SFC CBS Logs CORRUPT FILE(S) issue please help

ac650sx · Mar 9, 2014

hey guys new to the forum here I have a few issues id like some help with, im pretty good with instructions and not afraid to get into the complex fixes with the right instructions so hopefully someone can help me fix this problem

I did a sfc/scannow and came back with problems that couldn't be fixed ..

here is a copy of the log file if someone know how to decipher it !! and let me know what I need to do to fix these problems that would be greatfully appretiated
thanks

I have also been having problems with internet explorer giving me the stupid (internet explorer has stopped working error) when I try to copy something on and internet page or do random tasks so I don't know if these errors in the log are part of that problem ???

oh my system is a windows 7 64bit
internet explorer 11

CBS log 3-8-14.zip

niemiro · Mar 9, 2014

Hello, and welcome to Sysnative!

Thank you for uploading the logfiles. This thread will be handled by Machiavelli, one of the trainee analysts here (we all have to start somewhere...). Please do not be concerned by this, everything he posts will be approved by me first. However, this may lead to a slight delay, as he's got to get my approval before he can make each post to you.

It shouldn't, famous last words, take too long though, as your problem looks reasonably simple.

Richard

Machiavelli · Mar 9, 2014

Hello,

we need to run SURT. Please follow the instructions below carefully.

SURT

Download the System Update Readiness Tool from here to your Desktop.
After the download has completed, double-click the file and wait while it initializes. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the icon and select Run as Administrator)
Click Yes to begin installation. Please note it may take some time to complete and may appear to stall whilst installing. Don't worry, this is perfectly normal behaviour. Also note, whilst I say "installing", it's actually running the tool and can therefore be "installed" (run) repeatedly.

Export CBS folder

Click the Start button

then click Computer.
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.
Attach this to your next post please. If it is too big, please use an alternative uploading method then send me the link (Dropbox, SkyDrive, SendSpace etc.).

ac650sx · Mar 9, 2014

View attachment CBS.zip

thanks for your fast reply here is the folder you requested

thanks
Adam

ac650sx · Mar 9, 2014

hi I also ran the sfc/scannow after doing the System Update Readiness Tool you had me run .. it said there were no errors after it completed but when I looked in the windows\logs\cbs\ folder there was no new log for the latest to date scan that was with no errors ?

Is this normal to not have a cbs.log if the sfc/scannow came back with no errors ?
looking forward to your response
Thanks again
Adam

Machiavelli · Mar 9, 2014

Hello,
SURT fixed the corrupted package. As for the IE error, did you had that error also in the past or did it began at a specific time? Did you have problems with Malware in the past or some advertisment in the browser etc.?

Is this normal to not have a cbs.log if the sfc/scannow came back with no errors ?

In your case it is normal.

ac650sx · Mar 9, 2014

The internet explorer thing I'm really not sure of the date it started .. I have eset nod32 antivirus and I don't think I have any malware or advertisement problems .. what do I do to resolve the internet explorer problem ?
its strange if I go to a webpage where I would have to do an advanced search sometimes ill get the internet explorer has stopped working and same thing happens if I try to hold the left mouse tab down to select words or images I want to copy and paste the same error message will pop up ?? (internet explorer has stopped working)
can you recommend a program I should run to look for malware or advertisements ? or something that would replicate the problem and make a log for you do look at ?

ac650sx · Mar 9, 2014

not sure if this is in your expertise but I also was updating my NVidia driver for video card and it has some features that come with the driver update I would say 5 total items come with the driver .. all four including the driver install and update perfect except one .. NVidia GeForce experience ..
I created a log file of the failed install I don't know if this will give you any information you can use but its worth a look

View attachment LOG.GeForce_Experience_v1.8.2.0.exe.zip

Machiavelli · Mar 9, 2014

Hey,
for now we won't run any Malware programs.

For the IE issue:

Click on the Start

button and in the search box, type iexplore -extoff
Select the correct item and start it. Do the problems also exist there?

How much free space do you have and how many GB Ram do you have?

ac650sx · Mar 9, 2014

ok so I opened internet explorer no add-ons and could not replicate the problem ...

I've attached my system information from running MSINFO32
hope this gives you the info you need ..
I have 627gb of free space on hard drive and two 250gb backup external drives that I keep most of my pictures and stuff that doesn't need to be on the operating system drive

View attachment system info.zip

Machiavelli · Mar 9, 2014

Hello,

ok so I opened internet explorer no add-ons and could not replicate the problem ...

Now we found our problem. :)

Start IE by double clicking on the IE Icon
Click on the wrench symbol in the right corner, then select Manage Addons
Give me a screenshot of the window, which opens. How to do this click here: 3 Ways to Take a Screenshot in Microsoft Windows - wikiHow
Attach the image file to your next reply.

ac650sx · Mar 9, 2014

ok here is the screen shots with the currently loaded add ons

there are tuns more if I click the tab for all add ons ... should I screen shot that as well

ac650sx · Mar 9, 2014

without taking a screen shot here is a copy of what is there if I select (all add ons )

Name Adobe PDF Reader
Publisher Adobe Systems, Incorporated
Status Enabled
Architecture 32-bit
File date ‎Saturday, ‎December ‎21, ‎2013, ‏‎1:04 AM
Version 11.0.06.70
Name Deployment Toolkit
Publisher Oracle America, Inc.
Status Enabled
Architecture 32-bit
File date ‎Friday, ‎February ‎21, ‎2014, ‏‎9:22 PM
Version 7.0.510.13
Name GMNRev Class
Publisher Hewlett-Packard Company
Status Enabled
Architecture 32-bit
File date ‎Monday, ‎November ‎01, ‎2010, ‏‎6:29 PM
Version 10.7.9.0
Name ieSpell
Publisher Not Available
Status Enabled
Architecture 32-bit
Name ieSpell Options
Publisher Not Available
Status Enabled
Architecture 32-bit
Name Java SE Runtime Environment 7 Update 51
Publisher Oracle America, Inc.
Status Enabled
Architecture 32-bit
File date ‎Friday, ‎February ‎21, ‎2014, ‏‎9:22 PM
Version 7.0.510.13
Name Java(tm) Plug-In 2 SSV Helper
Publisher Oracle America, Inc.
Status Enabled
Architecture 32-bit
File date ‎Friday, ‎February ‎21, ‎2014, ‏‎9:22 PM
Version 7.0.510.13
Load time 0.02 s
Name Java(tm) Plug-In SSV Helper
Publisher Oracle America, Inc.
Status Enabled
Architecture 32-bit
File date ‎Friday, ‎February ‎21, ‎2014, ‏‎9:22 PM
Version 7.0.510.13
Load time 0.00 s
Name QuickTime Object
Publisher Apple Inc.
Status Enabled
Architecture 32-bit
File date ‎Wednesday, ‎May ‎01, ‎2013, ‏‎4:44 AM
Version QuickTime 7.7.4 (1680.86)
Name Shockwave Flash Object
Publisher Adobe Systems Incorporated
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Tuesday, ‎February ‎25, ‎2014, ‏‎6:07 PM
Version 12.0.0.70
Name Windows Live ID Sign-in Helper
Publisher Microsoft Corporation
Status Disabled
Architecture 32-bit and 64-bit
File date ‎Tuesday, ‎July ‎17, ‎2012, ‏‎4:17 PM
Version 7.250.4311.0
Name Windows Media Player
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Friday, ‎May ‎10, ‎2013, ‏‎1:56 AM
Version 12.0.7601.18150
Name XML DOM Document
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML HTTP 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML HTTP 6.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎November ‎01, ‎2012, ‏‎1:43 AM
Version 6.30.7601.17988
Name Yahoo! Toolbar
Publisher Yahoo! Inc.
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎November ‎19, ‎2013, ‏‎12:15 AM
Version 9.1.1.75
Load time 0.03 s
Navigation time 0.00 s
Name Yahoo! Toolbar Helper
Publisher Yahoo! Inc.
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎November ‎19, ‎2013, ‏‎12:15 AM
Version 9.1.1.75
Load time 0.00 s
Navigation time 0.00 s

ac650sx · Mar 9, 2014

and here is what is there if I click on show... (run without permission)

Name Behavior Object
Publisher Apple Inc.
Status Enabled
Architecture 32-bit
File date ‎Wednesday, ‎May ‎01, ‎2013, ‏‎4:44 AM
Version QuickTime 7.7.4 (1680.86)
Name Device Class
Publisher Hewlett-Packard Company
Status Enabled
Architecture 32-bit
File date ‎Monday, ‎November ‎01, ‎2010, ‏‎6:27 PM
Version 1.2.4.0
Name DeviceCollection Class
Publisher Hewlett-Packard Company
Status Enabled
Architecture 32-bit
File date ‎Monday, ‎November ‎01, ‎2010, ‏‎6:27 PM
Version 1.2.4.0
Name DeviceDetection Class
Publisher Hewlett-Packard Company
Status Enabled
Architecture 32-bit
File date ‎Monday, ‎November ‎01, ‎2010, ‏‎6:27 PM
Version 1.2.4.0
Name DSPrintQueue Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name Free Threaded XML DOM Document
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name Free Threaded XML DOM Document 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name Free Threaded XML DOM Document 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name Free Threaded XML DOM Document 6.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎November ‎01, ‎2012, ‏‎1:43 AM
Version 6.30.7601.17988
Name HtmlDlgSafeHelper Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Wednesday, ‎March ‎05, ‎2014, ‏‎12:34 AM
Version 11.00.9600.16428
Name iTunesDetector Class
Publisher Apple Inc.
Status Enabled
Architecture 32-bit
File date ‎Thursday, ‎February ‎20, ‎2014, ‏‎2:56 PM
Version 2.0.1.1
Name Java Plug-in 10.51.2
Publisher Oracle America, Inc.
Status Enabled
Architecture 32-bit
File date ‎Friday, ‎February ‎21, ‎2014, ‏‎9:22 PM
Version 7.0.510.13
Name Microsoft Shell UI Helper
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎February ‎06, ‎2014, ‏‎4:22 AM
Version 11.00.9600.16428
Name Nv3DVisionControl Class
Publisher (Not verified) NVIDIA CORPORATION
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Saturday, ‎February ‎08, ‎2014, ‏‎11:18 AM
Version 7.17.13.3489
Name Nv3DVStreamingPluginBHO Class
Publisher (Not verified) NVIDIA CORPORATION
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Saturday, ‎February ‎08, ‎2014, ‏‎11:18 AM
Version 7.17.13.3489
Name OleCvt Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name OleInstall Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name oleprn Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name OleSNMP Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name prturl Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name QuickTime Object
Publisher Apple Inc.
Status Enabled
Architecture 32-bit
File date ‎Wednesday, ‎May ‎01, ‎2013, ‏‎4:44 AM
Version QuickTime 7.7.4 (1680.86)
Name Registration Control
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:41 PM
Version 6.1.7600.16385
Name RMGetLicense Class
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Saturday, ‎November ‎20, ‎2010, ‏‎8:27 AM
Version 11.0.7601.17514
Name Scripting.Dictionary
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Friday, ‎October ‎11, ‎2013, ‏‎10:31 PM
Version 5.8.7600.16385
Name Tabular Data Control
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Wednesday, ‎March ‎05, ‎2014, ‏‎12:34 AM
Version 11.00.9600.16428
Name Windows Live ID Sign-in Control
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Tuesday, ‎July ‎17, ‎2012, ‏‎4:17 PM
Version 7.250.4311.0
Name Windows Media Services DRM Storage object
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Saturday, ‎November ‎20, ‎2010, ‏‎8:27 AM
Version 11.0.7601.17514
Name X509 Enrollment WebClassFactory
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Monday, ‎July ‎13, ‎2009, ‏‎9:38 PM
Version 6.1.7600.16385
Name X509 Machine Enrollment Factory
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Saturday, ‎November ‎20, ‎2010, ‏‎8:25 AM
Version 6.1.7600.16385
Name XML Data Source Object
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML Data Source Object 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML Data Source Object 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name XML DOM Document 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML DOM Document 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name XML DOM Document 6.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎November ‎01, ‎2012, ‏‎1:43 AM
Version 6.30.7601.17988
Name XML HTTP 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name XML Schema Cache
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML Schema Cache 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XML Schema Cache 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name XML Schema Cache 6.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎November ‎01, ‎2012, ‏‎1:43 AM
Version 6.30.7601.17988
Name XSL Template
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XSL Template 3.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎December ‎05, ‎2013, ‏‎9:30 PM
Version 8.110.7601.18334
Name XSL Template 4.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎12:05 AM
Version 4.20.9876.0
Name XSL Template 6.0
Publisher Microsoft Corporation
Status Enabled
Architecture 32-bit and 64-bit
File date ‎Thursday, ‎November ‎01, ‎2012, ‏‎1:43 AM
Version 6.30.7601.17988
Name Yahoo! Toolbar
Publisher Yahoo! Inc.
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎November ‎19, ‎2013, ‏‎12:15 AM
Version 9. 1. 1. 75
Load time 0.03 s
Navigation time 0.00 s
Name Yahoo! Toolbar Helper
Publisher Yahoo! Inc.
Status Enabled
Architecture 32-bit
File date ‎Tuesday, ‎November ‎19, ‎2013, ‏‎12:15 AM
Version 9. 1. 1. 75
Load time 0.00 s
Navigation time 0.00 s

Machiavelli · Mar 10, 2014

Hello,
I have identified that one or more Addons are causing your problem. Why do I think so? We have tested IE without any Addons and you said some time ago that this caused no error message.

Now we are coming to the hardest part, we have to identify the "bad" Add-on(s). I will give you 5 groups. In these groups are addons listed.

Group 1:

GMNRev Class
ieSpell
ieSpell Options

Group 2:

Java SE Runtime Environment 7 Update 51
Java(tm) Plug-In 2 SSV Helper
Java(tm) Plug-In SSV Helper
Deployment Toolkit

Group 3:

Adobe PDF Reader
QuickTime Object
Shockwave Flash Object

Group 4:

Yahoo! Toolbar
Yahoo! Toolbar Helper

Group 5:

Windows Live ID Sign-in Helper
Windows Media Player
XML DOM Document
XML HTTP 3.0
XML HTTP 6.0

Now, please start IE by doing a double click on the IE Icon.
Click on the wrench symbol in the right corner, then select Manage Addons
Please click on Show all addons

-> Now we are going to the important part of the test.
-> Please scroll up that you are able to see group 1. Please do on each item a Right click and select Disable.
-> So I like you to go to GMNRev Class, Right click on it and select Disable. Do the same for ieSpell, ieSpell Options - now we have disabled the items of group 1.

Please test the browser if there are further error messages.

If there are further errors please enable all the addons from group 1 again (Right click on each item and select Enable). Now we are going over to Group 2.

Please disable all addons from this group and test if there are still error messages from IE. If yes, please enable all addons from Group 2 again. Now we are going over to Group 3. Do the same : Disable , test , and if no improvement, enable again and go over to the next group.

If it solved the problem please tell me which group you have disabled.

ac650sx · Mar 10, 2014

thanks for your help and getting me solutions to try .. I just got out of work so I will have to try this tomorrow and get back to you
thanks again
Adam

Machiavelli · Mar 11, 2014

Acknowledged & no problem, Adam. :)

Regards,
Machiavelli

Machiavelli · Mar 14, 2014

Are you still with me?

Search

Search

SFC CBS Logs CORRUPT FILE(S) issue please help

ac650sx

Member

niemiro

Senior Administrator, Windows Update Expert

Machiavelli

Security Analyst

ac650sx

Member

ac650sx

Member

Machiavelli

Security Analyst

ac650sx

Member

ac650sx

Member

Machiavelli

Security Analyst

ac650sx

Member

Machiavelli

Security Analyst

ac650sx

Member

ac650sx

Member

ac650sx

Member

Machiavelli

Security Analyst

ac650sx

Member

Machiavelli

Security Analyst

Machiavelli

Security Analyst