[SOLVED] windows 7 x64 slow/freezes/blue screen. SFC.fix report

N

navigator

Contributor
Joined
Mar 16, 2018
Posts
14
I have a Dell laptop with windows 7 x64 that has become slow and often freezes and then displays the blue screen. SFC could not fix corrupted files and SFC.fix gave me this report...

SFCFix version 3.0.0.0 by niemiro.Start time: 2018-03-16 10:53:04.351
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.








AutoAnalysis::
CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll
CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll
CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll
CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll




SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 4
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 2
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2018-03-16 10:56:25.997
----------------------EOF-----------------------
Click to expand...

Thanks
 
Hello, thanks for the reply. I think have fixed the corrupted .dll files and when I run sfc /scannow it still says there are corrupted files it cannot fix, but when I run SFC.fix, it doesn't find any corrupted files.

When I first created the thread, I could not access my CBS log file. I assume because my group policy files were corrupted. I can now access them and below is a link to the download, as the file is 45MB.

filehosting.org | Download | CBS.zip.zip

The cpu is performing better, I don't have to use safe mode to prevent the blue screens. It still hangs and freezes though, just not near as often.
 
OK, let's start with the following.

Step#1 - System Update Readiness Tool (SUR)
1. Download and run the following file.
2. When it asks you if you wish to install, please answer yes. Note: It could take 15 minutes or more to run. Please don't cancel.
3. You will get an Installation Complete screen when it's done running.
4. Please attach the log from the following location. C:\Windows\Logs\CBS\CheckSUR.log
Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
I made 3 attempts to install. 1st resulted in BSOD, 2nd and 3rd gave me this error message.

Screenshot_1.png
 
OK, please try the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - Upload memory.dmp
1. Please navigate to c:\windows and there should be a file named Memory.dmp. Can you copy this to your desktop and then zip it up and attach/upload for me to review?
 

Attachments

SFCFix version 3.0.0.0 by niemiro.
Start time: 2018-04-03 17:28:43.732
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\dell\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll
Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll
Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll
Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll


Successfully copied file C:\Users\dell\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll to C:\Windows\Winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll.
Successfully copied file C:\Users\dell\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll to C:\Windows\Winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll.
Successfully copied file C:\Users\dell\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll to C:\Windows\Winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll.
Successfully copied file C:\Users\dell\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll to C:\Windows\Winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll.


Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll
Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_6.1.7600.16385_none_372622adf05a6587\gptext.dll
Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll
Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_6.1.7601.23932_none_d0ab6b01dc595145\gpedit.dll
Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll
Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-fde_31bf3856ad364e35_6.1.7601.17514_none_aa136561b9ed4ae4\fde.dll
Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll
Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.1.7601.17514_none_e1bcfc28af006dea\fdeploy.dll
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2018-04-03 17:28:45.912
Script hash: Gw9qs/HqTv1n+Yzp/GD+BAcpjotUkiQxLMKPauvsM9Y=
----------------------EOF-----------------------

Cannot find memory.dmp folder or file. I have minidump folder, but its empty.
 
No problem. Please do the following.

SFC Scan

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Perfect. Please do the following.

Step#1 - Gather Event Logs
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCScript.txt, and save this to your Desktop.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
  5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
  9. In addition a file will be created on your desktop named EvtLogs.zip. As this file will likely be too large to attach to your reply, please upload this file to a file sharing/hosting site such as SendSpace, Dropbox or Onedrive and provide the link in your next reply.
 

Attachments

SFCFix version 3.0.0.0 by niemiro.
Start time: 2018-04-03 19:15:25.126
Microsoft Windows 7 Service Pack 1 - amd64
Using .txt script file at C:\Users\dell\Desktop\SFCScript.txt [0]








Zip::
Successfully copied file C:\Windows\Sysnative\winevt\Logs\Application.evtx to zip file at C:\Users\dell\desktop\EvtLogs.zip.
Successfully copied file C:\Windows\Sysnative\winevt\Logs\System.evtx to zip file at C:\Users\dell\desktop\EvtLogs.zip.
Zip:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2018-04-03 19:15:29.198
Script hash: 3ptSf3vNPLM/TFnzG9y5oFNBAyUPBWzpo0Wv8lEQIVk=
----------------------EOF-----------------------

https://1drv.ms/u/s!As7HSZXQj23agR_itCymum2vMS8U
 
Please do the following.

Step#1 - ChkDsk Scan
1. Click your Start in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.
3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk and then press enter.
6. Chkdsk will start to run. Please allow it to finish. You will know it is running when you see text as follows.
7. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
8. Right-click this file and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.
 
Screenshot_2.png

I did right click and selected run as administrator. After clicking ok, it did put a list check disk result txt file on my desk top, but the file is empty.
 
That's what I expected. Your hard drive has issues. Please ensure that you have any critical data backed up somewhere and then do the following. Keep in mind that this may take some time (an hour or more) so plan accordingly.

Step#1 - ChkDsk Repair
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.
3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk /R and then press enter. Note: There is a space after the command chkdsk and before the forward slash
6. You will get a prompt telling you chkdsk cannot run because the volume is in use. Answer Y and hit enter to schedule the run at next boot.
7. Reboot your computer and chkdsk will run. Let it complete please.
8. Right-click ListChkdskResult.exe and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.


If the ListChkdskResult.exe doesn't work then you can manually grab the information from the event log. Instructions are below.
How do I see the results of a CHKDSK that ran on boot? - Ask Leo!
 
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 4/3/2018 10:13:09 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: MATT
Description:




Checking file system on C:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.


CHKDSK is verifying files (stage 1 of 5)...
244992 file records processed.


File verification completed.
3006 large file records processed.


0 bad file records processed.


0 EA records processed.


60 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 5)...
321694 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 5)...
244992 file SDs/SIDs processed.


Cleaning up 138 unused index entries from index $SII of file 0x9.
Cleaning up 138 unused index entries from index $SDH of file 0x9.
Cleaning up 138 unused security descriptors.
Security descriptor verification completed.
38352 data files processed.


CHKDSK is verifying Usn Journal...
34755840 USN bytes processed.


Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x37452e7000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x37452e9000 for 0x1000 bytes.
Windows replaced bad clusters in file 142516
of name \$Recycle.Bin\S-1-5-~1\$RXXG4QU.msu.
Read failure with status 0xc0000185 at offset 0x3752162000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x375216a000 for 0x1000 bytes.
Windows replaced bad clusters in file 142602
of name \$Recycle.Bin\S-1-5-~1\$RZQRXXG.msu.
Read failure with status 0xc0000185 at offset 0x3652e13000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x3652e20000 for 0x1000 bytes.
Windows replaced bad clusters in file 173031
of name \Windows\MICROS~1.NET\FRAMEW~1\V40~1.303\SY2F55~1.DLL.
Read failure with status 0xc0000185 at offset 0x3745256000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x374525c000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x374526d000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x374526f000 for 0x1000 bytes.
Windows replaced bad clusters in file 173035
of name \Windows\MICROS~1.NET\assembly\GAC_64\System.Data\V40_40~1.0__\SYSTEM~1.DLL.
244976 files processed.


File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
47823748 free clusters processed.


Free space verification is complete.
Adding 21 bad clusters to the Bad Clusters File.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


244093951 KB total disk space.
52297820 KB in 184910 files.
139128 KB in 38353 indexes.
6820 KB in bad sectors.
355255 KB in use by the system.
65536 KB occupied by the log file.
191294928 KB available on disk.


4096 bytes in each allocation unit.
61023487 total allocation units on disk.
47823732 allocation units available on disk.


Internal Info:
00 bd 03 00 2b 68 03 00 b4 8d 06 00 00 00 00 00 ....+h..........
09 8f 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 ....<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................


Windows has finished checking your disk.
Please wait while your computer restarts.


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-04-04T03:13:09.000000000Z" />
<EventRecordID>57547</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MATT</Computer>
<Security />
</System>
<EventData>
<Data>


Checking file system on C:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.


CHKDSK is verifying files (stage 1 of 5)...
244992 file records processed.


File verification completed.
3006 large file records processed.


0 bad file records processed.


0 EA records processed.


60 reparse records processed.


CHKDSK is verifying indexes (stage 2 of 5)...
321694 index entries processed.


Index verification completed.
0 unindexed files scanned.


0 unindexed files recovered.


CHKDSK is verifying security descriptors (stage 3 of 5)...
244992 file SDs/SIDs processed.


Cleaning up 138 unused index entries from index $SII of file 0x9.
Cleaning up 138 unused index entries from index $SDH of file 0x9.
Cleaning up 138 unused security descriptors.
Security descriptor verification completed.
38352 data files processed.


CHKDSK is verifying Usn Journal...
34755840 USN bytes processed.


Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x37452e7000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x37452e9000 for 0x1000 bytes.
Windows replaced bad clusters in file 142516
of name \$Recycle.Bin\S-1-5-~1\$RXXG4QU.msu.
Read failure with status 0xc0000185 at offset 0x3752162000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x375216a000 for 0x1000 bytes.
Windows replaced bad clusters in file 142602
of name \$Recycle.Bin\S-1-5-~1\$RZQRXXG.msu.
Read failure with status 0xc0000185 at offset 0x3652e13000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x3652e20000 for 0x1000 bytes.
Windows replaced bad clusters in file 173031
of name \Windows\MICROS~1.NET\FRAMEW~1\V40~1.303\SY2F55~1.DLL.
Read failure with status 0xc0000185 at offset 0x3745256000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x374525c000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x374526d000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x374526f000 for 0x1000 bytes.
Windows replaced bad clusters in file 173035
of name \Windows\MICROS~1.NET\assembly\GAC_64\System.Data\V40_40~1.0__\SYSTEM~1.DLL.
244976 files processed.


File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
47823748 free clusters processed.


Free space verification is complete.
Adding 21 bad clusters to the Bad Clusters File.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


244093951 KB total disk space.
52297820 KB in 184910 files.
139128 KB in 38353 indexes.
6820 KB in bad sectors.
355255 KB in use by the system.
65536 KB occupied by the log file.
191294928 KB available on disk.


4096 bytes in each allocation unit.
61023487 total allocation units on disk.
47823732 allocation units available on disk.


Internal Info:
00 bd 03 00 2b 68 03 00 b4 8d 06 00 00 00 00 00 ....+h..........
09 8f 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 ....<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................


Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
 
OK, good. Let's take a look at your disk health.



JcJ91sx.png
GSmartControl
Follow the instructions below to test your hard drive health with GSmartControl:

  • Download GSmartControl and save it on your Desktop;
  • Extract the content of the GSmartControl .zip archive and execute gsmartcontrol.exe;
  • Identify your drive in the list, and double-click on it to bring up it's window (usually you'll find your drive by it's size or it's brand name);
  • Go in the Perform Tests tab, then select Extended Self-test in the Test type drop-down list and click on Execute (this test can take a few hours to complete);
  • Once the test is over, the results will be displayed at the bottom of the window. Please copy and paste these results in your next reply;
  • Also, go in the Attributes tab and if you have any entries highlighted in red or pink, copy and paste their name in your next reply (or take a screenshot of the GSmartControl window and attach it in your next reply);
    info_failing.png
 
I was able to install 4 updates and Microsoft security essentials completed a scan. I havent been able to to do either of those since end of January. Big improvement, thank you!

Just saw the post above and will do.
 
Complete selective self-test log:


SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

Screenshot_4.png

Screenshot_3.png
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top