SFC scannow error - windows resource protection found corrupt files unable to repair

Pravin · Feb 28, 2014

Hello,

As the subject line says I am in trouble with this problem. I cant open any admin tools like device manager, services, ctrl alt del does not bring in the task bar....and so on.

Problem started with my audio. I would see that little red cross mark and message on mouse hover was "audio device not installed".. so I ran sfc /scannow and few files were repaired. Audio started working but also this command says there were so many other corrupt files those not repaired. I am still unable to open any admin tools. Can you please help?

Attaqched is the sfcdetails file.

Regards,
Pravin Singh

niemiro · Feb 28, 2014

Hello, and welcome to Sysnative!

There look to be about 400 individual file corruptions there. Please back up all of your important data *right now*, then:

Download and run SeaTools for Windows to check for hard disk failure: SeaTools for Windows | Seagate

Run a Short (5 minutes) & Long Self Test (up to ~2-3 hours), and a SMART Test (if available) (1 minute). Let me know if any fail.

Thank you,

Richard

Pravin · Mar 3, 2014

Thank You Richard. I did run these 3 tests:
SMART: PASS for both the Hard Drives
Short Generic: PASS for both the Hard Drives
Long Generic: PASS for both the Hard Drives

Regards,
Pravin Singh

niemiro · Mar 4, 2014

Hello again!

Thanks a lot for that! Maybe it's not hardware after all :)

Please run SFC one more time to check for a progression (if more errors have developed since your first post, we have a problem, if the number is static, maybe we don't). [don't worry, I'll do the count, just explaining why I want it re-run]

Then download SFCFix from here: https://www.sysnative.com/forums/downloads/sfcfix/

run it (takes ~15 minutes), then copy and paste the logfile generated on completion here.

Thank you.

Richard

Pravin · Mar 8, 2014

Hi Richard,

I am sorry for replying late here.

I did run sfc /scannow and attached is the cbs file. The problem persists.

I have run sfcfix as you suggested and attached is the logfile. Also I got an error message, attached image, while executing sfcfix.

I think I am into serious problem now. Please help.

Regards,
Pravin Singh

Pravin · Mar 8, 2014

Pravin said:
Hi Richard,

I am sorry for replying late here.

I did run sfc /scannow and attached is the cbs file. The problem persists.

I have run sfcfix as you suggested and attached is the logfile. Also I got an error message, attached image, while executing sfcfix.

I think I am into serious problem now. Please help.

Regards,
Pravin Singh

For some reasson the cbs file isnt getting uploaded. I will try later again.

tom982 · Mar 9, 2014

Hi Pravin,

It's probably failing to upload because of the filesize restrictions we have here. Try this to upload your logs to us:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a log should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u.../Scripts/~Generic/Collect/CBS/SFCFix.txt?dl=1

Pravin · Mar 9, 2014

Hi Tom,

Attaches is the sfcfix.txt file created after following your instruction.

Here's the content for your quick ref:

SFCFix version 2.1.2.0 by niemiro.
Start time: 2014-03-10 01:02:05.774
Using .txt script file at C:\Users\saraswati\Desktop\SFCFix.txt

Collect:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.1.2.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2014-03-10 01:03:54.521
----------------------EOF-----------------------

Pravin · Mar 9, 2014

Also I used to rely on MS Security essential alone and lately after this problem I started using Avast free version. Did not help but I think its been eating up RAM or atleast my computer has slowed down drastically! In a desperate move I have installed the malwarebytes and surprisingly with quick scan it found so many (47) infected files of which few were registry related and suggested to be removed. I did. I can get you the logfile if needed.

Regards,
Pravin Singh

niemiro · Mar 10, 2014

Pravin said:
Also I used to rely on MS Security essential alone and lately after this problem I started using Avast free version. Did not help but I think its been eating up RAM or atleast my computer has slowed down drastically! In a desperate move I have installed the malwarebytes and surprisingly with quick scan it found so many (47) infected files of which few were registry related and suggested to be removed. I did. I can get you the logfile if needed.

Regards,
Pravin Singh

Hello again!

Since you appear to have an infection, can I please ask you to follow the instructions here: https://www.sysnative.com/forums/security-arena/2507-malware-removal-posting-instructions.html

and post a new thread over in the security forum. Include a link to this thread, and a copy of the logfile from Malwarebytes Anti-Malware.

Tell them I'm also still suspicious about the state of hardware in this machine (especially after that SFCFix error - it doesn't *have* to be caused by hardware, but I'm pretty sure it was), but we'll get the hardware team to look at that later.

First, however, I need to see how infected this machine is. Come back into this thread once security team have signed you off.

Thank you,

Richard

Pravin · Mar 22, 2014

Hi Richard,

The problem persists although Corrine tried helping me in all ways possible. Here's the link: https://www.sysnative.com/forums/se...dmin-tools-like-device-manager.html#post69461

Regards,
Pravin Singh

niemiro · Mar 24, 2014

Hello again Pravin!

Can you please try SFCFix one more time, again without a script file. I hope that I've fixed the bug, but we'll just have to see. Otherwise we might have to resort to manual methods (still no guarantee I'll be able to fix this though).

Richard

Pravin · Mar 24, 2014

niemiro said:
Hello again!

Thanks a lot for that! Maybe it's not hardware after all :)

Please run SFC one more time to check for a progression (if more errors have developed since your first post, we have a problem, if the number is static, maybe we don't). [don't worry, I'll do the count, just explaining why I want it re-run]

Then download SFCFix from here: https://www.sysnative.com/forums/downloads/sfcfix/

run it (takes ~15 minutes), then copy and paste the logfile generated on completion here.

Thank you.

Richard

Did you want me to run this SFCFix.exe?

niemiro · Mar 25, 2014

Pravin said:
niemiro said:

Hello again!

Thanks a lot for that! Maybe it's not hardware after all :)

Please run SFC one more time to check for a progression (if more errors have developed since your first post, we have a problem, if the number is static, maybe we don't). [don't worry, I'll do the count, just explaining why I want it re-run]

Then download SFCFix from here: https://www.sysnative.com/forums/downloads/sfcfix/

run it (takes ~15 minutes), then copy and paste the logfile generated on completion here.

Thank you.

Richard

Click to expand...

Did you want me to run this SFCFix.exe?

Yes please :)

To be honest, any copy of SFCFix you have lying around should do, as it has an auto-update function built in which should update you to the latest version anyhow.

Richard

Pravin · Mar 27, 2014

Looks like it needs some manual fixing. Here's the sfcfix log:

SFCFix version 2.2.1.0 by niemiro.
Start time: 2014-03-27 19:16:08.630
Not using a script file.

AutoAnalysis::
FIXED: Corruption at C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.16518_none_1ee303ae0a7f8ade.manifest has been successfully repaired from C:\Users\saraswati\AppData\Local\niemiro\Temp\KBExtractor_ie11-windows6.1-kb2909921-x86_dda0bad3a8024cc87ca0f9bccc23fcbfe87a4aac.cab\ie11-windows6.1-kb2909921-x86_dda0bad3a8024cc87ca0f9bccc23fcbfe87a4aac.cab\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.16518_none_1ee303ae0a7f8ade.manifest.
FIXED: Corruption at C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.mum has been successfully repaired from C:\Users\saraswati\AppData\Local\niemiro\Temp\KBExtractor_f_7d330e57.BE2E96D2_4460_4371_84DE_4148273456C7.cab\wusetup.cab\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.mum.
FIXED: Corruption at C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.cat has been successfully repaired from C:\Users\saraswati\AppData\Local\niemiro\Temp\KBExtractor_f_7d330e57.BE2E96D2_4460_4371_84DE_4148273456C7.cab\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.cab\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.cat.
FIXED: Corruption at C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~x86~en-US~7.6.7600.256.cat has been successfully repaired from C:\Users\saraswati\AppData\Local\niemiro\Temp\KBExtractor_f_7d330e57.BE2E96D2_4460_4371_84DE_4148273456C7.cab\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.cab\wuclient-selfupdate-aux~31bf3856ad364e35~x86~en-us~7.6.7600.256.cat.
FIXED: Corruption at C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~x86~en-US~7.6.7600.256.mum has been successfully repaired from C:\Users\saraswati\AppData\Local\niemiro\Temp\KBExtractor_f_7d330e57.BE2E96D2_4460_4371_84DE_4148273456C7.cab\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.256.cab\wuclient-selfupdate-aux~31bf3856ad364e35~x86~en-us~7.6.7600.256.mum.

SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 2
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 59
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 5
AutoAnalysis:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.2.1.0 by niemiro has completed.
Currently storing 5 datablocks.
Finish time: 2014-03-27 19:29:28.479
----------------------EOF-----------------------

Pravin · Apr 4, 2014

Hi Richard,

I am sure you must have been busy. I will wait for your response here with the solution.

Regards,
Pravin Singh

Pravin · Apr 11, 2014

any help please?

Tekno Venus · Apr 11, 2014

Hi,

SFCFix seems to have fixed some things, let's see what the latest logs look like.

SFC Scan

Click on the Start

button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Stephen

Pravin · Apr 13, 2014

attached is the compressed cbs log.

Tekno Venus · Apr 14, 2014

There are still about 100 corruptions on your system, and I would still like to rule out hardware problems before I attempt to fix them. Please run Memtest86+ to check your RAM. A tutorial on how to do this is available here: Test RAM With Memtest86+ - Sysnative Forums

Regards,
Stephen

SFC scannow error - windows resource protection found corrupt files unable to repair

Member

Attachments

Senior Administrator, Windows Update Expert

Member

Senior Administrator, Windows Update Expert

Member

Attachments

Member

Emeritus

Member

Attachments

Member

Senior Administrator, Windows Update Expert

Member

Senior Administrator, Windows Update Expert

Member

Senior Administrator, Windows Update Expert

Member

Member

Member

Senior Administrator, Developer

Member

Attachments

Senior Administrator, Developer