A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 9, 2015 #1 So tried to update SP1 and got this error. Searched Microsoft and web and tried all solutions I could find. Nothing works, can you please take a look and help me correct this update. Thxs SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-09 22:28:31.921 Microsoft Windows 7 - amd64 Not using a script file. AutoAnalysis:: SUMMARY: No corruptions were detected. AutoAnalysis:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 0 datablocks. Finish time: 2015-09-09 22:30:07.502 ----------------------EOF-----------------------
So tried to update SP1 and got this error. Searched Microsoft and web and tried all solutions I could find. Nothing works, can you please take a look and help me correct this update. Thxs SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-09 22:28:31.921 Microsoft Windows 7 - amd64 Not using a script file. AutoAnalysis:: SUMMARY: No corruptions were detected. AutoAnalysis:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 0 datablocks. Finish time: 2015-09-09 22:30:07.502 ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #2 Hi ajgab :) My name is Aura and I'll be assisting you with your issue. Follow the instructions below please. System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
Hi ajgab :) My name is Aura and I'll be assisting you with your issue. Follow the instructions below please. System Update Readiness Tool (SURT) - Scan Follow the instructions below to run a scan with the System Update Readiness Tool (SURT) and provide a log; Download the right version of SURT for your system; Your version of Windows is: Once downloaded, execute the installer, and go throught the installation (this process can take around 15-20 minutes); On completion, a log will be created in C:\Windows\Logs\CBS\CheckSUR.log; Attach this log in your next reply; Alternatively, if these instructions are unclear for you, you can follow the tutorial below. System Update Readiness Tool (SURT)
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #3 OK, here you go !! Just an FYI, I am running this on an Apple with an intel chip using Parallels Attachments CheckSUR.log 2.9 KB · Views: 3
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #4 Alright, follow the instructions below please. System Update Readiness Tool (SURT) - Fix WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to fix the errors reported by the System Update Readiness Tool (SURT); Download the attached archive file, Packs.zip and save it on your Desktop; Once it's downloaded, right-click on it and select Extract All...; Check the Show extracted files when complete checkbox, and click on Extract; On completion, a folder will open with two folders inside it, Manifests and Packages; Copy and paste the files of the Manifests folder (if there are any) inside C:\Windows\Temp\CheckSur\winsxs\Manifests Copy and paste the files of the Packages folder (if there are any) inside C:\Windows\Temp\CheckSur\servicing\Packages Run the System Update Readiness Tool (SURT) again; On completion, attach the log located at C:\Windows\Logs\CBS\CheckSUR.log in your next reply; View attachment Packs.zip
Alright, follow the instructions below please. System Update Readiness Tool (SURT) - Fix WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to fix the errors reported by the System Update Readiness Tool (SURT); Download the attached archive file, Packs.zip and save it on your Desktop; Once it's downloaded, right-click on it and select Extract All...; Check the Show extracted files when complete checkbox, and click on Extract; On completion, a folder will open with two folders inside it, Manifests and Packages; Copy and paste the files of the Manifests folder (if there are any) inside C:\Windows\Temp\CheckSur\winsxs\Manifests Copy and paste the files of the Packages folder (if there are any) inside C:\Windows\Temp\CheckSur\servicing\Packages Run the System Update Readiness Tool (SURT) again; On completion, attach the log located at C:\Windows\Logs\CBS\CheckSUR.log in your next reply; View attachment Packs.zip
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #5 OK Ran it again looks a little better. Attachments CheckSUR.log 3 KB · Views: 4
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #6 Alright, SURT now returns a clean log (all the corrupt files have been replaced). Let's see what SFC have for us. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright, SURT now returns a clean log (all the corrupt files have been replaced). Let's see what SFC have for us. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #7 OK, looks better for sure. Attachments CBS.rar 254.2 KB · Views: 4
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #8 One file needs to be replaced, here goes. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
One file needs to be replaced, here goes. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #9 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 15:33:46.526 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui to C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 1 datablocks. Finish time: 2015-09-10 15:33:47.024 Script hash: dFZWSL/K0SZ8kqT//TpTpm4DrybacQRc9th30nqe6Eo= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 15:33:46.526 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui to C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 1 datablocks. Finish time: 2015-09-10 15:33:47.024 Script hash: dFZWSL/K0SZ8kqT//TpTpm4DrybacQRc9th30nqe6Eo= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #10 Now we need to run SFC again to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Now we need to run SFC again to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #11 Lets hope this is good news Attachments CBS.rar 277.9 KB · Views: 4
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #12 SFC discovered a new file that needs to be replaced. Here goes: SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
SFC discovered a new file that needs to be replaced. Here goes: SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; View attachment SFCFix.zip
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #13 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 18:14:11.792 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg to C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg. Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-10 18:14:13.768 Script hash: KcQ33jRuStP7D/MqdzGh4KZrCFHwn4S4ebNuXW35LXc= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 18:14:11.792 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg to C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg. Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\pretty_peacock.jpg PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-10 18:14:13.768 Script hash: KcQ33jRuStP7D/MqdzGh4KZrCFHwn4S4ebNuXW35LXc= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #14 Alright time to run SFC again to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright time to run SFC again to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #15 here you go Attachments CBS.rar 300.8 KB · Views: 2
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 10, 2015 #16 This is weird. The first file we replaced (and which replacement was accepted) is now corrupt again. Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; On your Desktop, right-click and select New, then Text Document. Give it the name SFCFixScript (it should be a .txt) extension; Open the SFCFixScript.txt file you just created, and copy/paste the following in it; Code: FileScan:: notepad.exe.mui Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply;
This is weird. The first file we replaced (and which replacement was accepted) is now corrupt again. Follow the instructions below please. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; On your Desktop, right-click and select New, then Text Document. Give it the name SFCFixScript (it should be a .txt) extension; Open the SFCFixScript.txt file you just created, and copy/paste the following in it; Code: FileScan:: notepad.exe.mui Save any work you have open, and close every programs; Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply;
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 10, 2015 #17 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 22:15:31.439 Microsoft Windows 7 - amd64 Using .txt script file at \\psf\Home\Desktop\SFCFixScript.txt [0] FileScan:: [0: 10] C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080\Pretty_Peacock.jpg Expected: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg= Expected: 6.1.7601.21955 Found: Version number not available. Successfully traced component amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080. Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.2660649-7_neutral_LDR2 [C:\Windows\SysWOW64\en-US\notepad.exe.mui] [C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg] [C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_73a679f8be493c8c\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17803_none_75e16314bb308253\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.21955_none_67a76d1d5f5b894f\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.17803_none_6751df5a46172b22\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.21179_none_743ecb5dd75b47ed\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\Pretty_Peacock.jpg] [1: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723\notepad.exe.mui Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE= Expected: 6.1.7600.16385 Successfully traced component amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723. Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Microsoft-Windows-PsuedoTool-HashIDSpy-Deployment-LanguagePack [C:\Windows\en-US\notepad.exe.mui] [2: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637\notepad.exe.mui Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE= Expected: 6.1.7600.16385 Successfully traced component amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637. Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack [C:\Windows\System32\en-US\notepad.exe.mui] [3: 1] C:\SFCFix\Backups\C\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui File is untraceable. Found: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg= Version number not available. Trace not available. FileScan:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-10 22:15:33.854 Script hash: YTjmdtYmd4p1iK5X2JWXcUqjUJqmwvZrIjSDz0T4M88= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-10 22:15:31.439 Microsoft Windows 7 - amd64 Using .txt script file at \\psf\Home\Desktop\SFCFixScript.txt [0] FileScan:: [0: 10] C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080\Pretty_Peacock.jpg Expected: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg= Expected: 6.1.7601.21955 Found: Version number not available. Successfully traced component amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.21955_none_7636f0d7d474e080. Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.2660649-7_neutral_LDR2 [C:\Windows\SysWOW64\en-US\notepad.exe.mui] [C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg] [C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_73a679f8be493c8c\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.17803_none_75e16314bb308253\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.21955_none_67a76d1d5f5b894f\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.17803_none_6751df5a46172b22\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.21179_none_743ecb5dd75b47ed\Pretty_Peacock.jpg] [C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16988_none_73a9863abe46777b\Pretty_Peacock.jpg] [1: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723\notepad.exe.mui Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE= Expected: 6.1.7600.16385 Successfully traced component amd64_microsoft-windows-notepadwin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f51dc315e4ca5723. Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Microsoft-Windows-PsuedoTool-HashIDSpy-Deployment-LanguagePack [C:\Windows\en-US\notepad.exe.mui] [2: 2] C:\Windows\winsxs\amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637\notepad.exe.mui Expected: 9B1Kc4/AxP42gf03N4au7q+v5V2UWBNq0a2fWUvpBtE= Expected: 6.1.7600.16385 Successfully traced component amd64_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_79dac9b8e8ab2637. Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack [C:\Windows\System32\en-US\notepad.exe.mui] [3: 1] C:\SFCFix\Backups\C\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui File is untraceable. Found: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg= Version number not available. Trace not available. FileScan:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-10 22:15:33.854 Script hash: YTjmdtYmd4p1iK5X2JWXcUqjUJqmwvZrIjSDz0T4M88= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 11, 2015 #18 Alright let's proceed to the replacement and see what it gives. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
Alright let's proceed to the replacement and see what it gives. SFCFix - Fix Time WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly. Follow the instructions below to download and execute a SFCFix fix, and provide the log. Download SFCFix and move the executable on your Desktop; Download the attached SFCFix.zip and move the archive to your Desktop; Note: Make sure that the file is named SFCFix.zip, do not rename it. Save any work you have open, and close every programs; Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it; SFCFix will launch, let it complete; Once done, a file will appear on your Desktop, called SFCFix.txt; Open the file, then copy and paste its content in your next reply; SFCFix.zip
A ajgab Active member Joined Sep 9, 2015 Posts 44 Sep 11, 2015 #19 SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-11 08:25:25.051 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui WARNING: File C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui was not backed up as that would replace the current backup. Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui to C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-11 08:25:25.817 Script hash: EE5EskwQ26LcOPAYXraQsT/z5reY1JFr6c5v89UJeRw= ----------------------EOF-----------------------
SFCFix version 2.4.5.0 by niemiro. Start time: 2015-09-11 08:25:25.051 Microsoft Windows 7 - amd64 Using .zip script file at \\psf\Home\Desktop\SFCFix.zip [0] PowerCopy:: Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui WARNING: File C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui was not backed up as that would replace the current backup. Successfully copied file C:\Users\Administrator\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui to C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui. Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1dbc2e35304db501\notepad.exe.mui PowerCopy:: directive completed successfully. Successfully processed all directives. SFCFix version 2.4.5.0 by niemiro has completed. Currently storing 2 datablocks. Finish time: 2015-09-11 08:25:25.817 Script hash: EE5EskwQ26LcOPAYXraQsT/z5reY1JFr6c5v89UJeRw= ----------------------EOF-----------------------
Aura Sysnative Staff, Security Analyst Staff member Joined Mar 16, 2015 Posts 8,061 Sep 11, 2015 #20 Alright, now to run SFC to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
Alright, now to run SFC to see if the replacement is accepted. System File Checker (SFC) Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply; On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin); On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin); Enter the command below and press on Enter; Code: sfc /scannow Note: There's a space between "sfc" and "/scannow"; Once the scan is complete, enter the command below and press on Enter Code: copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt" A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here; Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.
