SFC /SCANNOW or equalivent tool

[LunchBox]

Greetings,

I want to run SFC but it only working in normal mode. Does anyone how how to make it work in safe mode? or does anyone know of a tool that can do the same as SFC if it is run in safe mode?

This is something that I would like to implement to my virus cleanup process and would like to do it in safe mode.


Thank you

 

[LunchBox]

Anyone have any ideas?

 

[abe]

try scanonce that should do the job, and if after youv'e cleaned the computer you cant get into windows use ubcd4win and edit the reg to sacnonce on boot


/SCANNOW Scans all protected system files immediately.
/SCANONCE Scans all protected system files once at the next boot.
/SCANBOOT Scans all protected system files at every boot.
/REVERT Return scan to default setting.
/PURGECACHE Purges the file cache.
/CACHESIZE=x Sets the file cache size

The sfc command sets the Value Data for the SFCScan key, with /scanboot &
/scanonce.

The SfcScan value in the following registry key has three possible settings:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
The settings for the SfcScan value are:
0x0 = do not scan protected files after restart. (Default value)
0x1 = scan all protected files after every restart (set if sfc /scanboot is
run).
0x2 = scan all protected files one time after a restart (set if sfc
/scanonce is run).

 

[LunchBox]

try scanonce that should do the job, and if after youv'e cleaned the computer you cant get into windows use ubcd4win and edit the reg to sacnonce on boot


/SCANNOW Scans all protected system files immediately.
/SCANONCE Scans all protected system files once at the next boot.
/SCANBOOT Scans all protected system files at every boot.
/REVERT Return scan to default setting.
/PURGECACHE Purges the file cache.
/CACHESIZE=x Sets the file cache size

The sfc command sets the Value Data for the SFCScan key, with /scanboot &
/scanonce.

The SfcScan value in the following registry key has three possible settings:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
The settings for the SfcScan value are:
0x0 = do not scan protected files after restart. (Default value)
0x1 = scan all protected files after every restart (set if sfc /scanboot is
run).
0x2 = scan all protected files one time after a restart (set if sfc
/scanonce is run).

Very freaking creating Abe.

I have change the key that points to the i386 folder in a CD versus the windows installation many times.

It never occured to me to change that key.

I guess that's why people pay top dollar for your services.


I don't have the PC anymore with the issue but I will try it on my test machine.

SFC does not work in safe mode with any switch (at least on the PC's I tried it never works). I will make the change in the registry using UBCD and see how it actually runs through the process so when I actually do it to a customers pc I know what to expect.


Thank you

 

[abe]

When you start up after you get the backround, before loading explorer, youget a popup that tells you "windows is verifying files......." in win 7 the repair option does it for you.

Abe

 

[LunchBox]

Abe.

I tried this a couple of times using UBCD4Win and safe mode. I created a SFCScan key and change it to 2 and it works like a charm in normal mode but if I boot into safe mode SFC not does start.

The reason for this is because I've had 2 PC's (different clients) where the PC's were infected with malware. The apps cleaned up all malware but something got corrupted to the point that the PC would boot up in safe mode ok but in normal mode once the desktop appears or where it says applying computer settings windows freezes.

I have not been able to pin point the reason for it freezing. I figure SFC could fix it since it has fixed odd issues for me in the past.

Is there another way that I can make SFC run if windows freezes in normal mode?

What could I have looked or repaird from you experince that would have fixed a frozen desktop and or freezing at applying computer settings?

Thank you

 

[abe]

your best bet is a repair install. if you don't have the install media, try using the I386 folder.

it could have been anything that caused it, i'm thinking drivers, but your easiest route now is a repair install.

 

[LunchBox]

Yes, re-install is what I had to do.

I hate doing re-install becasue it takes away from learning.
Back in the corporate world I would swap the user's PC with a similar one and I would take the back one and would try to figure out the issue. I cant do that anymore

At least I learned about the SFCScan reg key, which I will definetly give it a try next time.

 

[abe]

try a repair install befor a re-install, you have nothing to lose.

 

[LunchBox]

I forgot to mention.

The main issue is that the client does not have the restore CD's. The virus killed the menu so I could not get into it. On of the PC's there was an option to create the CD's but it said it was already used. So I figured SFC.

I have already fixed the issue but basically the clients did not have the CD and I could not get into the menu.

I fixed one with using re-image.com demo (very nice tool by the way) which fixed it under 1 hour. The other one the client was going to order the CD's.

I had CDs for one clients PC which was a presario but it would not work due to being different somehow (both PC's were presario but different series)

Anyways. well I nuked and paved but I was disappointed from not learning anything for that issue.