Problem file

[Noreen]

I ran CCleaner this morning and got the attached message. I went to the Windows drive and clicked on the item where it says to schedule a check disk at next startup. Shut down the computer and started up again, no idea whether it ran a check but CCleaner says that it's still there. I've looked for the file at the address stated (with show all files) but can't find it. However I then discovered that I'd lost all my "sign in" cookies and I've had to sign in again. Maybe it's a problem with CCleaner, I'm at a loss.

[attachment deleted by admin]

[Rik]

Have you tried running CHKDSK manually, Noreen? (It's obviously a bad week for filing systems everywhere...)

[Sebby]

I think you'd know if it had run a chkdsk, Noreen.

The way I do it is open a command prompt, then type:
chkdsk c: /f

Then it will ask whether you want to schedule it for the next boot.

I think, though, that this is nothing to worry about, and CCleaner has just got itself in a bit of a muddle. My advice would be to clear your temporary internet files manually (given that you've lost your sign in cookies anyway).

Right-click on Internet Explorer, click Properties, then delete files.

[Simon]

As it only seems to be a temporary internet file, would it be worth trying to clear them in IE?  In IE7, Tools > Internet Options > General tab > under Browsing History, click Delete, then choose Temporary Internet Files.

CCleaner may have deleted your cookies, Noreen.  You can tell it not to, by unticking the box under Internet Explorer.

Or, what Sebby said. 

[Glenn]

I think you'd know if it had run a chkdsk, Noreen.

The way I do it is open a command prompt, then type:
chkdsk c: /f

Then it will ask whether you want to schedule it for the next boot.

I think, though, that this is nothing to worry about, and CCleaner has just got itself in a bit of a muddle. My advice would be to clear your temporary internet files manually (given that you've lost your sign in cookies anyway).

Right-click on Internet Explorer, click Properties, then delete files.

The same can be achived by right clicking on the drive icon, select properties > tools > Error checking, then tick both boxes

[Noreen]

That's what I did, Glenn. I just tried Sebby's suggestion with the command prompt and it won't let me, see attached. I'm using Vista BTW.

[attachment deleted by admin]

[Sebby]

Right-click on command prompt and select "run as administrator", then try again.

[Noreen]

I've done that, Sebby, and scheduled a check at restart. I then restarted the computer and I've still no idea whether it checked or not. I uninstalled CCleaner and downloaded a new copy and installed it and it says that the file is still there and corrupt!

[Gary]

I've done that, Sebby, and scheduled a check at restart. I then restarted the computer and I've still no idea whether it checked or not. I uninstalled CCleaner and downloaded a new copy and installed it and it says that the file is still there and corrupt!

Chkdsk takes a while to run noreen you would know via the black screen and the system count, try doing a long check using both files and bad sectors (tick both boxes) and go watch a film till finished failing that can you open that corrupt file manually and delete it? or go to your temp file folder and just empty it by hand?

[Noreen]

Gary, it won't check while the disk is in use but only at startup. I've tried both suggestions and nothing happens that I can see.

[Gary]

when you reboot the chkdsk should run, go to your c drive, tick both boxes it will say it cannot run chkdsk do you want to schedule, and just say yes then reboot, you should boot into a black window that goes though files, indexes etc, it can take a while on my machine a fair few hours. Can you go to your temp directory and delete the contents by hand? eg select all (not the folder itself) and delete all inside.

[Sebby]

You should see it running, Noreen. I've no idea why it isn't.

That aside for now, I'd still say clear your temporary internet files manually.

[Gary]

You should see it running, Noreen. I've no idea why it isn't.

That aside for now, I'd still say clear your temporary internet files manually.

I would do what sebby says, then if it still won't go try deleting from inside your temp file, as for chkdsk, that's odd

[Noreen]

Just tried it again, it just boots up as usual as far as I can see. Do I have to do anything else other than click on the button that says to reschedule at startup?

[Gary]

No just reschedule at startup and then restart you should see it go though the files then Noreen, have you tried emptying IE temp files? just click network and internet and select internet options, then delete browsing history and select all to be safe

[Noreen]

I've emptied the Temp files but CCleaner still finds it. At the moment I'm more concerned that I can't do a check disk. I did a Google search and the problem doesn't appear to be uncommon, various causes including a corrupt check disk.exe. I've got a System Restore point from 3 days ago and wonder if that's worth trying.

[Glenn]

This may help you Noreen http://www.vistax64.com/tutorials/130824-chkdsk-will-not-run-startup-vista.html

[Gary]

I have never  "touch wood" had this issue Noreen, can you open your temp directory and delete the contents? Thing is going back three days may not help if chkdsk was not working then either, you could try but its more a last resort, failing that it would be a reinstall or use a TI image.

[Gary]

This may help you Noreen http://www.vistax64.com/tutorials/130824-chkdsk-will-not-run-startup-vista.html

Nice find

[Noreen]

Yes, I'd found that site, thanks Glenn. However it looks as though I'm really in trouble.................I tried to do a System Restore but it wouldn't let me as it said that there were corrupt system files and that I needed to do a Check Disk. Of course I can't. I do have Acronis TI full image backups for 1 June and yesterday. I wonder if something happened yesterday when doing the backup? I've never done a TI full image restore and the idea scares me rigid!!!!!!!!!!!

I've also got the Vista Start-Up/Repair disk that a kind person here (Sebby?) sent me, can I do anything with that?

[Sebby]

Hmm, this is a strange one. Now, I think it's worth persevering to get chkdsk working, though I'm not sure how.

What happens if you just try chkdsk c: from a command prompt, Noreen (i.e. without the /f switch)? This should run chkdsk whilst still in Windows - it just won't be able to repair errors. I'm interested to know whether it works or throws up an error.

[Gary]

Yes, I'd found that site, thanks Glenn. However it looks as though I'm really in trouble.................I tried to do a System Restore but it wouldn't let me as it said that there were corrupt system files and that I needed to do a Check Disk. Of course I can't. I do have Acronis TI full image backups for 1 June and yesterday. I wonder if something happened yesterday when doing the backup? I've never done a TI full image restore and the idea scares me rigid!!!!!!!!!!!

I would be concerned the image may be corrupt Noreen, unless you have run chckdsk and its run fine before, if I could not fix it I would be tempted personally to reinstall Windows, you can try the TI image first but if its corrupt it wont help, if you have a windows disc Noreen you could try a repair, sorry did not see you have a disc, you can try a repair but you will have to re-install all patches etc if I remember right, generally if it gets that bad I reinstall saves more potential issues in my opinion. Try the chkdsk options and go from there as Sebby said

[Glenn]

Take a look here http://www.idnetters.co.uk/forums/index.php?topic=8457.0 I believe it was fixed by deleteing the System Restore points

[Gary]

Take a look here http://www.idnetters.co.uk/forums/index.php?topic=8457.0 I believe it was fixed by deleteing the System Restore points

Would a corrupt system restore point stop chkdsk? if she tries that and has no restore points left she has a TI image or a repair/reinstall and that's it Glenn

[LesD]

In XP to see the Content.ie5 directory and all its sub-directories with their contents I put this:

C:\Documents and Settings\Les\Local Settings\Temporary Internet Files\Content.IE5

in the address bar of Window Explorer or My Computer.

I also do not hide system files at the Tools Advanced settings.

I don't know if Vista is similar but if so entering your equivalent of my line should let you see the file that is being complained about and maybe then let you delete it manually.

[Gary]

Have you tried sfc /scannow Noreen? you need to run it in a cmd prompt window with full admin privileges, should not take to long and tries to repair corrupt windows files

[Gary]

In XP to see the Content.ie5 directory and all its sub-directories with the contents I put this:

C:\Documents and Settings\Les\Local Settings\Temporary Internet Files\Content.IE5

in the address bar of Window Explorer or My Computer.

I also do not hide system files at the Tools Advanced settings.

I don't know if Vista is similar but if so entering you equivalent of my line should let you see the file that is being complained about an maybe then let you delete it manually.

you can do the same in vista, go to appearance and personalisation Noreen, click folder options and click view tab then untick do not show hidden files and folders, then just type temp in the start search window and go to the temp folder and delete the offending file, or use explorer and right click on the star button and go to explore, then find your temp folder, using search is easier, chkdsk may run afer getting rid of the corrupt file stranger things have been known

[Noreen]

The Temp folder is empty. Search doesn't find the file.

Should I try that "sfc"? Do I just type "sfc /scannow"?

[Glenn]

Yes, type it into a dos prompt window, Noreen

[Simon]

I think you have to run it as a command, Noreen, so hit the Windows key + R, then type in cmd and hit OK / Enter.  That should produce a DOS window, where you can type sfc /scannow and hit Enter.

[Noreen]

I've run it and got the attached message.

[attachment deleted by admin]

[Rik]

It looks to me like you might need to do a repair, Noreen, but wait for the Vista users.

[Noreen]

I've tried to look at the Log files but it says access denied. Probably got to view as an Administrator again but I don't know how to do that.

God knows what this is doing to my blood pressure.

[Rik]

Not helping, I guess. Sorry.

[Steve]

I think this document tells you how to read the cbs log file http://support.microsoft.com/default.aspx/kb/928228 and then if successful replace the sr tagged files with a good copy

[Noreen]

I eventually managed to read the Log file as Administrator, might as well be in Chinese for all that it means to me but this seems to be the relevant part..............

POQ 64 ends.
2008-07-06 17:49:50, Info                  CSI    0000015d [SR] Verify complete
2008-07-06 17:49:50, Info                  CSI    0000015e [SR] Repairing 1 components
2008-07-06 17:49:50, Info                  CSI    0000015f [SR] Beginning Verify and Repair transaction
2008-07-06 17:49:50, Info                  CSI    00000160 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000161 [SR] Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-07-06 17:49:50, Info                  CSI    00000162 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000163 [SR] Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-07-06 17:49:50, Info                  CSI    00000164 Hashes for file member \??\C:\Windows\System32\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000165 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000166 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"autochk.exe"; source file in store is also corrupted
2008-07-06 17:49:50, Info                  CSI    00000167 Repair results created:
POQ 65 starts:

POQ 65 ends.
2008-07-06 17:49:50, Info                  CSI    00000168 [SR] Repair complete
2008-07-06 17:49:50, Info                  CSI    00000169 [SR] Committing transaction
2008-07-06 17:49:50, Info                  CSI    0000016a Creating NT transaction (seq 1), objectname [6]"(null)"
2008-07-06 17:49:50, Info                  CSI    0000016b Created NT transaction (seq 1) result 0x00000000, handle @0x6f4
2008-07-06 17:49:50, Info                  CSI    0000016c@2008/7/6:16:49:50.266 CSI perf trace:
CSIPERF:TXCOMMIT;2
2008-07-06 17:49:50, Info                  CSI    0000016d [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired
2008-07-06 17:54:05, Info                  CBS    Scavenge: Package store indicates there is no component to scavenge, skipping.

[Rik]

Has it improved things in any way, Noreen? It looks like both copies of the file have been damaged.

[Noreen]

In what way, Rik? I've haven't tried to do another check disk. CCleaner says that the corrupt file is still there.

How can I put this right?

[Rik]

Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk
Hashes for file member \??\C:\Windows\System32\autochk.exe do not match actual file
Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe"

It looks like the working copy and spare have been broken - possibly infected.

[Steve]

I suppose replace with a good copy but where do you find one? backup? repair?
Below are the MS instructions

1.   At an elevated command prompt, type the following command, and then press ENTER:
takeown /f Path_And_File_Name
For example, type takeown /f E:\windows\system32\jscript.dll.
2.   Type the following command, and then press ENTER to grant administrators full access to the file:
icacls Path_And_File_Name /GRANT ADMINISTRATORS:F
For example, type icacls E:\windows\system32\jscript.dll /grant administrators:F.
3.   Type the following command to replace the file with a known good copy of the file:
Copy Path_And_File_Name_Of_Source_File Path_And_File_Name_Of_Destination
For example, type copy E:\temp\jscript.dll E:\windows\system32\jscript.dll.

[Glenn]

If you have the Vista install disc then a repair can be run from that http://www.bleepingcomputer.com/tutorials/tutorial148.html

[Noreen]

I haven't got a Vista disk but as I said earlier I do have a Vista Start Up/Repair disk supplied I think by Sebby. However I don't have any problem starting Windows so not sure if that would help. Sorry, I'm completely lost.

[Sebby]

Have you installed SP1, Noreen? I wonder if that's worth a go as it will replace a hell of a lot of files, hopefully the corrupt ones.

[Noreen]

The laptop came with SP1 installed, Sebby.

[Sebby]

Ah. As an XP user, I don't know what to suggest, Noreen. If it were me, I'd probably format.

[Steve]

Dont we just need one file though?

[Noreen]

I suppose I'll have to get on to the manufacturer's Support.

Yes Steve that's what I thought. Would it be on Sebby's disk?

[Glenn]

Here is a copy of autochk.exe from my PC, un-zip it and copy it to your C:/Windows/System32 directory, make a copy of your file before making any changes

[attachment deleted by admin]

[Steve]

But why do the MS instructions not allow you to do a straight forward copy? Is it to do with file ownership???

[Noreen]

Thanks Glenn, I'm going to leave this until tomorrow as I'm just shattered at the moment.

[J!ll]

  Sorry I can't help, have a drink on me! 

[Sebby]

Good luck, Noreen. Let us know how you get on.

(By the way, I've no idea what's on the disc I sent you! )

[Noreen]

I think that it was you Sebby but might not have been. It's supposed to be a Vista Startup/Repair disk.

[Rik]

That was Sebby.

[Noreen]

Glenn, was the file that you attached from a Vista machine? I've done a lot of googling about this and found at least one person who'd replaced a corrupt Vista autocheck file with one from XP but it seems a bit risky to me. I looked at the properties of your file and at the bottom it said that this file came from another machine and could be blocked for security reasons, did I want to unblock it? So I've unblocked it.

Next problem is that, of course, Vista won't let me replace or rename this existing corrupt file, says that I have to have "ownership". A lot of googling again and I found at least a couple of refs to how to do this however I eventually found this in the Vista Help files

The owner of the object controls how permissions are set on the object and to whom permissions are granted.

The Take ownership permission on an object or the Restore files and directories user right are the minimum requirements to complete this procedure. Review the details in "Additional considerations" in this topic.

To take ownership of a file or folder

Open Windows Explorer, and then locate the file or folder you want to take ownership of.

Right-click the file or folder, click Properties, and then click the Security tab.

Click Advanced, and then click the Owner tab.

Click Edit, and then do one of the following:

To change the owner to a user or group that is not listed, click Other users and groups and, in Enter the object name to select (examples), type the name of the user or group, and then click OK.
Take Ownership of a File or Folder

To change the owner to a user or group that is listed, in the Change owner to box, click the new owner.


(Optional) To change the owner of all subcontainers and objects within the tree, select the Replace owner on subcontainers and objects check box.

Additional considerations

An administrator can take ownership of any file on the computer.


Assigning ownership of a file or a folder might require you to elevate your permissions using User Access Control.


To open Windows Explorer, click Start, point to All programs, point to Accessories, and then click Windows Explorer.


You can transfer ownership in two ways:


The current owner can grant the Take ownership permission to others, allowing those users to take ownership at any time. A user granted the Take ownership permission can take ownership of the object or assign ownership to any group that the user is a member of.


A user who has the Restore files and directories privilege can double-click Other users and groups and choose any user or group to assign ownership to.


The Everyone group no longer includes the Anonymous Logon group.


Additional references

Manage Object Ownership

So I'll have a look at this now. 

[Noreen]

I couldn't make sense of the MS instructions so looked at these that I found online, much easier.

Go to C:\Windows\System32
Right click on Autochk.exe -> Properties
Click the Security tab, then click Advanced (button)
On the new window 'Advanced Security Settings for Autochk.exe' click the
'Owner' tab
Below the box labeled 'Change owner to:' click 'Edit...'
In the new window, under 'Change owner to:' select yourself (or the
Administrators group), then click OK
Close all property windows for autochk.exe, then go back to (right click)
Properties->Security
Click 'Edit...'
On the window 'Permissions for Autochk.exe' select the Administrators group,
then under 'Allow' click the 'Full Control' checkbox
Click OK and close the property windows
Ok...NOW you can rename autochk.exe to autochk_old.exe (that took a lot of
work!)

All I had to do in fact was click on allow full control and then I was able to rename the file (didn't remove it). After that I copied the new file into System32 and..............IT WORKED!!!!!!!!!!!!!!!!!! I've just done a complete check disk for both file and sector errors. After that I ran CCleaner again and the bad file had GONE.

Thank you to all for your help especially Glenn. Glenn and to Gary for suggesting running the check that identified which file was corrupt.

[Rik]

Glad you got there Noreen.

[Noreen]

I wouldn't have been able to do without the help of the great people on this forum, Rik. From what I've now read it seems to be not an uncommon problem with Vista or XP and unless people are made aware of a problem they don't know that they have a corrupt check disk file. It seems that it's worth running it occasionally just to find whether it's OK and to check other files anyway.

I'm wondering whether I should now change the security settings for check disk back to as they were before. Perhaps some Vista person will advise.

[Rik]

I see you got your sig back, Noreen. 

[Noreen]

Oh yes, I hadn't noticed, Rik. 

[Glenn]

Great news Noreen, glad you got it sorted, thanks for the Karma.

[Noreen]

Glenn, was it from Vista?

Oh dear, my signatures gone again.

[Rik]

It's OK here, Noreen, and I can read the file direct from the website too.

[Glenn]

Glenn, was it from Vista?

Oh dear, my signatures gone again.

Yes, it was a Vista file, I would not have posted it otherwise

[Noreen]

It's OK here, Noreen, and I can read the file direct from the website too.

I can't see it here, Rik.

[Simon]

I have it here, Noreen.  Try clearing your cache. 

[Rik]

I can't see it here, Rik.

Webspace has apparently gone down again. Do you clear your cache every time you leave the forum?

[Noreen]

Yes, it was a Vista file, I would not have posted it otherwise

I thought so but just thought that I'd check out of interest. I'll be keeping a copy for future use "just in case". Do you think that I should change the "owner's" stuff back to what it was before?

I've made a new System Restore point and I suppose that I should make a new Acronis TI backup now too.

[Simon]

Webspace has apparently gone down again.

I've just managed to log into my webspace, Rik.   

[Rik]

Me too, but it times out on larger files...  OTOH, I was just able to d/l a file of 381k...

[Noreen]

Webspace has apparently gone down again. Do you clear your cache every time you leave the forum?

No I don't, Rik.

[Rik]

That's odd then - until I cleared mine, I retained your sig.

[Gary]

I would change your security settings back the way they were, glad it worked Noreen

[Noreen]

Signature OK now, Rik.

[Rik]

So it is.

[Steve]

Glad you were successful Noreen well done. The ownership and permission setting of files in vista is a nuisance, I recall transferring  multiple users data from an acronis TI10 backup of an xp system to a vista machine and was unable to manipulate the documents due to the ownerships and permissions been all wrong. However prior to recovering data acronis TI10 will allow you to change these settings manually to allow access once recovered

[Noreen]

As you say, Steve, it can be a nuisance but I think it's all in a good cause. It does stop people mucking about with important stuff unnecessarily. I'm just glad that I got it sorted out in the end.

[BrianM]

  Glad you got sorted with the help of the good knowledgeable folks on netters Noreen. But have got to say  for your patience and persevereance, I know these things are trying to such as me and I have learned something here as well.  Well done

[Noreen]

Thanks Brian. It's been a lesson for me that's for sure although I'm glad that I haven't got to go for my blood pressure check yet.

[Sebby]

I'm glad you got this sorted, Noreen.