[Win8.1 Upd3 x64] SFC

Re: SFC

Code: 
2017-04-02 20:35:38, Info                  CSI    00000932 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000933 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk do not match actual file [l:38{19}]"Windows Journal.lnk" :
  Found: {l:32 b:Rn0ijVEFoR1dxu3z3s/+cax7d5jGzDJoBYLXPemTPxI=} Expected: {l:32 b:MZg2KqMnHh+iyhodplgMB7y35LaRMt4yIz1PaJqPuwo=}
2017-04-02 20:35:38, Info                  CSI    00000934 [SR] Cannot repair member file [l:38{19}]"Windows Journal.lnk" of Microsoft-Windows-TabletPC-Journal, Version = 6.3.9600.18189, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2017-04-02 20:35:38, Info                  CSI    00000935 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000936 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000937 [SR] This component was referenced by [l:166{83}]"Package_1362_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-3967_neutral_GDR"

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
View attachment SFCFix.zip

Step 2 - SFC Scan

  1. Swipe in from the right edge of the screen, and then tap Search.
    (If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.)
  2. Type cmd in the search box, and then right-click or press and hold on Command Prompt.
  3. Tap or click Run as administrator.
  4. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  5. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.
 
Re: SFC

Code: 
SFCFix version 3.0.0.0 by niemiro. 
Start time: 2017-05-26 10:49:56.790 
Microsoft Windows 8.1 Update 3 - amd64 
Using .zip script file at D:\Autoruns\sfc2\SFCFix.zip [0] 
 
 
 
 
PowerCopy:: 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96\shdocvw.dll to C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96\shdocvw.dll. 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk to C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk. 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc\shdocvw.dll to C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc\shdocvw.dll. 
 
Successfully restored ownership for C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully restored permissions on C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
PowerCopy:: directive completed successfully. 
 
 
 
 
Successfully processed all directives. 
SFCFix version 3.0.0.0 by niemiro has completed. 
Currently storing 4 datablocks. 
Finish time: 2017-05-26 10:49:58.633 
Script hash: m7ecZpBV5ADKppPIYWz6CdiSidzBWa8VGxKBWPIkujM= 
----------------------EOF-----------------------
 

Attachments

Re: SFC

Code: 
2017-05-26 11:10:05, Info                  CSI    00000925 [SR] Repairing 3 components
2017-05-26 11:10:05, Info                  CSI    00000926 [SR] Beginning Verify and Repair transaction
2017-05-26 11:10:05, Info                  CSI    00000927 Hashes for file member \??\C:\WINDOWS\System32\shdocvw.dll do not match actual file [l:22{11}]"shdocvw.dll" :
  Found: {l:32 b:/bvH8nfIm1Ok1sUnCBN7bIBGTwopbJRH/Z5orcMZiHo=} Expected: {l:32 b:GEbQdt2Kk9CcLfO6iy5mSzgQUA8O91AVXaFbgTe0MPA=}
2017-05-26 11:10:05, Info                  CSI    00000928 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:22{11}]"shdocvw.dll" from store
2017-05-26 11:10:05, Info                  CSI    00000929 [SR] Repairing corrupted file [ml:520{260},l:156{78}]"\??\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC"\[l:38{19}]"Windows Journal.lnk" from store
2017-05-26 11:10:05, Info                  CSI    0000092a [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\WINDOWS\SysWOW64"\[l:22{11}]"shdocvw.dll" from store
2017-05-26 11:10:05, Info                  CSI    0000092b [SR] Repair complete

Looks good. Does explorer run at this point?
 
Re: SFC

I'd like to take a look at the event logs.

Event Log Collection

  • Download VEW by Vino Rosso here: VEW.EXE
  • Right click the file and select Run as administrator and click Continue or Allow at the User Account Control Prompt.
  • Click the check boxes next to Application and System located under Select log to query on the upper left.
  • Under Select type to list on the right click the boxes next to Error, Warning and Critical (not XP).
  • Under Number or date of events select Number of events and type 20 in the box next to 1 to 20 and click Run.
  • Once it finishes it will display a log file in notepad.
  • Copy and paste its entire contents into your next reply.
 
Re: SFC

after run vew.exe i have information window:
"vew has not be coded for your language (polish)"
 
The file is too large to load in any browser I have tried. Would it be possible to export only the current day's events?
 
Clean Boot

  1. Swipe in from the right edge of the screen, and then tap Search. Or, if you are using a mouse, point to the lower-right corner of the screen, and then click Search.
  2. Type msconfig in the search box, and then tap or click msconfig.
    2832179.png
  3. On the Services tab of the System Configuration dialog box, tap or click to select the Hide all Microsoft services check box, and then tap or click Disable all.
    2832144.png
  4. On the Startup tab of the System Configuration dialog box, tap or click Open Task Manager
    2832180.png
  5. On the Startup tab in Task Manager, for each startup item, select the item and then click Disable.
    2832181.png
  6. On the Startup tab of the System Configuration dialog box, tap or click OK, and then restart the computer.
    2832147.png


    https://support.microsoft.com/en-us/kb/929135
 
yes, it runs from task manager

i know almost on 100% that i dont have any virus but o.k. i post on that subforum

P.S. I was thinking to uninstall programs from command line but wmic not working for me
 
it (explorer.exe) works but is 50-70% cpu usage (and in any access to select file "file/open" explorer hang)
 
You must log in or register to reply here.
Back
Top