Problem file

[Gary]

Have you tried sfc /scannow Noreen? you need to run it in a cmd prompt window with full admin privileges, should not take to long and tries to repair corrupt windows files

[Gary]

In XP to see the Content.ie5 directory and all its sub-directories with the contents I put this:

C:\Documents and Settings\Les\Local Settings\Temporary Internet Files\Content.IE5

in the address bar of Window Explorer or My Computer.

I also do not hide system files at the Tools Advanced settings.

I don't know if Vista is similar but if so entering you equivalent of my line should let you see the file that is being complained about an maybe then let you delete it manually.

you can do the same in vista, go to appearance and personalisation Noreen, click folder options and click view tab then untick do not show hidden files and folders, then just type temp in the start search window and go to the temp folder and delete the offending file, or use explorer and right click on the star button and go to explore, then find your temp folder, using search is easier, chkdsk may run afer getting rid of the corrupt file stranger things have been known

[Noreen]

The Temp folder is empty. Search doesn't find the file.

Should I try that "sfc"? Do I just type "sfc /scannow"?

[Glenn]

Yes, type it into a dos prompt window, Noreen

[Simon]

I think you have to run it as a command, Noreen, so hit the Windows key + R, then type in cmd and hit OK / Enter.  That should produce a DOS window, where you can type sfc /scannow and hit Enter.

[Noreen]

I've run it and got the attached message.

[attachment deleted by admin]

[Rik]

It looks to me like you might need to do a repair, Noreen, but wait for the Vista users.

[Noreen]

I've tried to look at the Log files but it says access denied. Probably got to view as an Administrator again but I don't know how to do that.

God knows what this is doing to my blood pressure.

[Rik]

Not helping, I guess. Sorry.

[Steve]

I think this document tells you how to read the cbs log file http://support.microsoft.com/default.aspx/kb/928228 and then if successful replace the sr tagged files with a good copy

[Noreen]

I eventually managed to read the Log file as Administrator, might as well be in Chinese for all that it means to me but this seems to be the relevant part..............

POQ 64 ends.
2008-07-06 17:49:50, Info                  CSI    0000015d [SR] Verify complete
2008-07-06 17:49:50, Info                  CSI    0000015e [SR] Repairing 1 components
2008-07-06 17:49:50, Info                  CSI    0000015f [SR] Beginning Verify and Repair transaction
2008-07-06 17:49:50, Info                  CSI    00000160 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000161 [SR] Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-07-06 17:49:50, Info                  CSI    00000162 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000163 [SR] Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-07-06 17:49:50, Info                  CSI    00000164 Hashes for file member \??\C:\Windows\System32\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000165 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :
  Found: {l:32 b:U8my4V/7fffzx9jh4KE2doccZheuzagmScngiJHiwv4=} Expected: {l:32 b:qOUF+ctsOCM2TYmwdnxjaIw2MyNLU16DyI+ZtapP4nY=}
2008-07-06 17:49:50, Info                  CSI    00000166 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"autochk.exe"; source file in store is also corrupted
2008-07-06 17:49:50, Info                  CSI    00000167 Repair results created:
POQ 65 starts:

POQ 65 ends.
2008-07-06 17:49:50, Info                  CSI    00000168 [SR] Repair complete
2008-07-06 17:49:50, Info                  CSI    00000169 [SR] Committing transaction
2008-07-06 17:49:50, Info                  CSI    0000016a Creating NT transaction (seq 1), objectname [6]"(null)"
2008-07-06 17:49:50, Info                  CSI    0000016b Created NT transaction (seq 1) result 0x00000000, handle @0x6f4
2008-07-06 17:49:50, Info                  CSI    0000016c@2008/7/6:16:49:50.266 CSI perf trace:
CSIPERF:TXCOMMIT;2
2008-07-06 17:49:50, Info                  CSI    0000016d [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired
2008-07-06 17:54:05, Info                  CBS    Scavenge: Package store indicates there is no component to scavenge, skipping.

[Rik]

Has it improved things in any way, Noreen? It looks like both copies of the file have been damaged.

[Noreen]

In what way, Rik? I've haven't tried to do another check disk. CCleaner says that the corrupt file is still there.

How can I put this right?

[Rik]

Cannot repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-Autochk
Hashes for file member \??\C:\Windows\System32\autochk.exe do not match actual file
Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe do not match actual file [l:22{11}]"autochk.exe"

It looks like the working copy and spare have been broken - possibly infected.

[Steve]

I suppose replace with a good copy but where do you find one? backup? repair?
Below are the MS instructions

1.   At an elevated command prompt, type the following command, and then press ENTER:
takeown /f Path_And_File_Name
For example, type takeown /f E:\windows\system32\jscript.dll.
2.   Type the following command, and then press ENTER to grant administrators full access to the file:
icacls Path_And_File_Name /GRANT ADMINISTRATORS:F
For example, type icacls E:\windows\system32\jscript.dll /grant administrators:F.
3.   Type the following command to replace the file with a known good copy of the file:
Copy Path_And_File_Name_Of_Source_File Path_And_File_Name_Of_Destination
For example, type copy E:\temp\jscript.dll E:\windows\system32\jscript.dll.

[Glenn]

If you have the Vista install disc then a repair can be run from that http://www.bleepingcomputer.com/tutorials/tutorial148.html

[Noreen]

I haven't got a Vista disk but as I said earlier I do have a Vista Start Up/Repair disk supplied I think by Sebby. However I don't have any problem starting Windows so not sure if that would help. Sorry, I'm completely lost.

[Sebby]

Have you installed SP1, Noreen? I wonder if that's worth a go as it will replace a hell of a lot of files, hopefully the corrupt ones.

[Noreen]

The laptop came with SP1 installed, Sebby.

[Sebby]

Ah. As an XP user, I don't know what to suggest, Noreen. If it were me, I'd probably format.

[Steve]

Dont we just need one file though?

[Noreen]

I suppose I'll have to get on to the manufacturer's Support.

Yes Steve that's what I thought. Would it be on Sebby's disk?

[Glenn]

Here is a copy of autochk.exe from my PC, un-zip it and copy it to your C:/Windows/System32 directory, make a copy of your file before making any changes

[attachment deleted by admin]

[Steve]

But why do the MS instructions not allow you to do a straight forward copy? Is it to do with file ownership???

[Noreen]

Thanks Glenn, I'm going to leave this until tomorrow as I'm just shattered at the moment.