[SOLVED] [Win7SP1 x64] sfc /scannow reports problems

Patrick Schoenbach · Mar 31, 2017

Hello,

running sfc /scannow shows some unfixable errors.

CBS.log:
View attachment CBS.zip

SFCFix.txt:
View attachment SFCFix.txt

How can I repair these problems?

BrianDrab · Apr 2, 2017

Hi and welcome to Sysnative. This should get you fixed up.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan

Click on the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

Patrick Schoenbach · Apr 3, 2017

First of all, thank you. It is much better already, but one problem remains.

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-04-03 11:54:32.835
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at D:\Users\pschoenb\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\Windows\Winsxs\amd64_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.1.7601.18523_none_c5ac2e9b93b68df0\alink.dll
Successfully took permissions for file or folder C:\Windows\Winsxs\amd64_microsoft-windows-help-artui3.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d99c0cf5290187ab\artui3.h1s
Successfully took permissions for file or folder C:\Windows\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229

Successfully copied file D:\Users\pschoenb\AppData\Local\niemiro\Archive\Winsxs\amd64_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.1.7601.18523_none_c5ac2e9b93b68df0\alink.dll to C:\Windows\Winsxs\amd64_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.1.7601.18523_none_c5ac2e9b93b68df0\alink.dll.
Successfully copied file D:\Users\pschoenb\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-help-artui3.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d99c0cf5290187ab\artui3.h1s to C:\Windows\Winsxs\amd64_microsoft-windows-help-artui3.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d99c0cf5290187ab\artui3.h1s.
Successfully copied file D:\Users\pschoenb\AppData\Local\niemiro\Archive\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229\MSDTC.LOG to C:\Windows\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229\MSDTC.LOG.

Successfully restored ownership for C:\Windows\Winsxs\amd64_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.1.7601.18523_none_c5ac2e9b93b68df0\alink.dll
Successfully restored permissions on C:\Windows\Winsxs\amd64_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.1.7601.18523_none_c5ac2e9b93b68df0\alink.dll
Successfully restored ownership for C:\Windows\Winsxs\amd64_microsoft-windows-help-artui3.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d99c0cf5290187ab\artui3.h1s
Successfully restored permissions on C:\Windows\Winsxs\amd64_microsoft-windows-help-artui3.resources_31bf3856ad364e35_6.1.7600.16385_de-de_d99c0cf5290187ab\artui3.h1s
Successfully restored ownership for C:\Windows\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229
Successfully restored permissions on C:\Windows\Winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 3 datablocks.
Finish time: 2017-04-03 11:54:37.950
Script hash: WkH7yYdDH4187XJ3K0Nj8GuvCYOoGPpoW6Irt0fRLE8=
----------------------EOF-----------------------

Patrick Schoenbach · Apr 3, 2017

Ah, running sfc a second time fixed the problem. Thanks.

BrianDrab · Apr 3, 2017

No problem. Do you have any other issues we need to address?

Patrick Schoenbach · Apr 3, 2017

Yes, the KB3033929 issue.

And since some time, I get some non-periodical busy cursor flickers. I did many different malware checks, but apparently, there is none. Is there any way to track down which process actually changes the cursor to busy? I also have Visual Studio installed. Would Spy++ help? If so, what should I look for?

BrianDrab · Apr 3, 2017

First step would be to do remove it or at least attempt to.

Remove Update Manually
1. Click on the Start button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following command into it, press enter
wusa /uninstall /KB:3033929

4. Let me know if it says it was successful or if there are any errors.

And since some time, I get some non-periodical busy cursor flickers. I did many different malware checks, but apparently, there is none. Is there any way to track down which process actually changes the cursor to busy? I also have Visual Studio installed. Would Spy++ help? If so, what should I look for?

I may need to refer you to a different group as we only focus on Windows Update issues in this section.

Patrick Schoenbach · Apr 3, 2017

It says, KB3033929 would be not installed.

BrianDrab · Apr 3, 2017

Let's do the following.

FRST Registry Search
1. Click your Start button and choose Control Panel.
2. In the upper right corner ensure the View by: is set to Category.
3. Select the Programs group.
4. Click the Turn Windows features on or off link. This will bring up the Windows Features dialog. Wait until this dialog populates with information.
Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps.
5. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
6. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
7. Copy and paste KB3033929 into the Search box and click the Search Registry button.

8. When the scan is complete a notepad window will open with the results. Please copy and paste the contents in your next reply. If for some reason notepad doesn't open the file should be
saved on your desktop named Search.txt.
9. You may close any remaining open windows now.

Patrick Schoenbach · Apr 3, 2017

Code:

Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von pschoenb (03-04-2017 15:06:41)
Gestartet von D:\Users\pschoenb\Desktop
Start-Modus: Normal

================== Registry-Suche: "KB3033929" ===========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB3033929~31bf3856ad364e35~amd64~~6.1.1.1]

====== Ende von Suche ======

BrianDrab · Apr 3, 2017

Mount Hive

Click on the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Make sure it says "The operation completed successfully" before moving on.
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
Copy and paste KB3033929 into the Search box and click the Search Registry button.
When the scan is complete a notepad window will open with the results. Please copy and paste the contents in your next reply. If for some reason notepad doesn't open the file should be
saved on your desktop named Search.txt.
You may close any remaining open windows now.

Patrick Schoenbach · Apr 3, 2017

Still

Code:

Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von pschoenb (03-04-2017 15:39:00)
Gestartet von D:\Users\pschoenb\Desktop
Start-Modus: Normal

================== Registry-Suche: "KB3033929" ===========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB3033929~31bf3856ad364e35~amd64~~6.1.1.1]

====== Ende von Suche ======

BrianDrab · Apr 3, 2017

Please do the following.

1. Click your Start button and then type cmd in the search box. Right-click on cmd that comes up in the search results and select Run as administrator.
2. A User Account Control dialog may come up asking for approval. If it does go ahead and allow.
3. A command prompt window will open. Copy/Paste the following into the command-prompt and hit enter.
wmic qfe list brief /format:texttablewsys > "%USERPROFILE%\desktop\hotfix.txt"

4. After the command runs there will be a file on your desktop named hotfix.txt.
5. Please zip/attach this file.

Patrick Schoenbach · Apr 3, 2017

"wmic" is not found. How to install it?

BrianDrab · Apr 3, 2017

Let's do this differently.

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

Patrick Schoenbach · Apr 3, 2017

Found the problem. Here is the list of installed hotfixes.

BrianDrab · Apr 3, 2017

Thanks. Is there a reason you are not current on Windows Updates?

Patrick Schoenbach · Apr 3, 2017

According to Windows Update I am current. No ignored updates either. I delayed KB3033929 back in 2015, because it caused a lot of troubles on many machines.

BrianDrab · Apr 3, 2017

Can you manually download and attempt to install the following update?
Microsoft Update Catalog

Patrick Schoenbach · Apr 3, 2017

Used the Win7 x64 version. Still, it says "not applicable for this computer".

[SOLVED] [Win7SP1 x64] sfc /scannow reports problems

Contributor

Administrator, Windows Update Instructor, Security Analyst

Attachments

Contributor

Attachments

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Attachments

Contributor

Attachments

Administrator, Windows Update Instructor, Security Analyst

Contributor

Administrator, Windows Update Instructor, Security Analyst

Contributor