CBS Log's Scannow Corrupt. Can Someone look at this and tell me ??

[jjr]

I keek on gettong a corrupt file error in the sfc/scannow that ca not be fixed. Could sombody look at this two logs and see if there is a fix?

019-10-29 10:34:03, Info CBS Starting TrustedInstaller initialization.
2019-10-29 10:34:03, Info CBS Loaded Servicing Stack v6.1.7601.24516 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.24516_none_6810bdd8f70626d9\cbscore.dll
2019-10-29 10:34:04, Info CSI 00000001@2019/10/29:15:34:04.410 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fecf99ef7d @0x7feeaa49b6d @0x7feeaa1358f @0xff79e97c @0xff79d799 @0xff79db2f)
2019-10-29 10:34:04, Info CSI 00000002@2019/10/29:15:34:04.477 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fecf99ef7d @0x7feeaa96ade @0x7feeaa62984 @0x7feeaa13665 @0xff79e97c @0xff79d799)
2019-10-29 10:34:04, Info CSI 00000003@2019/10/29:15:34:04.499 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fecf99ef7d @0x7fefac28728 @0x7fefac28856 @0xff79e474 @0xff79d7de @0xff79db2f)
2019-10-29 10:34:04, Info CBS Ending TrustedInstaller initialization.
2019-10-29 10:34:04, Info CBS Starting the TrustedInstaller main loop.
2019-10-29 10:34:04, Info CBS TrustedInstaller service starts successfully.
2019-10-29 10:34:04, Info CBS SQM: Initializing online with Windows opt-in: False
2019-10-29 10:34:04, Info CBS SQM: Cleaning up report files older than 10 days.
2019-10-29 10:34:04, Info CBS SQM: Requesting upload of all unsent reports.
2019-10-29 10:34:04, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2019-10-29 10:34:04, Info CBS SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2019-10-29 10:34:04, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2019-10-29 10:34:04, Info CBS SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2019-10-29 10:34:04, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2019-10-29 10:34:04, Info CBS NonStart: Checking to ensure startup processing was not required.
2019-10-29 10:34:04, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x198f720
2019-10-29 10:34:04, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2019-10-29 10:34:04, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x200
2019-10-29 10:34:04, Info CSI 00000007@2019/10/29:15:34:04.536 CSI perf trace:
CSIPERF:TXCOMMIT;2901
2019-10-29 10:34:04, Info CBS NonStart: Success, startup processing not required as expected.
2019-10-29 10:34:04, Info CBS Startup processing thread terminated normally
2019-10-29 10:34:04, Info CSI 00000008 CSI Store 4216320 (0x0000000000405600) initialized
2019-10-29 10:34:12, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components
2019-10-29 10:34:12, Info CSI 0000000a [SR] Beginning Verify and Repair transaction
2019-10-29 10:34:13, Info CSI 0000000b Repair results created:

 

[jjr]

Corrupt Log:
Found: {l:32 b:jcHHJsgErEwBX/Kk6yrx16iWYm7AdfwmifhNhGDiKvc=} Expected: {l:32 b:aXVeWHZTKT3is4bCAOj/+03fFcLx3qlpsx4Lq8P9L00=}
2019-10-29 10:45:07, Info CSI 00000364 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-c..fe-catsrvut-comsvcs_31bf3856ad364e35_6.1.7601.24114_none_75531e0e173e0ef2\comsvcs.dll do not match actual file [l:22{11}]"comsvcs.dll" :
Found: {l:32 b:jcHHJsgErEwBX/Kk6yrx16iWYm7AdfwmifhNhGDiKvc=} Expected: {l:32 b:aXVeWHZTKT3is4bCAOj/+03fFcLx3qlpsx4Lq8P9L00=}
2019-10-29 10:45:07, Info CSI 00000365 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"comsvcs.dll"; source file in store is also corrupted
2019-10-29 10:45:07, Info CSI 00000366 Repair results created

 

[Paul Black]

Hi jjr,

Please run . . .

MGADiag - Check If Your Version Of Windows Is Genuine

The MGADiag Tool provides detailed information about the Microsoft Genuine Advantage components and settings on your system. The MGADiag.exe can be used to analyze and troubleshoot a non-genuine notification issue you may be experiencing.

Download the MGADiag Tool [direct download] => MGADiag Tool. Run the MGADiag.exe and click Continue. It will immediately tell you if your version of Win 7 is Genuine or not.

The MGADiag Tool[/B however, does not automatically create a log file. What you can do though, is either . . .

[1] Click the COPY button and PASTE the results into your post [preferable].
[2] Click the COPY button and PASTE the results into notepad and SAVE it. Then UPLOAD the file.

I hope this helps!

 

[Paul Black]

Hi jjr,

Can you also . . .

Under the heading sfc [System File Checker] . . ., please run SFC.bat, Option [3] from here => My BATCH PROGRAMS [Standalone] and then upload the results using the tutorial at the bottom of the above link [Upload to SevenForums . . .] and someone will look at it for you.

I hope this helps!

 

[jjr]

ths is the actuall SFC/Scannow

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>net stop wuauserv
The Windows Update service is stopping.
The Windows Update service was stopped successfully.


C:\Windows\system32>net stop cryptSvc
The following services are dependent on the Cryptographic Services service.
Stopping the Cryptographic Services service will also stop these services.

TrueVector Internet Monitor

Do you want to continue this operation? (Y/N) [N]: y
The requested pause, continue, or stop is not valid for this service.

More help is available by typing NET HELPMSG 2191.


C:\Windows\system32>net stop cryptSvc
The following services are dependent on the Cryptographic Services service.
Stopping the Cryptographic Services service will also stop these services.

TrueVector Internet Monitor

Do you want to continue this operation? (Y/N) [N]: y
The requested pause, continue, or stop is not valid for this service.

More help is available by typing NET HELPMSG 2191.


C:\Windows\system32>net stop cryptSvc
The following services are dependent on the Cryptographic Services service.
Stopping the Cryptographic Services service will also stop these services.

TrueVector Internet Monitor

Do you want to continue this operation? (Y/N) [N]: y
The requested pause, continue, or stop is not valid for this service.

More help is available by typing NET HELPMSG 2191.


C:\Windows\system32>net stop bits
The Background Intelligent Transfer Service service is stopping..
The Background Intelligent Transfer Service service was stopped successfully.


C:\Windows\system32>net stop msiserver
The Windows Installer service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Windows\system32>Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

A duplicate file name exists, or the file
cannot be found.

C:\Windows\system32>Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

A duplicate file name exists, or the file
cannot be found.

C:\Windows\system32>Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

A duplicate file name exists, or the file
cannot be found.

C:\Windows\system32>Ren C:\Windows\System32\catroot2 Catroot2.old
Access is denied.

C:\Windows\system32>net start wuauserv
The Windows Update service is starting.
The Windows Update service was started successfully.


C:\Windows\system32>net start cryptSvc
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>net start bits
The Background Intelligent Transfer Service service is starting.
The Background Intelligent Transfer Service service was started successfully.


C:\Windows\system32>net start msiserver
The Windows Installer service is starting.
The Windows Installer service was started successfully.


C:\Windows\system32>net start wuauserv
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>sfc/scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

C:\Windows\system32>

 

[Paul Black]

Hi jjr,

As we are only really interested in the ERRORS of the SFC scan, my batch script extracts those ERRORS from the CBS.log and creates a CBS_ERRORS.txt file on the desktop. Upload the CBS_ERRORS.txt file and someone will look at it for you.

I hope this helps!

 

[jjr]

I believe its real as the PC came with the original Dell software as well as the MS COA WIn7 sticker. The Re-installation disc was not opened till I got the PC.

A little background my PC is a Dell Studio D540, my original pc died and I found a exact match to mine on Ebay. I did post this question else ware here. What I was told that I could simply swap my old HD from my dead PC and pop it into my new used one off Ebay, all I would have to do is enter the COA Sn off that PC which I did.

Before my PC died I was having the same corrupt file error in the scannow, that was causing issues with my Acronis and would not let me validate it.

Also something else that was strange, I actually had a spare HD here and did a fresh install of the Win7 OS system using the Dell software, after the Win7 64 bit was installed and nothing else I ran a sfc/scannow and got the same corrupt file error? It could of been something I did or????

Would buying a new Win 7 retail disc perhaps be a fix?

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-JHQHY-QFPKG-32VF9
Windows Product Key Hash: Azn3Qx7iiy59Nq1pJDGACRGMNgs=
Windows Product ID: 00359-OEM-9802171-06196
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {15B4E85C-25AB-46BB-A53A-88AB744707A0}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr_escrow.190916-1700
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{15B4E85C-25AB-46BB-A53A-88AB744707A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-32VF9</PKey><PID>00359-OEM-9802171-06196</PID><PIDType>8</PIDType><SID>S-1-5-21-890917650-2753625908-3602456490</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio 540 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.1.3</Version><SMBIOSVersion major="2" minor="5"/><Date>20090825000000.000000+000</Date></BIOS><HWID>68413A07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>AS09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-021-706196-02-1033-7601.0000-2902019
Installation ID: 008680316982001596027796133911574301937621355500717965
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 32VF9
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 10/30/2019 11:21:46 AM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:22:2019 13:13
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAIABAABAAEAAAADAAAAAgABAAEAln3Wk46TgOpGvHSUhDTQCz68XEOaiCbYWBtG8KDxTFg=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 082509 APIC1243
FACP 082509 FACP1243
HPET 082509 OEMHPET
MCFG 082509 OEMMCFG
SLIC DELL AS09
OEMB 082509 OEMB1243
GSCI 082509 GMCHSCI
SSDT DpgPmm CpuPm

Hi jjr,

Please run . . .

MGADiag - Check If Your Version Of Windows Is Genuine

The MGADiag Tool provides detailed information about the Microsoft Genuine Advantage components and settings on your system. The MGADiag.exe can be used to analyze and troubleshoot a non-genuine notification issue you may be experiencing.

Download the MGADiag Tool [direct download] => MGADiag Tool. Run the MGADiag.exe and click Continue. It will immediately tell you if your version of Win 7 is Genuine or not.

The MGADiag Tool[/B however, does not automatically create a log file. What you can do though, is either . . .

[1] Click the COPY button and PASTE the results into your post [preferable].
[2] Click the COPY button and PASTE the results into notepad and SAVE it. Then UPLOAD the file.

I hope this helps!

 

[jjr]

Also get this from time to time and no I do not want 10!

 

[Paul Black]

Hi jjr, please follow my post #4 instructions and upload the file!

 

[jjr]

Trying too but it says file too large? Its only 5.xx mb Will try again,

 

[jjr]

View attachment sfcdetails.txt

Does the above work??

 

[Paul Black]

Hi jjr,

Does the above work?

Yes, the text file worked.
There are 2,172 lines in the text file for the 30-Oct-2019!
Have you deleted or changed anything to do with PowerShell because there are many errors pertaining to that?

 

[Paul Black]

Hi jjr,

Will you please run this [ONLY Option 3] . . .

Under the heading sfc [System File Checker] . . ., please run SFC.bat, Option [3] from here => My BATCH PROGRAMS [Standalone] and then upload the results using the tutorial at the bottom of the above link [Upload to SevenForums . . .] and someone will look at it for you.

I hope this helps!

 

[jjr]

Sorry Iam at a loss the more I read your help them more I get confused. About Powershell sorry again I really do not know.

I did do the windows repair the update
Windows6.1-KB947821-v34-x64

Windows6.1-KB3050265-x64

Also the turn off and turn on prompts.

I will be back as soon as I can figure out what you want. I did run the program but when I went to safe to mt desktop it asked if I wanted to copy, add too. I thing I messed that up as I still got all kinds of pages.

Im running the sfc /verifyonly again but really do not know what prompt you want me to run next.

 

[torchwood]

Hi JJR,

As its a new install, i'd have to opt for corrupt install media

shoot over to Heidoc and select the OEM option

https://www.heidoc.net/php/Windows-ISO-Downloader.exe

Once installed update your drivers


Nothing wrong with the Mgadiag report


Roy

 

[Paul Black]

Nothing wrong with the Mgadiag report.

Thanks for looking at that torchwood.

 

[jjr]

This is not a new install. what I did when my old Dell D540 PC died I was lucky enough to find a exact same model of Dell Studio D540 pc and build so all I did was to install my old HD in that. But I think I was having the same corrupt file on that drive with the pc that died as was getting verification errors from Acronis when I ran that..

I then tried a extra HD I had and installed the OS with a brand new Dell OS re-installation disc that was not opened till I got the replacement PC (OEM disc came with that) I did install of the OS and nothing else, then ran the file checker and got the same corrupt file.

So I will wipe that extra drive again, DL your file and do a fresh install with that correct?


So your saying to do a complete new install of my OS?

Hi JJR,

As its a new install, i'd have to opt for corrupt install media

shoot over to Heidoc and select the OEM option

https://www.heidoc.net/php/Windows-ISO-Downloader.exe

Once installed update your drivers


Nothing wrong with the Mgadiag report


Roy

 

[jjr]

I did this:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /verifyonly

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found integrity violations. Details are included in

the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log

C:\Windows\system32>sfc.bat
'sfc.bat' is not recognized as an internal or external command,
operable program or batch file.

C:\Windows\system32>sfc /verifyonly

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found integrity violations. Details are included in

the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log

C:\Windows\system32>sfcdetails.txt

C:\Windows\system32>findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\
Desktop\sfcdetails.txt"

C:\Windows\system32>findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\
Desktop\sfcdetails.txt

C:\Windows\system32>

And saved the file to my desktop now I can remember how to get it to text that will fit here, I did take a look and it still looks like a huge file?

Hi jjr,

Will you please run this [ONLY Option 3] . . .

Under the heading sfc [System File Checker] . . ., please run SFC.bat, Option [3] from here => My BATCH PROGRAMS [Standalone] and then upload the results using the tutorial at the bottom of the above link [Upload to SevenForums . . .] and someone will look at it for you.

I hope this helps!

 

[Paul Black]

Hi jjr,

I did do the windows repair the update Windows6.1-KB947821-v34-x64 and Windows6.1-KB3050265-x64.

The first of the above updates is SURT. You didn't mention that you had run that!
The second of the above updates is a language pack. This has caused some of the errors as per the SFC file.

I did run the program but when I went to save to the desktop it asked if I wanted to copy, add too. I thing I messed that up as I still got all kinds of pages.

If you are talking about my batch script, it saves the file to the desktop automatically, that is the way I wrote it!

Im running the sfc /verifyonly again but really do not know what prompt you want me to run next.

The verify only is part of chkdsk, not SFC. You didn't mention that you had run that!

So basically, you have run SFC, SURT, and chkdsk, is that correct, because that is something that we needed to know in order to be able to help you!

 

[jjr]

OK and first off thanks for having patience with me

Yes I have run the SFC, SURT and chkdsk more then once and nothing helped. I did not run them in the order you listed, would take of made a difference?..

Should I re-run all of them again?