.
6. Chkdsk will start to run. Please allow it to finish. You will know it is running when you see text as follows.

7. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
8. Right-click this file and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.

 

[ajgab]

Sorry for the delay. here is the result file from your request. Thxs !!!


ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013


------< Log generate on 9/23/2015 10:26:21 PM >------
Category: 0
Computer Name: OfficePC
Event Code: 26212
Record Number: 19573
Source Name: Chkdsk
Time Written: 09-24-2015 @ 02:13:24
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode on a volume snapshot.


Checking file system on C:
The type of the file system is NTFS.


WARNING! F parameter not specified.
Running CHKDSK in read-only mode.


CHKDSK is verifying files (stage 1 of 3)...
327936 file records processed.


File verification completed.
801 large file records processed.


0 bad file records processed.


2 EA records processed.


71 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 3)...
411382 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 3)...
327936 file SDs/SIDs processed.


Cleaning up 1117 unused index entries from index $SII of file 0x9.
Cleaning up 1117 unused index entries from index $SDH of file 0x9.
Cleaning up 1117 unused security descriptors.
Security descriptor verification completed.
41724 data files processed.


CHKDSK is verifying Usn Journal...
36728816 USN bytes processed.


Usn Journal verification completed.
The master file table's (MFT) BITMAP attribute is incorrect.
The Volume Bitmap is incorrect.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these.


67106815 KB total disk space.
65369088 KB in 251430 files.
179204 KB in 41725 indexes.
0 KB in bad sectors.
438295 KB in use by the system.
65536 KB occupied by the log file.
1120228 KB available on disk.


4096 bytes in each allocation unit.
16776703 total allocation units on disk.
280057 allocation units available on disk.


-----------------------------------------------------------------------
Category: 0
Computer Name: OfficePC
Event Code: 26212
Record Number: 19466
Source Name: Chkdsk
Time Written: 09-14-2015 @ 17:08:17
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode on a volume snapshot.


Checking file system on C:
The type of the file system is NTFS.


WARNING! F parameter not specified.
Running CHKDSK in read-only mode.


CHKDSK is verifying files (stage 1 of 3)...
327936 file records processed.


File verification completed.
784 large file records processed.


0 bad file records processed.


2 EA records processed.


71 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 3)...
411364 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 3)...
327936 file SDs/SIDs processed.


Cleaning up 1108 unused index entries from index $SII of file 0x9.
Cleaning up 1108 unused index entries from index $SDH of file 0x9.
Cleaning up 1108 unused security descriptors.
Security descriptor verification completed.
41715 data files processed.


CHKDSK is verifying Usn Journal...
36719296 USN bytes processed.


Usn Journal verification completed.
The master file table's (MFT) BITMAP attribute is incorrect.
The Volume Bitmap is incorrect.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these.


67106815 KB total disk space.
65311324 KB in 251410 files.
179196 KB in 41716 indexes.
0 KB in bad sectors.
438015 KB in use by the system.
65536 KB occupied by the log file.
1178280 KB available on disk.


4096 bytes in each allocation unit.
16776703 total allocation units on disk.
294570 allocation units available on disk.


-----------------------------------------------------------------------

 

[Aura]

Alright follow the instructions below please.

Check Disk (chkdsk)
Follow the instructions below to run a CHKDSK scan on your Windows partition;

• On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator
• On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
• On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
• Enter the command chkdsk /f (there's a space between "chkdsk" and "/f") and press on Enter;
• A message will be returned, stating that the drive cannot be locked because it's already in use, and you'll be asked if you want to schedule the scan for the next restart. Enter y and press on Enter;
• Restart your computer, and the chkdsk scan will be launched automatically;
• Once the chkdsk scan is complete and you're back in Windows, find the log in the Event Viewer and copy/paste it in your next reply;

WARNING: Depending on your hard drive (specs, free space, fragmentation, etc.) this scan can be relatively long to complete. Give it all the time it needs to finish. Do not interrupt it for any reason there is, or you might be damaging your drive in the process and make your Windows unbootable. It's suggested to let this scan run overnight or when you leave the house for a few hours (when you go to work for example). If you are running this scan on a laptop, don't forget to leave it plugged in;

 

[ajgab]

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 9/24/2015 11:42:26 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: OfficePC
Description:




Checking file system on C:
The type of the file system is NTFS.




A disk check has been scheduled.
Windows will now check the disk.


CHKDSK is verifying files (stage 1 of 3)...
327936 file records processed.


File verification completed.
805 large file records processed.


0 bad file records processed.


2 EA records processed.


71 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 3)...
411482 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 3)...
327936 file SDs/SIDs processed.


Cleaning up 1118 unused index entries from index $SII of file 0x9.
Cleaning up 1118 unused index entries from index $SDH of file 0x9.
Cleaning up 1118 unused security descriptors.
Security descriptor verification completed.
41774 data files processed.


CHKDSK is verifying Usn Journal...
37107616 USN bytes processed.


Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.


67106815 KB total disk space.
65025096 KB in 251575 files.
179304 KB in 41775 indexes.
0 KB in bad sectors.
438547 KB in use by the system.
65536 KB occupied by the log file.
1463868 KB available on disk.


4096 bytes in each allocation unit.
16776703 total allocation units on disk.
365967 allocation units available on disk.


Internal Info:
00 01 05 00 f1 79 04 00 a9 8f 08 00 00 00 00 00 .....y..........
f6 19 00 00 47 00 00 00 00 00 00 00 00 00 00 00 ....G...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................


Windows has finished checking your disk.
Please wait while your computer restarts.


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-09-24T15:42:26.000000000Z" />
<EventRecordID>19612</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>OfficePC</Computer>
<Security />
</System>
<EventData>
<Data>


Checking file system on C:
The type of the file system is NTFS.




A disk check has been scheduled.
Windows will now check the disk.


CHKDSK is verifying files (stage 1 of 3)...
327936 file records processed.


File verification completed.
805 large file records processed.


0 bad file records processed.


2 EA records processed.


71 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 3)...
411482 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 3)...
327936 file SDs/SIDs processed.


Cleaning up 1118 unused index entries from index $SII of file 0x9.
Cleaning up 1118 unused index entries from index $SDH of file 0x9.
Cleaning up 1118 unused security descriptors.
Security descriptor verification completed.
41774 data files processed.


CHKDSK is verifying Usn Journal...
37107616 USN bytes processed.


Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.


67106815 KB total disk space.
65025096 KB in 251575 files.
179304 KB in 41775 indexes.
0 KB in bad sectors.
438547 KB in use by the system.
65536 KB occupied by the log file.
1463868 KB available on disk.


4096 bytes in each allocation unit.
16776703 total allocation units on disk.
365967 allocation units available on disk.


Internal Info:
00 01 05 00 f1 79 04 00 a9 8f 08 00 00 00 00 00 .....y..........
f6 19 00 00 47 00 00 00 00 00 00 00 00 00 00 00 ....G...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................


Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

 

[Aura]

Alright good :) Follow the instructions in Post #16 again please.

https://www.sysnative.com/forums/wi...rror-code-800b0100-post129948.html#post129948

 

[ajgab]

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-24 12:38:10.438
Microsoft Windows 7 - amd64
Using .txt script file at \\psf\Home\Desktop\SFCFixScript.txt [1]








FileScan::
[0: 11] C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080\Pretty_Peacock.jpg
Expected: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=
Expected: 6.1.7601.21955 Found: Version number not available.
Successfully traced component amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080.
Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.2660649-7_neutral_LDR2


[C:\Windows\SysWOW64\en-US\notepad.exe.mui]
[C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg]
[C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_73a679f8be493c8c\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17803_none_75e16314bb308253\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.21955_none_67a76d1d5f5b894f\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.17803_none_6751df5a46172b22\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.21179_none_743ecb5dd75b47ed\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Pretty_Peacock.jpg]




[1: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723\notepad.exe.mui
Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE=
Expected: 6.1.7600.16385
Successfully traced component amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723.
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Microsoft-Windows-PsuedoTool-HashIDSpy-Deployment-LanguagePack


[C:\Windows\en-US\notepad.exe.mui]




[2: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637\notepad.exe.mui
Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE=
Expected: 6.1.7600.16385
Successfully traced component amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637.
Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack


[C:\Windows\System32\en-US\notepad.exe.mui]




[3: 1] C:\SFCFix\Backups\C\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui
File is untraceable.
Found: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=
Version number not available.
Trace not available.
FileScan:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-09-24 12:38:13.866
Script hash: YTjmdtYmd4p1iK5X2JWXcUqjUJqmwvZrIjSDz0T4M88=
----------------------EOF-----------------------

 

[ajgab]

Ok So now what would you like me to do from here?

 

[Aura]

I'm currently working on a fix with my instructor, it needs to be approved first :)

 

[ajgab]

Thanks for the reply look forward to hearing from you.

 

[Aura]

Follow the instructions below please.

Uninstall a Windows Update - Command Prompt
Follow the instructions below to uninstall a Windows Update manually via the command prompt.

• On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator
• On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
• On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
• Enter the command below (you can copy/paste it, to paste in the command prompt, right-click inside it and select Paste):
  • wusa /uninstall /KB:2660649
• Let me know the outcome of the command: either it uninstall the update or either it says that the update isn't installed on the system;

 

[ajgab]

A window popped up and gave me the option to uninstall so I clicked yes.

 

[Aura]

Good, let's do a new FileScan:: like in Post #16.

https://www.sysnative.com/forums/wi...rror-code-800b0100-post129948.html#post129948

 

[ajgab]

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-25 14:51:45.798
Microsoft Windows 7 - amd64
Using .txt script file at \\psf\Home\Desktop\SFCFixScript.txt [2]








FileScan::
[0: 5] C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui
Expected: o2tSWlTNsLpfCP+I3R4E0Dz7Z4HwNtMMweSbWEZCHTw= Found: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=
Expected: 6.1.7600.16385 Found: Version number not available.
Successfully traced component x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501.
Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack


[C:\Windows\SysWOW64\en-US\notepad.exe.mui]
[C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_73a679f8be493c8c\Pretty_Peacock.jpg]
[C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17514_none_75d78dc0bb37c026\Pretty_Peacock.jpg]




[1: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723\notepad.exe.mui
Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE=
Expected: 6.1.7600.16385
Successfully traced component amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723.
Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Microsoft-Windows-PsuedoTool-HashIDSpy-Deployment-LanguagePack


[C:\Windows\en-US\notepad.exe.mui]




[2: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637\notepad.exe.mui
Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE=
Expected: 6.1.7600.16385
Successfully traced component amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637.
Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack


[C:\Windows\System32\en-US\notepad.exe.mui]




[3: 1] C:\SFCFix\Backups\C\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui
File is untraceable.
Found: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=
Version number not available.
Trace not available.
FileScan:: directive completed successfully.








Successfully processed all directives.