S Shaq Contributor Joined Nov 20, 2018 Posts 41 Oct 24, 2021 #1 Title sums it up. I have attached the logs below. Attachments CheckSUR.log 393 bytes · Views: 1 CBS.log 699.5 KB · Views: 1 SFCFix.log 2.2 KB · Views: 1
S Shaq Contributor Joined Nov 20, 2018 Posts 41 Oct 25, 2021 #2 I also found 2 versions of SURT...a v12 and v34. The v12 version always shows errors, but the v34 version shows everything clean so I don't know which is the correct one.
I also found 2 versions of SURT...a v12 and v34. The v12 version always shows errors, but the v34 version shows everything clean so I don't know which is the correct one.
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 12,636 Oct 27, 2021 #3 Hello and welcome, Follow the instructions below please. WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system. Download the attachment SFCFix.zip and save it on your desktop. Save any work you have open, and close all programs. Drag the SFCFix.zip file over the SFCFix.exe executable and release it. SFCFix will launch, let it complete. Once done, a file will appear on your desktop, called SFCFix.txt. Open the file, then copy and paste its content in your next reply. Attachments SFCFix.zip 10.4 KB · Views: 1
Hello and welcome, Follow the instructions below please. WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system. Download the attachment SFCFix.zip and save it on your desktop. Save any work you have open, and close all programs. Drag the SFCFix.zip file over the SFCFix.exe executable and release it. SFCFix will launch, let it complete. Once done, a file will appear on your desktop, called SFCFix.txt. Open the file, then copy and paste its content in your next reply.
S Shaq Contributor Joined Nov 20, 2018 Posts 41 Oct 27, 2021 #4 SFCFix version 3.0.2.1 by niemiro. Start time: 2021-10-27 16:16:34.291 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\James\Downloads\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe to C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe. Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe to C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe. Successfully restored ownership for C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully restored permissions on C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 3.0.2.1 by niemiro has completed. Currently storing 3 datablocks. Finish time: 2021-10-27 16:16:34.462 Script hash: yfsd3MdqgOdP+xZDaMFpy3M/aT0XcM/U0eHZv9PI8BE= ----------------------EOF----------------------- I also reran sfcfix and sfc /scannow and they both show it is clean now. So I guess that is it? I was able to take ownership manually of these folders but not permissions with icacles. I'm glad sfcfix was able to do it. I see that mshta.exe is a common virus target. I hope I didn't have one. I have Malwarebytes and it never alerted me to a virus. Do you know why the two versions of SURT show different results? Last edited: Oct 27, 2021
SFCFix version 3.0.2.1 by niemiro. Start time: 2021-10-27 16:16:34.291 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\James\Downloads\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe to C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe. Successfully copied file C:\Users\James\AppData\Local\niemiro\Archive\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe to C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe. Successfully restored ownership for C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully restored permissions on C:\windows\winsxs\wow64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_4605aca152cc8281\mshta.exe Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 3.0.2.1 by niemiro has completed. Currently storing 3 datablocks. Finish time: 2021-10-27 16:16:34.462 Script hash: yfsd3MdqgOdP+xZDaMFpy3M/aT0XcM/U0eHZv9PI8BE= ----------------------EOF----------------------- I also reran sfcfix and sfc /scannow and they both show it is clean now. So I guess that is it? I was able to take ownership manually of these folders but not permissions with icacles. I'm glad sfcfix was able to do it. I see that mshta.exe is a common virus target. I hope I didn't have one. I have Malwarebytes and it never alerted me to a virus. Do you know why the two versions of SURT show different results?
S Shaq Contributor Joined Nov 20, 2018 Posts 41 Oct 27, 2021 #5 I attached the logs after I ran the v12 version of SURT. When I ran the v34 version it was clean as above. Is the later version more reliable? Attachments CheckSUR.log 1.9 KB · Views: 1 SFCFix.log 2.2 KB · Views: 0
I attached the logs after I ran the v12 version of SURT. When I ran the v34 version it was clean as above. Is the later version more reliable?
P PeterJ Moderator, Windows Update Expert, Security Analyst Staff member Joined Dec 14, 2014 Posts 12,636 Oct 27, 2021 #6 Yes. Do not use the old version.
