Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Updates loop, SFC won't run, SURT doesn't work, Can't System Restore

03 Jun 2014   #21
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

SFC run from a Repair boot will not fix problems where the SFC in normal boot has successfully started.

CheckSUR shows (amongst others)
Code:
Unavailable repair files:
 winsxs\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_88dcc0bf2fb1b808.manifest
 winsxs\manifests\amd64_policy.8.0.microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_09bd717ffacfdd51.manifest
SFC shows
Code:
2014-06-03 11:55:40, Info                  CSI    0000022a [SR] Beginning Verify and Repair transaction
2014-06-03 11:55:40, Error                 CSI    0000022b (F) STATUS_FILE_IS_A_DIRECTORY #5003669# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound|AllowSharingViolation|AllowAccessDenied), handle = {provider=NULL, handle=0}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES|FILE_READ_DATA), oa = @0xcfcf80->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[131]"\SystemRoot\WinSxS\amd64_security-malware-windows-defender-events_31bf3856ad364e35_6.1.7600.16385_none_118cf1dcd54a3dea\MpEvMsg.dll"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xcfd030, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd00000ba]
2014-06-03 11:55:40, Error                 CSI    0000022c@2014/6/3:16:55:40.153 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_FILE_IS_A_DIRECTORY originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2014-06-03 11:55:40, Error                 CSI    0000022d (F) STATUS_FILE_IS_A_DIRECTORY #5003668# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingFile(...)[gle=0xd00000ba]
2014-06-03 11:55:40, Error                 CSI    0000022e (F) STATUS_FILE_IS_A_DIRECTORY #5003667# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingFile(flags = (MissingFileIsOk|SharingViolationIsOk|AccessDeniedIsOk), da = (SYNCHRONIZE|FILE_READ_DATA), oa = @0xcfd628->SIL_OBJECT_ATTRIBUTES {s:40; on:"MpEvMsg.dll"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_SYNCHRONOUS_IO_NONALERT|FILE_NON_DIRECTORY_FILE), file = NULL, disp = Invalid)
This is typically a ZeroAccess problem - but since you've run MBAM, we'll assume that it's residuals only.

Please open an Elevated Command Prompt, and run the following command

DIR C:\ /AL /S >>%userprofile%\desktop\npal.txt

this will create a file on your desktop - npal.txt - please compress it and upload it to your reply.


My System SpecsSystem Spec
.
03 Jun 2014   #22
TalbotM

Windows 7 Pro 64bit
 
 

Attached.
My System SpecsSystem Spec
03 Jun 2014   #23
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

Here's the critical problem from that output...
Code:
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_b3b1a27171e01f6c
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.17316_none_b3fe3b6771a68ecd
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.21531_none_b46d38ce8ad8e4ed
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_b5e2b6396ecea306
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               8 File(s)      1,968,640 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.18170_none_b59db7296f030a55
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpClient.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpCommu.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpSvc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
              11 File(s)      3,867,136 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.22341_none_b648c5e888076cca
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               8 File(s)      1,968,640 bytes
I'll see what I can do about producing a specific fix protocol for them. - it may take a day or two.
My System SpecsSystem Spec
.

03 Jun 2014   #24
TalbotM

Windows 7 Pro 64bit
 
 

Thanks. I take it that NONE of that stuff should be symbolically linked to anything. Just regular files.
My System SpecsSystem Spec
03 Jun 2014   #25
TalbotM

Windows 7 Pro 64bit
 
 

Not to try to interrupt your process, but what if I deleted those 6 folders and put replacements in the C:\Windows\Temp\CheckSUR\winsxs folder? Assuming I have replacments, of course.
My System SpecsSystem Spec
03 Jun 2014   #26
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

That's correct - the trick is to delete the symlinks without disturbing the rest of the filesystem.

It means taking ownership and then attempting to delete the files individually. My limited experience tells me that using wildcard deletes doesn't work.
My System SpecsSystem Spec
03 Jun 2014   #27
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

I can provide the appropriate replacement files (I have almost every file ever issued for win7), so worry not
My System SpecsSystem Spec
03 Jun 2014   #28
TalbotM

Windows 7 Pro 64bit
 
 

Understood.
I have no problem procedurally doing that.
And it is few enough that I don't care about wildcards. I'll change ownership on them individually if that's what it takes. Still beats the pants off of a clean reinstall.
My System SpecsSystem Spec
03 Jun 2014   #29
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

If you're happy to go for it - here's the short version

1) take ownership of each identified folder- recurse down the branch
2) Give the Administrators group Full permissions for all folders and then recurse the permissions down
3) delete each file individually. (DEL)
4) then delete the folders involved. (RD /S)
5) run the command in post #21 again and post the results - then run CheckSUR and SFC again, and post the new logs.
My System SpecsSystem Spec
03 Jun 2014   #30
TalbotM

Windows 7 Pro 64bit
 
 

That wasn't so bad.
SFC still dumps out at 54%.
Same OneDrive link: http://1drv.ms/1rEB9lN
My System SpecsSystem Spec
Reply

 Updates loop, SFC won't run, SURT doesn't work, Can't System Restore




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Restart loop, system restore doesn't solve the issue
So about a day ago my desktop began displaying the blue screen upon login and then instant restart. I tried startup repair, memory diagnostics tool, system recovery, nothing worked. so i cleared everything on my drive (unforunately) only to find once i got to "set up is preparing your computer for...
Backup and Restore
Win7 HP 64b system restore doesn't work
First time poster here. I'm running Win7 Home Premium 64bit. When I try to do a System Restore, it seems to run to completion, reboots the system and then issues the following message: "System Restore did not complete successfully. Your computer's system files and settings were not...
Backup and Restore
Previous Versions doesn't work (System restore)
Hello, I'm doing everything as said, and the "previous versions" doesn't work. Why? I also did manually a system restore, and it doesn't create a copy of files (for previous versions). What can I do? Thank you, Patrick
Backup and Restore
Windows Update doesn't work after OEM System Restore
New Acer Aspire, but I pitched the box, so can't return it. Anyway, It initially worked fine for about a week, including Windows Update. Got to a point where every window would say (Not Responding) and resources were maxed out. I couldn't isolate the problem and didn't have any valuable info on the...
Windows Updates & Activation
Won't sleep; system restore doesn't work
I noticed about a week ago that my system won't go to sleep unless I force it to sleep using the using the Function and F1 buttons on the keyboard. I also noticed about the same time that I tried to set it to use the ribbon screen saver and that doesn't work either. The screen saver looks fine in...
Backup and Restore
System Restore doesn't work
My Win 7 was installed in February 2010 and at first I could use System Restore without problems. However, after some time it stopped working due to unknown reasons and now when I try to do a System Restore it looks as if it is going to be OK, but when it restarts I see the following error message:...
Backup and Restore


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:35.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App