[SOLVED] Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

HoiPolloi001

Member
Joined
Jul 17, 2015
Posts
7
Hi,
I have two systems with file corruption issues. I will post them separately (desktop and laptop).

Desktop PC Name: MSI-Z87-RE

Problem found during routine maintenance:
Windows Powershell (Admin): I ran "sfc /scannow" and cbs.log reported issues.
Followed up by running "dism /online /cleanup-image /restorehealth".
Rebooted system, repeated process, issue persisted.
Repeated multiple times, issue persisted.

Unusual behaviors recently:
Powersupply was defective in desktop, system took quite a bit of punishment from incorrect and failed restarts.
Faulty component was replaced.

AV reported suspicious behavior in Cloud files (related to Steam?). Repairs, deletions, quarantines initiated.

Both these problems seemed resolved, until doing system maintenance and the following was noticed:
Multiple games on Steam required file validation.
Windows System Image Backup could no longer create an image backup to an external hdd on a router.
A scan of "sfc /scannow" reported issues in cbs.log file, as indicated above.

History:
Microsoft Support was contacted when computers were *both* new (5 days old), for inability to shutdown OS.
Issue was resolved using an sfc scan and dism repair, on both computers.

Malware?
To date, no scans have indicated malware presence, except for the suspicious Cloud file behavior, listed above.
This suspicious behavior was only detected on the desktop.
When both computers were new, and old PC on intranet was found to have multiple malware, so it was DC'd.
An illegal attempt was made, and failed, to gain access to my login credentials for the new PCs/OS/UserID.
I have tried multiple malware tools, incase one was missing something:
MBAM, Panda Cloud Cleaner, SUPERAntiSpyware, Symantec/Norton. View attachment CBS.zipView attachment SFCFix.txtView attachment CBS.zipView attachment SFCFix.txt
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

Sorry, the following line should read:
"When both computers were new, an old PC on intranet", not "When both computers were new, and old PC on intranet".

Also, I made a mistake trying to link the files and ended up with duplicate copies.

Thanks in advance, or any help.
 
Laptop (system2): Win8.1, File Corruption Post SFC, DISM, & SFCFix; see CBS & SFCFix

Hi again,

Here is the information on the laptop, but the SFCFix.txt appears to have the exact same errors (2).

Laptop Name: MSI-GE70-RE

Background Information:
The similarities are noteworthy; however, the laptop has differences:
No power-supply failure, but we do get power fluctuations regularly. The desktop is on UPS battery and the laptop has a battery.
No AV alerts of suspicious files regarding Cloud. Even though it does use Steam and had one game installed that uses Cloud.
The laptop was not logged into Steam, the day AV noticed the suspicious behavior.
Both PCs have SSD drives and the laptop can function with sleep mode, but the desktop never could (SSD limitation?).
Yesterday, for some reason active AV and firewall were not functioning on laptop, so I rebooted, then they seemed fine.

Laptop files:
I added a "2" into the name, to help avoid confusion.
View attachment CBS_2.zipView attachment SFCFix_2.txt

Edit:
I just tried to perform a System Image Backup on the laptop and took note of the following error:
"Create a system image - The backup failed - The version does not support this version of the file format. (0xC03A0005)."
This just seems odd to me, because I was able to make image backups this way on 5/16/2014.


Thanks, I am stuck and not sure what to do :huh:
 
Last edited:
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

Windows System Image Backup could no longer create an image backup to an external hdd on a router.
"Create a system image - The backup failed - The version does not support this version of the file format. (0xC03A0005)."

Has this drive always been attached to the router or was it directly connected to one of the PCs previously?
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

Windows System Image Backup could no longer create an image backup to an external hdd on a router.
"Create a system image - The backup failed - The version does not support this version of the file format. (0xC03A0005)."

Has this drive always been attached to the router or was it directly connected to one of the PCs previously?

Ouch, you are testing my bad memory. Not the PC, but me :lolg:.

I remember having to hook it up directly to the destkop at some point, for some kind of maintenance. I don't remember if that was for initial setup back in 2014, before I saved images over the router, or if it was afterwards for reasons I forget.

I have no problems manipulating directories and files on the ExtHdd over the router; I can even do scheduled File History backups and also tried out a Norton file backup that also worked over the connection. It is just System Image Backup in Windows that fails.
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

There is a problem with the dynamically expanding vhd or vhdx files used for the system image backup and the way that some Linux based devices create files on the shared disk (sparse file creation).
If the VHD files were configured for a fixed size instead of dynamically expanding it would work.

There are several sites (like this one: How to Backup Your Data to a Virtual Hard Drive in Windows 7) that describe the process of creating a VHD (Windows 7) or VHDX (Windows 8) file to work around the problem - you would choose your network attached drive as the destination for the file then point your backups to that mounted virtual disk.

If you decide to to this, be sure to select fixed size when creating the VHD or VHDX file and choose your network attached drive as the destination for the new VHD or VHDX file.
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

There is a problem with the dynamically expanding vhd or vhdx files used for the system image backup and the way that some Linux based devices create files on the shared disk (sparse file creation).
If the VHD files were configured for a fixed size instead of dynamically expanding it would work.

There are several sites (like this one: How to Backup Your Data to a Virtual Hard Drive in Windows 7) that describe the process of creating a VHD (Windows 7) or VHDX (Windows 8) file to work around the problem - you would choose your network attached drive as the destination for the file then point your backups to that mounted virtual disk.

If you decide to to this, be sure to select fixed size when creating the VHD or VHDX file and choose your network attached drive as the destination for the new VHD or VHDX file.

Sweet, thanks for the info man! I just assumed that since it used to work, then didn't anymore it was related to the current issue.
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

I assume you are able to install Windows Updates normally on all three computers?
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

I assume you are able to install Windows Updates normally on all three computers?
Both the laptop and desktop only have 1 important update available. The rest are already installed or optionals; the old computer that did get malware for sure isn't even used anymore (ancient XP only system). Microsoft .NET Framework 4.5.2 for Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2934520)
 
Re: Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix; see CBS & SFCFix

Very good.
The two files that are reported as corrupt are known false positives and shouldn't cause any trouble :)

Is there anything else I can assist you with?
 
[Solved] Win8.1, File Corruption Persistent Post SFC, DISM, & SFCFix...

Very good. The two files that are reported as corrupt are known false positives and shouldn't cause any trouble :) Is there anything else I can assist you with?
There are no other issues, thank you very much. Please consider the thread closed/solved. Thank you for the help!
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top