For offline repairs, details are included in the log file provided by the /offlogfile flag.

So I've recently freshly installed Windows 10, everything perfect, until I used DDU and reinstalled a different NVIDIA Driver, now when I run sfc /scannow it comes up with corrupt files that could not be fixed... please see -

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

The log files points to 'System Configuration' which all I did was open that while in safe mode simply to turn safe mode off.

Situation: The client has a problem to run some programs such as Search, Command Prompt and Outlook. When he tried to run sfc /scannow, he receives this message:

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

Troubleshooting: we check CBS.log and find this error:

2021-10-28 13:28:09, Error CSI 0000015e@2021/10/28:18:28:09.493 (F) onecore\base\wcp\componentstore\csd_core.cpp(584): Error STATUS_SXS_COMPONENT_STORE_CORRUPT originated in function CCSDirect::GetComponentManifest expression: (null) [gle=0x80004005]

Resolution 1:

run these Deployment Image Servicing and Management commands:

“DISM /Online /Cleanup-Image /CheckHealth” without quote and press ENTER
“DISM /Online /Cleanup-Image /ScanHealth” without quote and press ENTER
“DISM /Online /Cleanup-Image /RestoreHealth” without quote and press ENTER


Resolution 2: Install the latest Windows Update.

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com View all posts by Bob Lin

Home Windows 10 PC

  • Windows 10 PC
Microsoft acknowledges a new issue in several Windows 10 versions

By

Mayank Parmar

-

July 16, 2019

For offline repairs, details are included in the log file provided by the /offlogfile flag.

Last week, we reported that Windows 10’s sfc /scannow command no longer works after the latest updates. The bug is hitting all supported versions of Windows 10 and the scannow command displays a generic error message, and the culprit appears to be the latest version of Windows Defender.

The sfc /scannow is a command to run System File Checker and repair Windows System files. Sfc /scannow (System File Checker) inspects important Windows files on the computer and replaces the corrupted file with a cached version.

After the latest updates, if you initiate a scan in any supported version of Windows 10 with the Windows System File Checker (sfc /scannow cmd command), the process would fail  with the following error:

Windows Resource Protection found corrupt files but was unable to fix some of them. For online repairs, details are included in the CBS log file located at windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline repairs, details are included in the log file provided by the /OFFLOGFILE flag.

For offline repairs, details are included in the log file provided by the /offlogfile flag.

Checking the CBS log file reveals that the problem is linked to Windows Defender PowerShell Module. The log file also states error message “Hashes for file member do not match.”

Today, Microsoft has acknowledged this problem in a new support document. In the support document, Microsoft stated that sfc /scannow feature is not broken and there is a bug that causes System File Checker (SFC) to incorrectly flag Windows Defender PowerShell module files as corrupt.

For offline repairs, details are included in the log file provided by the /offlogfile flag.

Microsoft says the bug affects almost all versions of Windows 10, including the May 2019 Update and Windows 10 version 1607.

“This is a known issue in Windows 10 version 1607 and later versions, and Windows Defender version 4.18.1906.3 and later versions,” the company stated in the support document.

Microsoft has posted the following technical explanation:

The files for the Windows Defender PowerShell module that are located in %windir%\System32\WindowsPowerShell\v1.0\Modules\Defender ship as part of the Windows image. These files are catalog-signed. However, the manageability component of Windows Defender has a new out-of-band update channel. This channel replaces the original files with updated versions that are signed by using a Microsoft certificate that the Windows operating system trusts. Because of this change, SFC flags the updated files as “Hashes for file member do not match.”

Microsoft says it is working on a fix and SFC will stop flagging the files incorrectly in a new future version of Windows.

What is the path and file name of the log file that lists repairs?

log file is located in the %windir%\Logs\CBS folder. The Windows Modules Installer service also writes to this log file. (The Windows Modules Installer service installs optional features, updates, and service packs.)

What is the CBS log file?

CBS. log file contains entries that some files aren't repaired after you successfully run the SFC utility - Windows Server | Microsoft Learn. Skip to main content.