Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

File corruption... C:\windows\SysWOW64\iesysprep.dll


  • Please log in to reply
14 replies to this topic

#1 Beschravi

Beschravi

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 06:42 PM

How do I go about repairing/replacing this file? I have followed the instructions in Microsoft KB929833. But I hit a brick wall when it comes to finding the location and path of a good copy of that file on my machine.

 

 

Cannot repair member file [l:26{13}]"iesysprep.dll" of Microsoft-Windows-IE-Sysprep, Version = 11.2.9600.16428, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

 

Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:26{13}]"iesysprep.dll"; source file in store is also corrupted

 

 

 

 



BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 06:47 PM

Hi Beschravi :)

Follow the instructions below please.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 08:00 PM

Hi Aura, that worked so incredibly fast. Thank you so very much. I truly appreciate your help. :)

 

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-01 20:57:21.547
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Michael\Desktop\SFCFix.zip [0]

 

PowerCopy::
Successfully took permissions for file or folder C:\windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_fde92cdecf0ab7d9\iesysprep.dll

Successfully copied file C:\Users\Michael\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_fde92cdecf0ab7d9\iesysprep.dll to C:\windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_fde92cdecf0ab7d9\iesysprep.dll.

Successfully restored ownership for C:\windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_fde92cdecf0ab7d9\iesysprep.dll
Successfully restored permissions on C:\windows\winsxs\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_fde92cdecf0ab7d9\iesysprep.dll
PowerCopy:: directive completed successfully.

 

Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2015-08-01 20:57:21.719
Script hash: OptNLq5xbV1Iq4jeU+JZ9iD1nf2vASQPJCf4bz/BMV0=
----------------------EOF-----------------------


Edited by hamluis, 02 August 2015 - 07:23 AM.
Removed unnecessary quotebox - Hamluis.


#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 08:01 PM

No problem :) We can run SFC again to make sure the replacement worked.

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 08:15 PM

Yes it is a huge file indeed. Here's the link...

https://www.dropbox.com/s/axrxjagwhe6dnln/sfcdetails.txt?dl=0


Edited by hamluis, 02 August 2015 - 07:24 AM.


#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 08:16 PM

Please do not use the "sfcdetails.txt" method. I want to full CBS.log like instructed. Thank you :)

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 08:28 PM

Mod Edit:  Please do NOT use the QUOTE button to reply, use one of the REPLY buttons - Hamluis.

 

Sorry Aura, I got it right this time.

 https://www.dropbox.com/s/md9v0fle7bbf1fj/cbs.txt?dl=0


Edited by hamluis, 02 August 2015 - 07:26 AM.


#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 09:42 PM

I sourced the wrong file. I made you replace the amd64 instead of the wow64. My bad. Here goes.

myjIXnC.pngSFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.
  • Download SFCFix and move the executable on your Desktop;
  • Download the attached SFCFix.zip and move the archive to your Desktop;
    Note: Make sure that the file is named SFCFix.zip, do not rename it.
  • Save any work you have open, and close every programs;
  • Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
  • SFCFix will launch, let it complete;
  • Once done, a file will appear on your Desktop, called SFCFix.txt;
  • Open the file, then copy and paste its content in your next reply;
SFCFix.zip

EndqYRa.pngSystem File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Spcusrh.pngRun as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Once the scan is complete, enter the command below and press on Enter
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  • A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;
Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 10:20 PM

OK, here they are. :)

 

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-01 23:01:55.601
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Michael\Desktop\SFCFix.zip [0]

 

PowerCopy::
Successfully took permissions for file or folder C:\windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_083dd731036b79d4\iesysprep.dll

Successfully copied file C:\Users\Michael\AppData\Local\niemiro\Archive\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_083dd731036b79d4\iesysprep.dll to C:\windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_083dd731036b79d4\iesysprep.dll.

Successfully restored ownership for C:\windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_083dd731036b79d4\iesysprep.dll
Successfully restored permissions on C:\windows\winsxs\wow64_microsoft-windows-ie-sysprep_31bf3856ad364e35_11.2.9600.16428_none_083dd731036b79d4\iesysprep.dll
PowerCopy:: directive completed successfully.

 

Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-08-01 23:01:55.773
Script hash: 4KgX4Cncs3ZjcM4RRTXZuTHW8Nkikr0YPCr/Lw9YZK0=
----------------------EOF-----------------------

 

And the Dropbox link...

 

https://www.dropbox.com/s/md9v0fle7bbf1fj/cbs.txt?dl=0


Edited by hamluis, 02 August 2015 - 07:27 AM.


#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 10:21 PM

The replacement worked, SFC didn't return any errors in the CBS log. Anything else? :)

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 10:32 PM

The replacement worked, SFC didn't return any errors in the CBS log. Anything else? :)

 

Thank you my Aura!! You're totally amazing. :)

 

I have no other issues as far as I know. Thank you so very much!! Wish you were closer... I would buy you several beers and we'd go to a fine restaurant!! :)



#12 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 10:33 PM

No problem :) It would have been faster if I hadn't messed up the first replacement haha! And a lot of people wants to offer me beer, which I always decline since I don't drink alcohol. However, I won't say no to a good Pepsi or Coca-Cola! :)

And you're welcome!

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#13 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 10:48 PM

 

You were super fast actually! To me it seems like searching for a needle in a humongous haystack... it's incredible how you can sift through such huge files like that. OK, no alcohol, but I would buy you a few cases of Coke or Pepsi if I could! Thank you again!! :) :)


Edited by hamluis, 02 August 2015 - 07:27 AM.


#14 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:25 PM

Posted 01 August 2015 - 10:52 PM

That would be awesome :P And after a few threads and a training, you get used to it haha! No problem :)

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#15 Beschravi

Beschravi
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pembroke Pines, Florida
  • Local time:11:25 PM

Posted 01 August 2015 - 11:01 PM

 

I've always been fascinated with this awesome technology. Sheesh!!! I wish it were possible to somehow teleport those cases of coke to you. One day it will be possible!!! :)


Edited by hamluis, 02 August 2015 - 07:28 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users