[SOLVED] corrupt files

krampus · Jan 5, 2015

Hi, we've been having a couple issues with our computer after the 8.1 update, tiles not responding, programs not syncing. I was on another site, which helped out a lot, that suggested I ask for help from this site. They had me run the SFC program and Malwarebyte. SFC was 'unable to fix corrupted files' and Malwarebyte found some issues. Can you help me with the corrupted files? I tried to post the CBS log but it is too large.
Thanks

Go The Power · Jan 6, 2015

Hello and welcome to the forum :)

To get started lets obtain a few logs.

Open Malwarebytes Anti-Malware 2.0
Click History > Application Logs
Double-click the log you would like to open

- Protection Logs record information from Malwarebytes real-time protection module, including scheduled scans, database, and blocked threats
- Scan Logs record detections from manual scans, including threats detected and the actions taken against them

To save a Protection Log:

Open the log file you would like to save
Click Export
Choose to export to either a .txt or .xml file
Choose a folder to save the log file in, then click Save

To save a Scan Log:

Open the log file you would like to save
Click Export
Choose to export to either a .txt or .xml file
Choose a folder to save the log file in, then click Save

upload both scans to your next post please.

Download and Run SFCFix

Please download and run SFCFix from >Here<

It will take about 15 minutes to process. Once the scan has completed a notepad file will launch with the results. Please copy and paste the entire contents of the results and post them back into this thread. Please put [CODE][/CODE] tags around the log to break up the text.

Export CBS folder

Right click on the

button
Click on File Explorer
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.
Attach this to your next post please.

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive

krampus · Jan 6, 2015

Hi, thanks for getting back to me.
There are no logs saved in Malwarebytes history. Here is the one I saved in notepad from the last scan;

Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 12/31/2014
Scan Time: 11:58:49 AM
Logfile: malwarebytes123114.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2014.12.31.04
Rootkit Database: v2014.12.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 8.1
CPU: x64
File System: NTFS
User: noelt_000
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 515963
Time Elapsed: 47 min, 4 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 2
PUP.Optional.Softonic.A, HKU\S-1-5-21-2112258770-3088764460-2155671748-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, Quarantined, [015fd990f389c175aa76253fd132de22],
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-2112258770-3088764460-2155671748-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DSiteProducts, Quarantined, [08585217eb9141f50b8f24bff21221df],
Registry Values: 1
PUP.Optional.GorillaPrice.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}, C:\Users\noelt_000\AppData\Roaming\Mozilla\FireFox\{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}.xpi, Quarantined, [68f8640583f9cb6bb4ca0ed135cf54ac]
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 6
PUP.Optional.AZLyrics.A, C:\Users\Griffen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [3b254e1bdba14de9913986de2dd6b44c],
PUP.Optional.AZLyrics.A, C:\Users\Griffen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [9ac626432b5181b5deec9cc8927106fa],
PUP.Optional.AZLyrics.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [29375c0df08c2f07537774f08281e41c],
PUP.Optional.AZLyrics.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [d8886801e597181e6763c4a0c73ceb15],
PUP.Optional.Delta.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage, Quarantined, [4d13b7b22b515fd71f9080f2db2825db],
PUP.Optional.Delta.A, C:\Users\Isabel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage-journal, Quarantined, [fc640e5b7b01f442d3dce78b897ad62a],
Physical Sectors: 0
(No malicious items detected)

(end)

Should I update it and run it again?
I'll run the SFC Fix now.
Thanks a lot!

krampus · Jan 6, 2015

Hi 'Go The Power',
Here is the log for the SFCFix. It looks like good news so far.

SFCFix version 2.4.1.0 by niemiro.
Start time: 2015-01-06 20:04:37.349
Not using a script file.

AutoAnalysis::
FIXED: Performed DISM repair on file Amd64\CNBJ2530.DPB of version 6.3.9600.16384.

SUMMARY: All detected corruptions were successfully repaired.
AutoAnalysis:: directive completed successfully.

Successfully processed all directives.

Failed to generate a complete zip file. Upload aborted.

SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-01-06 20:45:12.143
----------------------EOF-----------------------
I'm sorry, what is

Code:

?
I'll try the CBS file next.

Thanks for taking the time to help me.

krampus · Jan 6, 2015

The CBS file is too large. I'll have to try Dropbox.

krampus · Jan 6, 2015

The CBS file is too large. It's on OneDrive under my email. Good luck!
https://onedrive.live.com/?cid=EC5D1CB210E209B3&id=EC5D1CB210E209B3!104

Go The Power · Jan 7, 2015

Thank you Krampus.

We also received your message through the Contact Us feature, in future please just reply to this thread :)

When trying to view the CBS folder, I received an error that either the file has been removed or the access is incorrect.

krampus · Jan 7, 2015

I replaced the file on OneDrive, I hope that works. I may be uploading it wrong, it seems too easy.

Sorry about the 'contact message'. I believe while trying to upload the zip files I left my login unattended for too long and it made me go through an administrator when I tried to 'edit' a post.
Thanks for all your patience.

Go The Power · Jan 8, 2015

Can you please follow the steps here: Share files and folders and change permissions - OneDrive Help

Thanks :)

Alex

krampus · Jan 8, 2015

Hi, lets try again,
http://1drv.ms/17o3Rim

Go The Power · Jan 9, 2015

Perfect, thanks.

The corruption is with the following file:

Code:

2014-12-31 13:38:39, Info                  CSI    0000086e Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
  Found: {l:32 b:fgTDWqjsYZzFm01Ze+uFZAHRDb5aFDCG4Lu5km9xNiI=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC /SCANNOW

Right click on the

button
Click on Command prompt (Admin) => Press Yes on the prompt
Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
Please wait for this to Finish before continuing with rest of the steps.

Convert CBS.log to CBS.txt

Right click on the

button
Click on Run => Inside the run box copy and paste the following command:
Code:
```
cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
Press Enter
Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive

krampus · Jan 11, 2015

Here is the fix text;

Code:

SFCFix version 2.4.1.0 by niemiro.
Start time: 2015-01-11 12:08:45.815
Using .zip script file at C:\Users\noelt_000\Desktop\SFCFix.zip [0]
Not using an additional text script file.
 

AutoAnalysis::
Success: File Placement Mode successfully identified and repaired all files and folders.
AutoAnalysis:: directive completed successfully.
 

Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-01-11 12:08:46.393
Script hash: 9DTQXqT5Hyi7iQReCQgbvd/DeJu/DMRtKiu0CDOUhY8=
----------------------EOF-----------------------

krampus · Jan 11, 2015

Here is the CBStext link;
http://1drv.ms/1y34utq

krampus · Jan 11, 2015

FYI, when I ran the SFCscan the message it displayed after running was 'Windows Resource Protection did not find any integrity violations'.
Thank you

Go The Power · Jan 12, 2015

The log looks a lot better, no more corruptions are being detected.

krampus · Jan 12, 2015

That's great! Should I delete the items I've saved to desktop?
Thanks for all your help Alex.
Krampus

Go The Power · Jan 13, 2015

Yes you can delete those. Your welcome, glad to have helped :)

Search

Search

[SOLVED] corrupt files

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor

krampus

Member

krampus

Member

krampus

Member

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor

krampus

Member

krampus

Member

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor

krampus

Member

Go The Power

Senior Administrator, Windows Update Expert, Contributor