SFC(Fix) can't fix some files in Win 7 and several errors after SFC /scannow

[Shaq]

Title sums it up. I have attached the logs below.

 

[Shaq]

I also found 2 versions of SURT...a v12 and v34. The v12 version always shows errors, but the v34 version shows everything clean so I don't know which is the correct one.

 

[PeterJ]

Hello and welcome,

Follow the instructions below please.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download the attachment SFCFix.zip and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

 

[Shaq]

SFCFix version 3.0.2.1 by niemiro.
Start time: 2021-10-27 16:16:34.291
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\James\Downloads\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe
Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe

Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe to C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe.
Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe to C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe.

Successfully restored ownership for C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe
Successfully restored permissions on C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe
Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe
Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2021-10-27 16:16:34.462
Script hash: yfsd3MdqgOdP+xZDaMFpy3M/aT0XcM/U0eHZv9PI8BE=
----------------------EOF-----------------------





I also reran sfcfix and sfc /scannow and they both show it is clean now. So I guess that is it? I was able to take ownership manually of these folders but not permissions with icacles. I'm glad sfcfix was able to do it. I see that mshta.exe is a common virus target. I hope I didn't have one. I have Malwarebytes and it never alerted me to a virus.

Do you know why the two versions of SURT show different results?

 

[Shaq]

I attached the logs after I ran the v12 version of SURT. When I ran the v34 version it was clean as above. Is the later version more reliable?

 

[PeterJ]

Yes. Do not use the old version.