Yupp, it does report that auotochk is corrupt, and it says it cannot
repair it. The Command line output is:
================
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 98% complete.
Windows Resource Protection found corrupt files but was unable to fix
some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example
C:\Windows\Logs\CBS\CBS.log
================
And an excerpt from the sfcdetails.txt files is
================
2008-02-22 09:59:02, Info CSI 0000001e [SR]
Verifying 100 (0x00000064) components
2008-02-22 09:59:02, Info CSI 0000001f [SR]
Beginning Verify and Repair transaction
2008-02-22 09:59:06, Info CSI 00000021 [SR] Verify
complete
2008-02-22 09:59:07, Info CSI 00000022 [SR]
Verifying 100 (0x00000064) components
2008-02-22 09:59:07, Info CSI 00000023 [SR]
Beginning Verify and Repair transaction
2008-02-22 09:59:09, Info CSI 00000025 [SR] Cannot
repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-
Autochk, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL
(0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:
31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
in the store, hash mismatch
2008-02-22 09:59:11, Info CSI 00000028 [SR] Cannot
repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-
Autochk, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL
(0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:
31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
in the store, hash mismatch
2008-02-22 09:59:12, Info CSI 0000002a [SR] Verify
complete
....
2008-02-22 10:03:05, Info CSI 000000ed [SR]
Verifying 100 (0x00000064) components
2008-02-22 10:03:05, Info CSI 000000ee [SR]
Beginning Verify and Repair transaction
2008-02-22 10:03:07, Info CSI 000000f0 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-
Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:03:10, Info CSI 000000f2 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-
Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:03:10, Info CSI 000000f4 [SR] Verify
complete
....
2008-02-22 10:03:59, Info CSI 0000010f [SR]
Beginning Verify and Repair transaction
2008-02-22 10:04:00, Info CSI 00000111 [SR] Cannot
repair member file [l:26{13}]"aero_link.cur" of Microsoft-Windows-
Shell-Cursors, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:04:08, Info CSI 00000113 [SR] Cannot
repair member file [l:26{13}]"aero_link.cur" of Microsoft-Windows-
Shell-Cursors, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:04:10, Info CSI 00000115 [SR] Verify
complete
....
2008-02-22 10:06:25, Info CSI 00000157 [SR]
Repairing 3 components
2008-02-22 10:06:25, Info CSI 00000158 [SR]
Beginning Verify and Repair transaction
2008-02-22 10:06:25, Info CSI 0000015a [SR] Cannot
repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-
Autochk, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL
(0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:
31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
in the store, hash mismatch
2008-02-22 10:06:25, Info CSI 0000015c [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-
Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:06:25, Info CSI 0000015e [SR] Cannot
repair member file [l:26{13}]"aero_link.cur" of Microsoft-Windows-
Shell-Cursors, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:06:25, Info CSI 00000160 [SR] Cannot
repair member file [l:22{11}]"autochk.exe" of Microsoft-Windows-
Autochk, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL
(0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:
31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
in the store, hash mismatch
2008-02-22 10:06:26, Info CSI 00000162 [SR] Cannot
repair member file [l:26{13}]"aero_link.cur" of Microsoft-Windows-
Shell-Cursors, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:06:26, Info CSI 00000164 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-
Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6000.16386, pA =
PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1
nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-02-22 10:06:26, Info CSI 00000166 [SR] Repair
complete
2008-02-22 10:06:26, Info CSI 00000167 [SR]
Committing transaction
2008-02-22 10:06:26, Info CSI 0000016b [SR] Verify
and Repair Transaction completed. All files and registry keys listed
in this transaction have been successfully repaired
================
The rest of the file does not look interesting but I could send it if
it would help with anything.
Are there other steps to take or am I screwed?
Best,
Magnus
On Feb 21, 9:08 pm, Darre...@online.microsoft.com ("Darrell
Gorter[MSFT]") wrote:
> Hello,
>
> |> autochk is present, but running it reports "Program to big to fit in
> |> memory". I guess that is normal?
> No this is not normal, that error message usually indicates that the file
> is corrupted.
> Just to check while in Windows I ran autochk. Autochk is supposed to run a
> boot time, before the OS locks any files so
> I didn't expect it to run but I expected a error message and I got the one
> I expected.
> "The C:\Windows\system32\autochk.exe application cannot be run in Win32
> mode."
> I would suggest running sfc /scannow on your system and report back any
> errors.
> It logs to the cbs.log file.
> The log file is pretty noisy so run this command against it
> findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >sfcdetails.txt
>
> From this article
> 928228 How to analyze the log file entries that the Microsoft Windows
> Resource Checker (SFC.exe) program generates in Windows Vistahttp://support.microsoft.com/default.aspx?scid=kb;EN-US;928228
>
> we are looking to see if sfc reports an issue with autochk
>
> Thanks,
> Darrell Gorter[MSFT]
>


Reply With Quote

Bookmarks