New
#31
Meaning of "verified image"? Something from my last Macrium Reflect backup, perhaps?
I used Everything, a nice file finder, which found only two entries, both dated 16July2016; the first one ends thus: `d1512fab13'. Is that meaningful?Okay so I once had a bad reparse point on a system, a few years ago, and remember I manually found it and removed it.
Do me a favor and try this:
Using Agent Ransack, search C:\ for the first one: cmitrust.dll
My system found four, one of which is the one listed in your RKILL log.
Attachment 98150
Hover your mouse over that one and right-click, selecting Properties.
Attachment 98151
Now put your mouse cursor into the Location, and use the right arrow on the keyboard to go through the entire path. Stop when it gets to the end ("...d239dd") and see if there is anything further.
Is there anything past where it should end? I can't recall what the reparse point looked like in my system.[
That seems a bit scary, but your suggestion of asking at Bleeping Computer seems to be a good one.If there is something further in the Location, that is the reparse information. Seems to me, I recall removing that remaining information and it got rid of the reparse point. Since you have an image from a few days ago to fall back on, you could try this. (EDIT: I am not sure that this is the correct method, but it seemed to work for my system.)
The other option I can suggest is Tweaking.com. I read from the developer in 2015 he intended to put a "reparse fix" in his tool.
Now, a word of warning: if you use this tool, ONLY use the reparse portion of it - nothing else. People have totally borked their systems doing everything at once. If you would feel more comfortable, start a thread at Bleeping Computer, post your RKILL log, and ask for assistance using the tool. Like I said, I have not used it, and so can offer no guidance, but their people are trained on everything they offer for downloads, so someone there will be able to guide you through it. If you decide to go this route, please post the link here to your thread, so we can watch it.
Tweaking.com - Windows Repair Free/Pro
.
Macrium offers the option of verifying your images when they're created, if you check that box when creating your instruction file.
Otherwise, you could open Macrium, go to the restore tab, navigate to your most recent image and run Verify on it, to be sure it's good.
No, you must find the exact path that's listed in the RKILL log. Do you have show hidden files and folders enabled?
It is, and I can't tell from the Tweaking forum if he ever included reparse/junction fixes, but the guys at Bleeping Computer would know.
I'm wondering if a good-old-fashioned CHKDSK would detect and possibly fix any broken reparse points?
It would need to be run from an elevated command prompt, and I suggest starting by just running CHKDSK with no options and seeing what it says- copy and paste back here perhaps?
In this case, David, where the reparse points are <unknown target> and not a hard link, it's quite possible a CHKDSK /r could fix them. Thanks for suggesting that.
Please do try that @Not Myself.
I ran CHKDSK a few nights ago; it started, quickly went to 10%, and stayed there for perhaps an hour, so I went to be. The next morning, when I woke the computer, it was on the log-on page, so it seems that CHKDSK had finally completed. As far as I know, which is not even close to being far, the process did not fix anything.
My last file is a differential one, dated 19Aug2016, which verified successfully. Should I now do something with it?
In case you did not notice, I don't know much about Macrium; in fact, all I have ever done with it is to set it up and let it run backups. I don't even know what restoring that image would do; that is, just how much it would restore.