[SOLVED] SFC - One corrupt file remaining

TripleAlpha · Jul 31, 2015

First, I'd like to thank the creator(s?) of SFCFix and all those who assist. I've used it before on other systems to great affect without any need for a follow up (until now).

I've a workstation that's been experiencing a few BSODs spread throughout the passed month. Stop codes point to file corruption. Upon running sfc /scannow with no effect I proceeded with SFCFix.exe; all but one of the (7) corrupt files were repaired.

Code:

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-07-31 10:46:47.707
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.








AutoAnalysis::
FIXED: Corruption at C:\Windows\winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7600.16385_none_ce0882b8c63afdf6\gpedit.dll has been successfully repaired from C:\Windows\SysWOW64\GPBAK\gpedit.dll.
FIXED: Corruption at C:\Windows\winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll has been successfully repaired from C:\Windows\SysWOW64\GPBAK\fde.dll.
FIXED: Corruption at C:\Windows\winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll has been successfully repaired from C:\Windows\SysWOW64\GPBAK\gptext.dll.
FIXED: Corruption at C:\Windows\winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll has been successfully repaired from C:\Windows\SysWOW64\GPBAK\fdeploy.dll.
FIXED: Corruption at C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\utc.app.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\utc.app.json.
FIXED: Corruption at C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\telemetry.ASM-WindowsDefault.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\telemetry.ASM-WindowsDefault.json.




CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6\nslookup.exe




SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
   CBS & SFC total detected corruption count:     7
   CBS & SFC total unimportant corruption count:  0
   CBS & SFC total fixed corruption count:        6
   SURT total detected corruption count:          0
   SURT total unimportant corruption count:       0
   SURT total fixed corruption count:             0
AutoAnalysis:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 6 datablocks.
Finish time: 2015-07-31 10:49:09.337
----------------------EOF-----------------------

-CBS to follow via script.txt-

LogBot · Jul 31, 2015

Logfile submission from TripleAlpha

Logfile submission from TripleAlpha.

The logfiles are available at: https://www.sysnative.com/niemiro/fileDistribution/2015-07/6288.zip

Aura · Aug 2, 2015

Hi TripleAlpha :)

My name is Aura and I'll be assisting you with your issue. Follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

TripleAlpha · Aug 2, 2015

Hello Aura and thank you for your time. As requested;

Code:

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-02 10:16:56.398
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Inu-Kun\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6


Successfully copied file C:\Users\Inu-Kun\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6\nslookup.exe to C:\Windows\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6\nslookup.exe.


Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_29a6795f7d1218c6
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 7 datablocks.
Finish time: 2015-08-02 10:16:56.616
Script hash: CkGugVC+xKxWOW7jfRU1KF1S1SIgo02VVelr3CgP/1A=
----------------------EOF-----------------------

Aura · Aug 2, 2015

Alright, we'll run SFC once again to see if it accepts the replacement. Follow the instructions below.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

TripleAlpha · Aug 2, 2015

Wow, apologies for the untimely response. I wasn't expecting such a quick reply.

It seems ownership was taken, sfc /scannow found no violations.

Code:

https://www.dropbox.com/s/rvr2bgspuho6m9y/cbs.zip?dl=0

Aura · Aug 2, 2015

The replacement indeed worked, your CBS.log is now clean. Do you need anything else? :)

TripleAlpha · Aug 2, 2015

I do not! Thank you for your time and assistance. Good luck and have a great week.

Aura · Aug 2, 2015

No problem TripleAlpha, you're welcome! :)

Have a good week too!

Search

Search

[SOLVED] SFC - One corrupt file remaining

TripleAlpha

New member

LogBot

Well-known member

Aura

Sysnative Staff, Security Analyst

TripleAlpha

New member

Aura

Sysnative Staff, Security Analyst

TripleAlpha

New member

Aura

Sysnative Staff, Security Analyst

TripleAlpha

New member

Aura

Sysnative Staff, Security Analyst