CBS Log file help and Windows corrupt after virus


  1. Posts : 1
    windows 7 professional 64bit
       #1

    CBS Log file help and Windows corrupt after virus


    I recently had a virus/trojan which i cleaned but now it seems so many files have been affected. When i switch on my computer explorer.exe doesnt start. Then i try start it manually and it starts and closes quickly, i try again and nothing. Then i do a system restore to way back, and i start explorer manually and it works. But then i restart and again back to my first problem.

    So i did a sfc /scannow and it failed.
    So i attached the CBS log file that it said showed the errors.

    Could someone have a look and let me know what I can do to fix my laptop?

    File is 17mb so uploaded it here:
    Download CBS.log from Sendspace.com - send big files the easy way

    Heres the last couple of lines:
    Code:
    2012-06-28 23:52:14, Info                  CSI    0000043d [SR] Verify complete
    2012-06-28 23:52:14, Info                  CSI    0000043e [SR] Repairing 2 components
    2012-06-28 23:52:14, Info                  CSI    0000043f [SR] Beginning Verify and Repair transaction
    2012-06-28 23:52:14, Info                  CSI    00000440 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_763763505e93084b\PINTLGB.IMD do not match actual file [l:22{11}]"PINTLGB.IMD" :
      Found: {l:32 b:l4ReoUNWh7axj8oO76qf9ql41yMn3b3y+lmJH5RaV7w=} Expected: {l:32 b:J6AvUKZSQcIPKPun7NfGVWIMm3i+0inkQGELvMplJfQ=}
    2012-06-28 23:52:14, Info                  CSI    00000441 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2012-06-28 23:52:14, Info                  CSI    00000442 [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store
    2012-06-28 23:52:14, Info                  CSI    00000443 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_763763505e93084b\PINTLGB.IMD do not match actual file [l:22{11}]"PINTLGB.IMD" :
      Found: {l:32 b:l4ReoUNWh7axj8oO76qf9ql41yMn3b3y+lmJH5RaV7w=} Expected: {l:32 b:J6AvUKZSQcIPKPun7NfGVWIMm3i+0inkQGELvMplJfQ=}
    2012-06-28 23:52:14, Info                  CSI    00000444 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2012-06-28 23:52:14, Info                  CSI    00000445 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
    2012-06-28 23:52:15, Info                  CSI    00000446 Hashes for file member \??\C:\Windows\IME\IMESC5\DICTS\PINTLGB.IMD do not match actual file [l:22{11}]"PINTLGB.IMD" :
      Found: {l:32 b:l4ReoUNWh7axj8oO76qf9ql41yMn3b3y+lmJH5RaV7w=} Expected: {l:32 b:J6AvUKZSQcIPKPun7NfGVWIMm3i+0inkQGELvMplJfQ=}
    2012-06-28 23:52:15, Info                  CSI    00000447 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_763763505e93084b\PINTLGB.IMD do not match actual file [l:22{11}]"PINTLGB.IMD" :
      Found: {l:32 b:l4ReoUNWh7axj8oO76qf9ql41yMn3b3y+lmJH5RaV7w=} Expected: {l:32 b:J6AvUKZSQcIPKPun7NfGVWIMm3i+0inkQGELvMplJfQ=}
    2012-06-28 23:52:15, Info                  CSI    00000448 [SR] Could not reproject corrupted file [ml:520{260},l:62{31}]"\??\C:\Windows\IME\IMESC5\DICTS"\[l:22{11}]"PINTLGB.IMD"; source file in store is also corrupted
    2012-06-28 23:52:15, Info                  CSI    00000449 Repair results created:
    POQ 130 starts:
         0: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\a2a294477855cd01423a0000e015f418._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
        1: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\b2c994477855cd01433a0000e015f418.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
        2: Hard Link File: Source = [l:236{118}]"\SystemRoot\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe", Destination = [l:54{27}]"\??\C:\Windows\explorer.exe"
        3: Move File: Source = [l:204{102}]"\SystemRoot\WinSxS\Temp\PendingRenames\6628bc477855cd01443a0000e015f418.$$_ime_3f581be9a4c8cabd.cdf-ms", Destination = [l:116{58}]"\SystemRoot\WinSxS\FileMaps\$$_ime_3f581be9a4c8cabd.cdf-ms"
        4: Move File: Source = [l:230{115}]"\SystemRoot\WinSxS\Temp\PendingRenames\6628bc477855cd01453a0000e015f418.$$_ime_imesc5_dicts_32255cd579e8854e.cdf-ms", Destination = [l:142{71}]"\SystemRoot\WinSxS\FileMaps\$$_ime_imesc5_dicts_32255cd579e8854e.cdf-ms"
        5: Move File: Source = [l:228{114}]"\SystemRoot\WinSxS\Temp\PendingRenames\764fbc477855cd01463a0000e015f418.$$_ime_imesc5_help_693c441c0201a8fa.cdf-ms", Destination = [l:140{70}]"\SystemRoot\WinSxS\FileMaps\$$_ime_imesc5_help_693c441c0201a8fa.cdf-ms"
        6: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\f58cc4477855cd01473a0000e015f418.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
        7: Move File: Source = [l:236{118}]"\SystemRoot\WinSxS\Temp\PendingRenames\699ec5477855cd01483a0000e015f418.$$_system32_ime_imesc5_46a6606042ef6565.cdf-ms", Destination = [l:148{74}]"\SystemRoot\WinSxS\FileMaps\$$_system32_ime_imesc5_46a6606042ef6565.cdf-ms"
        8: Move File: Source = [l:252{126}]"\SystemRoot\WinSxS\Temp\PendingRenames\699ec5477855cd01493a0000e015f418.$$_s
    2012-06-28 23:52:15, Info                  CSI    ystem32_ime_imesc5_applets_7ab7847ddb9a9a48.cdf-ms", Destination = [l:164{82}]"\SystemRoot\WinSxS\FileMaps\$$_system32_ime_imesc5_applets_7ab7847ddb9a9a48.cdf-ms"
    
    POQ 130 ends.
    2012-06-28 23:52:15, Info                  CSI    0000044a [SR] Repair complete
    2012-06-28 23:52:15, Info                  CSI    0000044b [SR] Committing transaction
    2012-06-28 23:52:15, Info                  CSI    0000044c Creating NT transaction (seq 14), objectname [6]"(null)"
    2012-06-28 23:52:15, Info                  CSI    0000044d Created NT transaction (seq 14) result 0x00000000, handle @0xf9c
    2012-06-28 23:52:15, Info                  CSI    0000044e@2012/6/28:21:52:15.672 CSI perf trace:
    CSIPERF:TXCOMMIT;387572
    2012-06-28 23:52:15, Info                  CSI    0000044f [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired
    Operating system: windows 7 64bit
      My Computer


  2. Posts : 131
    windows 7 home premium x64
       #2

    Hi, could you post your system specs please..

    if you have a ASUS laptop!! try uninstalling the ASUS Webstorage appliance through the control panel...please post results
    Last edited by Brink; 04 Jul 2012 at 10:53. Reason: merged
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:20.
Find Us