[Smokey]

My Server service is not starting. I tracked down the problem viewing the Event Viewer and seeing these three system errors:

 

 

The Server service depends on the Server SMB 1.xxx Driver service which failed to start because of the following error: 

The dependency service or group failed to start.

 

The Server SMB 1.xxx Driver service depends on the Server SMB 2.xxx Driver service which failed to start because of the following error: 

Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

 

The Server SMB 2.xxx Driver service failed to start due to the following error: 

Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

So basically I have a corrupted srv2.sys file in the Windows Drivers directory. I tried sfc /scannow and sfc /scanfile in the command prompt with administrator privileges. SFC says I have corrupted files but it was not able to repair them. It tells me to view the error in the log. I tried viewing the CBS log but I get an "access denied" error when I try viewing the log.

 

Anyone gonna try this one? It's a doozy.

Edited by Smokey, 14 April 2014 - 06:32 PM.

[Advertisements]

I found a way to replace my corrupted srv2.sys file. This KB page lists hotfixes. One of the hotfixes includes the latest version of the file I needed. Installing hotfix in KB Article 2914677 replaced the corrupted file and solved my problem.

Edited by Smokey, 14 April 2014 - 07:10 PM.

[Smokey]

I found a way to replace my corrupted srv2.sys file. This KB page lists hotfixes. One of the hotfixes includes the latest version of the file I needed. Installing hotfix in KB Article 2914677 replaced the corrupted file and solved my problem.

Edited by Smokey, 14 April 2014 - 07:10 PM.

[Trevorever]

Does SFC still say you have corrupted files?

 

I'd run a hard drive test to make sure that isn't the cause of the corruption. Here is a link to Seatools.

[Smokey]

I got:

 

"Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log"

 

I get a generic "Access Denied" error when I try opening the log file. I don't have an optical drive for the ISO link you provided me.

Edited by Smokey, 14 April 2014 - 07:20 PM.

[Trevorever]

Here is GSMARTControl to run within Windows. Choose your disk, go to the Attributes tab, click view output and copy and paste it here. Also, go to the Perform Tests tab and run an Extended Self-Test.

[Smokey]

smartctl 5.43 2012-06-30 r3573 [i686-w64-mingw32-win7(64)-sp1] (sf-5.43-1)

Copyright © 2002-12 by Bruce Allen, http://smartmontools.sourceforge.net

 

=== START OF INFORMATION SECTION ===

Device Model:     ST480HM000

Serial Number:    Z4P0012F

LU WWN Device Id: 5 000c50 02ff059bc

Firmware Version: C675

User Capacity:    480,103,981,056 bytes [480 GB]

Sector Sizes:     512 bytes logical, 4096 bytes physical

Device is:        Not in smartctl database [for details use: -P showall]

ATA Version is:   8

ATA Standard is:  ATA-8-ACS revision 4

Local Time is:    Mon Apr 14 23:13:16 2014 CDT

SMART support is: Available - device has SMART capability.

SMART support is: Enabled

 

=== START OF READ SMART DATA SECTION ===

SMART overall-health self-assessment test result: PASSED

 

General SMART Values:

Offline data collection status:  (0x02) Offline data collection activity

was completed without error.

Auto Offline Data Collection: Disabled.

Self-test execution status:      (   0) The previous self-test routine completed

without error or no self-test has ever 

been run.

Total time to complete Offline 

data collection: (    6) seconds.

Offline data collection

capabilities: (0x19) SMART execute Offline immediate.

No Auto Offline data collection support.

Suspend Offline collection upon new

command.

Offline surface scan supported.

Self-test supported.

No Conveyance Self-test supported.

No Selective Self-test supported.

SMART capabilities:            (0x0002) Does not save SMART data before

entering power-saving mode.

Supports SMART auto save timer.

Error logging capability:        (0x01) Error logging supported.

General Purpose Logging supported.

Short self-test routine 

recommended polling time: (   1) minutes.

Extended self-test routine

recommended polling time: (  76) minutes.

 

SMART Attributes Data Structure revision number: 0

Vendor Specific SMART Attributes with Thresholds:

ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE

  1 Raw_Read_Error_Rate     0x000e   166   166   006    Old_age   Always       -       0

  5 Reallocated_Sector_Ct   0x0033   100   100   036    Pre-fail  Always       -       0

  9 Power_On_Hours          0x0032   099   099   000    Old_age   Always       -       1033

 12 Power_Cycle_Count       0x0032   100   100   020    Old_age   Always       -       673

171 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       0

172 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       0

181 Program_Fail_Cnt_Total  0x0032   100   100   000    Old_age   Always       -       0

182 Erase_Fail_Count_Total  0x0032   100   100   000    Old_age   Always       -       0

194 Temperature_Celsius     0x0022   025   000   000    Old_age   Always       -       25 (Min/Max 10/59)

201 Soft_Read_Error_Rate    0x0032   100   100   000    Old_age   Always       -       0

204 Soft_ECC_Correction     0x0032   100   100   000    Old_age   Always       -       0

231 Temperature_Celsius     0x0013   100   100   010    Pre-fail  Always       -       0

234 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       9323

241 Total_LBAs_Written      0x0032   100   100   000    Old_age   Always       -       2951

242 Total_LBAs_Read         0x0032   100   100   000    Old_age   Always       -       9248

250 Read_Error_Retry_Rate   0x0032   100   100   000    Old_age   Always       -       7569

 

SMART Error Log not supported

SMART Self-test Log not supported

Device does not support Selective Self Tests/Logging

 

Test in Progress. Will report back tomorrow.

Edited by Smokey, 14 April 2014 - 10:20 PM.

[Machiavelli]

Export CBS folder

• Click the Start button then click Computer.
• Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
• Find and double click on the Logs folder.
• Right-click on the CBS folder, and select Copy.
• Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
• Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
• A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.
• Attach this to your next post please. If it is too big, please use an alternative uploading method then send me the link (Dropbox, SkyDrive, SendSpace etc.).

[Smokey]

Here is the Smartctrl output:

 

smartctl 5.43 2012-06-30 r3573 [i686-w64-mingw32-win7(64)-sp1] (sf-5.43-1)

Copyright © 2002-12 by Bruce Allen, http://smartmontools.sourceforge.net

 

=== START OF INFORMATION SECTION ===

Device Model:     ST480HM000

Serial Number:    Z4P0012F

LU WWN Device Id: 5 000c50 02ff059bc

Firmware Version: C675

User Capacity:    480,103,981,056 bytes [480 GB]

Sector Sizes:     512 bytes logical, 4096 bytes physical

Device is:        Not in smartctl database [for details use: -P showall]

ATA Version is:   8

ATA Standard is:  ATA-8-ACS revision 4

Local Time is:    Mon Apr 14 23:36:04 2014 CDT

SMART support is: Available - device has SMART capability.

SMART support is: Enabled

 

=== START OF READ SMART DATA SECTION ===

SMART overall-health self-assessment test result: PASSED

 

General SMART Values:

Offline data collection status:  (0x02) Offline data collection activity

was completed without error.

Auto Offline Data Collection: Disabled.

Self-test execution status:      (   0) The previous self-test routine completed

without error or no self-test has ever 

been run.

Total time to complete Offline 

data collection: ( 1321) seconds.

Offline data collection

capabilities: (0x19) SMART execute Offline immediate.

No Auto Offline data collection support.

Suspend Offline collection upon new

command.

Offline surface scan supported.

Self-test supported.

No Conveyance Self-test supported.

No Selective Self-test supported.

SMART capabilities:            (0x0002) Does not save SMART data before

entering power-saving mode.

Supports SMART auto save timer.

Error logging capability:        (0x01) Error logging supported.

General Purpose Logging supported.

Short self-test routine 

recommended polling time: (   1) minutes.

Extended self-test routine

recommended polling time: (  76) minutes.

 

SMART Attributes Data Structure revision number: 0

Vendor Specific SMART Attributes with Thresholds:

ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE

  1 Raw_Read_Error_Rate     0x000e   166   166   006    Old_age   Always       -       0

  5 Reallocated_Sector_Ct   0x0033   100   100   036    Pre-fail  Always       -       0

  9 Power_On_Hours          0x0032   099   099   000    Old_age   Always       -       1033

 12 Power_Cycle_Count       0x0032   100   100   020    Old_age   Always       -       673

171 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       0

172 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       0

181 Program_Fail_Cnt_Total  0x0032   100   100   000    Old_age   Always       -       0

182 Erase_Fail_Count_Total  0x0032   100   100   000    Old_age   Always       -       0

194 Temperature_Celsius     0x0022   035   000   000    Old_age   Always       -       35 (Min/Max 10/59)

201 Soft_Read_Error_Rate    0x0032   100   100   000    Old_age   Always       -       0

204 Soft_ECC_Correction     0x0032   100   100   000    Old_age   Always       -       0

231 Temperature_Celsius     0x0013   100   100   010    Pre-fail  Always       -       0

234 Unknown_Attribute       0x0032   100   100   000    Old_age   Always       -       9325

241 Total_LBAs_Written      0x0032   100   100   000    Old_age   Always       -       2952

242 Total_LBAs_Read         0x0032   100   100   000    Old_age   Always       -       9250

250 Read_Error_Retry_Rate   0x0032   100   100   000    Old_age   Always       -       7569

 

SMART Error Log not supported

SMART Self-test Log not supported

Device does not support Selective Self Tests/Logging

[Smokey]

Here is the CBS log.

Attached Files

•  CBS.log   36.1KB   492 downloads

[Machiavelli]

I asked after the CBS folder, not after the CBS.log itself.

[Smokey]

My mistake, here is a link to the folder in a zip file.

 

https://drive.google...dit?usp=sharing

[Machiavelli]

If we trust CBS Log you haven't run SFC. Anyway, I like to check the services. If the result is good I think the case is solved (since you said you solved the problem on your way)

There is a question, which I ask myself:

Why was this file corrupted?

1. Is it because of hardware failure?
2. Is it because of Malware issue?
3. Is it because a damage of Windows etc.?

If you like we could check for Malware.

Please download Farbar Service Scanner and run it on the computer with the issue. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FSS icon and select Run as Administrator)

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

[Smokey]

I have no idea why srv2.sys would have been corrupted.

 

Farbar Service Scanner Version: 25-02-2014

Ran by Nathan (administrator) on 15-04-2014 at 13:42:21

Running from "C:\Users\Nathan\Downloads"

Microsoft Windows 7 Professional  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************

 

Internet Services:

============

 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.

 

 

Windows Firewall:

=============

 

Firewall Disabled Policy: 

==================

 

 

System Restore:

============

 

System Restore Disabled Policy: 

========================

 

 

Action Center:

============

 

 

Windows Update:

============

 

Windows Autoupdate Disabled Policy: 

============================

 

 

Other Services:

==============

 

 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys => MD5 is legit

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll => MD5 is legit

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll => MD5 is legit

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

 

 

**** End of log ****

Edited by Smokey, 15 April 2014 - 12:42 PM.

[Machiavelli]

If everything is OK from your side it is fine to declare that topic as solved.

[Smokey]

Yes [SOLVED]