Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #41 It's normal. So only take care of the Manifests folder like instructed please :)
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #43 Awesome :) SURT now returns a clean log. Let's see if it's the same for SFC. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Awesome :) SURT now returns a clean log. Let's see if it's the same for SFC. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 4, 2015 #44 Here's what I get after entering the code to copy the log on the desktop
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #45 There's no "s" in userprofile :)
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 4, 2015 #46 Thank you. I think I need to go to an optician:smile9: View attachment cbs.txt
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #47 Alright follow the instructions below please. SFCFix - Run Only Follow the instructions below to download and execute SFCFix, and provide the log. Download SFCFix and move the executable on your Desktop; Right-click on SFCFix.exe and select Run as Administrator; Follow the instructions displayed in the console; On completion, a log will open in Notepad. Copy and paste the content of that log in your next reply; Note: The log (SFCFix.txt) will be created in the same directory where SFCFix is run if it doesn't open automatically on completion.
Alright follow the instructions below please. SFCFix - Run Only Follow the instructions below to download and execute SFCFix, and provide the log. Download SFCFix and move the executable on your Desktop; Right-click on SFCFix.exe and select Run as Administrator; Follow the instructions displayed in the console; On completion, a log will open in Notepad. Copy and paste the content of that log in your next reply; Note: The log (SFCFix.txt) will be created in the same directory where SFCFix is run if it doesn't open automatically on completion.
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 4, 2015 #48 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-04 20:46:59.338 Microsoft Windows 7 Service Pack 1 - amd64 Not using a script file. AutoAnalysis:: WARNING: Failed to get store name from identity name with return code 2 for component Microsoft-Windows-WDF-Kernel Library and file Wdf01000.mof. File is reported as corrupt by SFC. CORRUPT: Wdf01000.mof of component Microsoft-Windows-WDF-Kernel Library. FIXED: Corruption at C:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\utc.app.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\utc.app.json. FIXED: Corruption at C:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\telemetry.ASM-WindowsDefault.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\telemetry.ASM-WindowsDefault.json. CORRUPT: C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe CORRUPT: C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe CORRUPT: C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll CORRUPT: C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com. CBS & SFC total detected corruption count: 7 CBS & SFC total unimportant corruption count: 0 CBS & SFC total fixed corruption count: 2 SURT total detected corruption count: 6 SURT total unimportant corruption count: 0 SURT total fixed corruption count: 0 AutoAnalysis:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-04 20:49:14.545 ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-04 20:46:59.338 Microsoft Windows 7 Service Pack 1 - amd64 Not using a script file. AutoAnalysis:: WARNING: Failed to get store name from identity name with return code 2 for component Microsoft-Windows-WDF-Kernel Library and file Wdf01000.mof. File is reported as corrupt by SFC. CORRUPT: Wdf01000.mof of component Microsoft-Windows-WDF-Kernel Library. FIXED: Corruption at C:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\utc.app.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\utc.app.json. FIXED: Corruption at C:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18869_none_fde7d5f71db043ad\telemetry.ASM-WindowsDefault.json has been successfully repaired from C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\telemetry.ASM-WindowsDefault.json. CORRUPT: C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe CORRUPT: C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe CORRUPT: C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll CORRUPT: C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com. CBS & SFC total detected corruption count: 7 CBS & SFC total unimportant corruption count: 0 CBS & SFC total fixed corruption count: 2 SURT total detected corruption count: 6 SURT total unimportant corruption count: 0 SURT total fixed corruption count: 0 AutoAnalysis:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-04 20:49:14.545 ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #49 Alright let's fix a few files. Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
Alright let's fix a few files. Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 4, 2015 #50 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-04 20:58:45.874 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\H\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully took permissions for file or folder C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll to C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe to C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof to C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll to C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe to C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe. Successfully restored ownership for C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully restored permissions on C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully restored ownership for C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully restored permissions on C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 7 datablocks. Finish time: 2015-09-04 20:58:48.308 Script hash: qjiT4jGEa3Mt457YAxv7pdbNu23dGn6/FvIaHcarNso= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-04 20:58:45.874 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\H\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully took permissions for file or folder C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll to C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe to C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof to C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll to C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe to C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe. Successfully restored ownership for C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully restored permissions on C:\windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll Successfully restored ownership for C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully restored permissions on C:\windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7601.18198_none_d426811134c90d14\Wdf01000.mof Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_f0bdd06280ea0057\imjputyc.dll Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 7 datablocks. Finish time: 2015-09-04 20:58:48.308 Script hash: qjiT4jGEa3Mt457YAxv7pdbNu23dGn6/FvIaHcarNso= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 4, 2015 #51 Alright, now let's run a SFC scan to see if the changes are accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright, now let's run a SFC scan to see if the changes are accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 6, 2015 #53 Alright, that should do it. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
Alright, that should do it. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 7, 2015 #54 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-07 17:07:21.201 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\H\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl. Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 13 datablocks. Finish time: 2015-09-07 17:07:22.808 Script hash: lRsgqaTuxEcI1wAPCPGoYNr2H2CxdnryyEC9edWweZA= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-07 17:07:21.201 Microsoft Windows 7 Service Pack 1 - amd64 Using .zip script file at C:\Users\H\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl to C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl. Successfully copied file C:\Users\H\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl to C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl. Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_it-it_52fe515a12d4e820\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_68d65b133ba302a2\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_10.2.9200.16521_de-de_1d62b23759cbeed6\msfeedsbs.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_it-it_d619c19dd544247d\msfeeds.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_fr-fr_ebf1cb56fe123eff\msfeeds.mfl Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-i..-platform.resources_31bf3856ad364e35_10.2.9200.16521_de-de_a07e227b1c3b2b33\msfeeds.mfl PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 13 datablocks. Finish time: 2015-09-07 17:07:22.808 Script hash: lRsgqaTuxEcI1wAPCPGoYNr2H2CxdnryyEC9edWweZA= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 7, 2015 #55 Time to run SFC to see if the changes are accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Time to run SFC to see if the changes are accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 7, 2015 #56 View attachment cbs.zip Attachments SFCFix.zip 1 KB · Views: 1
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 7, 2015 #57 This is the SFCFix log, not a SFC log :)
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 7, 2015 #58 https://drive.google.com/open?id=0BydkdwqHPkFjOXNxZ3ZmeGgwc2c
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 7, 2015 #59 I need to ask your permission to download this file. I need a public download URL for it please :)
M mari Well-known member Joined Aug 20, 2015 Posts 51 Sep 7, 2015 #60 https://drive.google.com/file/d/0BydkdwqHPkFjWXJzbUl5U2V5cFk/view?usp=sharing