Just my thoughts....
It's Borked!!
Published on October 8, 2013 By RedneckDude In Personal Computing

Hey guys, anyone ever have SFC Scannow to fail?

 

I had a virus yesterday, got it fixed, but now I get this error when I try to run SFC Scannow on Windows 8 Pro MCE.

 

It always fails at 64%.

 

 


Comments (Page 1)
3 Pages1 2 3 
on Oct 08, 2013

Maybe the virus changed something in the registry or you didn't get all of the virus removed?   I'm just guessing here. 

on Oct 08, 2013

1. Are you running it as an Administrator? And, did you do it in "Safe Mode"? If not, do so.

2. Did you put in any MS 'Fixits' regarding the font exploit? http://technet.microsoft.com/en-us/security/bulletin/ms11-087

Deny access to T2EMBED.DLL That might be preventing SFC /scannow, although I remember that s failing at 15%, so I doubt it.

You could try booting to the installation dvd, select repair options. From there choose command prompt and run sfc.

3. You might also try to run chkdsk /f /r as an admin....again, from safe mode.

4. Is this an HDD or SSD? If it's a HDD can you check for 'immanent failure'?

5. You might check this: http://social.technet.microsoft.com/Forums/windows/en-US/52834d80-f863-43ac-8b65-fc71bd173f5e/sfc-scannow-fails-at-15?forum=w7itprogeneral


Did you do any of the things recommended in my article http://drjbhl.joeuser.com/article/448314/Some_Useful_Links_For_Windows_8_Users ?

 

on Oct 08, 2013

DrJBHL
1. Are you running it as an Administrator?

Look at the screenshot.

 

2. No.

 

3. Done

4. SSD

5. I'll check.

 

I made the recovery drive flash drive.

on Oct 08, 2013

2. Isn't for Windows 8.

on Oct 08, 2013

RedneckDude
I made the recovery drive flash drive.

So you have the recovery flash drive...have you used it?

What virus did you have and how did you fix it?

Can you try after C:\Windows\system32> enter c: and then 'enter'

You should get 

C:\>

now enter (immediately after the C:\>attrib –s –h *.* /S /D    There's a space between attrib and -s and -h and *.* and /S and /D

Which will unhide files which shouldn't have been hidden (and might have been by the virus) and make them readable and fixable.

Then try sfc /scannow in admin mode.

 

on Oct 08, 2013

DrJBHL
So you have the recovery flash drive...have you used it?

No, I don't want to do a recovery. I don't want to lose all my programs, etc.

 

 

 

on Oct 08, 2013

DrJBHL
Can you try after C:\Windows\system32> enter c: and then 'enter'
You should get
C:\>

 

No, I get C:\Windows\system32> again

 

on Oct 08, 2013

I'll probably do a repair install. But I had hoped for an easier fix.

 

 

 

on Oct 08, 2013

There's little question that you had a virus that reset things.

Did you look this virus up...and what it does, exactly - i.e. which settings it changes?

Which virus was it, Jim?

You can try this software to fix the effects of the virus [review of it] : http://www.ghacks.net/2010/02/09/recover-operating-system-after-virus-attack/

 

download here: http://sourceforge.net/projects/viruseffectremo/

 

on Oct 08, 2013

DrJBHL
Did you look this virus up...and what it does, exactly - i.e. which settings it changes?
Which virus was it, Jim?

No Doc, all I know was it was a trojan and it resided in C:\Program Files (x86)\Google\Desktop.

 

Malwarebytes, and ASC Ultimate's Bit Defender A/V both claimed to quarantine it, but it kept coming back.

 

I had to boot into Win7, then browse to Win8  C:\Program Files (x86)\Google\Desktop and delete it.

on Oct 08, 2013

Actually, I am having a few other problems as well, like my mouse double clicking when it should be single clicking, and my PC runs a disk check at every reboot.

 

Considering a clean reinstall, if the repair install doesn't work. 

on Oct 08, 2013

[quote who="DrJBHL" reply="9" id="3402280"]download here: http://sourceforge.net/projects/viruseffectremo/[/quote]

Trying this now.

 

on Oct 08, 2013

You have to make sure it's gone, Jim. Don't you remember the name of the Trojan?

Once you have the name of the Trojan, you look it up on the net...especially at ESET and the antiviral software sites.

They generally have exact instructions as to how to remove it.

Do what they say before trying to repair effects.

on Oct 08, 2013

DrJBHL
Do what they say before trying to repair effects.

Too late.

on Oct 08, 2013

OK, after looking up the virus, which was trojan.sirefef.gy,it said to run KasperskyTDSSkiller, then ComboFix. I did those, and cleaned what was found, then ran SFC scannow and it ran 100%. Found some stuff, and fixed them!

 

Seems all is well, at the moment.

 

Thanks for the help, Doc.

3 Pages1 2 3