SFC /scannow unable to repair corrupted files, any knock-on effects?

[user6m7]

Hi all, I've been running SFC regularly on my Dell Inspiron 7520 (W7 Home Premium SP1 64-bit) after a rather nasty experience with logonui.exe and crypt32.dll. No problems reported from when I managed to get it running again two weeks ago till a few minutes ago. I've copied and pasted the relevant stuff from the CBS.LOG file.

I ran one yesterday without problems, and the only changes I've made to my PC is installing a couple of security updates and updates for W7; I steered clear of all .NET Framework updates and any updates after December 2014. I ran SeaTools on my internal HDD (long generic aborted because it stopped responding) for about 5 hours before this /scannow if that affects things somehow.

How do I go about repairing the files without resorting to a repair installation or anything of the sort? Also, I leave the files as they are, will I be in danger of being unable to boot yet again? I should mention as well that I don't have Dell's Windows 7 reinstallation disc, but I do have a generic Windows 7 disc from Microsoft.

Attached are pictures of the updates I've installed (or tried to) thus far.

2017-09-23 04:32:01, 
Info                  
CSI    0000030c [SR] Verify complete
2017-09-23 04:32:01, 
Info                  
CSI    0000030d [SR] Repairing 2 components
2017-09-23 
04:32:01, 
Info                  
CSI    0000030e [SR] Beginning Verify and Repair 
transaction
2017-09-23 04:32:01, 
Info                  
CSI    0000030f Hashes for file member 
\SystemRoot\WinSxS\amd64_eventviewersettings.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f326e41ead956612\miguiresource.dll.mui 
do not match actual file [l:42{21}]"miguiresource.dll.mui" :
  Found: 
{l:32 b:qF0Asj0mQtQx6pnbBrWHavQiVE+sfmX7f93zzV3S164=} Expected: {l:32 
b:cBOqNU1pGHO6oNNXFXTMwLFhKDcmzSxnQSya5nhXumM=}
2017-09-23 04:32:01, 
Info                  
CSI    00000310 [SR] Cannot repair member file 
[l:42{21}]"miguiresource.dll.mui" of EventViewerSettings.Resources, Version = 
6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = 
[l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 
b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the 
store, hash mismatch
2017-09-23 04:32:01, 
Info                  
CSI    00000311 Hashes for file member 
\SystemRoot\WinSxS\amd64_microsoft-windows-m..epc-sensors-service_31bf3856ad364e35_6.1.7600.16385_none_6e18bc60a12bbb18\sensrsvc.dll 
do not match actual file [l:24{12}]"sensrsvc.dll" :
  Found: {l:32 
b:UB+uCT4pXuiSfCs3b95IKJhvmDpr6AIWcr2WvEVjm84=} Expected: {l:32 
b:i4pqM+eKEvsF4psuJ3WFBiZXSv0u+IdI1l5pCgexC40=}
2017-09-23 04:32:01, 
Info                  
CSI    00000312 [SR] Cannot repair member file 
[l:24{12}]"sensrsvc.dll" of Microsoft-Windows-MobilePC-Sensors-Service, Version 
= 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, 
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type 
neutral, TypeName neutral, PublicKey neutral in the store, hash 
mismatch
2017-09-23 04:32:01, 
Info                  
CSI    00000313 Hashes for file member 
\SystemRoot\WinSxS\amd64_microsoft-windows-m..epc-sensors-service_31bf3856ad364e35_6.1.7600.16385_none_6e18bc60a12bbb18\sensrsvc.dll 
do not match actual file [l:24{12}]"sensrsvc.dll" :
  Found: {l:32 
b:UB+uCT4pXuiSfCs3b95IKJhvmDpr6AIWcr2WvEVjm84=} Expected: {l:32 
b:i4pqM+eKEvsF4psuJ3WFBiZXSv0u+IdI1l5pCgexC40=}
2017-09-23 04:32:01, 
Info                  
CSI    00000314 [SR] Cannot repair member file 
[l:24{12}]"sensrsvc.dll" of Microsoft-Windows-MobilePC-Sensors-Service, Version 
= 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, 
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type 
neutral, TypeName neutral, PublicKey neutral in the store, hash 
mismatch
2017-09-23 04:32:01, 
Info                  
CSI    00000315 [SR] This component was referenced by 
[l:224{112}]"Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.MobilePC-Client-Sensors"
2017-09-23 
04:32:01, 
Info                  
CSI    00000316 Hashes for file member 
\??\C:\Windows\System32\sensrsvc.dll do not match actual file 
[l:24{12}]"sensrsvc.dll" :
  Found: {l:32 
b:UB+uCT4pXuiSfCs3b95IKJhvmDpr6AIWcr2WvEVjm84=} Expected: {l:32 
b:i4pqM+eKEvsF4psuJ3WFBiZXSv0u+IdI1l5pCgexC40=}
2017-09-23 04:32:01, 
Info                  
CSI    00000317 Hashes for file member 
\SystemRoot\WinSxS\amd64_microsoft-windows-m..epc-sensors-service_31bf3856ad364e35_6.1.7600.16385_none_6e18bc60a12bbb18\sensrsvc.dll 
do not match actual file [l:24{12}]"sensrsvc.dll" :
  Found: {l:32 
b:UB+uCT4pXuiSfCs3b95IKJhvmDpr6AIWcr2WvEVjm84=} Expected: {l:32 
b:i4pqM+eKEvsF4psuJ3WFBiZXSv0u+IdI1l5pCgexC40=}
2017-09-23 04:32:01, 
Info                  
CSI    00000318 [SR] Could not reproject corrupted file 
[ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"sensrsvc.dll"; source 
file in store is also corrupted
2017-09-23 04:32:01, 
Info                  
CSI    00000319 Hashes for file member 
\SystemRoot\WinSxS\amd64_eventviewersettings.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f326e41ead956612\miguiresource.dll.mui 
do not match actual file [l:42{21}]"miguiresource.dll.mui" :
  Found: 
{l:32 b:qF0Asj0mQtQx6pnbBrWHavQiVE+sfmX7f93zzV3S164=} Expected: {l:32 
b:cBOqNU1pGHO6oNNXFXTMwLFhKDcmzSxnQSya5nhXumM=}
2017-09-23 04:32:01, 
Info                  
CSI    0000031a [SR] Cannot repair member file 
[l:42{21}]"miguiresource.dll.mui" of EventViewerSettings.Resources, Version = 
6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = 
[l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 
b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the 
store, hash mismatch
2017-09-23 04:32:01, 
Info                  
CSI    0000031b [SR] This component was referenced by 
[l:266{133}]"Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.Windows 
Foundation Language Pack"
2017-09-23 04:32:01, 
Info                  
CSI    0000031c Hashes for file member 
\??\C:\Windows\System32\en-US\miguiresource.dll.mui do not match actual file 
[l:42{21}]"miguiresource.dll.mui" :
  Found: {l:32 
b:qF0Asj0mQtQx6pnbBrWHavQiVE+sfmX7f93zzV3S164=} Expected: {l:32 
b:cBOqNU1pGHO6oNNXFXTMwLFhKDcmzSxnQSya5nhXumM=}
2017-09-23 04:32:01, 
Info                  
CSI    0000031d Hashes for file member 
\SystemRoot\WinSxS\amd64_eventviewersettings.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f326e41ead956612\miguiresource.dll.mui 
do not match actual file [l:42{21}]"miguiresource.dll.mui" :
  Found: 
{l:32 b:qF0Asj0mQtQx6pnbBrWHavQiVE+sfmX7f93zzV3S164=} Expected: {l:32 
b:cBOqNU1pGHO6oNNXFXTMwLFhKDcmzSxnQSya5nhXumM=}
2017-09-23 04:32:01, 
Info                  
CSI    0000031e [SR] Could not reproject corrupted file 
[ml:520{260},l:58{29}]"\??\C:\Windows\System32\en-US"\[l:42{21}]"miguiresource.dll.mui"; 
source file in store is also corrupted
2017-09-23 04:32:01, 
Info                  
CSI    0000031f Repair results created:

 

[ICIT2LOL]

Hello and welcome user mate when you ran the sfc did you run it for three consecutive runsa s soem advise this to be done like that .

Now if there is still problems then I suggest you follow up the sfc with this
[FONT=Arial, sans-serif]http://www.sevenforums.com/tutorials/433-disk-check.html < if necessary include the /f switch and if this does not make any improvement then just run this switch instead /r in the command line as per Option2
[/FONT]
[FONT=Arial, sans-serif]
[/FONT]
[FONT=Arial, sans-serif]I am curious too that you are not running an AV you should really even if as you probably know none of the AV''sare foolproof.[/FONT]
[FONT=Arial, sans-serif]
[/FONT]
[FONT=Arial, sans-serif]so try these
[/FONT]
[FONT=Arial, sans-serif]http://www.superantispyware.com/ [/FONT]
[FONT=Arial, sans-serif]http://www.malwarebytes.org/products/malwarebytes_free/ [/FONT]
[FONT=Arial, sans-serif]http://www.bleepingcomputer.com/download/adwcleaner/[/FONT]
[FONT=Arial, sans-serif]ADW download from bleeping computer delete any rubbish found with the malware scans[/FONT]
[FONT=Arial, sans-serif](NB If you are running Kaspersky as the main AV then it might need disabling it when trying ADW because it does not like it at times)[/FONT]

If you decide to get an AV there are plenty of good free ones but if you want to carry on without one then that's your choice albeit - and I am not trying to be rude - a little foolhardy.

So if you change your mind we can put you onto some good free ones unless you would prefer a paid for software.

One last thing can you tell us why you have avoided the .NET framework updates because they are in essence frameworks for other stuff to work on??

 

[user6m7]

Hello and welcome user mate when you ran the sfc did you run it for three consecutive runsa s soem advise this to be done like that .

Now if there is still problems then I suggest you follow up the sfc with this
[FONT=Arial, sans-serif]https://www.sevenforums.com/tutorials/433-disk-check.html < if necessary include the /f switch and if this does not make any improvement then just run this switch instead /r in the command line as per Option2 [/FONT]





[FONT=Arial, sans-serif]I am curious too that you are not running an AV you should really even if as you probably know none of the AV''sare foolproof.[/FONT]



[FONT=Arial, sans-serif]so try these [/FONT]


[FONT=Arial, sans-serif]http://www.superantispyware.com/ [/FONT]
[FONT=Arial, sans-serif]http://www.malwarebytes.org/products/malwarebytes_free/ [/FONT]
[FONT=Arial, sans-serif]http://www.bleepingcomputer.com/download/adwcleaner/[/FONT]
[FONT=Arial, sans-serif]ADW download from bleeping computer delete any rubbish found with the malware scans[/FONT]
[FONT=Arial, sans-serif](NB If you are running Kaspersky as the main AV then it might need disabling it when trying ADW because it does not like it at times)[/FONT]

If you decide to get an AV there are plenty of good free ones but if you want to carry on without one then that's your choice albeit - and I am not trying to be rude - a little foolhardy.

So if you change your mind we can put you onto some good free ones unless you would prefer a paid for software.

One last thing can you tell us why you have avoided the .NET framework updates because they are in essence frameworks for other stuff to work on??

Hi there, thanks for your response. I've just run it thrice and same results still I'm afraid. I ran CHKDSK through the Command Prompt while booted into W7 (without /F) and it says no problems were found. Should I attempt CHKDSK /R anyway?

As for no AV, a friend had Malwarebytes installed on his W8 PC and it ended up making a mess of his DLLs as well. I did consider downloading MSE but as I simply cannot remember what caused my Dell to crash, I'd rather not take the risks. Ditto for the .NET updates, this is based on Brian Krebs's advice quoted in the article. https://www.computerworld.com/artic...s-update-on-windows-7-is-still-a-problem.html

 

[torchwood]

NO amount of running SFC will clear all those errors.

You could run SURT, KB947821, it might clear some more of them. (1)

There are 2 types of errors
System
Windows Update (1)

Judging by the Update logs you provided, id say this was a VERY, possibly an image, recent install of W7
If it occured on your last run, i suspect that updates installed prior to the 22nd sept are causing some of these

The system errors, .dll, are a different matter and these need to be replaced, possibly caused by
the logonui.exe and crypt32.dl infection clean-up

Post the results of SURT, they will be in the CBS folder

You are also running Windows Defender, not MSE

Would also suggest you run
http://www.sysnative.com/niemiro/apps/SFCFix.exe
A back-up tool for SURT, copy/paste the output
Farbar Recovery Scan Tool Download
A infection detection tool, copy/paste BOTH logs.

Roy








PENDING

 

[user6m7]

NO amount of running SFC will clear all those errors.

You could run SURT, KB947821, it might clear some more of them. (1)

There are 2 types of errors
System
Windows Update (1)

Judging by the Update logs you provided, id say this was a VERY, possibly an image, recent install of W7
If it occured on your last run, i suspect that updates installed prior to the 22nd sept are causing some of these

The system errors, .dll, are a different matter and these need to be replaced, possibly caused by
the logonui.exe and crypt32.dl infection clean-up

Post the results of SURT, they will be in the CBS folder

You are also running Windows Defender, not MSE

Would also suggest you run
http://www.sysnative.com/niemiro/apps/SFCFix.exe
A back-up tool for SURT, copy/paste the output
Farbar Recovery Scan Tool Download
A infection detection tool, copy/paste BOTH logs.

Roy









PENDING

Hi Roy, thanks for your response. I've downloaded KB947821 and applied it. Have also attached the relevant logs.

 

[user6m7]

I just ran a full scan on Windows Defender and there are no signs of infection apparently.

 

[torchwood]

Hi User6m7,

Please run SURT, kb947821 and post the results please

The error in sfcfix, may be fixed when you run SURT.

Farbar
Its showing remnants of Mcafee, please run thier uninstaller
https://mcafee-removal-tool.com/

there are a few gui not containing data but nothing to worry about

The only interesting one is for insyde, <===== Attension
i know that its used for bios updating if Dell use it im not sure, can you confirm

Roy

 

[user6m7]

Hi User6m7,

Please run SURT, kb947821 and post the results please

The error in sfcfix, may be fixed when you run SURT.

Farbar
Its showing remnants of Mcafee, please run thier uninstaller
https://mcafee-removal-tool.com/

there are a few gui not containing data but nothing to worry about

The only interesting one is for insyde, <===== Attension
i know that its used for bios updating if Dell use it im not sure, can you confirm

Roy

Hi Roy, thanks for your response. I downloaded KB947821 but it says 'the update is not applicable to your computer'.

As for the McAfee Removal Tool, IE throws up a warning when I try to access the website - something about certificates. Will McAfee's own Consumer Product Removal tool work as well?

Yeah, I updated the BIOS recently so no worries about that one.

 

[ICIT2LOL]

Ye mate just use the tool and if you want use another browser to get it. There isa way of getting fid of it in the registry entries but more of that if needed.

Follow Roy on this one if it comes to using the registry we can sort something out ok?

 

[torchwood]

Hi User6m7,

Kb947821 has 2 variants, 32/64 bit, try this link

Download System Update Readiness Tool for Windows 7 (KB947821) [October 2014] from Official Microsoft Download Center

Please use the Mcafee CPR tool.

Roy

 

[user6m7]

Thanks ICIT2LOL and Roy,

I ran SURT and it says the hotfix was applied successfully. No luck with sfc /scannow though, or sfcfixit.exe for that matter (I've attached the latest log). McAfee has, I hope, been removed too -- have attached the logs from Farbar.

 

[torchwood]

Hi 6m7,

can you post the SURT log, its in the

C >> Windows >> logs >> CBS .... Surt

Roy

 

[user6m7]

Hi 6m7,

can you post the SURT log, its in the

C >> Windows >> logs >> CBS .... Surt

Roy

Thanks! here you go:

 

[torchwood]

hi 6m7,

attached is a Zip file, place it on your desktop DO NOT rename it, then drag it into SFCfix

then run sfcfix, copy paste the output please

Roy

 

[user6m7]

hi 6m7,

attached is a Zip file, place it on your desktop DO NOT rename it, then drag it into SFCfix

then run sfcfix, copy paste the output please

Roy

Doesn't seem very positive...

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-09-25
21:51:20.635
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script
file at C:\Users\User\Desktop\SFCFix.zip [0]
Not using an additional text
script file.






AutoAnalysis::
ERROR: File Placement Mode failed to identify
destinations for all files and folders.
winsxs\
AutoAnalysis::
directive failed to complete successfully.






Failed to process all directives successfully.
SFCFix version 3.0.0.0
by niemiro has completed.
Currently storing 0 datablocks.
Finish time:
2017-09-25 21:51:20.835
Script hash:
ppdOSL3giS99Bm9qJGdrt2AB/+3bn3hnwOVHf4At5cI=
----------------------EOF-----------------------

 

[user6m7]

By the way if there's a tangential link to all this, I ran a pre-boot system assessment/diagnostics test on my Dell and it says my hard drive is close to giving up the ghost.

 

[torchwood]

Hi 6m7,

Sorry bout that missed a line, and the post.

However
As you have now discovered your drive is dying, any fix would be pointless.

Time to Back-up your personal files to external media.

Once youve got yourself a new drive its clean install time.
note as you only have a generic MS disc, you will probobly have to use the COA sticker code.

Clean Reinstall - Factory OEM Windows 7 - Windows 7 Help Forums


Roy

 

[ICIT2LOL]

Hmm wonder if the old drive would support a straight clone?? - just a thought

 

[user6m7]

Same thoughts ICIT2LOL - I have already contacted Dell for a quotation since my laptop's warranty has expired, just as an alternative to getting it done at my local PC repair shop.

As my Dell has an inbuilt recovery partition, I was wondering if I should reset it back to factory settings before I get it cloned to fix the DLL problem. Problem is I'd want to download some updates for security reasons, and if I get the same fault on this POS again...it's not the first time I've had to reset it to factory settings, probably the third or fourth already.

 

[ICIT2LOL]

Well certainly sounds like the drive is ill and personally I would just factory reset and then just clone.

Now an alternative is that if you have the activation code it should be on the sticker on the machine then I would clean install form an ISO from Microsoft this will get rid of all the Dell bloatware and will be an up to date (within reason) copy of 7.

Also this way you will not have to muck a round with the old drive or the factory reset which like I said is probably more Dell bloat.

Now if you do not have thatsticker you can find the the activation code using this
Product Key Number for Windows 7 - Find and See - Windows 7 Help Forums

and then use this

Clean Install Windows 7 - Windows 7 Help Forums the link for the free ISO is in this tutorial and there are two one you need to use the known key and the other you don't.
I prefer to use the known key link (it only downloads if you can put in a genuine and valid key) - I stand to be corrected but this is what I have done in the past.

So you will have problem free drive and any data you can add later on from the old drive if it is that important.