IE, Excel, Windows Explorer, Firefox, etc crashed while launching

[CyberMagic]

Hi,

Recently, I have a series of application crashes and it depends on the boot. if I get a good bootup, my apps will just run. However, if it's a bad boot, all my apps will crash during launch.
I've disabled non-Microsoft Services using MSconfig,
ran the following:
SURT,
sfc /scannow
Attaching CBS folder below.


Thanks.

Wayne

 

[mitchell65]

Hi and welcome to the Forum,
What happens exactly when you have a "bad boot up"?

 

[CyberMagic]

Hi Michelle,

If it's a bad bootup, I'll get the host of WERfault and the screen capture like before. The OS will be fine but can't launch anything like command prompt, windows explorer, etc. so can't capture all the error messages.



regards,
Wayne

 

[mitchell65]

I'm no expert but it would seem that you have a malware infection. You might consider asking for your thread to be moved to the security section of this Forum!

 

[CyberMagic]

I don't think it's Malware, I've just removed my BitDefender to isolate this case.

My word crashed on me again today and I managed to screen cap it scrolling through the whole window. See if there's anything interesting from there.

Thanks all.

 

[mitchell65]

I still think you have some malware. At least run Malwarebytes for an initial check. You say

I've just removed my BitDefender to isolate this case.

What do you mean by "isolate this case"?

 

[CyberMagic]

I still think you have some malware. At least run Malwarebytes for an initial check. You say

I've just removed my BitDefender to isolate this case.

What do you mean by "isolate this case"?

Hi Mitchell,

"For isolation" means I want to make sure the issue is not caused by BitDefender so I've removed it for now.

I have downloaded MalwareBytes and it's detected 2 infected .txt files and quarantined them but the issue remains.

regards,
Wayne

 

[mitchell65]

It is unwise to run your PC without adequate A/V protection! If with one scan Malwarebytes has found two infected files then the chances are that there are more. I suggest you look at this:
Joomla! ? View topic - Before you post : read and action this
and carry out all the recommendations there.

 

[CyberMagic]

Thanks Mitchelle,

I'm very sure it's nothing to do with Malware. It's a case of corrupted files as evident i CBS.log extracted below:

2016-02-01 19:01:39, Info CSI 00000690 [SR] Cannot repair member file [l:36{18}]"System.Drawing.dll" of NetFx-System.Drawing, Version = 6.1.7601.18923, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2016-02-01 19:01:39, Info CSI 00000692 [SR] Cannot repair member file [l:76{38}]"System.DirectoryServices.Protocols.dll" of NetFx-System.DirectoryServices.Protocols, Version = 6.1.7601.18923, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2016-02-01 19:01:39, Info CSI 00000694 [SR] Cannot repair member file [l:76{38}]"System.DirectoryServices.Protocols.dll" of NetFx-System.DirectoryServices.Protocols, Version = 6.1.7601.18923, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2016-02-01 19:01:39, Info CSI 00000695 [SR] This component was referenced by [l:154{77}]"Package_1_for_KB3074543~31bf3856ad364e35~amd64~~6.1.1.0.3074543-4_neutral_GDR"
2016-02-01 19:01:39, Info CSI 00000698 [SR] Could not reproject corrupted file [ml:520{260},l:102{51}]"\??\C:\Windows\Microsoft.NET\Framework64\v2.0.50727"\[l:76{38}]"System.DirectoryServices.Protocols.dll"; source file in store is also corrupted
2016-02-01 19:01:39, Info CSI 0000069a [SR] Cannot repair member file [l:36{18}]"System.Drawing.dll" of NetFx-System.Drawing, Version = 6.1.7601.18923, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2016-02-01 19:01:39, Info CSI 0000069b [SR] This component was referenced by [l:154{77}]"Package_1_for_KB3074543~31bf3856ad364e35~amd64~~6.1.1.0.3074543-2_neutral_GDR"
2016-02-01 19:01:39, Info CSI 0000069e [SR] Could not reproject corrupted file [ml:520{260},l:102{51}]"\??\C:\Windows\Microsoft.NET\Framework64\v2.0.50727"\[l:36{18}]"System.Drawing.dll"; source file in store is also corrupted

 

[mitchell65]

HAve you tried this tutorial?
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

 

[CyberMagic]

Hi Michelle,

I have infact been following this tutorial and that's how I've arrived at the corrupted files. Unfortunately, when I purchased my laptop, Asus didn't give me the original Win7 DVD so I can't extract them from there. Is there any way I can remove the corrupted patches and re-apply them? Or is extracting from the Win7 DVD the only option for me?


regards,
Wayne

 

[mitchell65]

You should be able to download your iso file from here:
https://www.microsoft.com/en-gb/software-download/windows7