Solved Not sure how to decipher SFC Details file, can anyone help?

[NoelDP]

Ah - so it's mainly a startup issue?
(back in the day there used to be a fantastic site for tweaking startups - but it died nearly 10 years ago when things got too complex for manual solutions )

Slow startups can be caused by a number of not-too-obvious problems.
Let's start by looking at the event logs...


Please open Event Viewer
In the left pane, navigate to the Windows Logs
right-click on Applications and select 'Save all events as...' save as Apps.evtx
repeat for the System logs - save as Sys.evtx
Compress both files, and attach to your reply.

 

[swataz]

I will do this when I am in front of my machine, thanks!

And the startup issue is a pain in my ads but not the whole of my concern. The whole graphics card and driver issue where out of nowhere the screen will flash and next thing you know the Radeon has been disabled with the error 43 tag. That and the annoying sleep mode issue! !

 

[Kari]

I will do that, thanks. I have to ask -- what is the benefit of performing it three times and rebooting? Does it filter stuff out?

From what the Forum experts have explained to me, some files have a dependency on other files. Just as an example, File "B" might have to be fixed before File "D" can be fixed and File "D" might have to be fixed before File "G" can be fixed. If File "B" happens to be in use when the SFC scan is run, it may not be able to be fixed until the computer is rebooted, thus allowing File "B" to return to a "not in use" status. If this makes sense.

As the SFC /SCANNOW command is really important, I'd thought I repost the answer I gave to this question in another SFC thread:

It's important to run SFC /SCANNOW as many times as needed, every time rebooting in between. To give a simple example, when you have corrupt system files they can create a chain reaction. Let's say that files A, B, C and D are corrupt. For the file D to work, first the files A and B must be repaired as the file D needs them to run. So the first pass repairs the file C, only one which has no other corrupt files depending on it, then the next pass repairs A, the third one B and finally when both A and B are repaired the fourth pass repairs the file D. Rebooting between passes is needed for Windows to remove the corrupt file or library from memory and reload a repaired one instead. Without reboot for instance a corrupt DLL file might still be loaded, another file depends on this library to work so the corrupt file can't be repaired before Windows through reboot has loaded the correct, repaired DLL file.

The more corrupt files you have, the more dependencies between these files exist and the more passes are needed.

Kari

 

[Britton30]

Kari check my post here. I have had the situation and 3 and more times won't fix it, I believe this is why.

 

[Kari]

As far as I understand it, the dependencies between the files is exactly why SFC can't always fix all errors at once. I know my "explanation" is more in layman terms than an accurate description.

 

[swataz]

Ah - so it's mainly a startup issue?
(back in the day there used to be a fantastic site for tweaking startups - but it died nearly 10 years ago when things got too complex for manual solutions )

Slow startups can be caused by a number of not-too-obvious problems.
Let's start by looking at the event logs...


Please open Event Viewer
In the left pane, navigate to the Windows Logs
right-click on Applications and select 'Save all events as...' save as Apps.evtx
repeat for the System logs - save as Sys.evtx
Compress both files, and attach to your reply.

Here you go:

 

[NoelDP]

I will do that, thanks. I have to ask -- what is the benefit of performing it three times and rebooting? Does it filter stuff out?

<snipped>
Kari

All of which is irrelevant when the SFC comes back clear - and no amount of running SFC can ever restore missing or corrupted files when the backups on-disk are also missing/corrupted.

 

[swataz]

Anything interesting in those app and system logs?

 

[NoelDP]

The system appears to have a problem with a number of DCOM Servers - and the number appears to be growing over time.
The only other significant thing appears to be that Outlook is having regular problems of various minor types (probably simply bad settings, rather than software faults, I think)

Let's see what's running at startup -

Please download the SilentRunners.vbs file from here....
Silent Runners - Adware? Disinfect, don't reformat!

Note that your AV may object to it - but it is safe!
once saved, run the downloaded file, (default mode will do for the moment) and wait for it to complete. It will create a text file in the same folder as it was run from.
Upload the output file to your response.

 

[swataz]

Thanks for the reply!

Here ya go. Neat little program.

 

[NoelDP]

I can only see minor worries in there - all in the Scheduled Tasks section.

They need checking out, rather than definite action.

{0B6B8709-FD06-4F05-B5A3-FD9D5E31C863} ->  launches: C:\Windows\system32\pcalua.exe -a F:\AutoPlay\AutoPlay.exe -d F:\ [MS]
{61484EA8-0B0F-40FC-A38B-12D9CA77586F} ->  launches: C:\Windows\system32\pcalua.exe -a "C:\Users\Nick\Downloads\sp55298 (1).exe" -d C:\Users\Nick\Downloads [MS]
{A94CDCA5-5DB3-4CA9-9814-23BCFEB4F20E} ->  launches: C:\Windows\system32\pcalua.exe -a "C:\Users\Nick\Downloads\sp62405 (1).exe" -d C:\Users\Nick\Downloads [MS]
{EE31833C-5384-4251-BFE0-6A6FE87466E9} ->  launches: C:\Windows\system32\pcalua.exe -a "F:\Installers\Install M-Audio FastTrackPro 6.0.7.exe" -d F:\Installers [MS]
{F4B623A6-46DD-496C-BEA1-C1E5A9D95DAD} ->  launches: C:\Windows\system32\pcalua.exe -a C:\Users\Nick\Downloads\sp59755.exe -d C:\Users\Nick\Downloads [MS]
Update Check ->  launches: C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe /s /p 1 [file not found]
Office First Run Task ->  launches: C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe RUNMODE RESCHEDULEMODE modetorun firstrun modeargs reschedulemode [file not found]

There are also references to HitManPro37 in the Safe Mode Services, but not elsewhere?

 

[swataz]

I am not even sure when the hell HitmanPro was added to my machine. I guess I put it there but why it is Safe Mode Services is a mystery.

Thank you very much for the analysis. I am waiting for the day I have enough time and patience to napalm this HD and start fresh.