[SOLVED] Windows 8 - Corrupt files

W

wicko

Member
Hi everyone ;

Please help me with this SFCFix.txt report:

SFCFix version 2.4.1.0 by niemiro.
Start time: 2014-11-24 04:55:31.626
Not using a script file.








AutoAnalysis::
CORRUPT: C:\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e\MSDTC.LOG
CORRUPT: C:\WINDOWS\winsxs\wow64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_14b2a81e68213079\MSDTC.LOG




SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: -2
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 0
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2014-11-24 05:16:48.588
----------------------EOF-----------------------



Thanks in advance :)
 
Hello Wicko and welcome to Sysnative forums :)

I have moved your post into a new thread.

Before we start repairing files I would like to see a fresh scan from SFC /SCANNOW.

SFC /SCANNOW
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with rest of the steps.
Convert CBS.log to CBS.txt
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run => Inside the run box copy and paste the following command:
    Code: 
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  3. Press Enter
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread
Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive
 
Thank you.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC /SCANNOW
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with rest of the steps.
Convert CBS.log to CBS.txt
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run => Inside the run box copy and paste the following command:
    Code: 
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  3. Press Enter
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread
Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive
 
Code: 
SFCFix version 2.4.1.0 by niemiro.
Start time: 2014-11-24 09:58:10.927
Using .zip script file at C:\Users\wicko\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG


Line blocked (SFCFix.txt): "C:\Users\wicko\AppData\Local\niemiro\Archive\SFCFix.txt" C:\WINDOWS\SFCFix.txt.
Successfully copied file C:\Users\wicko\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG to C:\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG.


Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2014-11-24 09:58:11.864
Script hash: wC51xHctOKIwc917Du7P/lNeHg5xP30mMq/iZDD5PJM=
----------------------EOF-----------------------

View attachment cbs.txt
 
Not this error :(

Code: 
2014-11-24 10:15:47, Error                 CSI    00000a42 (F) Failed on regenerating file [l:18{9}]"MSDTC.LOG"[gle=0x80004005]
2014-11-24 10:15:47, Info                  CSI    00000a43 [SR] Cannot repair member file [l:18{9}]"MSDTC.LOG" of Microsoft-Windows-COM-DTC-Runtime, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be decompressed
2014-11-24 10:15:47, Error                 CSI    00000a44@2014/11/24:10:15:47.760 (F) base\wcp\library\delta_library.cpp(287): Error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) originated in function Windows::Rtl::DeltaDecompressBuffer expression: g_pfnApplyDeltaB(( (DELTA_FLAG_TYPE)0x00000000 ), ReferenceInput, CompressedInput, &UncompressedOutput)

We have not had any luck in the past trying to repair it.

  1. Click on the
    Win7Orb_zps4dae3b32.jpg
    button => Inside the search box copy and paste the following command:
    Code: 
    cmd /c copy C:\WINDOWS\winsxs\manifests\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6.manifest "%userprofile%\Desktop
  2. Press Enter
  3. Once this has completed please go to your Desktop and you will find amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6.manifest => Please add it into a zip file and attach it to this thread
 
I just noticed that when I uninstall update KB3000850 , there is no error after sfc /scannow & SFCFix
but when I install this update again the same errors reappear
 
I will need some time to have a look at this. I also would like a copy of the registry hive COMPONENTS:

SFCFix Collect COMPONENTS
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
  3. On your Desktop, you should now see two files: SFCFix.exe and SFCFixScript.txt.
  4. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
  5. SFCFix will now begin to upload your CBS logfiles to our server.
  6. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  7. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.


If all goes well, you should see that your logfiles have now been added to your thread.
 
Re: Logfile submission from wicko

Code:
Code: 
SFCFix version 2.4.1.0 by niemiro.
Start time: 2014-11-25 04:32:02.250
Using .txt script file at C:\Users\Abdelhak\Desktop\SFCFixScript.txt [0]








Collect:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2014-11-25 04:36:39.831
----------------------EOF-----------------------
 
Thanks Wicko, Please give me a few days to have a further look into this for you.

Alex
 
Your welcome, another piece of info please (I really want to try and work out the root cause of this issue)

SFCFix script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Go to your desktop and right click on the background -> Select New -> Text Document -> Name this file SFCFixScript.txt.
  3. Open up SFCFixScript.txt and copy all of the following text inside the code box below and paste it into SFCFixScript.txt.
    Code: 
    FileScan::
MSDTC.LOG
  4. Click on File -> Save. Close out of SFCFixScript.txt.
  5. Save any open documents and close all open windows.
  6. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
  7. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
  8. SFCFix will now process the script.
  9. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  10. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 
Code:
Code: 
SFCFix version 2.4.1.0 by niemiro.Start time: 2014-11-25 06:28:05.833
Using .txt script file at C:\Users\Abdelhak\Desktop\SFCFixScript.txt [0]








FileScan::
[0: 1] C:\Windows\WinSxS\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e\MSDTC.LOG
File is untraceable.
 Found: Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=
 Version number not available.
Trace not available.






[1: 1] C:\Windows\SoftwareDistribution\Download\0f4baa14acbc19075e5415072eedbc1f\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
File is untraceable.
 Found: Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=
 Version number not available.
Trace not available.






[2: 1] C:\Windows\SoftwareDistribution\Download\c81c3f7fc84ac954c4736bb1c59de0fa\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e\MSDTC.LOG
File is untraceable.
 Found: Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=
 Version number not available.
Trace not available.






[3: 1] C:\Windows\WinSxS\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
File is untraceable.
 Found: SD6OMNd/nMSy7P0Ob02ZGPT4cYglTnq4Gz0i2cQTLNo=
 Version number not available.
Trace not available.






[4: 1] C:\Users\Abdelhak\Desktop\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
File is untraceable.
 Found: ZOM2A1sI9i25LVFShSopEimnFtVKIQLW3+GD3agBpQI=
 Version number not available.
Trace not available.






[5: 1] C:\SFCFix\Backups\C\WINDOWS\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.16384_none_0a1162f033fa01f6\MSDTC.LOG
File is untraceable.
 Found: Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=
 Version number not available.
Trace not available.






[6: 1] C:\Windows\System32\MsDtc\MSDTC.LOG
File is untraceable.
 Found: 5WsPrVjlc0YL9Lpepp/zkUGIF9mr2z5+0w6l7m1kYfU=
 Version number not available.
Trace not available.
FileScan:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.4.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2014-11-25 06:28:28.490
Script hash: yqmxX1j/+8ZyX3y6rPOmoWChAp9FEXuZ4bDqiXrV6rc=

----------------------EOF-----------------------
 
One last thing (I hope)

  1. Click on the
    Win7Orb_zps4dae3b32.jpg
    button => Inside the search box copy and paste the following command:
    Code: 
    cmd /c copy C:\WINDOWS\winsxs\manifests\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e.manifest "%userprofile%\Desktop
  2. Press Enter
  3. Once this has completed please go to your Desktop and you will find amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e.manifest => Please add it into a zip file and attach it to this thread
 
The hash (it is a unique identifier) that was found on the file:

From SFCFix
Code: 
[0: 1] C:\Windows\WinSxS\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e\MSDTC.LOG
File is untraceable.
 Found: Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=

Is the same that is appearing inside the manifest file:

From manifest file
Code: 
  <file name="MSDTC.LOG" destinationPath="$(runtime.system32)\msdtc\" sourceName="MSDTC.LOG" sourcePath=".\" importPath="$(build.nttree)\" writeableType="systemData">
    <securityDescriptor name="MSDTC_LOG_FILE_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">Q4htnI+yK+Jo0DJugTfqjq40IHkXFkIWyyAaDjFGEvo=</dsig:DigestValue>
    </asmv2:hash>
  </file>

What this tells me is that the file is not currently compressed as the hashes match, if the file was compressed the has would be different inside the results from SFCFix.

Now the reason why SFC is looking for a compressed file is due to value set on the registry:

Code: 
[HKEY_LOCAL_MACHINE\wicko\DerivedData\Components\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.3.9600.17415_none_0a5dfdcc33c06e7e]
"f!msdtc.log"=dword:00000021

The 21 shows that SFC will look for a compressed version of the file, if the file was not meant to be compressed it would have the value of 0.

Now none of this will actually tell you how to solve your issue, but it is just what I have worked out so far.

Alex
 
A little, I have been talking to some of the WU specialists about this issue and we have a few theories, which may work. Before I ask you to try them I am going to try and replicate the issue on my machine and test out some of the theories.
 
You must log in or register to reply here.
Back
Top