Solved After a Virus Files missing (sfc scan shows)

[Runout]

I have a virus-attack but Kaspersky helped to stop this. I do a SFC SCAN and put the CBS.log in a zip.
There some files missing i need your help.

Greetings,

Runout

 

[americancritic2]

Hi runout. Do you have malwarebytes installed if not please download the free version and run a full scan.

http://www.sevenforums.com/tutorials/338716-malwarebytes-anti-malware-free.html?ltr=M

 

[Runout]

Yes i have i just wanna fix that files cause i dont know how i get Thees.

 

[NoelDP]

Your SFC log shows the following problems...

 Line 3612: 2015-03-12 18:54:20, Info                  CSI    00000344 [SR] Repairing 4 components
 Line 3613: 2015-03-12 18:54:20, Info                  CSI    00000345 [SR] Beginning Verify and Repair transaction
 Line 3614: 2015-03-12 18:54:20, Info                  CSI    00000346 [SR] Cannot repair member file [l:20{10}]"dmusic.dll" of Microsoft-Windows-Audio-DMusic, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 3615: 2015-03-12 18:54:20, Info                  CSI    00000347 [SR] Cannot repair member file [l:22{11}]"ifsutil.dll" of Microsoft-Windows-FileSystemUtilityLibraries, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 3616: 2015-03-12 18:54:20, Info                  CSI    00000348 [SR] Cannot repair member file [l:16{8}]"dmrc.dll" of Microsoft-Windows-mrc, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 3617: 2015-03-12 18:54:20, Info                  CSI    00000349 [SR] Cannot repair member file [l:24{12}]"sqlsrv32.dll" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ODBC-SQLServer-Driver-Dll, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

I'll post a fix later tonight, or tomorrow.

 

[Runout]

Thank you!!!
Best Support

 

[Runout]

Is it possible that the Windows Media Player have some errors cause of the missing files?

 

[NoelDP]

I've uploaded a file - rntaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\rntaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\rntaa
or
DIR E:\rntaa



The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...



XCOPY <drive>:\rntaa <drive>:\windows\winsxs /y /i /s /v /h



(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )



run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

 

[Runout]

Thank you very much!!!

Could I load the missing files (if there are some files missing in the future) by my self or is it better to ask you for it?

 

[Layback Bear]

If it was me I would ask for help before doing such things.
It doesn't cost anything and it's better to be safe than sorry.

If things are done correctly like from Noels post #7 nice things happen.

If one in not sure of such things and does something wrong it can be devastating.

 

[Runout]

Okay i just think about it cause i have thees Problem frequently in the past. But you are right. In the worth case i do something wrong.

I just have to thank you again Noel.


Greetings,


Runout

 

[NoelDP]

The results are these..

 Line 15398: 2015-03-23 12:57:27, Info                  CSI    00000338 [SR] Repairing 3 components
 Line 15399: 2015-03-23 12:57:27, Info                  CSI    00000339 [SR] Beginning Verify and Repair transaction
 Line 15400: 2015-03-23 12:57:27, Info                  CSI    0000033a [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"dmusic.dll" from store
 Line 15401: 2015-03-23 12:57:27, Info                  CSI    0000033b [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:16{8}]"dmrc.dll" from store
 Line 15402: 2015-03-23 12:57:27, Info                  CSI    0000033c [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"sqlsrv32.dll" from store
 Line 15414: 2015-03-23 12:57:27, Info                  CSI    0000033e [SR] Repair complete

... so it looks like that fixed them all.

I agree with Layback - it's probably better to ask for them, as it's very easy to get the wrong ones, or mess up the substitution. Such problems are usually no worse than the existing ones, but occasionally they can lead to an unbootable system.


Good luck!

 

[Runout]

Okay all right
You have such a big knowlegde and i just think to easy. If i have a Problem i would ask the forum again.

Thanks!!!