New
#1
SFC /scannow - Defender corruption?
A run today of sfc /scannow reported errors, with this message:.
"Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log."
CBS.log was largely unreadable but after research I found that this command
findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"
delivered a readable file.
There were thousands of apparently successful lines (I've left a few in at the top) but here are its last 46. They all seem to implicate Defender
Can anyone help me to interpret this and proceed to fix please?
2019-07-31 12:52:10, Info CSI 00005821 [SR] Verify complete
2019-07-31 12:52:10, Info CSI 00005822 [SR] Verifying 93
components
2019-07-31 12:52:10, Info CSI 00005823 [SR] Beginning Verify and
Repair transaction
2019-07-31 12:52:11, Info CSI 00005881 [SR] Verify complete
2019-07-31 12:52:11, Info CSI 00005882 [SR] Repairing 1
components
2019-07-31 12:52:11, Info CSI 00005883 [SR] Beginning Verify and
Repair transaction
2019-07-31 12:52:11, Info CSI 00005885 [SR] Cannot repair member
file [l:26]'MSFT_MpThreatCatalog.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 00005887 [SR] Cannot repair member
file [l:13]'Defender.psd1' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 00005889 [SR] Cannot repair member
file [l:20]'MSFT_MpWDOScan.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 0000588b [SR] Cannot repair member
file [l:22]'MSFT_MpSignature.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 0000588d [SR] Cannot repair member
file [l:19]'MSFT_MpThreat.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 0000588f [SR] Cannot repair member
file [l:27]'MSFT_MpComputerStatus.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 00005891 [SR] Cannot repair member
file [l:17]'MSFT_MpScan.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 00005893 [SR] Cannot repair member
file [l:28]'MSFT_MpThreatDetection.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 00005895 [SR] Cannot repair member
file [l:23]'MSFT_MpPreference.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 00005898 [SR] Cannot repair member
file [l:26]'MSFT_MpThreatCatalog.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 00005899 [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 0000589b [SR] Cannot repair member
file [l:13]'Defender.psd1' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 0000589c [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 0000589e [SR] Cannot repair member
file [l:20]'MSFT_MpWDOScan.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 0000589f [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058a1 [SR] Cannot repair member
file [l:22]'MSFT_MpSignature.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 000058a2 [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058a4 [SR] Cannot repair member
file [l:19]'MSFT_MpThreat.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 000058a5 [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058a7 [SR] Cannot repair member
file [l:27]'MSFT_MpComputerStatus.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 000058a8 [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058aa [SR] Cannot repair member
file [l:17]'MSFT_MpScan.cdxml' of Windows-Defender-Management-Powershell, version
10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash
mismatch
2019-07-31 12:52:11, Info CSI 000058ab [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058ad [SR] Cannot repair member
file [l:28]'MSFT_MpThreatDetection.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 000058ae [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058b0 [SR] Cannot repair member
file [l:23]'MSFT_MpPreference.cdxml' of Windows-Defender-Management-Powershell,
version 10.0.17134.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store,
hash mismatch
2019-07-31 12:52:11, Info CSI 000058b1 [SR] This component was
referenced by
[l:122]'Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.19d7e6e595ade1abc2bd0ca651b4908a'
2019-07-31 12:52:11, Info CSI 000058b4 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpComputerStatus.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058b7 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpThreat.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058ba [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpThreatCatalog.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058bd [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpThreatDetection.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058c0 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpPreference.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058c3 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpScan.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058c6 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpWDOScan.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058c9 [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpSignature.cdxml;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058cc [SR] Could not reproject
corrupted file
\??\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\\Defender.psd1;
source file in store is also corrupted
2019-07-31 12:52:11, Info CSI 000058ce [SR] Repair complete
2019-07-31 12:52:11, Info CSI 000058cf [SR] Committing
transaction
2019-07-31 12:52:11, Info CSI 000058d4 [SR] Verify and Repair
Transaction completed. All files and registry keys listed in this transaction have
been successfully repaired
Terry, East Grinstead, UK