[SOLVED] corrupt files

K

krampus

Member
Joined
Jan 5, 2015
Posts
11
Hi, we've been having a couple issues with our computer after the 8.1 update, tiles not responding, programs not syncing. I was on another site, which helped out a lot, that suggested I ask for help from this site. They had me run the SFC program and Malwarebyte. SFC was 'unable to fix corrupted files' and Malwarebyte found some issues. Can you help me with the corrupted files? I tried to post the CBS log but it is too large.
Thanks
 
Hello and welcome to the forum :)

To get started lets obtain a few logs.


  1. Open Malwarebytes Anti-Malware 2.0
  2. Click History > Application Logs
  3. Double-click the log you would like to open

    • Protection Logs record information from Malwarebytes real-time protection module, including scheduled scans, database, and blocked threats
    • Scan Logs record detections from manual scans, including threats detected and the actions taken against them
To save a Protection Log:

  1. Open the log file you would like to save
  2. Click Export
  3. Choose to export to either a .txt or .xml file
  4. Choose a folder to save the log file in, then click Save
To save a Scan Log:

  1. Open the log file you would like to save
  2. Click Export
  3. Choose to export to either a .txt or .xml file
  4. Choose a folder to save the log file in, then click Save

upload both scans to your next post please.

Download and Run SFCFix

Please download and run SFCFix from >Here<

It will take about 15 minutes to process. Once the scan has completed a notepad file will launch with the results. Please copy and paste the entire contents of the results and post them back into this thread. Please put [CODE][/CODE] tags around the log to break up the text.


Export CBS folder

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on File Explorer
  3. Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
  4. Find and double click on the Logs folder.
  5. Right-click on the CBS folder, and select Copy.
  6. Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
  7. Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
  8. A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.
  9. Attach this to your next post please.

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive
 
Hi, thanks for getting back to me.
There are no logs saved in Malwarebytes history. Here is the one I saved in notepad from the last scan;

Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 12/31/2014
Scan Time: 11:58:49 AM
Logfile: malwarebytes123114.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2014.12.31.04
Rootkit Database: v2014.12.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 8.1
CPU: x64
File System: NTFS
User: noelt_000
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 515963
Time Elapsed: 47 min, 4 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 2
PUP.Optional.Softonic.A, HKU\S-1-5-21-2112258770-3088764460-2155671748-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, Quarantined, [015fd990f389c175aa76253fd132de22],
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-2112258770-3088764460-2155671748-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DSiteProducts, Quarantined, [08585217eb9141f50b8f24bff21221df],
Registry Values: 1
PUP.Optional.GorillaPrice.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}, C:\Users\noelt_000\AppData\Roaming\Mozilla\FireFox\{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}.xpi, Quarantined, [68f8640583f9cb6bb4ca0ed135cf54ac]
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 6
PUP.Optional.AZLyrics.A, C:\Users\Griffen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [3b254e1bdba14de9913986de2dd6b44c],
PUP.Optional.AZLyrics.A, C:\Users\Griffen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [9ac626432b5181b5deec9cc8927106fa],
PUP.Optional.AZLyrics.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [29375c0df08c2f07537774f08281e41c],
PUP.Optional.AZLyrics.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [d8886801e597181e6763c4a0c73ceb15],
PUP.Optional.Delta.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage, Quarantined, [4d13b7b22b515fd71f9080f2db2825db],
PUP.Optional.Delta.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage-journal, Quarantined, [fc640e5b7b01f442d3dce78b897ad62a],
Physical Sectors: 0
(No malicious items detected)

(end)

Should I update it and run it again?
I'll run the SFC Fix now.
Thanks a lot!
 
Hi 'Go The Power',
Here is the log for the SFCFix. It looks like good news so far.

SFCFix version 2.4.1.0 by niemiro.
Start time: 2015-01-06 20:04:37.349
Not using a script file.


AutoAnalysis::
FIXED: Performed DISM repair on file Amd64\CNBJ2530.DPB of version 6.3.9600.16384.

SUMMARY: All detected corruptions were successfully repaired.
AutoAnalysis:: directive completed successfully.


Successfully processed all directives.

Failed to generate a complete zip file. Upload aborted.

SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-01-06 20:45:12.143
----------------------EOF-----------------------
I'm sorry, what is
Code: 
?
I'll try the CBS file next.

Thanks for taking the time to help me.
 
Thank you Krampus.

We also received your message through the Contact Us feature, in future please just reply to this thread :)



When trying to view the CBS folder, I received an error that either the file has been removed or the access is incorrect.
 
I replaced the file on OneDrive, I hope that works. I may be uploading it wrong, it seems too easy.

Sorry about the 'contact message'. I believe while trying to upload the zip files I left my login unattended for too long and it made me go through an administrator when I tried to 'edit' a post.
Thanks for all your patience.
 
Perfect, thanks.

The corruption is with the following file:
Code: 
2014-12-31 13:38:39, Info                  CSI    0000086e Hashes for file member [B]\SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB[/B]" :
  Found: {l:32 b:fgTDWqjsYZzFm01Ze+uFZAHRDb5aFDCG4Lu5km9xNiI=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC /SCANNOW
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with rest of the steps.
Convert CBS.log to CBS.txt
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run => Inside the run box copy and paste the following command:
    Code: 
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  3. Press Enter
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread
Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive
 
Here is the fix text;

Code: 
SFCFix version 2.4.1.0 by niemiro.
Start time: 2015-01-11 12:08:45.815
Using .zip script file at C:\Users\noelt_000\Desktop\SFCFix.zip [0]
Not using an additional text script file.
 

AutoAnalysis::
Success: File Placement Mode successfully identified and repaired all files and folders.
AutoAnalysis:: directive completed successfully.
 

Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-01-11 12:08:46.393
Script hash: 9DTQXqT5Hyi7iQReCQgbvd/DeJu/DMRtKiu0CDOUhY8=
----------------------EOF-----------------------
 
FYI, when I ran the SFCscan the message it displayed after running was 'Windows Resource Protection did not find any integrity violations'.
Thank you
 
That's great! Should I delete the items I've saved to desktop?
Thanks for all your help Alex.
Krampus
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top