[SOLVED] Server 2012 Corruption CBS.log attached

D

DrSnoCaps

Contributor
Joined
Oct 1, 2019
Posts
31
Dism /RestoreHealth fails and SFC /scannow shows corruption with RemoteDesktop.Events.xml and WebServer.Events.xml

I've attached a zipped CBS.log file.

Any help would be appreciated.
 

Attachments

Hello and welcome!

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.



SFC Scan


  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.
 

Attachments

Thanks. Here you go.. Looks to me like it did the trick :)

Code: 
SFCFix version 3.0.2.1 by niemiro.
Start time: 2019-10-01 11:45:24.049
Microsoft Windows Server 2012  - amd64
Using .zip script file at C:\Users\Administrator\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\msil_microsoft.windows.s..ermanager.rdsplugin_31bf3856ad364e35_6.2.9200.16384_none_be671de7bbb86ec2\RemoteDesktop.Events.xml
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-iis-webserver-events_31bf3856ad364e35_6.2.9200.16384_none_a230ad03b2714c1a\WebServer.Events.xml

Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\WinSxS\msil_microsoft.windows.s..ermanager.rdsplugin_31bf3856ad364e35_6.2.9200.16384_none_be671de7bbb86ec2\RemoteDesktop.Events.xml to C:\Windows\WinSxS\msil_microsoft.windows.s..ermanager.rdsplugin_31bf3856ad364e35_6.2.9200.16384_none_be671de7bbb86ec2\RemoteDesktop.Events.xml.
Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-iis-webserver-events_31bf3856ad364e35_6.2.9200.16384_none_a230ad03b2714c1a\WebServer.Events.xml to C:\Windows\WinSxS\amd64_microsoft-windows-iis-webserver-events_31bf3856ad364e35_6.2.9200.16384_none_a230ad03b2714c1a\WebServer.Events.xml.

Successfully restored ownership for C:\Windows\WinSxS\msil_microsoft.windows.s..ermanager.rdsplugin_31bf3856ad364e35_6.2.9200.16384_none_be671de7bbb86ec2\RemoteDesktop.Events.xml
Successfully restored permissions on C:\Windows\WinSxS\msil_microsoft.windows.s..ermanager.rdsplugin_31bf3856ad364e35_6.2.9200.16384_none_be671de7bbb86ec2\RemoteDesktop.Events.xml
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-iis-webserver-events_31bf3856ad364e35_6.2.9200.16384_none_a230ad03b2714c1a\WebServer.Events.xml
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-iis-webserver-events_31bf3856ad364e35_6.2.9200.16384_none_a230ad03b2714c1a\WebServer.Events.xml
PowerCopy:: directive completed successfully.




Successfully processed all directives.



Failed to generate a complete zip file. Upload aborted.


SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2019-10-01 11:48:22.001
Script hash: 1mWZnMI3Cj8jZfNioKQvZ8uEptymLodOqKpQOaD6r20=
----------------------EOF-----------------------
 

Attachments

Ugh... I spoke too soon :/ SFC /scannow didn't find any problems and /ScanHealth returned as repairable but /RestoreHealth came back with a 0x800f0906 error, couldn't download files :(

What now?
 
FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB3102429;KB3104002;KB3066441 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.
 
Remnants of old updates.

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Thanks.

FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB2887069 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.
 
Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

SFC Scan
  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.
    Note: If the file is too large to upload, use a file sharing service like Sendspace and paste the link here.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top