Solved Cannot figure out how to fix sfc scan results

[plugs1957]

I really hope someone can help me. I have weird results in SFC /scan now related to mozilla.browser and webm MOF files. I have removed both KB3022345 and KB3068708 as per suggestions in this forum. But I still get errors. Would appreciate any help. I am attaching the scfdetails.txt that I ran using very useful instructions that sift out the[SR] entries from the CBS.log

 

[ICIT2LOL]

Hello and welcome plugs mate first up please follow this
SYSTEM SPECS
Now before we can help we do need to know what is in your machine so please do this System Info - See Your System Specs
or either enter the specs of your system in your forum profile the specs will appear when we click on that little box bottom left of the post screen it is for me the preferable option as it is easy. As you may appreciate it is very hard when you don’t know what one is working with for example a diesel or petrol engine.
(pretyped to save time)

Now there seems to be a fair but going on in that sfc and it is often best to run sfc in safe mode for three consecutive scans and I think it would be a good time to run a chkdsk too

[FONT=Arial, sans-serif]http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html[/FONT]

[FONT=Arial, sans-serif]http://www.sevenforums.com/tutorials/433-disk-check.html< if necessary include the /f switch and if this does not makeany improvement then just run this switch instead /r in the commandline as per Option2 [/FONT]

[FONT=Arial, sans-serif]Runthese in safe mode and the sfc often best run for two to three runs –you can leave out the /r switch in ckdsk if you feel it not necessary[/FONT]
[FONT=Arial, sans-serif][/FONT]
[FONT=Arial, sans-serif]I would also be inclined to run these also[/FONT] if you haven't already



[FONT=Arial, sans-serif]

[FONT=Arial, sans-serif]http://www.superantispyware.com/[/FONT]

[FONT=Arial, sans-serif]http://www.malwarebytes.org/products/malwarebytes_free/[/FONT]

[FONT=Arial, sans-serif]http://www.bleepingcomputer.com/download/adwcleaner/[/FONT]

[FONT=Arial, sans-serif]ADWdownload from bleeping computer delete any rubbish found with themalware scans[/FONT]

[FONT=Arial, sans-serif](NBIf you are running Kaspersky as the main AV then it might needdisabling it when trying ADW because it does not like it at times)[/FONT]

But do the scans first.
[/FONT]

 

[plugs1957]

Thanks for the advice and guidance so :

1. Chdsk /F of c drive showed no errors
2. Ran all the programs you suggested. Found PUP but nothing nasty. Saw nothing unexepected
3. Ran SFC three times in Safe mode still the same errors and I attach the log for reference.

So looking at the SFC it now seems this is the only error I have. And no clue what to do with it.

2017-08-03 19:15:00, Info CSI 0000038e [SR] Cannot repair member file [l:30{15}]"mozilla.browser" of NetFx-ASPNET_REGBROWSER_FILES, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

 

[plugs1957]

Also updated System Specs using SystemInfo tool as requested

 

[torchwood]

Hi Plugs,

If your system and Firefox are not experiencing problems, then you can safely ignore it

Not worth worrying about unless your a program Developer - part of Netframework
you could run the repair tool
Download Microsoft .NET Framework Repair Tool from Official Microsoft Download Center

Roy

 

[ICIT2LOL]

Yep mate that's the easy stuff out of the way so go with what Roy has advised.

 

[plugs1957]

Hi everyone, was going to update . I am a developer . Have uninstalled all .net and ASP.net all .net sdk . And I still get the error . I appreciate all comments but I am concerned as in my company as an IT consultant developer having this sort of issue that could maybe be some corruption , distributing any sw I develop could be an issue. So really need to fix this. Just as an extra bit of info I also seem to have some USB issues with a very flaky setup, lockups during reboot etc. I wonder if it time to use DSIM or repair install. Any thoughts ?

 

[plugs1957]

btw have used registry editor and there is no ref to mozilla.browser

 

[ICIT2LOL]

Hmm that s odd you have looked in both LOCAL_MACHINE and CURRENT_USER see my pic I have this in both ref Software entries

 

[torchwood]

Hi Plugs,

OH you had to be a developer
First please update ALL programs associated with your deveoloper requirements
(Visual C++, Netframework, Java, and any others)

Now im gonna need a few more details please.

Run SURT kb947821


REBOOT


then run this
http://www.sysnative.com/niemiro/apps/SFCFix.exe

copy/paste the logs for both please.


Roy

 

[plugs1957]

have run as requested logs :


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2017-08-04 19:40

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Payload File Missing 0x00000000 mozilla.browser amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f
(f) CSI F Mark Missing 0x00000002 f!mozilla.browser amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f\f!mozilla.browser: mozilla.browser
(f) CSI Payload File Missing 0x00000000 mozilla.browser x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725
(f) CSI F Mark Missing 0x00000002 f!mozilla.browser x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725\f!mozilla.browser: mozilla.browser

Summary:
Seconds executed: 1333
Found 4 errors
Fixed 2 errors
CSI Payload File Missing Total count: 2
CSI F Mark Missing Total count: 2
Fixed: CSI F Mark Missing. Total count: 2

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-08-04 20:12:19.120
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.




AutoAnalysis::
WARNING: Failed to get store name from identity name with return code 2 for component NetFx-ASPNET_REGBROWSER_FILES and file mozilla.browser. File is reported as corrupt by SFC.
CORRUPT: mozilla.browser of component NetFx-ASPNET_REGBROWSER_FILES.

WARNING: Failed to get store name from identity name with return code 2 for component NetFx-ASPNET_REGBROWSER_FILES and file mozilla.browser. File is reported as corrupt by SFC.
CORRUPT: mozilla.browser of component NetFx-ASPNET_REGBROWSER_FILES.




SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 2
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 4
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2017-08-04 20:13:17.258
----------------------EOF-----------------------

 

[plugs1957]

Forgot to say rebooted in Safe Mode ran SFC still fails same error

 

[torchwood]

Hi Plugs,

Yep we need to fix those missing payload files.

Do you still have sfcfix.exe >> on your desktop <<, if not please get another copy and place it there.

Now for the fix
NORMAL MODE

Download the file below, SFCFix.zip, and save this to your Desktop.
>>Ensure that this file is named SFCFix.zip - do not rename it.<<
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post


Roy

 

[plugs1957]

Results :
SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-08-05 10:54:36.781
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Pete Rawlings\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f

Successfully copied file C:\Users\Pete Rawlings\AppData\Local\niemiro\Archive\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725\mozilla.browser to C:\Windows\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725\mozilla.browser.
Successfully copied file C:\Users\Pete Rawlings\AppData\Local\niemiro\Archive\winsxs\amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f\mozilla.browser to C:\Windows\winsxs\amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f\mozilla.browser.

Successfully restored ownership for C:\Windows\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725
Successfully restored permissions on C:\Windows\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_458b87598810c725
Successfully restored ownership for C:\Windows\winsxs\amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f
Successfully restored permissions on C:\Windows\winsxs\amd64_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.1.7600.16385_none_fdde508273949e1f
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2017-08-05 10:54:40.867
Script hash: sKcDRZKjIILt+5ixvoMS60AtkCPYylUCN4UUiYcqpn0=
----------------------EOF-----------------------

I then ran SFC /scannow twice in normal and once on Safe mode and it always come back with the message thats its repaired corrupted files with the below entries repeating each time.

Line 25790: 2017-08-05 11:27:43, Info CSI 00000399 [SR] Beginning Verify and Repair transaction
Line 25793: 2017-08-05 11:27:43, Info CSI 0000039b [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:18{9}]"aeinv.mof" from store
Line 25799: 2017-08-05 11:27:43, Info CSI 0000039e [SR] Repairing corrupted file [ml:520{260},l:66{33}]"\??\C:\Windows\System32\appraiser"\[l:26{13}]"appraiser.sdb" from store
Line 25805: 2017-08-05 11:27:44, Info CSI 000003a1 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:18{9}]"aeinv.mof" from store
Line 25808: 2017-08-05 11:27:44, Info CSI 000003a3 [SR] Repairing corrupted file [ml:520{260},l:66{33}]"\??\C:\Windows\System32\appraiser"\[l:26{13}]"appraiser.sdb" from store
Line 25834: 2017-08-05 11:27:44, Info CSI 000003a7 [SR] Repair complete
Line 25835: 2017-08-05 11:27:44, Info CSI 000003a8 [SR] Committing transaction
Line 25840: 2017-08-05 11:27:44, Info CSI 000003ac [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

Had a look in the winsxs\temp folder and I have 11 pending deletes and 21,372 pending renames could this be an issue ?

I tried the install telnet trick to see if it would clear things up but stays the same.

 

[plugs1957]

Folks I just want to say such a big thanks to you all. Your responsiveness is better than I get from organisations where I have purchased software. I am really impressed.

 

[plugs1957]

btw ran disk cleanup , had no effect.

 

[torchwood]

Hi Plugs,
Dont worry about running sfc in Safe mode.

Now please run

Kb947821 again - should come back clear.

Reboot

Winsxs/temp is only a processing file, it should eventually clear itselfwhen CBS creates the next persistant file please LEAVE it alone.
(its also used as part of the System restore option.)

Roy

 

[plugs1957]

Result - looking good thanks you so much. One final question when should I expect sfc to run with no errors ?


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2017-08-05 14:49

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 1710
No errors detected

 

[plugs1957]

The 21K files have now gone away so getting better every time. Now with SFC I get these lines every time I run it

2017-08-06 00:38:36, Info CSI 00000382 [SR] Beginning Verify and Repair transaction
2017-08-06 00:38:37, Info CSI 00000384 [SR] Verify complete
2017-08-06 00:38:37, Info CSI 00000385 [SR] Repairing 3 components
2017-08-06 00:38:37, Info CSI 00000386 [SR] Beginning Verify and Repair transaction
2017-08-06 00:38:37, Info CSI 00000388 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:18{9}]"aeinv.mof" from store
2017-08-06 00:38:37, Info CSI 0000038b [SR] Repairing corrupted file [ml:520{260},l:66{33}]"\??\C:\Windows\System32\appraiser"\[l:26{13}]"appraiser.sdb" from store
2017-08-06 00:38:37, Info CSI 0000038e [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:18{9}]"aeinv.mof" from store
2017-08-06 00:38:37, Info CSI 00000390 [SR] Repairing corrupted file [ml:520{260},l:66{33}]"\??\C:\Windows\System32\appraiser"\[l:26{13}]"appraiser.sdb" from store
2017-08-06 00:38:37, Info CSI 00000394 [SR] Repair complete
2017-08-06 00:38:37, Info CSI 00000395 [SR] Committing transaction
2017-08-06 00:38:38, Info CSI 00000399 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

But on the next run , same messages again . Any ideas ? Could the files in the "store" be corrupted ?

 

[torchwood]

Hi Plugs
you old nightbird

can you check your installed updates for
KB3121461, then KB2952664, (note this is a W10 nag how did you stop it??).

If either is installed please remove them.

Roy