Windows 10: CBS Log not showing any corrupted files after SFC scan found and repaired.

Hi,I run a C: backup about once a week. But before the backup, I run SFC /scannow. Sometimes I get "found corrupted files and they were repaired.So looking as the CBS Log file and can not find any repairs listed. I do a search in the CBS file for "corrupted" and it does not find any.To be safe I then run dism /online /cleanup-image /restorehealth ThenSFC /scannow. No corrupted files foundI will then run my backup of the C: driveMy Question is. Should I think I have a virus or is it do to windows update or false positives?I have never in all my years fixing windows have had this issue. Any tho

:)

 

SFC reports corrupt files that cannot be repaired

Hi Jay,

For to better assist you with the SFC reports issue, we'd like to know the following:

• Have you installed any Windows updates prior to this issue?
  
• Please provide us a CBS logs for us to determine what is the file that cannot be repaired.
  

To get the logs, please follow the steps below:

• Open a Command Prompt (Admin).
  
• Copy and paste findstr /c:”[SR]” %windir%\Logs\CBS\CBS.log >”%userprofile%\Desktop\sfclogs.txt”, then hit
  Enter. (This will create a sfclogs.txt file on your desktop).
  
• Open the sfclogs.txt and check the result of SFC scan.
  

Note: SFC cannot always fix corrupted files.

We're looking forward to your reply.

 

Understanding the CBS log & repairing corrupt files

Thank you so much for your help! I ran:

Repair-WindowsImage -Online -RestoreHealth


Windows Resource Protection found corrupt files and successfully repaired them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

I then rebooted.

Then I ran:
c:\>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files and successfully repaired them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

Then I ran:
PS C:\> Repair-WindowsImage -Online -CheckHealth

Path :
Online : True
ImageHealthState : Healthy
RestartNeeded : False

PS C:\> Repair-WindowsImage -Online -ScanHealth


Path :
Online : True
ImageHealthState : Healthy
RestartNeeded : False

I am not sure whether the corrupted files were repaired or not because the "Repair-WindowsImage -Online -RestoreHealth" said it made repairs & then sfc /scannow said it found & made repairs.

I did notice that I ran all these from C:\ & Brink's tutorial has it run from C:\Windows\System32. I don't know if that makes a difference.

Does it look like my files should be OK now or is there something else I should do to check?

 

Understanding the CBS log & repairing corrupt files

I've been getting some event errors lately, in particular 2 errors.

Date: 10/21/2019 8:54:17 AM
Type: ErrorEvent: 1020Source: Microsoft-Windows-Perflib

The required buffer size is greater than the buffer size passed to the Collect function of the "C:\Windows\System32\perfts.dll" Extensible Counter DLL for the "LSM" service. The given buffer size was 34008 and the required size was 45368.

Date: 10/21/2019 2:07:45 PM
Type: WarningEvent: 1008Source: Microsoft-Windows-Perflib

The Open procedure for service ".NETFramework" in DLL "C:\WINDOWS\system32\mscoree.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.

So I went to https://support.microsoft.com/en-us/...rrupted-system and ran

sfc /scannow

I got the message:
Windows Resource Protection found corrupt files but was unable to fix some of them.For online repairs, details are included in the CBS log file located at windir\Logs\CBS\CBS.log.

I tried to follow the rest of the steps listed on the support page, but got lost in the details.

1. When I used an elevated Powershell & ran the suggested command, I got:

PS C:\> findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

out-file : Could not find a part of the path 'C:\%userprofile%\Desktop\sfcdetails.txt'.At line:1 char:1+ findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\s ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OpenError: ) [Out-File], DirectoryNotFoundException + FullyQualifiedErrorId : FileOpenFailure,Microsoft.PowerShell.Commands.OutFileCommand

2. I manually went to C:\Windows\Logs\CBS & opened CBS.log.There was so much detail that I couldn't follow what was corrupt. I've attached the log.

I would appreciate anyone telling me what files are corrupt & how to replace them. Thank you in advance!