Main Forum > General Computer Support

(problem solved.) SFC /scannow help

<< < (8/17) > >>

Gamezertruth:

--- Quote from: Boggin on July 02, 2015, 03:51:06 pm ---What did the offboot sfc report - just seen your update on that - can you post its latest CBS Log.

--- End quote ---

I don’t know!  :smiley: but here go the others and new CBS log file


--- Quote from: Boggin on July 02, 2015, 03:51:06 pm ---What did the offboot sfc report - just seen your update on that - can you post its latest CBS Log.

Your SideBySide errors seemed to have changed somewhat (without going over the previous report) but it still lists Nero 9 as being in your Program Files - did you have it at one time but uninstalled it ?

If you want to get rid of its residue, you can use its Uninstaller. http://www.nero.com/eng/support/service/nero-clean-tool.php

--- End quote ---

no, i have go to Control Panel\Programs\Programs and Features and nero won’t show up there and  i run this cleanup tool and I don’t know the result


--- Quote from: Boggin on July 02, 2015, 03:51:06 pm ---Did a Google on the MS VC90 and found installing MS Visual C++ 2008 Redistributable sorted that out for some.  https://www.microsoft.com/en-gb/download/details.aspx?id=29

The Oriental looking names of those Services are in the System Error section of the MiniToolBox report.

--- End quote ---

then i will give it a try  :cheesy: and here is other log to check ....
nero still installed ?  :blank:

MiniToolBox by Farbar  Version: 14-04-2015
Ran by b (administrator) on 03-07-2015 at 02:36:06
Running from "D:\برامج"
Microsoft Windows 7 Ultimate  Service Pack 1 (X86)
Model: Aspire 4738 Manufacturer: Acer
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/03/2015 02:02:39 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 01:58:12 AM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.

Error: (07/03/2015 01:58:07 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context:  Application, SystemIndex Catalog

Error: (07/03/2015 01:58:07 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Error: (07/03/2015 01:54:30 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/03/2015 01:54:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/03/2015 01:54:26 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/03/2015 01:54:07 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/03/2015 01:52:34 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/03/2015 01:41:53 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (07/03/2015 02:33:52 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 02:28:52 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 02:23:52 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 02:18:52 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 02:13:52 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 02:08:51 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 01:58:13 AM) (Source: WMPNetworkSvc) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070420'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Error: (07/03/2015 01:58:06 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/03/2015 01:58:06 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (60000 milliseconds) while waiting for the 驱动检测 service to connect.

Error: (07/03/2015 01:57:05 AM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.


Microsoft Office Sessions:
=========================
Error: (07/03/2015 02:02:39 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 01:58:12 AM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0

Error: (07/03/2015 01:58:07 AM) (Source: Windows Search Service)(User: )
Description: Context:  Application, SystemIndex Catalog

Error: (07/03/2015 01:58:07 AM) (Source: Windows Search Service)(User: )
Description:

Error: (07/03/2015 01:54:30 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Common Files\NERO\SMC\NERODIGITALEXT.DLL

Error: (07/03/2015 01:54:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Nero\Nero 9\Nero StartSmart\NeroStartSmart.exe.Manifest

Error: (07/03/2015 01:54:26 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Nero\Nero 9\Nero StartSmart\NeroStartSmart.exe.Manifest

Error: (07/03/2015 01:54:07 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll

Error: (07/03/2015 01:52:34 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll

Error: (07/03/2015 01:41:53 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files\Nero\Nero 9\Nero StartSmart\NeroStartSmart.exe.Manifest


**** End of log ****

Boggin:
Can you use this command again to post the CBS Log instead of the one you have.

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

I think Windows is trying to load something from the remnants of Nero which is causing those MS.VC80 and 90 errors, so you will have to manually search for Nero.

I have Nero 10 pre-installed on this machine and there are 10 entries in Programs & Features, so you would have had to manually uninstall it from there at some time.
Probably best to create a restore point before doing this and the first search point is in Program Files - right click on the folder and select Delete.


Next, go Start - type regedit - press enter - accept the UAC and then click on Edit/Find then type Nero in the search box and press enter where you can right click on those keys and select Delete.

Press F3 to continue the search and repeat the process.

What nationality are you ?

I ask this because I've noticed in the MiniToolBox report where it says it is Running from D:\ there seems to something which looks like Arabic to my untrained eye.

When I run MiniToolBox I don't get that Running from.. line either.

I'm still seeing what looks like an oriental name for those services that are failing to run in the System Errors section.

I still think you should consider making a list of your 3rd party programs and any product keys, back up your personal stuff and factory reset given the time you have spent on this.

Gamezertruth:

--- Quote from: Boggin on July 03, 2015, 09:02:23 am ---Can you use this command again to post the CBS Log instead of the one you have.

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

I think Windows is trying to load something from the remnants of Nero which is causing those MS.VC80 and 90 errors, so you will have to manually search for Nero.

I have Nero 10 pre-installed on this machine and there are 10 entries in Programs & Features, so you would have had to manually uninstall it from there at some time.
Probably best to create a restore point before doing this and the first search point is in Program Files - right click on the folder and select Delete.


Next, go Start - type regedit - press enter - accept the UAC and then click on Edit/Find then type Nero in the search box and press enter where you can right click on those keys and select Delete.

Press F3 to continue the search and repeat the process.

--- End quote ---

yes i can do that   :smiley: and here is all Required logs file and i have add a screenshot for SFC scan which look like it finally got successfully repaired the Corrupted files after I do a repair install(upgrading windows file using windows 7 sp1 disk ) lol  :tongue: and as for nero software i run minitoolbox again and this time do not show any nero Entries anymore ! :tongue: Very strange   :cheesy: and now I’m going to make a restore point


--- Quote from: Boggin on July 03, 2015, 09:02:23 am ---What nationality are you ?

I ask this because I've noticed in the MiniToolBox report where it says it is Running from D:\ there seems to something which looks like Arabic to my untrained eye.

When I run MiniToolBox I don't get that Running from.. line either.

I'm still seeing what looks like an oriental name for those services that are failing to run in the System Errors section.

I still think you should consider making a list of your 3rd party programs and any product keys, back up your personal stuff and factory reset given the time you have spent on this.

--- End quote ---

I am Saudi  :tongue: :shy: and i run this tool from a folder that i have Specially created to drop all of my programs/tools into this folder like
showed here D:\برامج

the folder name is "برامج"

and "برامج" is mean "program"  :smiley: :wink: 

and i will working on the rest as in your reply !  :artist:

MiniToolBox by Farbar  Version: 14-04-2015
Ran by b (administrator) on 03-07-2015 at 20:09:42
Running from "D:\برامج"
Microsoft Windows 7 Ultimate  Service Pack 1 (X86)
Model: Aspire 4738 Manufacturer: Acer
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/03/2015 07:40:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/03/2015 03:17:54 PM) (Source: ESENT) (User: )
Description: WinMail (1132) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

Error: (07/03/2015 11:41:56 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 11:38:08 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/03/2015 09:27:00 AM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.

Error: (07/03/2015 09:26:59 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context:  Application, SystemIndex Catalog

Error: (07/03/2015 09:26:58 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Error: (07/03/2015 09:17:24 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 09:08:13 AM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.

Error: (07/03/2015 09:08:06 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context:  Application, SystemIndex Catalog


System errors:
=============
Error: (07/03/2015 07:39:32 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
ndisrd

Error: (07/03/2015 07:39:32 PM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/03/2015 07:39:32 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the 驱动检测 service to connect.

Error: (07/03/2015 07:39:02 PM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

Error: (07/03/2015 03:17:35 PM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Error: (07/03/2015 11:37:28 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
ndisrd

Error: (07/03/2015 11:37:25 AM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

Error: (07/03/2015 11:37:09 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/03/2015 11:37:09 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the 驱动检测 service to connect.

Error: (07/03/2015 11:25:27 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
ndisrd


Microsoft Office Sessions:
=========================
Error: (07/03/2015 07:40:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/03/2015 03:17:54 PM) (Source: ESENT)(User: )
Description: WinMail1132WindowsMail0:

Error: (07/03/2015 11:41:56 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 11:38:08 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/03/2015 09:27:00 AM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0

Error: (07/03/2015 09:26:59 AM) (Source: Windows Search Service)(User: )
Description: Context:  Application, SystemIndex Catalog

Error: (07/03/2015 09:26:58 AM) (Source: Windows Search Service)(User: )
Description:

Error: (07/03/2015 09:17:24 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/03/2015 09:08:13 AM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0

Error: (07/03/2015 09:08:06 AM) (Source: Windows Search Service)(User: )
Description: Context:  Application, SystemIndex Catalog


**** End of log ****

Boggin:
So did you boot up with the install disk and use the Upgrade option ?

I didn't bother looking at the CBS Log as the comd window output was sufficient and is looking good - not sure why it still found corruption to repair after the Upgrade reinstall though.

I'm finding conflicting info on that ndisrd that is failing to load on boot.

http://www.file.net/process/ndisrd.sys.html says it's probably okay whereas http://www.symantec.com/security_response/writeup.jsp?docid=2009-072717-3058-99&tabid=2 says it could be an imposter, but as it isn't loading......

It could be worth checking those registry entries in the second article and/or run the free version of MBAM and check the box for Rootkit scan in Settings/Detection and Prevention, but creating an external full system image would be more secure than just creating a restore point as infections usually take out restore points.

Gamezertruth:

--- Quote from: Boggin on July 03, 2015, 02:03:42 pm ---So did you boot up with the install disk and use the Upgrade option ?

--- End quote ---

yes that what i do  :smiley: and i need to go and I will come back after a few moments  :wink:

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version