[Win8.1 Upd3 x64] SFC

tomekvs · May 17, 2017

Hello,

I find Your thread https://www.sysnative.com/forums/wi...t-repair-member-file-windows-journal-lnk.html
and i think You could help me to (make custom script for sfcfix for me).

Regards.

tomekvs · May 17, 2017

Re: SFC

sorry, update

tomekvs · May 17, 2017

Re: SFC

why this thread is "moved" ?

tomekvs · May 20, 2017

Re: SFC

P.S. The main problem is that explorer.exe dont load at startup.

tomekvs · May 21, 2017

Re: SFC

PLEASE ! CAN ANYBODY HELP ME ?

zcomputerwiz · May 22, 2017

Re: SFC

Code:

2017-04-02 20:35:38, Info                  CSI    00000932 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000933 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk do not match actual file [l:38{19}]"Windows Journal.lnk" :
  Found: {l:32 b:Rn0ijVEFoR1dxu3z3s/+cax7d5jGzDJoBYLXPemTPxI=} Expected: {l:32 b:MZg2KqMnHh+iyhodplgMB7y35LaRMt4yIz1PaJqPuwo=}
2017-04-02 20:35:38, Info                  CSI    00000934 [SR] Cannot repair member file [l:38{19}]"Windows Journal.lnk" of Microsoft-Windows-TabletPC-Journal, Version = 6.3.9600.18189, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2017-04-02 20:35:38, Info                  CSI    00000935 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000936 [SR] Cannot repair member file [l:22{11}]"shdocvw.dll" of Microsoft-Windows-shdocvw, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2017-04-02 20:35:38, Info                  CSI    00000937 [SR] This component was referenced by [l:166{83}]"Package_1362_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-3967_neutral_GDR"

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

View attachment SFCFix.zip

Step 2 - SFC Scan

Swipe in from the right edge of the screen, and then tap Search.
(If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.)
Type cmd in the search box, and then right-click or press and hold on Command Prompt.
Tap or click Run as administrator.
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

tomekvs · May 26, 2017

Re: SFC

Code:

SFCFix version 3.0.0.0 by niemiro. 
Start time: 2017-05-26 10:49:56.790 
Microsoft Windows 8.1 Update 3 - amd64 
Using .zip script file at D:\Autoruns\sfc2\SFCFix.zip [0] 
 
 
 
 
PowerCopy:: 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96\shdocvw.dll to C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96\shdocvw.dll. 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk to C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk. 
Successfully copied file C:\Users\Tomasz\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc\shdocvw.dll to C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc\shdocvw.dll. 
 
Successfully restored ownership for C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully restored permissions on C:\WINDOWS\WinSxS\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_7c614ce827462f96 
Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.3.9600.18189_none_0874b872788af400\Windows Journal.lnk 
Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-windows-shdocvw_31bf3856ad364e35_6.3.9600.17415_none_d87fe86bdfa3a0cc 
PowerCopy:: directive completed successfully. 
 
 
 
 
Successfully processed all directives. 
SFCFix version 3.0.0.0 by niemiro has completed. 
Currently storing 4 datablocks. 
Finish time: 2017-05-26 10:49:58.633 
Script hash: m7ecZpBV5ADKppPIYWz6CdiSidzBWa8VGxKBWPIkujM= 
----------------------EOF-----------------------

zcomputerwiz · May 30, 2017

Re: SFC

Code:

2017-05-26 11:10:05, Info                  CSI    00000925 [SR] Repairing 3 components
2017-05-26 11:10:05, Info                  CSI    00000926 [SR] Beginning Verify and Repair transaction
2017-05-26 11:10:05, Info                  CSI    00000927 Hashes for file member \??\C:\WINDOWS\System32\shdocvw.dll do not match actual file [l:22{11}]"shdocvw.dll" :
  Found: {l:32 b:/bvH8nfIm1Ok1sUnCBN7bIBGTwopbJRH/Z5orcMZiHo=} Expected: {l:32 b:GEbQdt2Kk9CcLfO6iy5mSzgQUA8O91AVXaFbgTe0MPA=}
2017-05-26 11:10:05, Info                  CSI    00000928 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:22{11}]"shdocvw.dll" from store
2017-05-26 11:10:05, Info                  CSI    00000929 [SR] Repairing corrupted file [ml:520{260},l:156{78}]"\??\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC"\[l:38{19}]"Windows Journal.lnk" from store
2017-05-26 11:10:05, Info                  CSI    0000092a [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\WINDOWS\SysWOW64"\[l:22{11}]"shdocvw.dll" from store
2017-05-26 11:10:05, Info                  CSI    0000092b [SR] Repair complete

Looks good. Does explorer run at this point?

tomekvs · May 30, 2017

Re: SFC

No.

zcomputerwiz · May 30, 2017

Re: SFC

I'd like to take a look at the event logs.

Event Log Collection

Download VEW by Vino Rosso here: VEW.EXE
Right click the file and select Run as administrator and click Continue or Allow at the User Account Control Prompt.
Click the check boxes next to Application and System located under Select log to query on the upper left.
Under Select type to list on the right click the boxes next to Error, Warning and Critical (not XP).
Under Number or date of events select Number of events and type 20 in the box next to 1 to 20 and click Run.
Once it finishes it will display a log file in notepad.
Copy and paste its entire contents into your next reply.

tomekvs · May 30, 2017

Re: SFC

after run vew.exe i have information window:
"vew has not be coded for your language (polish)"

tomekvs · Jun 1, 2017

so i have to give up ?

tomekvs · Jun 1, 2017

logs from other program:

Uploadfiles.io - report-copy.html.7z

zcomputerwiz · Jun 5, 2017

The file is too large to load in any browser I have tried. Would it be possible to export only the current day's events?

tomekvs · Jun 6, 2017

thank You for answer
here are new logs

zcomputerwiz · Jun 8, 2017

Clean Boot

Swipe in from the right edge of the screen, and then tap Search. Or, if you are using a mouse, point to the lower-right corner of the screen, and then click Search.
Type msconfig in the search box, and then tap or click msconfig.
On the Services tab of the System Configuration dialog box, tap or click to select the Hide all Microsoft services check box, and then tap or click Disable all.
On the Startup tab of the System Configuration dialog box, tap or click Open Task Manager
On the Startup tab in Task Manager, for each startup item, select the item and then click Disable.
On the Startup tab of the System Configuration dialog box, tap or click OK, and then restart the computer.

https://support.microsoft.com/en-us/kb/929135

tomekvs · Jun 9, 2017

Unfortunately this did not help in anything

zcomputerwiz · Jun 13, 2017

Will explorer launch if it is run using Task Manager? ( File -> Run New Task )

Has this machine been infected by any malware that you know of?
Please make a post in the Security Forum to get the machine checked out here: https://www.sysnative.com/forums/security-arena/

tomekvs · Jun 13, 2017

yes, it runs from task manager

i know almost on 100% that i dont have any virus but o.k. i post on that subforum

P.S. I was thinking to uninstall programs from command line but wmic not working for me

tomekvs · Jun 13, 2017

it (explorer.exe) works but is 50-70% cpu usage (and in any access to select file "file/open" explorer hang)

[Win8.1 Upd3 x64] SFC

Member

Attachments

Member

Member

Member

Member

Windows Update Expert

Member

Attachments

Windows Update Expert

Member

Windows Update Expert

Member

Member

Member

Windows Update Expert

Member

Attachments

Windows Update Expert

Member

Windows Update Expert

Member

Member