Windows 7 update (KB3022345) causing corrupt files

[Urthboundmisfit]

I have just taken a look at the files within the Windows 7 version of this update and those two files have the same SHA256-Base64 hash as the ones from the Windows 8 version. This is why SFCFix was able to track down and repair these files for you.

At the time when I wrote this article I was not aware it was also causing issues on Windows 7 machines.

Could you please zip up the entire CBS folder and upload this OneDrive/Dropbox then share the link back here? I would like to be able to update my article to include a Windows 7 fix.

Thanks

Hello GTP, I have the same corrupt files after installing KB3022345; CBS.zip uploaded to OneDrive:
https://onedrive.live.com/redir?resid=6a00070a32abebf5!1444

View attachment sfcdetails.txt

 

[ownedandout]

Hi Go The Power,

Just curious what SFCFix exactly does to stop the error? Does it replace the files with the ones before the update?

Regards,
Robert

 

[Cypherdude]

Hi Go The Power,

Just curious what SFCFix exactly does to stop the error? Does it replace the files with the ones before the update?

Regards,
Robert

SFCFix.exe works with another file, SFCFix (x64 fix) or SFCFix (x86 fix). The latter files have the 2 JSON files which replace the corrupted files. See my previous post for more instructions.

I don't think it will be necessary to use the above fix. Eventually, Microsoft will become aware of the problem and create another fix in their Windows Update. To speed this up, perhaps someone should notify Microsoft and let them know about the problem they created.

 

[Go The Power]

I have just taken a look at the files within the Windows 7 version of this update and those two files have the same SHA256-Base64 hash as the ones from the Windows 8 version. This is why SFCFix was able to track down and repair these files for you.

At the time when I wrote this article I was not aware it was also causing issues on Windows 7 machines.

Could you please zip up the entire CBS folder and upload this OneDrive/Dropbox then share the link back here? I would like to be able to update my article to include a Windows 7 fix.

Thanks

Hello GTP, I have the same corrupt files after installing KB3022345; CBS.zip uploaded to OneDrive:
https://onedrive.live.com/redir?resid=6a00070a32abebf5!1444

View attachment 358753

Thanks for that, I have now created a specific fix for Windows 7:
The Tech Cookbook – Windows 7 update (KB3022345) causing corrupt files

Hi Go The Power,

Just curious what SFCFix exactly does to stop the error? Does it replace the files with the ones before the update?

Regards,
Robert

Hi Robert,

SFCFix can basically go one of two ways, if a corrupt file is found inside the CBS log SFCFix will search your computer for a suitable replacement. SFCFix will do this by checking the SHA256 algorithm of each file on your computer. But if SFCFix can not find a suitable replacement then a fix zip file needs to be made, inside the zip fix will contain the non corrupt version of these files. SFCFix will then remove the corrupt version and replace it with the non corrupt version.

The thing is Windows Updates are no released corrupt, the files inside the KBxxxx.msu have had a sanity check to make sure they are correct, in actual fact the installer will not run if a corrupt file is inside the WU file. If you ever look inside a Windows Update MSU file you will see a file called _manifest_.cix.xml, this file contains all the SHA1 hashes of the file, this is used to make sure no files are corrupt or tampered.

Now something must be going wrong after the files have been installed onto these users computers, as if they were corrupt inside the update the install would not of processed. I wish I could tell you how this is happening, but I have not been able to trigger it my self.

 

[ownedandout]

Hi Go The Power,

Thanks for the explanation, much appreciated!

Kind Regards,
Robert

 

[Andyrids]

I just mistakenly installed KB 3022345 on Win7 X64 SP1.... long story short I thought I would try Go The Power's fix first out of curiosity and yes it works like charm, well it did on my system anyway...

 

[Rami120]

you must change these corrupted files with good files manually . you can do it with another computer:sarc:

 

[GokAy]

Another Win 7 x64 SP1 user reporting in. SFC would show the 2 files as corrupt. A re-run of SFC after the fix returned no corruptions.

I would like to ask though: The CBS.log file after the first run of SFC was 252MB big and it was a pain to load in Notepad. Was that normal? After the fix and re-run, file size dropped to 700kB.

 

[Andyrids]

Another Win 7 x64 SP1 user reporting in. SFC would show the 2 files as corrupt. A re-run of SFC after the fix returned no corruptions.

I would like to ask though: The CBS.log file after the first run of SFC was 252MB big and it was a pain to load in Notepad. Was that normal? After the fix and re-run, file size dropped to 700kB.

I do not know if that is normal or not but I can say mine was around about that size and then dropped down also afterwards... Maybe worth a mention I went on to uninstall that update anyway even after the fix (like I said I was just curious to try the fix) and re-checked SFC /SCANNOW and did a CHKDSK /F also and everything is ok... the uninstall removed the service successfully also by the looks of things.

 

[Go The Power]

It is normal, the CBS log is set to a certain limit, once it reaches that limit it will be renamed to CBSPersist_{Date}.log

 

[NoelDP]

Yeah - there are actually a number of triggers for the 'archiving' to the Persist files.
1) file size (can be over-ridden by the system)
2) Time: generally, it will archive after 10 days
3) System action: SFC can trigger archiving if the existing file is of a given size or age.
4) others!

 

[Go The Power]

Anyone who has had this issue can you please upload the Windows Update log for me? Trying to find a trend.

Windows Update Log

1. Click on the Start button -> Inside the search box copy and paste the following command
2. cmd /c copy %windir%\WindowsUpdate.log "%userprofile%\Desktop\WindowsUpdate.txt"
3. Please go to your desktop and attach WindowsUpdate.txt to your next post

 

[kado897]

I have just taken a look at the files within the Windows 7 version of this update and those two files have the same SHA256-Base64 hash as the ones from the Windows 8 version. This is why SFCFix was able to track down and repair these files for you.

At the time when I wrote this article I was not aware it was also causing issues on Windows 7 machines.

Could you please zip up the entire CBS folder and upload this OneDrive/Dropbox then share the link back here? I would like to be able to update my article to include a Windows 7 fix.

Thanks

Hello GTP, I have the same corrupt files after installing KB3022345; CBS.zip uploaded to OneDrive:
https://onedrive.live.com/redir?resid=6a00070a32abebf5!1444

View attachment 358753

Thanks for that, I have now created a specific fix for Windows 7:
The Tech Cookbook – Windows 7 update (KB3022345) causing corrupt files

Hi Go The Power,

Just curious what SFCFix exactly does to stop the error? Does it replace the files with the ones before the update?

Regards,
Robert

Hi Robert,

SFCFix can basically go one of two ways, if a corrupt file is found inside the CBS log SFCFix will search your computer for a suitable replacement. SFCFix will do this by checking the SHA256 algorithm of each file on your computer. But if SFCFix can not find a suitable replacement then a fix zip file needs to be made, inside the zip fix will contain the non corrupt version of these files. SFCFix will then remove the corrupt version and replace it with the non corrupt version.

The thing is Windows Updates are no released corrupt, the files inside the KBxxxx.msu have had a sanity check to make sure they are correct, in actual fact the installer will not run if a corrupt file is inside the WU file. If you ever look inside a Windows Update MSU file you will see a file called _manifest_.cix.xml, this file contains all the SHA1 hashes of the file, this is used to make sure no files are corrupt or tampered.

Now something must be going wrong after the files have been installed onto these users computers, as if they were corrupt inside the update the install would not of processed. I wish I could tell you how this is happening, but I have not been able to trigger it my self.

Thanks for the link. Just spotted the problem with my weekly sfc today.

 

[ThrashZone]

Anyone who has had this issue can you please upload the Windows Update log for me? Trying to find a trend.

Windows Update Log

1. Click on the Start button -> Inside the search box copy and paste the following command
2. cmd /c copy %windir%\WindowsUpdate.log "%userprofile%\Desktop\WindowsUpdate.txt"
3. Please go to your desktop and attach WindowsUpdate.txt to your next post

Probably would be better to strip the color out of the text first

 

[NoelDP]

Thanks for the link. Just spotted the problem with my weekly sfc today.

WHY? - the only time you should ever need to run SFC is when you suspect problems!
I run SFC /SCANNOW maybe once every 3-4 months, simply because I have every update installed since release (and don't use DiskClean) and need to ensure that the licks are kosher.

 

[kado897]

Thanks for the link. Just spotted the problem with my weekly sfc today.

WHY? - the only time you should ever need to run SFC is when you suspect problems!
I run SFC /SCANNOW maybe once every 3-4 months, simply because I have every update installed since release (and don't use DiskClean) and need to ensure that the licks are kosher.

I had a problem some time ago with corruption caused by a beta version of IE and didn't pick it up for months. By the time I picked it up I had run out of RPs and had to go to an old image. Recovery was no fun. Since then I have a timer set up to run it every Saturday afternoon before my weekly image.

 

[NoelDP]

Fair enough, then

 

[Layback Bear]

Noel does running sfc /scannow hurt anything?

I run it often. After a large Windows 7 Update or if and when I have been tinkering.

 

[NoelDP]

The only reason that SFC may hurt anything is the same one that affects CHKDSK - if the HD is failing, then it may trigger a total collapse.

 

[NoN]

The only reason that SFC may hurt anything is the same one that affects CHKDSK - if the HD is failing, then it may trigger a total collapse.

Good to know.

I knew i couldn't finish a defrag on a disk that have errors/bad sectors, but wasn't that aware Sfc could bump onto one bad sector during checking integrity, which didn't happenned on the disk i couldn't defrag.

Does it could lead a total collapse during Sfc /Scannow when on Desktop session or more at boot?