Updates loop, SFC won't run, SURT doesn't work, Can't System Restore

Page 3 of 5 FirstFirst 12345 LastLast

  1. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #21

    SFC run from a Repair boot will not fix problems where the SFC in normal boot has successfully started.

    CheckSUR shows (amongst others)
    Code:
    Unavailable repair files:
 winsxs\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_88dcc0bf2fb1b808.manifest
 winsxs\manifests\amd64_policy.8.0.microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_09bd717ffacfdd51.manifest
    SFC shows
    Code:
    2014-06-03 11:55:40, Info                  CSI    0000022a [SR] Beginning Verify and Repair transaction
2014-06-03 11:55:40, Error                 CSI    0000022b (F) STATUS_FILE_IS_A_DIRECTORY #5003669# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound|AllowSharingViolation|AllowAccessDenied), handle = {provider=NULL, handle=0}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES|FILE_READ_DATA), oa = @0xcfcf80->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[131]"\SystemRoot\WinSxS\amd64_security-malware-windows-defender-events_31bf3856ad364e35_6.1.7600.16385_none_118cf1dcd54a3dea\MpEvMsg.dll"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xcfd030, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd00000ba]
2014-06-03 11:55:40, Error                 CSI    0000022c@2014/6/3:16:55:40.153 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_FILE_IS_A_DIRECTORY originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2014-06-03 11:55:40, Error                 CSI    0000022d (F) STATUS_FILE_IS_A_DIRECTORY #5003668# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingFile(...)[gle=0xd00000ba]
2014-06-03 11:55:40, Error                 CSI    0000022e (F) STATUS_FILE_IS_A_DIRECTORY #5003667# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingFile(flags = (MissingFileIsOk|SharingViolationIsOk|AccessDeniedIsOk), da = (SYNCHRONIZE|FILE_READ_DATA), oa = @0xcfd628->SIL_OBJECT_ATTRIBUTES {s:40; on:"MpEvMsg.dll"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_SYNCHRONOUS_IO_NONALERT|FILE_NON_DIRECTORY_FILE), file = NULL, disp = Invalid)
    This is typically a ZeroAccess problem - but since you've run MBAM, we'll assume that it's residuals only.

    Please open an Elevated Command Prompt, and run the following command

    DIR C:\ /AL /S >>%userprofile%\desktop\npal.txt

    this will create a file on your desktop - npal.txt - please compress it and upload it to your reply.
      My Computer
    Quote Quote

  3. TalbotM
    Posts : 22
    Windows 7 Pro 64bit
    Thread Starter
       New #22

    Attached.
      My Computer
    Quote Quote

  4. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #23

    Here's the critical problem from that output...
    Code:
     Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_b3b1a27171e01f6c
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.17316_none_b3fe3b6771a68ecd
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.21531_none_b46d38ce8ad8e4ed
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               7 File(s)      1,907,712 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_b5e2b6396ecea306
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               8 File(s)      1,968,640 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.18170_none_b59db7296f030a55
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpClient.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpCommu.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
05/27/2013  12:50 AM    <SYMLINK>      MpSvc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
              11 File(s)      3,867,136 bytes
 Directory of C:\Windows\winsxs\amd64_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.22341_none_b648c5e888076cca
07/13/2009  08:41 PM    <SYMLINK>      MpAsDesc.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MpCmdRun.exe [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpOAV.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MpRTP.dll [c:\windows\system32\config]
07/13/2009  08:39 PM    <SYMLINK>      MSASCui.exe [c:\windows\system32\config]
11/20/2010  08:27 AM    <SYMLINK>      MsMpCom.dll [c:\windows\system32\config]
07/13/2009  08:29 PM    <SYMLINK>      MsMpLics.dll [c:\windows\system32\config]
07/13/2009  08:41 PM    <SYMLINK>      MsMpRes.dll [c:\windows\system32\config]
               8 File(s)      1,968,640 bytes
    I'll see what I can do about producing a specific fix protocol for them. - it may take a day or two.
      My Computer
    Quote Quote

  6. TalbotM
    Posts : 22
    Windows 7 Pro 64bit
    Thread Starter
       New #24

    Thanks. I take it that NONE of that stuff should be symbolically linked to anything. Just regular files.
      My Computer
    Quote Quote

  7. TalbotM
    Posts : 22
    Windows 7 Pro 64bit
    Thread Starter
       New #25

    Not to try to interrupt your process, but what if I deleted those 6 folders and put replacements in the C:\Windows\Temp\CheckSUR\winsxs folder? Assuming I have replacments, of course.
      My Computer
    Quote Quote

  8. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #26

    That's correct - the trick is to delete the symlinks without disturbing the rest of the filesystem.

    It means taking ownership and then attempting to delete the files individually. My limited experience tells me that using wildcard deletes doesn't work.
      My Computer
    Quote Quote

  10. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #27

    I can provide the appropriate replacement files (I have almost every file ever issued for win7), so worry not :)
      My Computer
    Quote Quote

  11. TalbotM
    Posts : 22
    Windows 7 Pro 64bit
    Thread Starter
       New #28

    Understood.
    I have no problem procedurally doing that.
    And it is few enough that I don't care about wildcards. I'll change ownership on them individually if that's what it takes. Still beats the pants off of a clean reinstall.
      My Computer
    Quote Quote

  12. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #29

    If you're happy to go for it - here's the short version

    1) take ownership of each identified folder- recurse down the branch
    2) Give the Administrators group Full permissions for all folders and then recurse the permissions down
    3) delete each file individually. (DEL)
    4) then delete the folders involved. (RD /S)
    5) run the command in post #21 again and post the results - then run CheckSUR and SFC again, and post the new logs.
      My Computer
    Quote Quote

  13. TalbotM
    Posts : 22
    Windows 7 Pro 64bit
    Thread Starter
       New #30

    That wasn't so bad.
    SFC still dumps out at 54%.
    Same OneDrive link: http://1drv.ms/1rEB9lN
      My Computer
    Quote Quote

 
Page 3 of 5 FirstFirst 12345 LastLast

  Related Discussions
System Restore doesn't work
in Backup and Restore

Good day, I went to do a backup after last W7 update. The external SATA drive was not recognized. Found it inactive and without a drive letter and set them. Unit works on other computers with a USB. Ran a sfc /scannow with errors that couldn't be corrected. Attempted a restore which after...
So about a day ago my desktop began displaying the blue screen upon login and then instant restart. I tried startup repair, memory diagnostics tool, system recovery, nothing worked. so i cleared everything on my drive (unforunately) only to find once i got to "set up is preparing your computer for...
First time poster here. I'm running Win7 Home Premium 64bit. When I try to do a System Restore, it seems to run to completion, reboots the system and then issues the following message: "System Restore did not complete successfully. Your computer's system files and settings were not...
I noticed about a week ago that my system won't go to sleep unless I force it to sleep using the using the Function and F1 buttons on the keyboard. I also noticed about the same time that I tried to set it to use the ribbon screen saver and that doesn't work either. The screen saver looks fine in...
System Restore doesn't work
in Backup and Restore

My Win 7 was installed in February 2010 and at first I could use System Restore without problems. However, after some time it stopped working due to unknown reasons and now when I try to do a System Restore it looks as if it is going to be OK, but when it restarts I see the following error message:...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 22:46.
Find Us