Solved BSOD while PC is left idle (sleep?)

[desertdubu]

Hello, in the past week or so my PC has been crashing while left idle. When I try and click my mouse my tv that I run an HDMI cable from my monitor into recieves no signal, when I turn my monitor on I see my desktop but not my mouse, and sometimes it makes a beep noise when I try and click. I have to do a hard reboot to get it working again. I have attached my SF zip file. Thank you.

 

[Arc]

The zip you uploaded does not contain any crash dump.

Follow it: http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html
Go to Option Two, Point 2. Download the .reg file and merge it in registry by double clicking it.

Now wait for another BSOD. When it occurred, search the .dmp files manually in the default path: C:\Windows\Minidump or %SystemRoot%\Minidump. See if the crash dump is recorded or not (hopefully it will be recorded).Post it following the Blue Screen of Death (BSOD) Posting Instructions.

As it is a desktop, you may disable sleep there. Sleep function is needed for Laptops or other mobile computers, not for Desktop PCs.
Start > Control Panel > Power Options.
Under the existing plan, Click on "change plan settings.
In the next page, Put to sleep: Never.
View attachment 275034

It will be a worthy shot.

 

[desertdubu]

Hello, thanks for replying, I've been out this past weekend away from my pc.

I downloaded and ran that extension you sent last night, this morning I found it had crashed so I did a hard reboot and found the Minidump folder but it was empty. Is there another way I can find and record what happened?'

As for the sleep option, I went into the power options and noticed I had already set the sleep time to never, so I'm guessing the crash isn't related to when the pc sleeps.

 

[Northernsoul55]

Hi,

Concerning dump files:

1. Have you run ccleaner recently, as that will usually wipes the dump files?
2. Also have you checked to be sure that your :ar: pagefile is at least 400 mb larger than the
installed RAM?
3. Did you configure windows correctly as Arc suggested:

:ar: http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

Please check these and run the SF Tool once again

   Tip

Ensure you click the "GRAB ALL" button and then wait for each window to appear in turn and then click OK

Suggestions:

Please remove Norton from your system. Also do you have AVG installed?
If so remove please as having two AV on your system may cause conflicts

Norton and it's other products are known to cause BSODs with Windows 7, Norton is a very resource-consuming program too, it's best to remove all traces of Norton using the :ar: Norton Removal Tool, and then installing this free and proven alternative which work with Windows 7.


:ar: Microsoft Security Essentials.

Recommended from a strict BSOD perspective, compatibility & stability
compared to other antiviruses/internet security software.

   Note

Once downloaded, update and run a full system scan

I would also remove Programs:

Please uninstall Daemon tools as it is well known for BSOD.

Start > click on Computer > Uninstall or change a program > choose Daemon tools. Reboot.

Once uninstalled please go here and remove the SPTD driver itself with this tool:
:ar: http://www.duplexsecure.com/en/downloads

   Warning

If the uninstall button is grayed out when you run the program you dont need to do anything and can close the window, if it is not click it and allow it to run. DO NOT click the install button as it will install a driver known to cause BSODs onto your system.

Otherwise, go to C:\Windows\System32\drivers, look for and delete SPTD.sys manually. Reboot

Also remove:
Glary Utilities
PowerISO
MagicISO


If you have any issues removing these programs use:

Revo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).

Does your issue still remain?

Cheers

Dave

 

[desertdubu]

Hello, I tried the steps you gave, but I'm still getting the crashes. I did manage to find a dump file in the minidump folder which I have included in the SF zip file if that might help. Thank you.

 

[Arc]

It is a stop 0x24, NTFS_FILE_SYSTEM BSOD. Let us do some things and see how it goes.

Uninstall AVG. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one. For some extra security reasons, scan the system for possible virus infection with the following programs, too.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Uininstall MagicISO.

ITEM|VALUE
Name | MagicISO SCSI Host Controller
Manufacturer | MagicISO, Inc.
Status | OK
PNP Device ID | ROOT\ SCSIADAPTER \0001
Driver | c:\windows\system32\drivers\mcdbus.sys (2.7.106.519, 249.56 KB (255,552 bytes), 10/21/2010 7:14 PM)

This mcdbus.sys SCSI adapter can cause a BSOD under observation, too.

Do some Disc checks.

1. Reseat the sata and power.
   
   
2. Run chkdsk /f/r, following the option two of the tutorial Disk Check
3. Seatool for dos: SeaTools | Seagate download
   Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.
   
   ** You can use Win32 DiscImager to create a bootable USB and run Seatools for DOS. Follow this post to know how to make a bootable Seatools USB.
4. Post a screenshot of your HDD using CrystalDiskInfo - Software - Crystal Dew World

XBox USB wireless controller needs to be updated. That old driver is a known cause of BSOD.

fffff880`06674000 fffff880`06686100   xusb21     (deferred)             
    Image path: xusb21.sys
[COLOR=Red]    Image name: xusb21.sys
    Timestamp:        Fri Aug 14 03:40:17 2009[/COLOR] (4A848F49)
    CheckSum:         00020048
    ImageSize:        00012100
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Get it from Software Downloads | Microsoft Hardware

And, update your display driver to NVIDIA DRIVERS 320.49WHQL

Let us know the results.
_______________________________________________________________________________
BSOD ANALYSIS:

....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff88009ce9898, fffff88009ce90f0, fffff880012cbf25}

Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteInternalAttributeStream+95 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88009ce9898
Arg3: fffff88009ce90f0
Arg4: fffff880012cbf25

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff88009ce9898 -- (.exr 0xfffff88009ce9898)
ExceptionAddress: fffff880012cbf25 (Ntfs!NtfsDeleteInternalAttributeStream+0x0000000000000095)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88009ce90f0 -- (.cxr 0xfffff88009ce90f0)
rax=0000000000000001 rbx=0000000000000000 rcx=fffffa8004b4a880
rdx=0000000000000000 rsi=0100000000000000 rdi=fffff8a0092a97d0
rip=fffff880012cbf25 rsp=fffff88009ce9ad0 rbp=fffff88009cc8980
 r8=fffffa800727d248  r9=0000000000000000 r10=fffffa8004b4a180
r11=fffff88009cc8730 r12=fffff88009cc8700 r13=0000000000000000
r14=fffff88009cc8730 r15=fffff8a0092a99c0
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
Ntfs!NtfsDeleteInternalAttributeStream+0x95:
fffff880`012cbf25 66895e5a        mov     word ptr [rsi+5Ah],bx ds:002b:01000000`0000005a=????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000330a100
GetUlongFromAddress: unable to read from fffff8000330a1c0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsDeleteInternalAttributeStream+95
fffff880`012cbf25 66895e5a        mov     word ptr [rsi+5Ah],bx

FAULTING_IP: 
Ntfs!NtfsDeleteInternalAttributeStream+95
fffff880`012cbf25 66895e5a        mov     word ptr [rsi+5Ah],bx

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880012abf4b to fffff880012cbf25

STACK_TEXT:  
fffff880`09ce9ad0 fffff880`012abf4b : fffff8a0`092a96a0 fffff880`09cc8980 fffff8a0`092a97d0 fffff880`09cc8504 : Ntfs!NtfsDeleteInternalAttributeStream+0x95
fffff880`09ce9b20 fffff880`0121c699 : fffffa80`04f2e720 fffffa80`0506f5a0 fffff880`09cc8690 fffffa80`04a6a060 : Ntfs!NtfsCommonCleanup+0x76b
fffff880`09ce9f30 fffff800`030ca6f7 : fffff880`09cc8690 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCleanupCallout+0x19
fffff880`09ce9f60 fffff800`030ca6b8 : 00000000`00000000 00000000`00000000 fffff880`09cea000 fffff800`030dea42 : nt!KySwitchKernelStackCallout+0x27
fffff880`09cc8560 fffff800`030dea42 : fffffa80`03ee48a0 00000000`00000002 fffff880`09cc8500 fffff880`00000030 : nt!KiSwitchKernelStackContinue
fffff880`09cc8580 fffff880`0121c712 : fffff880`0121c680 00000000`00004d98 fffff880`09cc8900 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x2a2
fffff880`09cc8660 fffff880`012ba7f4 : fffff880`09cc8730 fffff880`09cc8730 fffff880`09cc8730 fffff880`01345750 : Ntfs!NtfsCommonCleanupOnNewStack+0x42
fffff880`09cc86d0 fffff880`01063bcf : fffff880`09cc8730 fffffa80`0506f5a0 fffffa80`0506f940 fffffa80`046f9cb0 : Ntfs!NtfsFsdCleanup+0x144
fffff880`09cc8940 fffff880`010626df : fffffa80`0496bde0 00000000`00000000 fffffa80`04801f00 fffffa80`0506f5a0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`09cc89d0 fffff800`033dd50f : fffffa80`0506f5a0 fffffa80`046a0b30 00000000`00000000 fffffa80`052e9070 : fltmgr!FltpDispatch+0xcf
fffff880`09cc8a30 fffff800`033cb504 : 00000000`00000000 fffffa80`046a0b30 00000000`00000000 fffffa80`052e9070 : nt!IopCloseFile+0x11f
fffff880`09cc8ac0 fffff800`033cb2c1 : fffffa80`046a0b30 fffffa80`00000001 fffff8a0`1173a4e0 00000000`00000000 : nt!ObpDecrementHandleCount+0xb4
fffff880`09cc8b40 fffff800`033cb884 : 00000000`00000190 fffffa80`046a0b30 fffff8a0`1173a4e0 00000000`00000190 : nt!ObpCloseHandleTableEntry+0xb1
fffff880`09cc8bd0 fffff800`030d1e93 : fffffa80`04a6a060 fffff880`09cc8ca0 00000000`004e8b70 00000000`027591c0 : nt!ObpCloseHandle+0x94
fffff880`09cc8c20 00000000`7723140a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0155e3d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7723140a


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs!NtfsDeleteInternalAttributeStream+95

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5167f5fc

STACK_COMMAND:  .cxr 0xfffff88009ce90f0 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteInternalAttributeStream+95

BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteInternalAttributeStream+95

Followup: MachineOwner
---------

 

[desertdubu]

Hello, I tried all of the steps in the post above except for Windows Defender Offline, I installed it on my USB stick but I can't figure out how to boot my pc from the usb. The Seatools test says my HD passed, and my cables all seem to be properly connected. Is it possible I just need a new harddrive?

One other note that may or may not be of importance, I cannot install the Microsoft update KB2791765, it fails every time I try with an "unknown error". This is the update in the MS database:
http://support.microsoft.com/kb/2791765

 

[Arc]

For the update issue, first try http://www.sevenforums.com/tutorials/91738-windows-update-reset.html and let us know if it is fixed or not. If not, we have to take the help of our update experts.

Usually the boot menu key for MSI is F8. Try it. Or see the POST scree, the BIOS setup and Boot Menu keys are listed there.

Anyway, have you had any more BSODs lately?

 

[desertdubu]

I reset the Windows update and checked again but it failed again installing that update. Here's the screenshot of my HDD.

I'm still getting the crashes, again usually when my pc is left idle but it also happened tonight when I launched a game.

 

[Northernsoul55]

Hi,

Please look at :ar: Windows Update Posting instructions

Post back the info.

Cheers

Dave

 

[desertdubu]

Hello, that Windows Update tool seems to have fixed the update problem, thank you. I ran the sfc scan and it said that some errors could not be fixed, to be found in the CBS log. I've attached that here. Thanks.

 

[Northernsoul55]

I have asked another member to look at your CBS logs, :ar: Tom982
Please be patient as he may have quite a work load, and sometimes sleeps

Did you run the SFC scan 3 times, rebooting inbetween each?

cheers

Dave

 

[tom982]

I have asked another member to look at your CBS logs, :ar: Tom982
Please be patient as he may have quite a work load, and sometimes sleeps

Did you run the SFC scan 3 times, rebooting inbetween each?

cheers

Dave

Sorry for the delay, I got back from holiday last night. lol, sleep is over rated!

2013-07-27 14:13:43, Info                  CSI    00000454 [SR] Repair complete
2013-07-27 14:13:43, Info                  CSI    00000455 [SR] Committing transaction
2013-07-27 14:13:43, Info                  CSI    00000456 Creating NT transaction (seq 2), objectname [6]"(null)"
2013-07-27 14:13:43, Info                  CSI    00000457 Created NT transaction (seq 2) result 0x00000000, handle @0xdbc
2013-07-27 14:13:43, Error                 CSI    00000458 (F) STATUS_CANNOT_DELETE #7455416# from RtlRunPrimitiveOperationsFromCallbacksAgainstSil(...)[gle=0xd0000121]
2013-07-27 14:13:43, Info                  CSI    00000459 [SR] Unable to complete Verify and Repair transaction because some of the files that need to be repaired are in use. A reboot is required to complete this operation.
2013-07-27 14:13:43, Info                  CSI    0000045a [SR] Repairing 10 (0x000000000000000a) components
2013-07-27 14:13:43, Info                  CSI    0000045b [SR] Beginning Verify and Repair transaction
2013-07-27 14:13:43, Info                  CSI    0000045c Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc2.theme do not match actual file [l:18{9}]"hc2.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:p3GW6tzSH2HvD0EsVRnQt6Jf2k/mq15GkA0bQiwznuw=}
2013-07-27 14:13:43, Info                  CSI    0000045d [SR] Cannot repair member file [l:18{9}]"hc2.theme" of Microsoft-Windows-classic, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:43, Info                  CSI    0000045e Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc1.theme do not match actual file [l:18{9}]"hc1.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:9RJChUwHndpe0gUF+d62PUz8vmdCnGqnWe2uVt3ENBs=}
2013-07-27 14:13:43, Info                  CSI    0000045f [SR] Cannot repair member file [l:18{9}]"hc1.theme" of Microsoft-Windows-classic, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:43, Info                  CSI    00000460 Hashes for file member \SystemRoot\WinSxS\amd64_prnhp005.inf_31bf3856ad364e35_6.1.7600.16385_none_30e9a6119eda44e5\Amd64\hp6500na.ini do not match actual file [l:36{18}]"Amd64\hp6500na.ini" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:iDSZR0HziBXhtvElJlaI/Y5XnJws+vJHftxLsIicJVA=}
2013-07-27 14:13:43, Info                  CSI    00000461 [SR] Cannot repair member file [l:36{18}]"Amd64\hp6500na.ini" of prnhp005.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:43, Info                  CSI    00000462 [SR] Cannot repair member file [l:30{15}]"infocardcpl.cpl" of WCF-INFOCARDCPL_CPL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-07-27 14:13:43, Info                  CSI    00000463 Hashes for file member \??\C:\Windows\System32\systemcpl.dll do not match actual file [l:26{13}]"systemcpl.dll" :
  Found: {l:32 b:5Nq5uQa/wy7FoOb7upUNHh5RysegjkGkG7IKc+9v+34=} Expected: {l:32 b:4HIIIEuWFgJ+UUTi8+8bqBFoNlt9KnYSELD7xluXhx4=}
2013-07-27 14:13:43, Info                  CSI    00000464 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:26{13}]"systemcpl.dll" from store
2013-07-27 14:13:43, Info                  CSI    00000465 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slmgr.vbs" from store
2013-07-27 14:13:43, Info                  CSI    00000466 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"slmgr.vbs" from store
2013-07-27 14:13:43, Info                  CSI    00000467 Hashes for file member \??\C:\Windows\System32\user32.dll do not match actual file [l:20{10}]"user32.dll" :
  Found: {l:32 b:ZLnKXvzCeJQfnM8qtM3XmGY1jYwM8cxflW5e6iGsyt4=} Expected: {l:32 b:99IZ11A3vJj2xpFDsAq2AAox+LXiEeCvUU9PS2gVIqA=}
2013-07-27 14:13:43, Info                  CSI    00000468 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"user32.dll" from store
2013-07-27 14:13:44, Info                  CSI    00000469 Hashes for file member \SystemRoot\WinSxS\amd64_prnhp005.inf_31bf3856ad364e35_6.1.7600.16385_none_30e9a6119eda44e5\Amd64\hp6500na.ini do not match actual file [l:36{18}]"Amd64\hp6500na.ini" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:iDSZR0HziBXhtvElJlaI/Y5XnJws+vJHftxLsIicJVA=}
2013-07-27 14:13:44, Info                  CSI    0000046a [SR] Cannot repair member file [l:36{18}]"Amd64\hp6500na.ini" of prnhp005.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:44, Info                  CSI    0000046b [SR] This component was referenced by [l:186{93}]"Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.INF_prnhp005"
2013-07-27 14:13:44, Info                  CSI    0000046c [SR] Cannot repair member file [l:30{15}]"infocardcpl.cpl" of WCF-INFOCARDCPL_CPL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-07-27 14:13:44, Info                  CSI    0000046d [SR] This component was referenced by [l:162{81}]"Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.NetFx3"
2013-07-27 14:13:44, Info                  CSI    0000046e [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:30{15}]"infocardcpl.cpl"; source file in store is also corrupted
2013-07-27 14:13:44, Info                  CSI    0000046f Hashes for file member \??\C:\Windows\SysWOW64\user32.dll do not match actual file [l:20{10}]"user32.dll" :
  Found: {l:32 b:/ca44IriNPpDArZVKjk1cUdV/lHRG43T48JEFeHthzE=} Expected: {l:32 b:AeuV+jlDzzxrGiHkc6XDy5/LzkaROxXJbKwU5PBAdbQ=}
2013-07-27 14:13:44, Info                  CSI    00000470 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:20{10}]"user32.dll" from store
2013-07-27 14:13:44, Info                  CSI    00000471 Hashes for file member \??\C:\Windows\SysWOW64\slwga.dll do not match actual file [l:18{9}]"slwga.dll" :
  Found: {l:32 b:TqkEGJp8yWsgRSW0EuvVyfbJc7Kg9TcMYciUZGENmGw=} Expected: {l:32 b:2lTNiBG8cfr90NCxK5AXR9p1L0lQftzHQMu8wqw6NA8=}
2013-07-27 14:13:44, Info                  CSI    00000472 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slwga.dll" from store
2013-07-27 14:13:44, Info                  CSI    00000473 Hashes for file member \??\C:\Windows\System32\slwga.dll do not match actual file [l:18{9}]"slwga.dll" :
  Found: {l:32 b:425h2+oRlwrloGRxlLfDv+kHDkuZECiH1olZNMapuPA=} Expected: {l:32 b:JzwFyFBMoFD+bFC1DRXzIGTsZnKuhc3gOJdgJ8pLFNM=}
2013-07-27 14:13:44, Info                  CSI    00000474 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"slwga.dll" from store
2013-07-27 14:13:44, Info                  CSI    00000475 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc2.theme do not match actual file [l:18{9}]"hc2.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:p3GW6tzSH2HvD0EsVRnQt6Jf2k/mq15GkA0bQiwznuw=}
2013-07-27 14:13:44, Info                  CSI    00000476 [SR] Cannot repair member file [l:18{9}]"hc2.theme" of Microsoft-Windows-classic, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:44, Info                  CSI    00000477 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-07-27 14:13:44, Info                  CSI    00000478 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc1.theme do not match actual file [l:18{9}]"hc1.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:9RJChUwHndpe0gUF+d62PUz8vmdCnGqnWe2uVt3ENBs=}
2013-07-27 14:13:44, Info                  CSI    00000479 [SR] Cannot repair member file [l:18{9}]"hc1.theme" of Microsoft-Windows-classic, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-07-27 14:13:44, Info                  CSI    0000047a [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-07-27 14:13:44, Info                  CSI    0000047b Hashes for file member \??\C:\Windows\Resources\Ease of Access Themes\hc2.theme do not match actual file [l:18{9}]"hc2.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:p3GW6tzSH2HvD0EsVRnQt6Jf2k/mq15GkA0bQiwznuw=}
2013-07-27 14:13:44, Info                  CSI    0000047c Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc2.theme do not match actual file [l:18{9}]"hc2.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:p3GW6tzSH2HvD0EsVRnQt6Jf2k/mq15GkA0bQiwznuw=}
2013-07-27 14:13:44, Info                  CSI    0000047d [SR] Could not reproject corrupted file [ml:520{260},l:92{46}]"\??\C:\Windows\Resources\Ease of Access Themes"\[l:18{9}]"hc2.theme"; source file in store is also corrupted
2013-07-27 14:13:44, Info                  CSI    0000047e Hashes for file member \??\C:\Windows\Resources\Ease of Access Themes\hc1.theme do not match actual file [l:18{9}]"hc1.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:9RJChUwHndpe0gUF+d62PUz8vmdCnGqnWe2uVt3ENBs=}
2013-07-27 14:13:44, Info                  CSI    0000047f Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc1.theme do not match actual file [l:18{9}]"hc1.theme" :
  Found: {l:32 b:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=} Expected: {l:32 b:9RJChUwHndpe0gUF+d62PUz8vmdCnGqnWe2uVt3ENBs=}
2013-07-27 14:13:44, Info                  CSI    00000480 [SR] Could not reproject corrupted file [ml:520{260},l:92{46}]"\??\C:\Windows\Resources\Ease of Access Themes"\[l:18{9}]"hc1.theme"; source file in store is also corrupted
2013-07-27 14:13:44, Info                  CSI    00000481 Repair results created:
POQ 133 starts:
     0: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\b6e06f07f58ace01303a000048064010._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
    1: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\c7077007f58ace01313a000048064010.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
    2: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\f3817707f58ace01323a000048064010.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
    3: Hard Link File: Source = [l:240{120}]"\SystemRoot\WinSxS\amd64_microsoft-windows-systemcpl_31bf3856ad364e35_6.1.7601.17514_none_3efb79f374ae4d85\systemcpl.dll", Destination = [l:74{37}]"\??\C:\Windows\System32\systemcpl.dll"
    4: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\61987f07f58ace01333a000048064010.$$_syswow64_21ffbdd2a2dd92e0.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms"
    5: Hard Link File: Source = [l:246{123}]"\SystemRoot\WinSxS\x86_microsoft-windows-security-spp-tools_31bf3856ad364e35_6.1.7600.16385_none_456f9c422073f3b7\slmgr.vbs", Destination = [l:66{33}]"\??\C:\Windows\SysWOW64\slmgr.vbs"
    6: Hard Link File: Source = [l:250{125}]"\SystemRoot\WinSxS\amd64_microsoft-windows-security-spp-tools_31bf3856ad364e35_6.1.7600.16385_none_a18e37c5d8d164ed\slmgr.vbs", Destination = [l:66{33}]"\??\C:\Windows\System32\slmgr.vbs"
    7: Hard Link File: Source = [l:228{114}]"\SystemRoot\WinSxS\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll", Destination = [l:68{34}]"\??\C:\Windows\System32\user32.dll"
    8: Hard Link File: Source = [l:228{114}]"\SystemRoot\WinSxS\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll", Destination = [l:68{
2013-07-27 14:13:44, Info                  CSI    34}]"\??\C:\Windows\SysWOW64\user32.dll"
    9: Hard Link File: Source = [l:242{121}]"\SystemRoot\WinSxS\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll", Destination = [l:66{33}]"\??\C:\Windows\SysWOW64\slwga.dll"
    10: Hard Link File: Source = [l:246{123}]"\SystemRoot\WinSxS\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_5d778f71b9f4fd55\slwga.dll", Destination = [l:66{33}]"\??\C:\Windows\System32\slwga.dll"
    11: Move File: Source = [l:216{108}]"\SystemRoot\WinSxS\Temp\PendingRenames\c88be307f58ace01343a000048064010.$$_resources_fbee56ab048ab239.cdf-ms", Destination = [l:128{64}]"\SystemRoot\WinSxS\FileMaps\$$_resources_fbee56ab048ab239.cdf-ms"
    12: Move File: Source = [l:260{130}]"\SystemRoot\WinSxS\Temp\PendingRenames\d8b2e307f58ace01353a000048064010.$$_resources_ease_of_access_themes_e29108c7f81ea04c.cdf-ms", Destination = [l:172{86}]"\SystemRoot\WinSxS\FileMaps\$$_resources_ease_of_access_themes_e29108c7f81ea04c.cdf-ms"


POQ 133 ends.
2013-07-27 14:13:44, Info                  CSI    00000482 [SR] Repair complete

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 19.0
2013-07-27 13:45


Checking Windows Servicing Packages


Checking Package Manifests and Catalogs
(f)    CBS MUM Corrupt    0x00000000    servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum        Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
(f)    CBS MUM Corrupt    0x00000000    servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum        Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name


Checking Package Watchlist


Checking Component Watchlist


Checking Packages


Checking Component Store
(f)    CSI Payload File Missing    0x00000000    infocardcpl.cpl    amd64_wcf-infocardcpl_cpl_31bf3856ad364e35_6.1.7600.16385_none_f578352b168f8a4a    
(f)    CSI Payload File Missing    0x00000000    ntfs.sys    amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17945_none_0477c74a33a2859a    
(f)    CSI Mismatched Identity    0x00000000    appid    prnkm002.inf_31bf3856ad364e35_6.1.7600.16385_4fed5d97295b3e32    appid and keyform do not match; appid is wrong.
(f)    CSI Corrupt Component Keyform    0x00000000    identity    amd64_microsoft-windows-usb-usbhub-events_31bf3956ad364e35_6.1.7600.16385_none_3c0ebfb3b42b5447    identity and keyform do not match; keyform is wrong.
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_netfx-system.web.regularexpressions_b03f5f7f11d50a3a_6.1.7600.16385_none_7e469b5b5fa3029b    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    x86_microsoft-windows-win32subsystem_31bf3856ad364e35_6.1.7600.16385_none_7e87ae86ae3ed60f    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_microsoft-windows-mapi_31bf3856ad364e35_6.1.7600.16385_none_074232f63370b5cc    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_microsoft-windows-help-resources_31bf3856ad364e35_6.1.7600.16385_none_b50959d3d479757a    


Summary:
Seconds executed: 901
 Found 10 errors
  CSI Corrupt Component Keyform Total count: 1
  CSI Mismatched Identity Total count: 1
  CSI C Mark Deployment Missing Total count: 4
  CSI Payload File Missing Total count: 2
  CBS MUM Corrupt Total count: 2


Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

Let's see if I can kill this in one! Will post a fix in a few minutes.

 

[tom982]

Your system is a complete mess! That's the longest SFCFix script I've ever made


SFCFix Script


Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a files should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/16537616/Fixes/SFCFix/Scripts/desertdubu/SFCFix.zip


SFC Scan

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   
   sfc /scannow
   
   
   Wait for this to finish before you continue
   
   
   copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Then install the System Update Readiness Tool again please (here if you don't have it), then post the log:

C:\Windows\Logs\CBS\CheckSUR.persist.log

Tom

 

[desertdubu]

Thank you in advance for your help. Here's the SFCF log, and I've attached the CBS log

PowerCopy::
{ARCHIVE}\hc1.theme C:\Windows\Resources\Ease of Access Themes\hc1.theme
{ARCHIVE}\hc1.theme C:\Windows\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc1.theme
{ARCHIVE}\hc2.theme C:\Windows\Resources\Ease of Access Themes\hc2.theme
{ARCHIVE}\hc2.theme C:\Windows\WinSxS\amd64_microsoft-windows-classic_31bf3856ad364e35_6.1.7600.16385_none_ed4ee0602861ae33\hc2.theme
{ARCHIVE}\hp6500na.ini C:\Windows\WinSxS\amd64_prnhp005.inf_31bf3856ad364e35_6.1.7600.16385_none_30e9a6119eda44e5\Amd64\hp6500na.ini
{ARCHIVE}\infocardcpl.cpl C:\Windows\System32\infocardcpl.cpl
{ARCHIVE}\infocardcpl.cpl C:\Windows\WinSxS\amd64_wcf-infocardcpl_cpl_31bf3856ad364e35_6.1.7600.16385_none_f578352b168f8a4a\infocardcpl.cpl
{ARCHIVE}\ntfs.sys C:\Windows\System32\drivers\ntfs.sys
{ARCHIVE}\ntfs.sys C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17945_none_0477c74a33a2859a\ntfs.sys
{ARCHIVE}\systemcpl.dll C:\Windows\System32\systemcpl.dll
{ARCHIVE}\systemcpl.dll C:\Windows\WinSxS\amd64_microsoft-windows-systemcpl_31bf3856ad364e35_6.1.7601.17514_none_3efb79f374ae4d85\systemcpl.dll
{ARCHIVE}\slwga.dll C:\Windows\System32\slwga.dll
{ARCHIVE}\slwga.dll C:\Windows\WinSxS\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_5d778f71b9f4fd55\slwga.dll
{ARCHIVE}\x86_slwga.dll C:\Windows\SysWOW64\slwga.dll
{ARCHIVE}\x86_slwga.dll C:\Windows\WinSxS\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
{ARCHIVE}\slmgr.vbs C:\Windows\System32\slmgr.vbs
{ARCHIVE}\slmgr.vbs C:\Windows\WinSxS\amd64_microsoft-windows-security-spp-tools_31bf3856ad364e35_6.1.7600.16385_none_a18e37c5d8d164ed\slmgr.vbs
{ARCHIVE}\x86_slmgr.vbs C:\Windows\SysWOW64\slmgr.vbs
{ARCHIVE}\x86_slmgr.vbs C:\Windows\WinSxS\x86_microsoft-windows-security-spp-tools_31bf3856ad364e35_6.1.7600.16385_none_456f9c422073f3b7\slmgr.vbs
{ARCHIVE}\user32.dll C:\Windows\SysWOW64\user32.dll
{ARCHIVE}\user32.dll C:\Windows\WinSxS\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll

LoadHive::
COMPONENTS

RegistryScript::

[-HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-usb-usbhub-events_31bf3956ad364e35_6.1.7600.16385_none_3c0ebfb3b42b5447]

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\amd64_prnkm002.inf_31bf3856ad364e35_6.1.7600.16385_none_4fed5d97295b3e32]
"S256H"=hex:8a,f4,57,b0,6b,14,d1,93,42,76,54,42,4c,2d,f9,a5,c7,9e,ac,5c,20,82,\
  30,27,36,d1,dc,c9,ae,3e,81,a8
"identity"=hex:70,72,6e,6b,6d,30,30,32,2e,69,6e,66,2c,20,43,75,6c,74,75,72,65,\
  3d,6e,65,75,74,72,61,6c,2c,20,54,79,70,65,3d,64,72,69,76,65,72,55,70,64,61,\
  74,65,2c,20,56,65,72,73,69,6f,6e,3d,36,2e,31,2e,37,36,30,30,2e,31,36,33,38,\
  35,2c,20,50,75,62,6c,69,63,4b,65,79,54,6f,6b,65,6e,3d,33,31,62,66,33,38,35,\
  36,61,64,33,36,34,65,33,35,2c,20,50,72,6f,63,65,73,73,6f,72,41,72,63,68,69,\
  74,65,63,74,75,72,65,3d,61,6d,64,36,34,2c,20,76,65,72,73,69,6f,6e,53,63,6f,\
  70,65,3d,4e,6f,6e,53,78,53
"ClosureFlags"=dword:00000003
"c!prnkm002.inf_31bf3856ad364e35_6.1.7600.16385_4fed5d97295b3e32"=hex:
"f!amd64_koc31ppu.ppd_7ebaf8e001131ea8"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,43,00,33,00,31,00,50,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc30ppu.ppd_7eb8f862011c20df"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,43,00,33,00,30,00,50,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko8650u.ppd_70779ef441f68b4a"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,38,00,36,00,35,00,30,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko4650pu.ppd_59a114746044c7d6"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,34,00,36,00,35,00,30,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko501u.ppd_024209f06701dee5"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,35,00,30,00,31,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko360u.ppd_fd9ae5166ea4bf84"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,33,00,36,00,30,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko25509p.ppd_24e8df05a186542d"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,32,00,35,00,35,00,30,00,39,00,50,00,2e,00,50,00,50,00,44,00
"f!amd64_koc10pnp.ppd_9f1491c1b5745460"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,43,00,31,00,30,00,50,00,4e,00,50,00,2e,00,50,00,50,00,44,00
"f!amd64_ko5570pu.ppd_5ab0b278d155b53e"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,35,00,35,00,37,00,30,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko5550pu.ppd_5aacb17cd167b9ac"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,35,00,35,00,35,00,30,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc20ppu.ppd_90732685d939390e"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,43,00,32,00,30,00,50,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!prnkm002.cat"=hex:70,00,72,00,6e,00,6b,00,6d,00,30,00,30,00,32,00,2e,00,63,\
  00,61,00,74,00
"f!prnkm002.inf"=hex:70,00,72,00,6e,00,6b,00,6d,00,30,00,30,00,32,00,2e,00,69,\
  00,6e,00,66,00
"f!amd64_ko40ppu.ppd_b4803593da253a27"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,34,00,30,00,50,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc252u.ppd_a3b562c9f4afcb19"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,43,00,32,00,35,00,32,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc353u.ppd_a39159edf501df47"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,43,00,33,00,35,00,33,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc451u.ppd_a36d5111f550f2b8"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,43,00,34,00,35,00,31,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_koc650u.ppd_a3253f59f5f21a57"=hex:41,00,6d,00,64,00,36,00,34,00,5c,00,\
  4b,00,4f,00,43,00,36,00,35,00,30,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko5670pu.ppd_48f68454f9389d0f"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,35,00,36,00,37,00,30,00,50,00,55,00,2e,00,50,00,50,00,44,00
"f!amd64_ko5650pu.ppd_48f28358f94aa17d"=hex:41,00,6d,00,64,00,36,00,34,00,5c,\
  00,4b,00,4f,00,35,00,36,00,35,00,30,00,50,00,55,00,2e,00,50,00,50,00,44,00

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\amd64_microsoft-windows-usb-usbhub-events_31bf3856ad364e35_6.1.7600.16385_none_3c0ebfb3b42b5447]
"identity"=hex:4d,69,63,72,6f,73,6f,66,74,2d,57,69,6e,64,6f,77,73,2d,55,53,42,\
  2d,55,53,42,48,55,42,2d,45,76,65,6e,74,73,2c,20,43,75,6c,74,75,72,65,3d,6e,\
  65,75,74,72,61,6c,2c,20,56,65,72,73,69,6f,6e,3d,36,2e,31,2e,37,36,30,30,2e,\
  31,36,33,38,35,2c,20,50,75,62,6c,69,63,4b,65,79,54,6f,6b,65,6e,3d,33,31,62,\
  66,33,38,35,36,61,64,33,36,34,65,33,35,2c,20,50,72,6f,63,65,73,73,6f,72,41,\
  72,63,68,69,74,65,63,74,75,72,65,3d,61,6d,64,36,34,2c,20,76,65,72,73,69,6f,\
  6e,53,63,6f,70,65,3d,4e,6f,6e,53,78,53
"S256H"=hex:de,0d,76,84,90,b3,32,93,d7,3a,0a,f9,0d,d7,9a,17,4f,1b,93,e8,5a,47,\
  a1,ac,09,ef,c4,d7,c8,bf,ee,08
"c!windowsfoundation_31bf3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2"=hex:
"c!windowsfoundation_31bf3856ad364e35_6.1.7601.17514_615fdfe2a739474c"=hex:

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\amd64_netfx-system.web.regularexpressions_b03f5f7f11d50a3a_6.1.7600.16385_none_7e469b5b5fa3029b]
"c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2"=hex:

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\x86_microsoft-windows-win32subsystem_31bf3856ad364e35_6.1.7600.16385_none_7e87ae86ae3ed60f]
"c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2"=hex:

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\amd64_microsoft-windows-mapi_31bf3856ad364e35_6.1.7600.16385_none_074232f63370b5cc]
"c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2"=hex:

[HKEY_LOCAL_MACHINE\louk1\DerivedData\Components\amd64_microsoft-windows-help-resources_31bf3856ad364e35_6.1.7600.16385_none_b50959d3d479757a]
"c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2"=hex:

..and the CheckSUR log

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 19.0
2013-07-30 18:36

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs
(f)    CBS MUM Corrupt    0x00000000    servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum        Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
(f)    CBS MUM Corrupt    0x00000000    servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum        Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f)    CSI Mismatched Identity    0x00000000    appid    prnkm002.inf_31bf3856ad364e35_6.1.7600.16385_4fed5d97295b3e32    appid and keyform do not match; appid is wrong.
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bg3856ad364e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_netfx-system.web.regularexpressions_b03f5f7f11d50a3a_6.1.7600.16385_none_7e469b5b5fa3029b    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    x86_microsoft-windows-win32subsystem_31bf3856ad364e35_6.1.7600.16385_none_7e87ae86ae3ed60f    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_microsoft-windows-mapi_31bf3856ad364e35_6.1.7600.16385_none_074232f63370b5cc    
(f)    CSI C Mark Deployment Missing    0x00000000    c!windowsfoundation_31bf3856ad374e35_6.1.7600.16385_5f2ecc1aaa4ac3b2    amd64_microsoft-windows-help-resources_31bf3856ad364e35_6.1.7600.16385_none_b50959d3d479757a    

Summary:
Seconds executed: 1062
 Found 7 errors
  CSI Mismatched Identity Total count: 1
  CSI C Mark Deployment Missing Total count: 4
  CBS MUM Corrupt Total count: 2

Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

 

[tom982]

Hi,


Where did you get that log? That was the script I made for you and shouldn't be on your Desktop. Is there a file called SFCFix.txt on your Desktop?


The CheckSUR log still needs a little work but the CBS log is looking a lot better! Down to one file now, which I believe SFC repaired:

POQ 133 starts:
     0: Create File: File = [l:220{110}]"\SystemRoot\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18127_none_048f41be3390b0cf\ntfs.sys", Attributes = 00000080
    1: Move File: Source = [l:160{80}]"\SystemRoot\WinSxS\Temp\PendingRenames\8867f702738dce01253a0000b8107c05.ntfs.sys", Destination = [l:220{110}]"\SystemRoot\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18127_none_048f41be3390b0cf\ntfs.sys"
    2: Hard Link File: Source = [l:220{110}]"\SystemRoot\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18127_none_048f41be3390b0cf\ntfs.sys", Destination = [l:80{40}]"\??\C:\Windows\System32\drivers\ntfs.sys"
    3: Checkpoint
    4: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\b17b5403738dce01263a0000b8107c05._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
    5: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\b17b5403738dce01273a0000b8107c05.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
    6: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\d11c5c03738dce01283a0000b8107c05.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
    7: Move File: Source = [l:230{115}]"\SystemRoot\WinSxS\Temp\PendingRenames\112a5f03738dce01293a0000b8107c05.$$_system32_drivers_dc1b782427b5ee1b.cdf-ms", Destination = [l:142{71}]"\SystemRoot\WinSxS\FileMaps\$$_system32_drivers_dc1b782427b5ee1b.cdf-ms"

I want to see what SFCFix did before we continue with any fixes, just in case.


Tom

 

[desertdubu]

Sorry about that, I couldn't find the file on my desktop so I thought it had been created inside the zip file. When I drag the zip into the exe it opens the cmd prompt and is processing the directives but doesn't seem to be finishing, I can try running it all day if it just needs a long time to run.

 

[tom982]

Hi desertdubu,

No problem, thanks for letting me know. The script shouldn't take long at all so something is wrong. Delete your copy of SFCFix.exe and SFCFix.zip before continuing, but let's try again:


SFCFix Script


Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a files should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/16537616/Fixes/SFCFix/Scripts/desertdubu/SFCFix.zip


Trace.txt should also be on your Desktop this time. If it's there, post it but if not let me know


Tom

 

[desertdubu]

Hello, I tried deleting it and re-running it a few times but each time it says the following then just hangs

Checking for updates..no new update is available at this time

Processing directive 1 of 4 (PostRebootCorruptionDetection)
Processing directive 2 of 4 (PostRebootRestorePermissions)
Processing directive 3 of 4 (LoadHive)
Processing directive 4 of 4 (RegistryScript)

 

[tom982]

This one really doesn't like me! Well seeing as it's got as far as the registry script before it hangs, I'll remove that part of the script and we can try again:


SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

• Download SFCFix.exe (by niemiro) and save this to your Desktop.
• Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
• Save any open documents and close all open windows.
• On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
• Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
• SFCFix will now process the script.
• Upon completion, a files should be created on your Desktop: SFCFix.txt.
• Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put
  tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/16537616/Fixes/SFCFix/Scripts/desertdubu/SFCFix.zip

Tom