SFC Scannow
It's Borked!!
Tuesday, October 8, 2013 by RedneckDude | Discussion: Personal Computing
Hey guys, anyone ever have SFC Scannow to fail?
I had a virus yesterday, got it fixed, but now I get this error when I try to run SFC Scannow on Windows 8 Pro MCE.
It always fails at 64%.
 |
|
Page 1 of 2 | |
|
|---|
Reply #2 Tuesday, October 8, 2013 2:19 PM
1. Are you running it as an Administrator? And, did you do it in "Safe Mode"? If not, do so.
2. Did you put in any MS 'Fixits' regarding the font exploit? http://technet.microsoft.com/en-us/security/bulletin/ms11-087
Deny access to T2EMBED.DLL That might be preventing SFC /scannow, although I remember that s failing at 15%, so I doubt it.
You could try booting to the installation dvd, select repair options. From there choose command prompt and run sfc.
3. You might also try to run chkdsk /f /r as an admin....again, from safe mode.
4. Is this an HDD or SSD? If it's a HDD can you check for 'immanent failure'?
5. You might check this: http://social.technet.microsoft.com/Forums/windows/en-US/52834d80-f863-43ac-8b65-fc71bd173f5e/sfc-scannow-fails-at-15?forum=w7itprogeneral
Did you do any of the things recommended in my article http://drjbhl.joeuser.com/article/448314/Some_Useful_Links_For_Windows_8_Users ?
Reply #3 Tuesday, October 8, 2013 2:49 PM
Look at the screenshot.
2. No.
3. Done
4. SSD
5. I'll check.
I made the recovery drive flash drive.
Reply #5 Tuesday, October 8, 2013 3:43 PM
So you have the recovery flash drive...have you used it?
What virus did you have and how did you fix it?
Can you try after C:\Windows\system32> enter c: and then 'enter'
You should get
C:\>
now enter (immediately after the C:\>attrib –s –h *.* /S /D There's a space between attrib and -s and -h and *.* and /S and /D
Which will unhide files which shouldn't have been hidden (and might have been by the virus) and make them readable and fixable.
Then try sfc /scannow in admin mode.
Reply #6 Tuesday, October 8, 2013 4:32 PM
No, I don't want to do a recovery. I don't want to lose all my programs, etc.
Reply #7 Tuesday, October 8, 2013 4:34 PM
You should get
C:\>
No, I get C:\Windows\system32> again
Reply #8 Tuesday, October 8, 2013 4:37 PM
I'll probably do a repair install. But I had hoped for an easier fix.
Reply #9 Tuesday, October 8, 2013 5:32 PM
There's little question that you had a virus that reset things.
Did you look this virus up...and what it does, exactly - i.e. which settings it changes?
Which virus was it, Jim?
You can try this software to fix the effects of the virus [review of it] : http://www.ghacks.net/2010/02/09/recover-operating-system-after-virus-attack/
download here: http://sourceforge.net/projects/viruseffectremo/
Reply #10 Tuesday, October 8, 2013 5:46 PM
Which virus was it, Jim?
No Doc, all I know was it was a trojan and it resided in C:\Program Files (x86)\Google\Desktop.
Malwarebytes, and ASC Ultimate's Bit Defender A/V both claimed to quarantine it, but it kept coming back.
I had to boot into Win7, then browse to Win8 C:\Program Files (x86)\Google\Desktop and delete it.
Reply #11 Tuesday, October 8, 2013 5:52 PM
Actually, I am having a few other problems as well, like my mouse double clicking when it should be single clicking, and my PC runs a disk check at every reboot.
Considering a clean reinstall, if the repair install doesn't work. 
Reply #12 Tuesday, October 8, 2013 5:52 PM
[quote who="DrJBHL" reply="9" id="3402280"]download here: http://sourceforge.net/projects/viruseffectremo/[/quote]
Trying this now.
Reply #13 Tuesday, October 8, 2013 6:05 PM
You have to make sure it's gone, Jim. Don't you remember the name of the Trojan?
Once you have the name of the Trojan, you look it up on the net...especially at ESET and the antiviral software sites.
They generally have exact instructions as to how to remove it.
Do what they say before trying to repair effects.
Reply #14 Tuesday, October 8, 2013 6:41 PM
Too late.
Reply #15 Tuesday, October 8, 2013 9:13 PM
OK, after looking up the virus, which was trojan.sirefef.gy,it said to run KasperskyTDSSkiller, then ComboFix. I did those, and cleaned what was found, then ran SFC scannow and it ran 100%. Found some stuff, and fixed them!
Seems all is well, at the moment.
Thanks for the help, Doc.
Reply #17 Tuesday, October 8, 2013 9:47 PM
Thanks Jafo. Now, if only I knew where I got the virus....
I'm guessing an infected site, maybe even facebook. It settled in the Google folder, so I was probably using Chrome at the time?
Reply #18 Wednesday, October 9, 2013 5:56 AM
I've been to FB on and off. Do you have the HTTPS installed?
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 1 of 2 | |
|
|---|
Reply #1 Tuesday, October 8, 2013 2:14 PM
Maybe the virus changed something in the registry or you didn't get all of the virus removed? I'm just guessing here.