Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SFC & DISM Reporting Problems


  • Please log in to reply
5 replies to this topic

#1 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 7,755 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:07:28 PM

Posted 02 June 2016 - 08:09 PM

I decided to run SFC and the DISM trio just to check things out.  I had run these before some months ago and both came back clean.  Now both are reporting issues.  In the case of DISM, the first two steps state the image is repairable, it's only the "RestoreHealth" that kicks out an error.

 

I thought I'd ask where, whether, and how to post the logs from each before doing so.

 


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

      Memory is a crazy woman that hoards rags and throws away food.

                    ~ Austin O'Malley

 

 

 

              

 


BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,627 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:07:28 PM

Posted 02 June 2016 - 08:18 PM

Upload the CBS.log and DISM.log after running DISM, and I'll take a look at them. Upload them on SendSpace or a cloud storage service, and share the download URLs for them here.

C:\Windows\Logs\CBS\CBS.logs and DISM\DISM.log.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 britechguy

britechguy

    Been there, done that, got the T-shirt

  • Topic Starter

  • Moderator
  • 7,755 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:07:28 PM

Posted 02 June 2016 - 08:38 PM

Aura,

 

         Thank you in advance for your assistance.  I have uploaded the logs to my Google Drive.  I ran the SFC first and the DISM trio after that.

 

                    CBS.log

 

                    DISM.log


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

      Memory is a crazy woman that hoards rags and throws away food.

                    ~ Austin O'Malley

 

 

 

              

 


#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,627 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:07:28 PM

Posted 02 June 2016 - 08:41 PM

There's a few files that needs to be replaced though. I can't do that on BleepingComputer since I'm not done with my Windows Update training yet. Though if you create an account on Sysnative and post a thread in the Windows Update section, I'll be able to assist you.

2016-06-02 19:58:32, Info                  CSI    00005988 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fdeploy_31bf3856ad364e35_10.0.10586.0_none_101c8f1242b816da\fdeploy.dll do not match actual file [l:11]"fdeploy.dll" :
  Found: {l:32 X2Mxr15BWaSKXy2mybUslwVk9Y/FqInLy5D57coBHZA=} Expected: {l:32 ND1OdE5zZRSbJhj8bj+W2Mz78Rxomz5drQuj8OmjWM8=}
2016-06-02 19:58:32, Info                  CSI    00005989 [SR] Cannot repair member file [l:11]"fdeploy.dll" of Microsoft-Windows-fdeploy, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    0000598a Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_10.0.10586.0_none_67b6c95f81009211\gptext.dll do not match actual file [l:10]"gptext.dll" :
  Found: {l:32 4R/wpzngnfdc0a94M7qP6Hg+i5N+LV89wlqPbSNLqTs=} Expected: {l:32 m8cPiUhvofD0JjkQi9TsQ66QDC3n1QW1swevHRp3qMM=}
2016-06-02 19:58:32, Info                  CSI    0000598b [SR] Cannot repair member file [l:10]"gptext.dll" of Microsoft-Windows-GroupPolicy-Gptext, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    0000598c Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_10.0.10586.0_none_fe99296a56e12a80\gpedit.dll do not match actual file [l:10]"gpedit.dll" :
  Found: {l:32 kr66STTQJj/SGCfMluAmidqauu1XH+iINrNGn3DUoo4=} Expected: {l:32 ouNx+rESZp1+xxtCvAwi7ok3e+cxc2SkEiZxfHWoGhY=}
2016-06-02 19:58:32, Info                  CSI    0000598d [SR] Cannot repair member file [l:10]"gpedit.dll" of Microsoft-Windows-GroupPolicy-Admin-Gpedit, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    0000598e Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fde_31bf3856ad364e35_10.0.10586.0_none_d872f84b4da4f3d4\fde.dll do not match actual file [l:7]"fde.dll" :
  Found: {l:32 ofJrYBMvfbcRFAtPFwvTqckgU78Xi+9tWAnhLEg79/w=} Expected: {l:32 yVYaUGAdNbs29db7y45Td/OAqI8d69JB867sHlfFwdA=}
2016-06-02 19:58:32, Info                  CSI    0000598f [SR] Cannot repair member file [l:7]"fde.dll" of Microsoft-Windows-fde, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    00005990@2016/6/2:23:58:32.370 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    00005991 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fdeploy_31bf3856ad364e35_10.0.10586.0_none_101c8f1242b816da\fdeploy.dll do not match actual file [l:11]"fdeploy.dll" :
  Found: {l:32 X2Mxr15BWaSKXy2mybUslwVk9Y/FqInLy5D57coBHZA=} Expected: {l:32 ND1OdE5zZRSbJhj8bj+W2Mz78Rxomz5drQuj8OmjWM8=}
2016-06-02 19:58:32, Info                  CSI    00005992 [SR] Cannot repair member file [l:11]"fdeploy.dll" of Microsoft-Windows-fdeploy, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    00005993 [SR] This component was referenced by [l:120]"Microsoft-Windows-UserAccounts-WOW64-shell-Package~31bf3856ad364e35~amd64~~10.0.10586.0.b571b1397b12d9a8fbd6aa3a403d12ef"
2016-06-02 19:58:32, Info                  CSI    00005994 [SR] This component was referenced by [l:177]"Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~10.0.10586.0.Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-shell-Deployment"
2016-06-02 19:58:32, Info                  CSI    00005995 Hashes for file member \??\C:\WINDOWS\SysWOW64\fdeploy.dll do not match actual file [l:11]"fdeploy.dll" :
  Found: {l:32 X2Mxr15BWaSKXy2mybUslwVk9Y/FqInLy5D57coBHZA=} Expected: {l:32 ND1OdE5zZRSbJhj8bj+W2Mz78Rxomz5drQuj8OmjWM8=}
2016-06-02 19:58:32, Info                  CSI    00005996 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fdeploy_31bf3856ad364e35_10.0.10586.0_none_101c8f1242b816da\fdeploy.dll do not match actual file [l:11]"fdeploy.dll" :
  Found: {l:32 X2Mxr15BWaSKXy2mybUslwVk9Y/FqInLy5D57coBHZA=} Expected: {l:32 ND1OdE5zZRSbJhj8bj+W2Mz78Rxomz5drQuj8OmjWM8=}
2016-06-02 19:58:32, Info                  CSI    00005997 [SR] Could not reproject corrupted file [l:23 ml:24]"\??\C:\WINDOWS\SysWOW64"\[l:11]"fdeploy.dll"; source file in store is also corrupted
2016-06-02 19:58:32, Info                  CSI    00005998@2016/6/2:23:58:32.448 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    00005999@2016/6/2:23:58:32.448 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    0000599a Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_10.0.10586.0_none_fe99296a56e12a80\gpedit.dll do not match actual file [l:10]"gpedit.dll" :
  Found: {l:32 kr66STTQJj/SGCfMluAmidqauu1XH+iINrNGn3DUoo4=} Expected: {l:32 ouNx+rESZp1+xxtCvAwi7ok3e+cxc2SkEiZxfHWoGhY=}
2016-06-02 19:58:32, Info                  CSI    0000599b [SR] Cannot repair member file [l:10]"gpedit.dll" of Microsoft-Windows-GroupPolicy-Admin-Gpedit, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    0000599c [SR] This component was referenced by [l:171]"Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-ds~31bf3856ad364e35~amd64~~10.0.10586.0.Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-ds-Deployment"
2016-06-02 19:58:32, Info                  CSI    0000599d Hashes for file member \??\C:\WINDOWS\SysWOW64\gpedit.dll do not match actual file [l:10]"gpedit.dll" :
  Found: {l:32 kr66STTQJj/SGCfMluAmidqauu1XH+iINrNGn3DUoo4=} Expected: {l:32 ouNx+rESZp1+xxtCvAwi7ok3e+cxc2SkEiZxfHWoGhY=}
2016-06-02 19:58:32, Info                  CSI    0000599e Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-g..policy-admin-gpedit_31bf3856ad364e35_10.0.10586.0_none_fe99296a56e12a80\gpedit.dll do not match actual file [l:10]"gpedit.dll" :
  Found: {l:32 kr66STTQJj/SGCfMluAmidqauu1XH+iINrNGn3DUoo4=} Expected: {l:32 ouNx+rESZp1+xxtCvAwi7ok3e+cxc2SkEiZxfHWoGhY=}
2016-06-02 19:58:32, Info                  CSI    0000599f [SR] Could not reproject corrupted file [l:23 ml:24]"\??\C:\WINDOWS\SysWOW64"\[l:10]"gpedit.dll"; source file in store is also corrupted
2016-06-02 19:58:32, Info                  CSI    000059a0@2016/6/2:23:58:32.495 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    000059a1@2016/6/2:23:58:32.510 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    000059a2 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fde_31bf3856ad364e35_10.0.10586.0_none_d872f84b4da4f3d4\fde.dll do not match actual file [l:7]"fde.dll" :
  Found: {l:32 ofJrYBMvfbcRFAtPFwvTqckgU78Xi+9tWAnhLEg79/w=} Expected: {l:32 yVYaUGAdNbs29db7y45Td/OAqI8d69JB867sHlfFwdA=}
2016-06-02 19:58:32, Info                  CSI    000059a3 [SR] Cannot repair member file [l:7]"fde.dll" of Microsoft-Windows-fde, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    000059a4 [SR] This component was referenced by [l:120]"Microsoft-Windows-UserAccounts-WOW64-shell-Package~31bf3856ad364e35~amd64~~10.0.10586.0.b571b1397b12d9a8fbd6aa3a403d12ef"
2016-06-02 19:58:32, Info                  CSI    000059a5 [SR] This component was referenced by [l:177]"Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-shell~31bf3856ad364e35~amd64~~10.0.10586.0.Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-shell-Deployment"
2016-06-02 19:58:32, Info                  CSI    000059a6 Hashes for file member \??\C:\WINDOWS\SysWOW64\fde.dll do not match actual file [l:7]"fde.dll" :
  Found: {l:32 ofJrYBMvfbcRFAtPFwvTqckgU78Xi+9tWAnhLEg79/w=} Expected: {l:32 yVYaUGAdNbs29db7y45Td/OAqI8d69JB867sHlfFwdA=}
2016-06-02 19:58:32, Info                  CSI    000059a7 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-fde_31bf3856ad364e35_10.0.10586.0_none_d872f84b4da4f3d4\fde.dll do not match actual file [l:7]"fde.dll" :
  Found: {l:32 ofJrYBMvfbcRFAtPFwvTqckgU78Xi+9tWAnhLEg79/w=} Expected: {l:32 yVYaUGAdNbs29db7y45Td/OAqI8d69JB867sHlfFwdA=}
2016-06-02 19:58:32, Info                  CSI    000059a8 [SR] Could not reproject corrupted file [l:23 ml:24]"\??\C:\WINDOWS\SysWOW64"\[l:7]"fde.dll"; source file in store is also corrupted
2016-06-02 19:58:32, Info                  CSI    000059a9@2016/6/2:23:58:32.542 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    000059aa@2016/6/2:23:58:32.557 Primitive installers committed for repair
2016-06-02 19:58:32, Info                  CSI    000059ab Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_10.0.10586.0_none_67b6c95f81009211\gptext.dll do not match actual file [l:10]"gptext.dll" :
  Found: {l:32 4R/wpzngnfdc0a94M7qP6Hg+i5N+LV89wlqPbSNLqTs=} Expected: {l:32 m8cPiUhvofD0JjkQi9TsQ66QDC3n1QW1swevHRp3qMM=}
2016-06-02 19:58:32, Info                  CSI    000059ac [SR] Cannot repair member file [l:10]"gptext.dll" of Microsoft-Windows-GroupPolicy-Gptext, version 10.0.10586.0, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2016-06-02 19:58:32, Info                  CSI    000059ad [SR] This component was referenced by [l:171]"Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-ds~31bf3856ad364e35~amd64~~10.0.10586.0.Microsoft-Windows-Client-Features-WOW64-Package-AutoMerged-ds-Deployment"
2016-06-02 19:58:32, Info                  CSI    000059ae Hashes for file member \??\C:\WINDOWS\SysWOW64\gptext.dll do not match actual file [l:10]"gptext.dll" :
  Found: {l:32 4R/wpzngnfdc0a94M7qP6Hg+i5N+LV89wlqPbSNLqTs=} Expected: {l:32 m8cPiUhvofD0JjkQi9TsQ66QDC3n1QW1swevHRp3qMM=}
2016-06-02 19:58:32, Info                  CSI    000059af Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-grouppolicy-gptext_31bf3856ad364e35_10.0.10586.0_none_67b6c95f81009211\gptext.dll do not match actual file [l:10]"gptext.dll" :
  Found: {l:32 4R/wpzngnfdc0a94M7qP6Hg+i5N+LV89wlqPbSNLqTs=} Expected: {l:32 m8cPiUhvofD0JjkQi9TsQ66QDC3n1QW1swevHRp3qMM=}
2016-06-02 19:58:32, Info                  CSI    000059b0 [SR] Could not reproject corrupted file [l:23 ml:24]"\??\C:\WINDOWS\SysWOW64"\[l:10]"gptext.dll"; source file in store is also corrupted
2016-06-02 19:58:32, Info                  CSI    000059b1@2016/6/2:23:58:32.589 Primitive installers committed for repair
https://www.sysnative.com/forums/windows-update/

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 britechguy

britechguy

    Been there, done that, got the T-shirt

  • Topic Starter

  • Moderator
  • 7,755 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:07:28 PM

Posted 02 June 2016 - 09:17 PM

Aura,

 

          Will create an account and post there.  Now that I see what you've cut and pasted, with color highlights, I am quite sure this is of my own doing and has come about as a part of my attempts to find a way to get Windows 10 to play a shutdown sound.  It's a long story, too long.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

      Memory is a crazy woman that hoards rags and throws away food.

                    ~ Austin O'Malley

 

 

 

              

 


#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,627 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:07:28 PM

Posted 03 June 2016 - 05:23 AM

That might be it, yes. If you patched some of these files, then of course SFC will flag them as being corrupt, because the B64SHA256 hash doesn't match the one Windows is expecting anymore.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users