The CBS.log file contains entries that some files are not repaired even after you successfully run the SFC utility on a Windows Server 2008-based computer

Article translations Article translations
Article ID: 954402 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

You run the System File Checker (SFC) utility (Sfc.exe) to scan for changes in Windows system files in a Windows Server 2008-based computer. When you run the SFC utility, you may receive the following message:
All files and registry keys listed in this transaction have been successfully repaired.
However, when you view the %windir%\Logs\CBS\CBS.log file that the Sfc.exe program generates, you may see the following entries:
<Date> <Time>, Info CSI 00000142 [SR] Repairing 1 components
<Date> <Time>, Info CSI 00000143 [SR] Beginning Verify and Repair transaction
<Date> <Time>, Info CSI 00000145 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.5720.0, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
<Date> <Time>, Info CSI 00000147 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.5720.0, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
<Date> <Time>, Info CSI 00000149 [SR] Repair complete
<Date> <Time>, Info CSI 0000014a [SR] Committing transaction
<Date> <Time>, Info CSI 0000014e [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

CAUSE

Static files and mutable files are the two kinds of files that are defined in the system. Static files cannot be changed. Mutable files can be changed. Registry files and log files are examples of mutable files. The Windows Resource Protection (WRP) feature does not scan mutable files. The WRP feature scans static files when the SFC utility scans the computer. The WRP feature helps protect most of the static files. However, in this case, the WRP feature does not protect the Img11.jpg static file. If a static file changes when the WRP feature scans the file, the change is recorded in the CBS.log file. Because the WRP feature does not protect the Img11.jpg static file, the WRP feature has no option other than to report the change in the CBS.log file.

MORE INFORMATION

The Sfc.exe program writes the details of each verification operation and of each repair operation to the CBS.log file. Each SFC.exe program entry in the CBS.log file has an [SR] tag.

Note The Windows Modules Installer service also writes to the CBS.log file. The Windows Modules Installer service installs optional features, updates, and service packs.

You can search for [SR] tags to help locate SFC.exe program entries. To search for [SR] tags and to redirect the search results to a text file, follow these steps:
  1. Click Start
    Collapse this imageExpand this image
    the Start button
    , type cmd in the Start Search box, right-click cmd in the Programs list, and then click Run as administrator.

    Collapse this imageExpand this image
    User Access Control permission
    If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
  2. At the command prompt, type the following command, and then press ENTER:
    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >sfcdetails.txt
    Note The Sfcdetails.txt file includes the entries that are logged every time that the SFC.exe program runs on the computer.
  3. Type exit, and then press ENTER to close the Command Prompt window.

Properties

Article ID: 954402 - Last Review: October 20, 2008 - Revision: 1.0
APPLIES TO
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Standard
  • Windows Web Server 2008
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Standard without Hyper-V
Keywords: 
kbexpertiseinter kbtshoot KB954402

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com