Bugcheck code 0x00000109 after chitka/Adobe Flash HD virus removal

tom982 · 06 Jun 2013

Hi Jeff,

lol, I know what you mean. When things go wrong with something of mine I don't stop until they're fixed. A few months ago my phone started playing up and I eventually fixed it and got to sleep at 6.30am - still managed to make it to my 9am lecture!

This should sort out the remaining SFC issues:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a files should be created on your Desktop: SFCFix.txt.
Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/...36e/SFCFix.zip

The chkdsk problem is an interesting one. On an NTFS system, the max number of hardlinks that you can have per file is 1023 but I can't believe you have this many hardlinks of aepic.dll on your computer! Your plan sounds great, it will break the hardlink and put the file back in place :) Give it a go, reboot and run a chkdsk.

Tom

Jeffesmi · 07 Jun 2013

Just processed it. I'm running a SFC /scannow next and will post results.

Code:

SFCFix version 1.5.5.0 by niemiro.
Start time: 2013-06-07 16:28:21.440
Using .zip script file at C:\Users\tim\Desktop\SFCFix.zip

PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e

Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\office_16.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\office_24.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\office_32.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\office_48.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin.

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 1.5.5.0 by niemiro has completed.
Currently storing 18 datablocks.
Finish time: 2013-06-07 16:28:21.903
----------------------EOF-----------------------

Thanks,

Jeff

Jeffesmi · 07 Jun 2013

Got the standard message:

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

Jeffesmi · 07 Jun 2013

So I tried copying the file, deleting the old file, renaming the file copy, and rerunning chkdsk, but I still get the errors below. That is despite the fact that the disk edit program (see attached jpg) shows that the file is now empty.

Code:

Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          6/7/2013 3:53:44 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      DECO-TIM2011.Deco-Sign.local
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  222976 file records processed.                                         

File verification completed.
Index entries referencing file 34772 will not be validated
because this file contains too many file names.
Index entries referencing file 37182 will not be validated
because this file contains too many file names.
Index entries referencing file 37453 will not be validated
because this file contains too many file names.
Index entries referencing file 37495 will not be validated
because this file contains too many file names.
Index entries referencing file 46544 will not be validated
because this file contains too many file names.
Index entries referencing file 46643 will not be validated
because this file contains too many file names.
Index entries referencing file 46807 will not be validated
because this file contains too many file names.
Index entries referencing file 46809 will not be validated
because this file contains too many file names.
Index entries referencing file 46843 will not be validated
because this file contains too many file names.
Index entries referencing file 46887 will not be validated
because this file contains too many file names.
  3185 large file records processed.                                   

  0 bad file records processed.                                     

  2 EA records processed.                                           

  139 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  291624 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  222976 file SDs/SIDs processed.                                        

Cleaning up 62 unused index entries from index $SII of file 0x9.
Cleaning up 62 unused index entries from index $SDH of file 0x9.
Cleaning up 62 unused security descriptors.
Security descriptor verification completed.
  34325 data files processed.                                           

CHKDSK is verifying Usn Journal...
  34813360 USN bytes processed.                                            

Usn Journal verification completed.
Windows has checked the file system and found no problems.

 302179327 KB total disk space.
  66024276 KB in 182460 files.
    125804 KB in 34326 indexes.
         0 KB in bad sectors.
    336159 KB in use by the system.
     65536 KB occupied by the log file.
 235693088 KB available on disk.

      4096 bytes in each allocation unit.
  75544831 total allocation units on disk.
  58923272 allocation units available on disk.

Internal Info:
00 67 03 00 dd 4e 03 00 18 6b 06 00 00 00 00 00  .g...N...k......
86 02 00 00 8b 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-06-07T19:53:44.000000000Z" />
    <EventRecordID>93026</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>DECO-TIM2011.Deco-Sign.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  222976 file records processed.                                         

File verification completed.
Index entries referencing file 34772 will not be validated
because this file contains too many file names.
Index entries referencing file 37182 will not be validated
because this file contains too many file names.
Index entries referencing file 37453 will not be validated
because this file contains too many file names.
Index entries referencing file 37495 will not be validated
because this file contains too many file names.
Index entries referencing file 46544 will not be validated
because this file contains too many file names.
Index entries referencing file 46643 will not be validated
because this file contains too many file names.
Index entries referencing file 46807 will not be validated
because this file contains too many file names.
Index entries referencing file 46809 will not be validated
because this file contains too many file names.
Index entries referencing file 46843 will not be validated
because this file contains too many file names.
Index entries referencing file 46887 will not be validated
because this file contains too many file names.
  3185 large file records processed.                                   

  0 bad file records processed.                                     

  2 EA records processed.                                           

  139 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  291624 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  222976 file SDs/SIDs processed.                                        

Cleaning up 62 unused index entries from index $SII of file 0x9.
Cleaning up 62 unused index entries from index $SDH of file 0x9.
Cleaning up 62 unused security descriptors.
Security descriptor verification completed.
  34325 data files processed.                                           

CHKDSK is verifying Usn Journal...
  34813360 USN bytes processed.                                            

Usn Journal verification completed.
Windows has checked the file system and found no problems.

 302179327 KB total disk space.
  66024276 KB in 182460 files.
    125804 KB in 34326 indexes.
         0 KB in bad sectors.
    336159 KB in use by the system.
     65536 KB occupied by the log file.
 235693088 KB available on disk.

      4096 bytes in each allocation unit.
  75544831 total allocation units on disk.
  58923272 allocation units available on disk.

Internal Info:
00 67 03 00 dd 4e 03 00 18 6b 06 00 00 00 00 00  .g...N...k......
86 02 00 00 8b 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
  </EventData>
</Event>

I tracked own each entry:

34772 2333946686b5cce016f5a00002404000f.aepic.dll
37182
37453 uxsms.dll- amd64_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.1.7601.17514_none_ebc99983d3d18578
37495 vsstrace.dll-amd64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_330ce3bf9861358f/vsstrace.dll/vsstrace.dll
46544 esscli.dll -amd64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_330ce3bf9861358f
46643 NCProv.dll ... vstrace.dll
46807 wbemprox.dll ... vstrace.dll
46809 " vsstrace.dll
46843 WinMgmtR.dll - vsstrace358f
46887 wmiutils.dll - vsstrace.dll358f

and since they mostly had to do with the winsxs directory or vss, I turned off VSS for the volume, deleted the VSS files, turned off and removed all recovery points, and deleted everything in the temp and termporary internet files directories, but still no luck. Any ideas on how to fix this?

Thanks,

J

Jeffesmi · 10 Jun 2013

I've submitted the CHKDSK issue to the Hardware forum as I'm not sure what else to do with it. Do you think the CHKDSK errors are realted to the SFC /scannow failure?

Thanks,

J

Jeffesmi · 11 Jun 2013

Hi Tom, I wasn't sure if you saw, but I posted a CBS.LOG file on June 7th.

Thanks,

Jeff

tom982 · 11 Jun 2013

Hi Jeff,

Sorry for the delay, I've got so much going on at the moment and an ever growing list of threads to reply to. This morning I had 34 tabs open, all with things I need to reply to, but I've managed to work that down to 10 now.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a files should be created on your Desktop: SFCFix.txt.
Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/...i/2/SFCFix.zip

Tom

Jeffesmi · 15 Jun 2013

Hey, sorry I didn't mean to drop this. The guy I'm doing this for has become very frustrated and needs an immediate solution, so I'm rebuilding an old XP box to run his custom software and then I'm going to recommend that I take the other system home for an attempt at a quicker diagnostics and repair and/or rebuild. I'm hoping to put the other system in place on Tuesday afternoon. If he is okay with me taking it, I will do some more troubleshooting with you. Otherwise, I'm just going to back it up and rebuild it. Thanks for all the help.

Jeffesmi · 19 Jun 2013

Code:

SFCFix version 1.5.6.1 by niemiro.
Start time: 2013-06-19 14:41:56.906
Using .zip script file at C:\Users\tim\Desktop\SFCFix.zip




PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_16.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_24.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_32.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_48.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_16.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_24.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_32.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_48.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\ncpa.cpl
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\netshell.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\NetworkConnectionsFolder.ptxml
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\pnidui.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e

Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_16.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_16.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_24.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_24.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_32.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_32.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_48.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_48.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_16.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_16.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_24.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_24.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_32.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_32.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_48.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_48.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\ncpa.cpl to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\ncpa.cpl.
The file \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\netshell.dll is in use and must be replaced over a reboot.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\NetworkConnectionsFolder.ptxml to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\NetworkConnectionsFolder.ptxml.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin.
The file \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\pnidui.dll is in use and must be replaced over a reboot.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\SFCFix.txt to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\SFCFix.txt.
Successfully copied file \\?\C:\Users\tim\AppData\Local\niemiro\Archive\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\SFCFix.zip to \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\SFCFix.zip.

Successfully pended file for replace over reboot: \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\netshell.dll
Successfully pended file for replace over reboot: \\?\C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\pnidui.dll

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_16.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_16.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_24.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_24.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_32.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_32.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_48.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\bench_48.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_16.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_16.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_24.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_24.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_32.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_32.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_48.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\house_48.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\ncpa.cpl
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\ncpa.cpl
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\NetworkConnectionsFolder.ptxml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\NetworkConnectionsFolder.ptxml
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_16.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_24.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_32.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\office_48.bin
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e
PowerCopy:: directive completed successfully.




Reboot:: directive completed successfully.




PostRebootCorruptionDetection::
No hash verification failures detected.
PostRebootCorruptionDetection:: directive completed successfully.




PostRebootRestorePermissions::
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\netshell.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\netshell.dll
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\pnidui.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-netshell_31bf3856ad364e35_6.1.7601.17514_none_33a9704224aa536e\pnidui.dll
PostRebootRestorePermissions:: directive completed successfully.




Successfully processed all directives.
SFCFix version 1.5.6.1 by niemiro has completed.
Currently storing 34 datablocks.
Finish time: 2013-06-19 14:43:47.075
----------------------EOF-----------------------

tom982 · 19 Jun 2013

Hi Jeff,

No worries about the delay, I've been quite busy myself actually. Let's try another SFC:

SFC Scan

Click on the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

I'm going to cry if that file is corrupt again

Tom

Bugcheck code 0x00000109 after chitka/Adobe Flash HD virus removal

CHKDSK issue submitted to Hardware Forum

Here it is