[SOLVED] SFC Errors Beginning With Avast Anti-Virus Manifest SHA Errors

IsoQuantic

IsoQuantic

Member
Joined
Jul 16, 2016
Posts
19
Location
Chandler, AZ
I have been dealing with SFC errors that began with Avast Antivirus manifest SHA errors that conflict with registry entries.

My output from running your SFCfix tool:

----------------------BEGIN-----------------------
SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-07-16 01:25:11.121
Microsoft Windows 10 Build 10586 - amd64
Not using a script file.


AutoAnalysis::
WARNING: Performed DISM repair due to manifest damage on component "x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c". See CBS logfile for more details.


SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 1
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 0
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2016-07-16 01:34:10.726
----------------------EOF-----------------------

I have attached my CBS and DISM log:
View attachment CBS.zip <--CBS
View attachment dism.zip <--DISM

I am reasonably savvy with Windows tools, registry manipulation, group policy editing, etc., so anyone that can help me may assume a computer literate respondee in all communications.

DISM complains a source must be specified. I ran it with the following syntax:

Code: 
DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:O:\Windows\sources\install.wim:1 /LimitAccess

I also have a Specify Windows installation file location group policy set that points to the sources with the following entry:
Wim:\\Patrickslaptop\O\Windows\sources\install.wim:0

The install.wim was created from the install.iso file. I use DISM GUI and it complains "An attempt was made to load a program with an incorrect format.

The DISM log, showing a complaint about header mismatches for this attempt is attached:
View attachment dism mount error.log <--DISM mount error log

I am wondering if the wim.install index should be set to 1 in my group policy, or the fact that the image is for Windows 10.0.10586 and I am running 10.0.10586.494.

I appreciated the posts by user Go The Power at the Avast forum for the Avast issues so I decided to come here to see if someone can walk me through my problems per his direction at the Avast support site.
 
Excellent. OK, now please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
Step#2 - SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

Items for your next post
1. SFCFix.txt
2. CBS.txt
 

Attachments

As requested:

----------------------BEGIN-----------------------
SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-07-16 13:41:13.765
Microsoft Windows 10 Build 10586 - amd64
Using .zip script file at C:\Users\Patrick\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_10.0.10586.0_none_a5d89b3e0a5a2eb3

Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_10.0.10586.0_none_a5d89b3e0a5a2eb3\MSDTC.LOG to C:\WINDOWS\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_10.0.10586.0_none_a5d89b3e0a5a2eb3\MSDTC.LOG.

Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_10.0.10586.0_none_a5d89b3e0a5a2eb3
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_10.0.10586.0_none_a5d89b3e0a5a2eb3
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2016-07-16 13:41:14.406
Script hash: fPACFU1naLOazosBrys+hbb8+xPTRbmEjdHWBESG+ts=
----------------------EOF-----------------------

View attachment cbs.zip <---CBS.log archive

This was the first time in awhile that the SFC scan actually ran to 100%, albeit with reported errors.

Very promising.
 
Looking better. Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

Items for your next post
1. SFCFix.txt
2. CBS.txt
 

Attachments

Here are the requested items:

View attachment cbs.zip <--- CBs.txt

---------------------BEGIN---------------------------------
SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-07-16 19:19:24.309
Microsoft Windows 10 Build 10586 - amd64
Using .zip script file at C:\Users\Patrick\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\wow64_microsoft-windows-r..xwddmdriver-wow64-c_31bf3856ad364e35_10.0.10586.0_none_3dae054b56911c22\opencl.dll
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90CHS.DLL
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.10586.0_none_33bb5ba50688d8a9\sfc_os.dll
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\05 - Music.lnk
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\06 - Pictures.lnk
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\07 - Videos.lnk
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\10 - UserProfile.lnk


Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\wow64_microsoft-windows-r..xwddmdriver-wow64-c_31bf3856ad364e35_10.0.10586.0_none_3dae054b56911c22\opencl.dll to C:\WINDOWS\Winsxs\wow64_microsoft-windows-r..xwddmdriver-wow64-c_31bf3856ad364e35_10.0.10586.0_none_3dae054b56911c22\opencl.dll.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90CHS.DLL to C:\WINDOWS\Winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90CHS.DLL.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.10586.0_none_33bb5ba50688d8a9\sfc_os.dll to C:\WINDOWS\Winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.10586.0_none_33bb5ba50688d8a9\sfc_os.dll.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\05 - Music.lnk to C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\05 - Music.lnk.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\06 - Pictures.lnk to C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\06 - Pictures.lnk.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\07 - Videos.lnk to C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\07 - Videos.lnk.
Successfully copied file C:\Users\Patrick\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\10 - UserProfile.lnk to C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\10 - UserProfile.lnk.


Successfully restored ownership for C:\WINDOWS\Winsxs\wow64_microsoft-windows-r..xwddmdriver-wow64-c_31bf3856ad364e35_10.0.10586.0_none_3dae054b56911c22\opencl.dll
Successfully restored permissions on C:\WINDOWS\Winsxs\wow64_microsoft-windows-r..xwddmdriver-wow64-c_31bf3856ad364e35_10.0.10586.0_none_3dae054b56911c22\opencl.dll
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90CHS.DLL
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90CHS.DLL
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.10586.0_none_33bb5ba50688d8a9\sfc_os.dll
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.10586.0_none_33bb5ba50688d8a9\sfc_os.dll
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\05 - Music.lnk
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\05 - Music.lnk
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\06 - Pictures.lnk
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\06 - Pictures.lnk
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\07 - Videos.lnk
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\07 - Videos.lnk
Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\10 - UserProfile.lnk
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.10586.0_none_443d824ebb4341e2\10 - UserProfile.lnk
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 10 datablocks.
Finish time: 2016-07-16 19:19:25.220
Script hash: Ez2XWCazNDJxbpE8YeO9Vm6YMGWu06JKSnbYHsR/+ck=
----------------------EOF-----------------------
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top