Share via


SFC founded integrity violations

Question

Thursday, September 19, 2019 8:14 AM

Hello,

Windows Resource Protection found integrity violations. How can I fix this issue?

I attached CBS log here:

https://1drv.ms/u/s!AiKKqJaRZheDoWSdXz8UaDCWn3Qs?e=j28bt9

Thanks

All replies (7)

Thursday, September 19, 2019 8:27 AM

The log displayed windows defender hash mismatch.

Perform the following steps:

1) Perform Windows updates

2) Open administrative command prompt and type or copy and paste:
3) sfc /scannow
4) dism /online /cleanup-image /scanhealth
5) dism /online /cleanup-image /restorehealth
6) sfc /scannow
7) chkdsk /scan

  1. When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

.
.
.
.

Please remember to vote and to mark the replies as answers if they help.
.
.
.
.
.


Thursday, September 19, 2019 1:26 PM

I run these command but I have integrity violations again.

New CBS is:

https://1drv.ms/u/s!AiKKqJaRZheDoWWQfqCQqEYHtf4c?e=XsGm0C


Thursday, September 19, 2019 1:47 PM

2019-09-19 05:24:16, Info                  CSI    00000189 [SR] Beginning Verify and Repair transaction
2019-09-19 05:24:17, Info                  CSI    0000018a CSIPERF - FilePI Queue 370ms
2019-09-19 05:24:17, Info                  CSI    0000018b Hashes for file member [l:27]'MSFT_MpComputerStatus.cdxml' do not match.
 Expected: {l:32 ml:33 b:250a58b9ec6c327e7d165cecbdbae0b1fdca203cd342dba12616527b47a44486}.
 Actual: {l:32 b:cbfca6cb14b5a84f5bd30cbc9b05f008f4916e54a33a513fcedf8bff90002f5d}.
2019-09-19 05:24:17, Info                  CSI    0000018c [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpComputerStatus.cdxml from store
2019-09-19 05:24:17, Info                  CSI    0000018d Hashes for file member [l:19]'MSFT_MpThreat.cdxml' do not match.
 Expected: {l:32 ml:33 b:ae595236832a3884d2aa3f913454ac6ff4c735f55e819c7f391c94b653281f92}.
 Actual: {l:32 b:dd2decdbc6ec0357ddbd952ad3c29c0a05fc7368badb377648bb8f0964eedeec}.
2019-09-19 05:24:17, Info                  CSI    0000018e [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpThreat.cdxml from store
2019-09-19 05:24:17, Info                  CSI    0000018f Hashes for file member [l:26]'MSFT_MpThreatCatalog.cdxml' do not match.
 Expected: {l:32 ml:33 b:106d459542c3ec7dd9b7e545d74a4a98f0ad74c7db6a1333cfcd9168e2a3c076}.
 Actual: {l:32 b:ff8bbde3d74745abc4b8bef6278c46bd9bba05c2e61f0eb033787443cde80f44}.
2019-09-19 05:24:17, Info                  CSI    00000190 [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpThreatCatalog.cdxml from store
2019-09-19 05:24:17, Info                  CSI    00000191 Hashes for file member [l:28]'MSFT_MpThreatDetection.cdxml' do not match.
 Expected: {l:32 ml:33 b:a19bf000eb950ddd8438c30562c0fa6f3c0848432f55a219ef3d79b302aa6cf1}.
 Actual: {l:32 b:3c082a55cd0e2d835764bb55c35292277b3c3a7a909543123a9b75bddf7ef20f}.
2019-09-19 05:24:17, Info                  CSI    00000192 [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpThreatDetection.cdxml from store
2019-09-19 05:24:17, Info                  CSI    00000193 Hashes for file member [l:23]'MSFT_MpPreference.cdxml' do not match.
 Expected: {l:32 ml:33 b:8861d55dd84b45902d2fbd8f73fd663be669f589105ce656000b77496ece0de6}.
 Actual: {l:32 b:dd557986b51074f3e4b7d5c0923903bf10ba919a1235605f5cba8a49b05ef07d}.
2019-09-19 05:24:17, Info                  CSI    00000194 [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpPreference.cdxml from store
2019-09-19 05:24:17, Info                  CSI    00000195 Hashes for file member [l:17]'MSFT_MpScan.cdxml' do not match.
 Expected: {l:32 ml:33 b:a27630566684ee79af41ac68dc70bbdbffc968b2489aa16be0d0fa0e0eccf0c8}.
 Actual: {l:32 b:52a143a0bcb954c7ec8b35044ef9284055c75e7e2fe316cbaa120d665c06b1a7}.
2019-09-19 05:24:17, Info                  CSI    00000196 [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpScan.cdxml from store
2019-09-19 05:24:17, Info                  CSI    00000197 Hashes for file member [l:20]'MSFT_MpWDOScan.cdxml' do not match.
 Expected: {l:32 ml:33 b:80ddeca09c6c85cde406bd9352c24cb6ca58ab17062159713f0591c46fa7b9fd}.
 Actual: {l:32 b:064d8c62e1d613524ab6f414d4906ba77d8eefc4ba2bae3ac796b3332b1681ec}.
2019-09-19 05:24:17, Info                  CSI    00000198 [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpWDOScan.cdxml from store
2019-09-19 05:24:17, Info                  CSI    00000199 Hashes for file member [l:22]'MSFT_MpSignature.cdxml' do not match.
 Expected: {l:32 ml:33 b:dbb84a0489a5dfeecb4e850412aabb72e725e5f89319d9e158a8baa9be6470da}.
 Actual: {l:32 b:956a869d006ef2b477e146835befea9e9da6af260506389e79ce8a669906f0b3}.
2019-09-19 05:24:17, Info                  CSI    0000019a [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\MSFT_MpSignature.cdxml from store
2019-09-19 05:24:17, Info                  CSI    0000019b Hashes for file member [l:13]'Defender.psd1' do not match.
 Expected: {l:32 ml:33 b:1b1971fcbdc0abc871748d7409c696bb509c4ede12b0c748af0af96e629961b7}.
 Actual: {l:32 b:b096112fba4e3abcde87ad6dfc843c7e2d74fb469125a00404e12fbe5f054ecb}.
2019-09-19 05:24:17, Info                  CSI    0000019c [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\Defender.psd1 from store


Thursday, September 19, 2019 1:54 PM

The above were the Windows or Microsoft defender hash mismatches.

2019-09-19 05:24:17, Info                  CSI    0000019c [SR] Repairing corrupted file \?\C:\WINDOWS\System32\WindowsPowerShell\v1.0\Modules\Defender\Defender.psd1 from store

.

.

Perform an in place upgrade repair:

https://www.tenforums.com/tutorials/16397-repair-install-windows-10-place-upgrade.html

.

.

1) Find a flash drive that you can format (>.or = 8 GB)

2) Create a bootable Windows 10 iso

https://www.microsoft.com/en-us/software-download/windows10
https://www.tenforums.com/tutorials/9230-download-windows-10-iso-file.html
https://www.tenforums.com/tutorials/2376-create-bootable-usb-flash-drive-install-windows-10-a.html

3) Power on the computer

4) Open file explorer > this PC > click on the iso > launch setup.exe

5) follow the text and images in this link:

https://www.tenforums.com/tutorials/16397-repair-install-windows-10-place-upgrade.html

.
.
.
.

Please remember to vote and to mark the replies as answers if they help.
.
.
.
.
.


Friday, September 20, 2019 6:43 AM

Hi,

Please reference steps mentioned in More Information section in below link to manually replace a corrupted system file with a known good copy of the file:
https://support.microsoft.com/en-gb/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Tuesday, September 24, 2019 8:15 AM

Hi,

How things are going there on this issue?

Please let me know if you would like further assistance.

Best Regards,
Eve Wang   

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Thursday, September 26, 2019 9:29 AM

Hi,

Is there any update?

Please click “Mark as answer” if any of above reply is helpful. It would make this reply to the top and easier to be found for other people who has the similar problem.

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].