[noahdfear]

Thanks - just making sure sfc.exe is present.

Please restart the computer and immediately begin tapping the F8 key to enable the Advanced start menu.
If 'Repair your computer' is an option, please select it.
If the option is not there, you will need to boot from the Vista dvd, then select the Repair your computer option at the Install Windows screen as shown below.



Once you get to the System Recovery Options screen, let me know what drive letter is shown for the operating system, as illustrated below.

[Advertisements]

It shows (C:) SQ008696V02. Noah, I have to leave for a couple of hours I'll fallow up on whatever instructions you send when I came back. Thanks!

[jllaz]

It shows (C:) SQ008696V02. Noah, I have to leave for a couple of hours I'll fallow up on whatever instructions you send when I came back. Thanks!

[noahdfear]

No hurry

From the System Recovery Options menu, select Command Prompt
Type the following command then hit Enter.

sfc /scannow /offbootdir=c:\ /offwindir=c:\windows

Please note the spaces in the command. There is a space just before each command switch, eg;

/scannow is a switch
/offbootdir=c:\ is a switch
/offwindir=c:\windows is a switch

You should see a 'Beginning system scan' message as shown below.



When the scan completes you will be notified, at which time you can close the command prompt and restart back to normal mode. Let me know what happens and if there's any change.

[jllaz]

I did the command, restared the computer, it gets to the loggin screen, if I choose either Administrator or Tony it goes to a dark screen and I'm not able to log in. By the way when the scan finished it did show that some files were corrupted and it had fix them.

Edited by jllaz, 19 December 2009 - 06:42 PM.

[noahdfear]

Dark screen? Please be more descriptive.

If sfc named any files, do you recall any of the filenames?

[jllaz]

When I start the computer it goes thru the usual bootup motion. It gets to the login screen and it gives me the acct. choice. Admin. or Tony. I tried both ways allready and it starts the proccess but within seconds the screen darkens a little and all I can see is the cursor or pointing arrow all this time there still is activity on the disk until a few seconds later the activity stops and the screen still the same, no desktop or any other message. The scan only said that some files were found to be corrupted it did not list any names, only gave an exemple of where the log could be found on the C: dr.

[noahdfear]

Lets see if we can determine what files were replaced. Go back to Repair your computer command prompt and execute the following commands.

c:\windows\system32\findstr.exe /c:"[SR]" c:\windows\logs\cbs\cbs.log >temp.txt

c:\windows\system32\findstr.exe /i "corrupted" temp.txt >temp1.txt

notepad temp1.txt

The log will show the time and date as well as any files affected. Please let me know what you find.
You can also at this time type notepad temp.txt to view the entire log, then match corresponding entries and check the events around each file to see which of the replacements failed or succeeded.

[jllaz]

Result: Four statements FINDSTR= Can not open /i,corrupted, temp.txt, notepad

[noahdfear]

Sounds like you didn't get the spacing in the commands correct. Highlight and copy those commands then paste them into notepad.
Use the left/right arrow keys to determine the exact spacing in the commands.

[jllaz]

Sorry, do I execute each statement separate?

[noahdfear]

Yes. Hit Enter after each line.

You can also try this.
Connect your flash drive to the computer and restart, then go to the Recovery Environment command prompt.
Type diskpart then hit enter.
At the diskpart> prompt type list volume then hit Enter.
This should allow you to see the drive letter assigned to the flash drive - lets say for the following example it is E
Type exit to leave the diskpart tool and return to the command prompt.
Type the following commands.

c:\windows\system32\findstr.exe /c:"[SR]" c:\windows\logs\cbs\cbs.log >temp.txt

copy temp.txt e:\

You should see 1 file copied.
If you do not, type copy temp.txt e:\temp.txt
Shut down and remove the flash drive then use it in your other computer to attach temp.txt to a reply here (attach it rather than copy/paste)

[jllaz]

edit - Log attached

Attached Files

•  temp.txt   21.43KB   152 downloads

[noahdfear]

There are no events there corresponding to today. Please type the following at the command prompt then hit Enter.

notepad c:\windows\logs\cbs\cbs.log

Look for events about the time you ran sfc in the Recovery Environment.

[jllaz]

This should be the continuation.

edit - log attached -

Attached Files

•  cbs.txt   101.2KB   144 downloads

[noahdfear]

There are no events for that sfc session.

Lets try a system restore.
Close the command window and select System Restore from the System Recovery Options menu.
Select the newest restore point shown - should be a ComboFix created restore point from one of the last CF sessions.