U.S. CitiesCity-Data Forum Index
Go Back   City-Data Forum > General Forums > Science and Technology > Computers
 [Register]
Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
View detailed profile (Advanced) or search
site with Google Custom Search

Search Forums  (Advanced)
Reply Start New Thread
 
Old 03-23-2018, 11:58 PM
 
15,233 posts, read 20,182,538 times
Reputation: 21561

Advertisements

Quote:
Originally Posted by Tek_Freek View Post
That sounds more like data corruption. If you are as paranoid as I am you'll run a program to check. It's possible other data is corrupt and hasn't reared it's ugly head yet.
https://support.microsoft.com/en-us/...rrupted-system

Thanks SO much, Tek Freek!! I ran the system scan and got the following message:

Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log %WinDir%\Logs\CBS\CBS.log.

Now I'm trying to repair the corrupted files manually. But I really dont know what I'm doing so I wonder if I should just pay my computer guy to do it for me.
Reply With Quote Quick reply to this message

 
Old 03-24-2018, 12:01 AM
 
28,611 posts, read 40,594,929 times
Reputation: 37281
I have to say it. That sucks! You might consider posting the log. There are techs here that are "fresher" than I am that might help you through it.
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:24 AM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
Quote:
Originally Posted by Tek_Freek View Post
I have to say it. That sucks! You might consider posting the log. There are techs here that are "fresher" than I am that might help you through it.

Thanks again. Here's what I got. Again, I dont know what I'm doing so I hope this is correct:

2018-03-23 23:33:06, Info CBS TI: --- Initializing Trusted Installer ---
2018-03-23 23:33:06, Info CBS TI: Last boot time: 2018-03-23 07:27:05.487
2018-03-23 23:33:06, Info CBS Starting TrustedInstaller initialization.
2018-03-23 23:33:06, Info CBS Ending TrustedInstaller initialization.
2018-03-23 23:33:06, Info CBS Starting the TrustedInstaller main loop.
2018-03-23 23:33:06, Info CBS TrustedInstaller service starts successfully.
2018-03-23 23:33:06, Info CBS No startup processing required, TrustedInstaller service was not set as autostart
2018-03-23 23:33:06, Info CBS Startup processing thread terminated normally
2018-03-23 23:33:06, Info CBS Starting TiWorker initialization.
2018-03-23 23:33:06, Info CBS Ending TiWorker initialization.
2018-03-23 23:33:06, Info CBS Starting the TiWorker main loop.
2018-03-23 23:33:06, Info CBS TiWorker starts successfully.
2018-03-23 23:33:06, Info CBS TiWorker: Client requests SFP repair object.
2018-03-23 23:33:06, Info CBS Universal Time is: 2018-03-24 04:33:06.640
2018-03-23 23:33:06, Info CBS Loaded Servicing Stack v6.3.9600.18384 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_non e_fa1d93c39b41b41a\cbscore.dll
2018-03-23 23:33:06, Info CSI 00000001@2018/3/24:04:33:06.750 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7ff93dc87fa9 @0x7ff93ed14924 @0x7ff93ed1415b @0x7ff7ad4bd69a @0x7ff7ad4be275 @0x7ff961302113)
2018-03-23 23:33:07, Info CBS SQM: Initializing online with Windows opt-in: True
2018-03-23 23:33:07, Info CBS SQM: Cleaning up report files older than 10 days.
2018-03-23 23:33:07, Info CBS SQM: Requesting upload of all unsent reports.
2018-03-23 23:33:07, Info CBS SQM: Queued 10 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2
2018-03-23 23:33:07, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2018-03-23 23:33:07, Info CBS NonStart: Set pending store consistency check.
2018-03-23 23:33:07, Info CSI 00000002@2018/3/24:04:33:07.382 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7ff93dc87fa9 @0x7ff93f0b8a65 @0x7ff93f0b8bb2 @0x7ff7ad4bcd89 @0x7ff7ad4be28c @0x7ff961302113)
2018-03-23 23:33:08, Info CSI 00000003 IAdvancedInstallerAwareStore_ResolvePendingTransac tions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0xfec5dadc10
2018-03-23 23:33:08, Info CSI 00000004 Creating NT transaction (seq 1), objectname [6]"(null)"
2018-03-23 23:33:08, Info CSI 00000005 Created NT transaction (seq 1) result 0x00000000, handle @0x3a0
2018-03-23 23:33:08, Info CSI 00000006 Poqexec successfully registered in [ml:26{13},l:24{12}]"SetupExecute"
2018-03-23 23:33:08, Info CSI 00000007@2018/3/24:04:33:08.538 Beginning NT transaction commit...
2018-03-23 23:33:08, Info CSI 00000008@2018/3/24:04:33:08.538 CSI perf trace:
CSIPERF:TXCOMMIT;941
2018-03-23 23:33:08, Info CSI 00000009 CSI Store 1094240159824 (0x000000fec5cbc850) initialized
2018-03-23 23:33:11, Info CSI 0000000a [SR] Verifying 100 (0x0000000000000064) components
2018-03-23 23:33:11, Info CSI 0000000b [SR] Beginning Verify and Repair transaction
2018-03-23 23:33:14, Error CSI 0000000c@2018/3/24:04:33:14.077 (F) base\xml\udom_xmlcursor.cpp(50): Error STATUS_XML_PARSE_ERROR originated in function CXmlCursor::Next expression: RtlXmlNextLogicalThing( &m_State, &m_Namespaces, &m_CurrentThing, &m_AttributeList )
[gle=0x80004005]
2018-03-23 23:33:14, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2018-03-23 23:33:14, Info CBS Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2018-03-23 23:33:14, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-03-23 23:33:14, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-03-23 23:33:14, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-03-23 23:33:14, Info CSI 0000000d@2018/3/24:04:33:14.342 Sysprep Warning: Corruption detected. Marking Sysprep Corrupt. All Sysprep Commands will be ignored

2018-03-23 23:33:14, Info CSI 0000000e@2018/3/24:04:33:14.342 Sysprep Warning: Corruption detected. Sysprep Commands will be ignored
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:29 AM
 
28,611 posts, read 40,594,929 times
Reputation: 37281
There was a time I'd had a go at that. Too long out of the loop.
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:42 AM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
I downloaded Malwarebytes and ran a scan:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 3/24/18
Scan Time: 12:31 AM
Log File: 9cf63892-2f24-11e8-bdb3-448a5ba474f9.json
Administrator: Yes

-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4468
License: Trial

-System Information-
OS: Windows 8.1
CPU: x64
File System: NTFS
User: CINDY\CindyPC

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 262271
Threats Detected: 40
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 4 min, 10 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 4
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\MONITOR.EXE, No Action By User, [1159], [398206],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCTRAY.EXE, No Action By User, [1159], [380353],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCSERVICE.EXE, No Action By User, [1159], [380352],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASC.EXE, No Action By User, [1159], [396386],1.0.4468

Module: 8
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\MONITOR.EXE, No Action By User, [1159], [398206],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCTRAY.EXE, No Action By User, [1159], [380353],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCSERVICE.EXE, No Action By User, [1159], [380352],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\OFCOMMON.DLL, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\OFCOMMON.DLL, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\OFCOMMON.DLL, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\OFCOMMON.DLL, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASC.EXE, No Action By User, [1159], [396386],1.0.4468

Registry Key: 10
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASC11_Pe rformanceMonitor, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DAEEE0 A9-C2E0-495B-A1BC-5BFA6A2AA571}, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{DAEEE0 A9-C2E0-495B-A1BC-5BFA6A2AA571}, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASC11_Sk ipUac_CindyPC, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CFC812 86-B133-475E-9BC5-E8024D372107}, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{CFC812 86-B133-475E-9BC5-E8024D372107}, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, No Action By User, [529], [236865],1.0.4468
PUP.Optional.Conduit, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, No Action By User, [529], [236865],1.0.4468
PUP.Optional.Conduit, HKU\S-1-5-21-2129908529-701187276-811870557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, No Action By User, [529], [236865],1.0.4468
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AdvancedSys temCareService11, No Action By User, [1159], [380352],1.0.4468

Registry Value: 3
PUP.Optional.Conduit, HKU\S-1-5-21-2129908529-701187276-811870557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, No Action By User, [529], [236865],1.0.4468
PUP.Optional.Conduit, HKU\S-1-5-21-2129908529-701187276-811870557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TOPRESULTURL, No Action By User, [529], [236865],1.0.4468
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-2129908529-701187276-811870557-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN |ADVANCED SYSTEMCARE 11, No Action By User, [1159], [380353],1.0.4468

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 2
PUP.Optional.AmazonTB, C:\Users\CindyPC\AppData\Roaming\Mozilla\Firefox\P rofiles\4c8uvjjz.default\jetpack\abb@amazon.com\si mple-storage, No Action By User, [9613], [175409],1.0.4468
PUP.Optional.AmazonTB, C:\USERS\CINDYPC\APPDATA\ROAMING\MOZILLA\FIREFOX\P ROFILES\4C8UVJJZ.DEFAULT\JETPACK\ABB@AMAZON.COM, No Action By User, [9613], [175409],1.0.4468

File: 13
PUP.Optional.AmazonTB, C:\Users\CindyPC\AppData\Roaming\Mozilla\Firefox\P rofiles\4c8uvjjz.default\jetpack\abb@amazon.com\si mple-storage\store.json, No Action By User, [9613], [175409],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\WINDOWS\SYSTEM32\TASKS\ASC11_PerformanceMonitor , No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\WINDOWS\SYSTEM32\TASKS\ASC11_SkipUac_CindyPC, No Action By User, [1159], [380341],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\USERS\CINDYPC\APPDATA\ROAMING\MICROSOFT\INTERNE T EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\Advanced SystemCare 11.lnk, No Action By User, [1159], [380340],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\MONITOR.EXE, No Action By User, [1159], [398206],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCTRAY.EXE, No Action By User, [1159], [380353],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCSERVICE.EXE, No Action By User, [1159], [380352],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\OFCOMMON.DLL, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\USERS\CINDYPC\APPDATA\ROAMING\ClassicShell\Pinn ed\Advanced SystemCare 11.lnk, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\USERS\CINDYPC\APPDATA\ROAMING\ClassicShell\Pinn ed\Advanced SystemCare 9.lnk, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASC.EXE, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\WINDOWS\SYSTEM32\REGISTRYDEFRAGBOOTTIME.EXE, No Action By User, [1159], [396386],1.0.4468
PUP.Optional.AdvancedSystemCare, C:\USERS\CINDYPC\DOWNLOADS\ASC-INSTALLER.EXE, No Action By User, [1159], [396386],1.0.4468

Physical Sector: 0
(No malicious items detected)


(end)
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:49 AM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
Quote:
Originally Posted by Tek_Freek View Post
There was a time I'd had a go at that. Too long out of the loop.

I really appreciate all your help, TF. Without you, I'd never have known I had corrupted files. This may explain why Opera has been opening documents that I didnt request.

I dont know enough to read the Malwarebytes log and understand what it says. I do know that it thinks Advanced System Care is a PUP, which is why I stopped using Malwarebytes a couple of years ago.

Anyway, I'm going to try the fix that I posted -- if I can (I'm so stupid about computers) and see if it works.
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 01:25 AM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
I thought I'd posted the fix I'm trying now but i dont see it. I found it on bleepingcomputer.com and several people who tried it said it worked for them.

(I'm in the midst of running the restorehealth portion of the fix. It's been running for 30 minutes and is only 20% completed.)

run this tool from administrator command prompt to fix corrupt files.
it's called Deployment Image Servicing and Management Tool.


from administrator command prompt run both of these commands. note there is a space between the forward slashes

dism /online /cleanup-image /checkhealth

then run

dism /online /cleanup-image /restorehealth

the restorehealth command can take 20 min or more to run. do not stop it, let it finish.

then run sfc /scannow again to make sure there are no more corrupt system files.

Last edited by TFW46; 03-24-2018 at 02:18 AM..
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 02:18 AM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
Hmmm. The "checkhealth" results were:
The component store is repairable.
The operation completed successfully.


But the "restorehealth" (which took over an hour to run) results were:
The restore operation failed. Either the repair source was not found or the component store cannot be repaired.

(I have the DISM, Deployment Image Servicing and Management Tool, Log but it's so long I dont dare post it here.)


WOW!!!!
Because one of the reasons for the failure of the restore operation was that the repair source was not found, I ran the System Scan again. This time I got the message:
Windows Resource Protection did not find any integrity violations.

Dare I hope that the corrupted files have somehow been repaired? I'll run the System Scan again later this morning. In any event, TF, thankyou, thankyou, thankyou SO much!!!!
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:35 PM
 
15,233 posts, read 20,182,538 times
Reputation: 21561
I ran the System Scan again just now and it says, again, that it did not find any integrity violations.

I'm SO relieved and, again, so thankful to you, Tek_Freek, for all your help.

I also downloaded Firefox again and still got the same error message that "bookmarks will not be functional because one of Firefox's files is in use by another application"

But I don’t really care. Over the years, I’ve run into serious operational problems with Firefox that took me hours, sometimes even all night long, to resolve -- problems that were on Firefox’s end, not mine.

I’ve decided that I like Opera well enough not to miss Firefox. Some sites, like FedEx and one of my credit cards, don’t support Opera but I have Chrome as a backup in those cases. Now all I have to do is find good security protection for Opera.
Reply With Quote Quick reply to this message
 
Old 03-24-2018, 12:52 PM
 
28,611 posts, read 40,594,929 times
Reputation: 37281
Quote:
Originally Posted by TFW46 View Post
I really appreciate all your help, TF. Without you, I'd never have known I had corrupted files. This may explain why Opera has been opening documents that I didnt request.

I dont know enough to read the Malwarebytes log and understand what it says. I do know that it thinks Advanced System Care is a PUP, which is why I stopped using Malwarebytes a couple of years ago.


Anyway, I'm going to try the fix that I posted -- if I can (I'm so stupid about computers) and see if it works.
Um.....no. Run Malwarebytes. Just because it says a program is a PUP is no reason to stop using it. You can add ASC to the ignore list and MWB will no longer report it as a PUP.

Did you go through the fix again for FF bookmarks? Run MWB then try again. It's a long shot, but long shots sometimes work.

And what is the status of your anti-virus? Are you running one? Is the Windows Defender running? Are all the items checked as active in WD?
Reply With Quote Quick reply to this message
Please register to post and access all features of our very popular forum. It is free and quick. Over $68,000 in prizes has already been given out to active posters on our forum. Additional giveaways are planned.

Detailed information about all U.S. cities, counties, and zip codes on our site: City-data.com.


Reply
Please update this thread with any new information or opinions. This open thread is still read by thousands of people, so we encourage all additional points of view.

Quick Reply
Message:

Over $104,000 in prizes was already given out to active posters on our forum and additional giveaways are planned!

Go Back   City-Data Forum > General Forums > Science and Technology > Computers
Follow City-Data.com founder on our Forum or

All times are GMT -6. The time now is 03:05 AM.

© 2005-2019, Advameg, Inc. · Please obey Forum Rules · Terms of Use and Privacy Policy · Bug Bounty

City-Data.com - Archive 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35 - Top