[SOLVED] Windows SFC found corrupt files but was unable to fix them

Vlad1407i · Mar 30, 2020

Hello dear experts.

Due to a certain number of errors in the computer, I carried out various types of diagnostics. One of them was a system file checker for recovering missing or damaged system files.

After the diagnosis, an error occurred - "Windows SFC found corrupt files but was unable to fix them." From the CBS report, I did not understand how to recover these files. On various forums your site was highly recommended, as this is your profile. Help me please. I will enclose the CBS report.

Thanks.

P.S. I am Russian, so sorry for my English.

Vlad1407i · Mar 30, 2020

I will also attach CheckSUR. These lines confuse me:

Checking Component Store
(f) CSI C Mark Deployment Missing 0x00000000 c!avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_49391d6d8244622b x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_none_a338d8ea2df29efb
(f) CSI C Mark Deployment Missing 0x00000000 c!policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_ef17e13d91c55d96 amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_499a1b14d5902dfc
(f) CSI C Mark Deployment Missing 0x00000000 c!policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_36c51814a641869c x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_914751ebea0c5702
(f) CSI C Mark Deployment Missing 0x00000000 c!avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_020285fe6d6e0580 amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_56aba0211ca246c2
(f) CSI C Mark Deployment Missing 0x00000000 c!policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_364e78aca69bba41 x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_none_962753dde6e08635
(f) CSI C Mark Deployment Missing 0x00000000 c!avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_49afbcd581ea2e86 x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8

Summary:
Seconds executed: 643
Found 6 errors
CSI C Mark Deployment Missing Total count: 6

PeterJ · Mar 31, 2020

Hello and welcome,

Do you have Avast still installed ?
Attach the file C:\Windows\Logs\CBS\CbsPersist_20200328205353.cab to your next reply.

Vlad1407i · Apr 2, 2020

PeterJ said:
Hello and welcome,

Do you have Avast still installed ?
Attach the file C:\Windows\Logs\CBS\CbsPersist_20200328205353.cab to your next reply.

When I saw "avast" in the error lines, I thought it was a coincidence. Avast is not installed. A "microsoft security essentials" is installed.

And I can’t upload the requested files, I’ll attach a screenshot. What's my mistake?

PeterJ · Apr 2, 2020

And I can’t upload the requested files, I’ll attach a screenshot. What's my mistake?

You didn't make a mistake, the file is too large as attachment.
Upload the requested file via a service such as Filedropper or SendSpace and just provide the download link.

Vlad1407i · Apr 2, 2020

PeterJ said:
You didn't make a mistake, the file is too large as attachment.
Upload the requested file via a service such as Filedropper or SendSpace and just provide the download link.

http://www.filedropper.com/cbspersist20200328205353

PeterJ · Apr 2, 2020

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.

Option#2 (only if you are unable to follow the previous instructions)

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Filedropper or One Drive or SendSpace and then just provide the link in your reply.
You can close any open windows you have as well as the RegBak program now.

Vlad1407i · Apr 3, 2020

PeterJ said:
Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.

Option#2 (only if you are unable to follow the previous instructions)

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.

Go ahead and install this program and accept all the defaults. After the last install screen the program should open.

Click the New Backup button. Accept the defaults and simply click Start.

When it says Finished successfully, click the Close button.

This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...

This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.

Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.

Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.

Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Filedropper or One Drive or SendSpace and then just provide the link in your reply.

You can close any open windows you have as well as the RegBak program now.

components.zip (19.58MB) - SendSpace.com

PeterJ · Apr 3, 2020

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool
Download the attachment fixlist.txt and save it to your desktop.
Right-click on FRST64.exe and select "Run as administrator".
Press the Fix button.
The tool will now process fixlist.txt.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
Post the logfile Fixlog.txt as attachment in your next reply.

Step 2:
Restart the computer.
Run sfc /scannow again and report the result.

Vlad1407i · Apr 5, 2020

PeterJ said:
Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool

Download the attachment fixlist.txt and save it to your desktop.

Right-click on FRST64.exe and select "Run as administrator".

Press the Fix button.

The tool will now process fixlist.txt.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.

Post the logfile Fixlog.txt as attachment in your next reply.

Step 2:
Restart the computer.
Run sfc /scannow again and report the result.

sfc /scannow command gave the same result, I leave a CBS report.

PeterJ · Apr 6, 2020

Please run the CheckSur tool again.
On completion attach the files C:\Windows\Logs\CBS\CheckSUR.log and C:\Windows\Logs\CBS\CbsPersist_20200328205353.cab to your next reply.

Vlad1407i · Apr 7, 2020

PeterJ said:
Please run the CheckSur tool again.
On completion attach the files C:\Windows\Logs\CBS\CheckSUR.log and C:\Windows\Logs\CBS\CbsPersist_20200328205353.cab to your next reply.

CbsPersist_20200328205353.cab is too large for the server to process, so I uploaded to the file hosting as you requested last time. I uploaded the archive, because when unpacking the file takes 400 megabytes instead of 20 - http://www.filedropper.com/cbspersist20200328205353_1

PeterJ · Apr 7, 2020

ChkDsk Scan

Click on Start - All programs - Accessories.
Rightclick on Command-prompt and select Run as administrator.
When command prompt opens, typ chkdsk into it, then press enter.
Wait for this to complete.
Download ListChkdskResult.exe by SleepyDude and save it on your desktop.
Rightclick

ListChkdskResult.exe and select Run as administrator. Notepad will open the file ListChkdskResult.txt on completion. (The file ListChkdskResult.txt can be found on your desktop.)
Copy and paste its content in your next reply.

Vlad1407i · Apr 8, 2020

PeterJ said:
ChkDsk Scan

Click on Start - All programs - Accessories.

Rightclick on Command-prompt and select Run as administrator.

When command prompt opens, typ chkdsk into it, then press enter.

Wait for this to complete.

Download ListChkdskResult.exe by SleepyDude and save it on your desktop.

Rightclick

ListChkdskResult.exe and select Run as administrator. Notepad will open the file ListChkdskResult.txt on completion. (The file ListChkdskResult.txt can be found on your desktop.)

Copy and paste its content in your next reply.

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 08.04.2020 12:55:14 >------
Category: 0
Computer Name: Main-Win7PRO
Event Code: 26212
Record Number: 134292
Source Name: Chkdsk
Time Written: 04-08-2020 @ 09:54:14
Event Type: Сведения
User:
Message: Программа Chkdsk была запущена на моментальном снимке тома в режиме "только чтение".

Проверка файловой системы на C:
Тип файловой системы: NTFS.

ВНИМАНИЕ! Параметр F не указан.
CHKDSK выполняется в режиме только чтения.

Проверка файлов (этап 1 из 3)...
Обработано файловых записей: 393728.

Проверка файлов завершена.
Обработано больших файловых записей: 2869.

Обработано поврежденных файловых записей: 0.

Обработано записей дополнительных атрибутов: 2.

Обработано записей повторного анализа: 75.

Проверка индексов (этап 2 из 3)...
Обработано записей индекса: 500070.

Проверка индексов завершена.
Проверено неиндексированных файлов: 0.

Восстановлено неиндексированных файлов: 0.

Проверка дескрипторов безопасности (этап 3 из 3)...
Обработано файловых SD/SID: 393728.

Очистка от неиспользуемых индексных записей 1798 в индексе $SII файла 0x9.
Очистка от неиспользуемых индексных записей 1798 в индексе $SDH файла 0x9.
Очистка 1798 неиспользованных дескрипторов безопасности.
Проверка дескрипторов безопасности завершена.
Обработано файлов данных: 53172.

CHKDSK проверяет журнал USN..
Обработано байтов USN: 37679424.

Завершена проверка журнала USN
Windows проверила файловую систему. Ошибок не обнаружено.

234326015 КБ всего на диске.
182581852 КБ в 321718 файлах.
187936 КБ в 53173 индексах.
0 КБ в поврежденных секторах.
507499 КБ используется системой.
65536 КБ занято под файл журнала.
51048728 КБ свободно на диске.

Размер кластера: 4096 байт.
Всего кластеров на диске: 58581503.
12762182 кластеров на диске.

-----------------------------------------------------------------------

PeterJ · Apr 8, 2020

Note: You don't need to quote my message into yours.

The following might take several hours to complete. You can do it overnight if you like.

Click on Start - All Programs - Accessories.
Right-click on Command-prompt and select Run as administrator.
When command prompt opens, copy and paste the following command into it, press enter afterwards.

Code:

chkdsk c: /f /r

At the question "Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)", press Y.
Restart the system.

Do not press any key during the restart. This will allow CHKDSK to start.
Wait for this to complete. Please note that this may take several hours. Let it run even if it looks like the process has stopped!
On completion, the system will restart automatically.

Please report when done.

Vlad1407i · Apr 11, 2020

OK. Will this report format work?

The report: 1.evtx (68KB) - SendSpace.com

Vlad1407i · Apr 11, 2020

I forgot, sorry.

LocaleMetaData: 1_1033.MTA (9.52KB) - SendSpace.com

PeterJ · Apr 12, 2020

Check Windows Update again and report the result.
If it fails, attach the zipped cbs.log to your next reply.

Vlad1407i · May 8, 2020

Windows update seems to work and it says that updates are not required. But when you run sfc / scannow as a result again - "Windows SFC found corrupt files but was unable to fix them."

PeterJ · May 8, 2020

Attach the file C:\Windows\Logs\CBS\CbsPersist_20200426215031.cab to your next reply.

[SOLVED] Windows SFC found corrupt files but was unable to fix them

Member

Attachments

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Attachments

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst

Member

Moderator, Windows Update Expert, Security Analyst

Member

Member

Moderator, Windows Update Expert, Security Analyst

Member

Attachments

Moderator, Windows Update Expert, Security Analyst