[SOLVED] corrupted files CBS / PANTHER

soulreaper302 · Aug 7, 2015

corrupted files CBS / PANTHER / DISM

There is 3 things:

1. C:/windows.old/WINDOWS/panther and C:/WINDOWS/panther both folders and subfiles got unexplainably corrupted and posibly virus infected with .pup viruses in windows 8/8.1. the files are color coded in blue which indicates errors, corruptions and/or missing files. even after wiping the harddrive and reinstalling windows 8/8.1 update and even upgrading to windows 10. both files remain color coded in blue. I don't know very much of what the folers are about. I do know some of the files are linked to the $Windows.~BT which is the windows 10 instalation files. there was also a program among the files for making 3D objects called "BOOT". alot of sites I looked at stated to delete this folder
(note: some viruses attached to corrupted files if any are. those can't be detected by any virus scanner like malwarebytes and superantispyware and avast anti virus. I know from experience)

2. sfc /scannow via cmd(administrator) came up with windows 10 corrupted files which are noted in the CBS.LOG file. the files could not be fixed or replaced by sfc. (just to warn you. the CBS.LOG file might give u a massive headache trying to read it. file size is 5.91mb not compressed, but contains several hundred or several thousand log entries)

3. DISM.LOG error

soulreaper302 · Aug 7, 2015

Re: corrupted files CBS / PANTHER / DISM

the log files posted above are from before running the SFCfix

Welcome to SFCFix by niemiro and sysnative.com.

Checking for updates . . .
No new update is available at this time.

Processing directive 1 of 1 (AutoAnalysis::)
Checking store directories . . .
Checking CBS.log . . .
Checking CheckSUR.log . . .
Checking CheckSUR.persist.log . . .

Attempting repair . . .
Stage 1
Stage 2
Stage 3

Due to the nature of your corruptions, scan times have been extended by
approximately 15-20 minutes. Please be patient and allow the operation to
complete.

Deployment Image Servicing and Management tool
Version: 10.0.10240.16384

Image Version: 10.0.10240.16384

[==========================100.0%==========================]

Error: 0x800f081f

The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see Configure a Windows Repair Source.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

The new logs are after running the SFCfix

Aura · Aug 10, 2015

Hi soulreaper302 :)

and posibly virus infected with .pup viruses in windows 8/8.1

What makes you think that you are infected? Because if you indeed are, you'll have to get cleaned up first in the Security Arena.

soulreaper302 · Aug 10, 2015

before I upgraded to windows 10. I was running windows 8/8.1 where alot of the corrupted files originated from. malwarebytes kept finding .pup viruses. tried using reimage repair program to fix corrupted files and it came up that corrupted files had virus infections. I don't know if there still infected with viruses or not cause I had to wipe my harddrive and reinstall windows 8/8.1 then upgrade to 10. windows folders like "panther" are still corrupted.

Aura · Aug 10, 2015

If you wiped your hard drive, chances are that the malware isn't present anymore. It seems like you only have one corrupted payload. Follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

soulreaper302 · Aug 10, 2015

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-10 15:32:42.550
Microsoft Windows 8.1 - amd64
Using .zip script file at C:\Users\Chad\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_systemresource-wind..-ui-accountscontrol_31bf3856ad364e35_10.0.10240.16384_none_da155365ee6f0fb5\Advanced.Theme-Dark_Scale-100.png

Successfully copied file C:\Users\Chad\AppData\Local\niemiro\Archive\winsxs\amd64_systemresource-wind..-ui-accountscontrol_31bf3856ad364e35_10.0.10240.16384_none_da155365ee6f0fb5\Advanced.Theme-Dark_Scale-100.png to C:\WINDOWS\winsxs\amd64_systemresource-wind..-ui-accountscontrol_31bf3856ad364e35_10.0.10240.16384_none_da155365ee6f0fb5\Advanced.Theme-Dark_Scale-100.png.

Successfully restored ownership for C:\WINDOWS\winsxs\amd64_systemresource-wind..-ui-accountscontrol_31bf3856ad364e35_10.0.10240.16384_none_da155365ee6f0fb5\Advanced.Theme-Dark_Scale-100.png
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_systemresource-wind..-ui-accountscontrol_31bf3856ad364e35_10.0.10240.16384_none_da155365ee6f0fb5\Advanced.Theme-Dark_Scale-100.png
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2015-08-10 15:32:44.459
Script hash: zaWPaVMnEINCFUOr7L7DPu50lw6b9y8Hak8GNhMcGYg=
----------------------EOF-----------------------

Aura · Aug 10, 2015

Alright follow the instructions below please.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

soulreaper302 · Aug 10, 2015

https://drive.google.com/drive/my-drive

Aura · Aug 10, 2015

That URL returns to the Google Drive of the user that clicks it. I need the download URL for the CBS.txt file you uploaded.

soulreaper302 · Aug 10, 2015

https://www.dropbox.com/s/8k9v5tfab6527qx/cbs.txt?dl=0

Aura · Aug 10, 2015

It's still not the right link. On Dropbox.com, right-click on your cbs.txt and select "Share". Then copy/paste the URL that is given here.

soulreaper302 · Aug 10, 2015

https://www.dropbox.com/s/8k9v5tfab6527qx/cbs.txt?dl=0

Aura · Aug 10, 2015

Now it is, thank you. The SFC scan returned a clean CBS.log. Let's check DISM now.

DISM - Fixing Component Store Corruption
Follow the instructions below to run a DISM scan on your system:

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command DISM /Online /Cleanup-Image /RestoreHealth and press on Enter;
Let the scan run until the end (100%);
Copy the C:\Windows\Logs\DISM folder and C:\Windows\Logs\CBS\CBS.log file on your Desktop, then right-click on it, go to Send to... and select Compressed .zip archive;
Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

soulreaper302 · Aug 10, 2015

https://www.dropbox.com/s/gdl0ag3743nvjpv/CBS dism.zip?dl=0

Aura · Aug 10, 2015

The DISM scan returned clean logs. Is there anything else you need?

soulreaper302 · Aug 10, 2015

if that fixed everything then I guess we're done here then. the only other thing is that windows "panther" folder that is still corrupted that I don't know what to do with if anything

Aura · Aug 10, 2015

How do you know that the Panther folder is corrupted, where do you see that?

soulreaper302 · Aug 10, 2015

I opened the folder and viewedsome of the files and they had error messages all over them

Aura · Aug 10, 2015

Can you copy/paste a few of these errors here? It doesn't mean that the directory is corrupted. The Panther folder is used for the installation/upgrade of Windows, so it's normal for them to log errors, warnings, etc. that occurs during the installation.

soulreaper302 · Aug 10, 2015

2015-08-06 08:24:55, Error [msoobe.exe] TASK: End failed running task MigrateWirelessProfiles with hr=0x80070426.
2015-08-06 08:24:55, Error [msoobe.exe] Failed to run wireless profiles migration task with hr=0x80070426
2015-08-06 08:26:36, Error [msoobe.exe] CommitConnectedUser failed [hr=0x80070490]; cleaning up

this is from the setuperr file in the panther folder

[SOLVED] corrupted files CBS / PANTHER

Member

Attachments

Member

Attachments

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member

Sysnative Staff, Security Analyst

Member