Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Junctions Found and Services missing more common


  • Please log in to reply
5 replies to this topic

#1 SenzaDubbio

SenzaDubbio

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 31 May 2014 - 11:30 AM

Hello. I've seen now in Windows 8 quite often the reparse point/junctions found along with missing services more common. Is this a security issue, and what would be the best way to address this? I can't even attach the 5 MB rkill report! Here below are some of the services and junctions:

 

Checking Windows Service Integrity:

 * MsKeyboardFilter [Missing Service]
 * CSC [Missing Service]
 * E1G60 [Missing Service]
 * HdAudAddService [Missing Service]
 * kbldfltr [Missing Service]
 * storvsp [Missing Service]
 * Vid [Missing Service]
 * vmbusr [Missing Service]
 * vpcivsp [Missing Service]

 

* Reparse Point/Junctions Found (Most likely legitimate)!

     * C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 => C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache\IE\ [Dir]
     * C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Program Files\Common Files\Microsoft Shared\ink\en-us\boxed-correct.avi => <Unknown Target> [File]
     * C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Program Files\Common Files\Microsoft Shared\ink\en-us\boxed-delete.avi => <Unknown Target> [File]

 * C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Windows\WinSxS\amd64_microsoft-windows-rastls_31bf3856ad364e35_6.3.9600.16384_none_5d238bf9241ae6c1\rastlsext.dll => <Unknown Target> [File]
     * C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Windows\WinSxS\amd64_microsoft-windows-rdbss.resources_31bf3856ad364e35_6.3.9600.16384_en-us_15b56a913b600b03\rdbss.sys.mui => <Unknown Target> [File]

 * C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Windows\WinSxS\FileMaps\users_default_appdata_roaming_microsoft_b898cfd29d5951f1.cdf-ms => <Unknown Target> [File]

* C:\WINDOWS\Temp\135b591b-3751-4a33-8442-af03979a5c3f\Windows\WinSxS\FileMaps\users_public_music_8c1f3dc399e79184.cdf-ms => <Unknown Target> [File]

 

 

 

 



BC AdBot (Login to Remove)

 


m

#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,006 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:42 AM

Posted 31 May 2014 - 05:26 PM

Run sfc /scannow from the Elevated Command Prompt.

 

The sfc /scannow command scans all protected system files and replaces corrupted and incorrect versions with correct Microsoft versions.
 
To run sfc /scannow in Windows 8 you will need to open the Elevated Command Prompt.  The easiest way to do this is to press the Windows key and the X key at the same time.
 
You will see a window similar to the one below.
 
elevatedcommandpromptw7_zpseba8c499.png
 
When the Elevated Command Prompt opens type in sfc /scannow (please note the space between sfc and /scannow), then press Enter.
 
If the scan finds no integrity  problems in the first portion of the scan it should stop, to be sure that the scan has stopped wait five minutes, then type in exit and press Enter to stop the scan.
 
If it does find integrity problems the scan will continue.  This will take a while, please have patience and allow it finish.  
 
When the scan is finished please post the log of this scan.
 
To find sfc /scannow log, type cmd in the Search programs and files box, 
 
cmd will appear above the search box under Apps., right click on it and choose Run as administrator, this will open the Elevated Command Prompt.  This will look simlare to the image below.
 
elevatedcommandpromptw7_zpseba8c499.png
 
copy and paste the following, then press Enter.  
 
findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt
 
This will place a new icon on the desktop titled sfcdetails.  Click on this to open the log, copy it and paste it in your topic.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 SenzaDubbio

SenzaDubbio
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 02 June 2014 - 10:29 AM

Thank you for your assistance. The file was too long to post in here, so I attached it.

Attached Files



#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,006 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:42 AM

Posted 02 June 2014 - 10:52 AM

Open the Elevated Command Prompt again, and copy and paste the following command, then press Enter.

 

DISM.exe /Online /Cleanup-image /Restorehealth

 

After you have completed this rerun the sfc /scannow.

 

I will be going out of town in an hour and will be gone until Wednesday.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 SenzaDubbio

SenzaDubbio
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 03 June 2014 - 10:03 AM

The SFC scan completed with no errors! Unfortunately this doesn't help with the missing services, and the endless list of junction points. Should I pull the services from a fresh install of Windows 8? Since time is not on my side, I believe I will refresh the OS. Thank you for your efforts dc3.

Attached Files



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,006 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:42 AM

Posted 04 June 2014 - 09:31 AM

I got back home late last night, so I'm just now getting this.

 

I hope the refresh works for you.  I had a problem which prompted me to perform a refresh, I would up having to reinstall the the operating system.

 

If I can be of any further help let me know in this topic.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users