Inactive Mfplat.dll, SyncToy, and WIN7 Index fail

Hi Broni,


I just returned after ~30 day trip and captured the information last requested.


I ran Systemlook.exe

SystemLook 30.07.11 by jpshortstuff

Log created at 09:12 on 04/10/2014 by …

Administrator - Elevation successful



========== filefind ==========



Searching for "mfplat.dll"

C:\Windows\System32\mfplat.dll --a---- 430592 bytes [00:19 14/07/2009] [01:41 14/07/2009] 54B5DCD55B223BC5DF50B82E1E9E86B1

C:\Windows\SysWOW64\mfplat.dll --a---- 352768 bytes [00:04 14/07/2009] [01:15 14/07/2009] 2750DA85EBBF0A91039A0D2FF8A0AAF6

C:\Windows\winsxs\amd64_microsoft-windows-mfplat_31bf3856ad364e35_6.1.7600.16385_none_529f8a546d2657c9\mfplat.dll --a---- 430592 bytes [00:19 14/07/2009] [01:41 14/07/2009] 54B5DCD55B223BC5DF50B82E1E9E86B1

C:\Windows\winsxs\x86_microsoft-windows-mfplat_31bf3856ad364e35_6.1.7600.16385_none_f680eed0b4c8e693\mfplat.dll --a---- 352768 bytes [00:04 14/07/2009] [01:15 14/07/2009] 2750DA85EBBF0A91039A0D2FF8A0AAF6



-= EOF =-



1) Note that the PC has been off for the duration of my trip. I ran win7 update and many of the updates failed. Most fails are related to .NET Frame and Security Updates.


2) SyncToy still fails and this problem is probably related to .NET issues.

3) Event Viewer shows that on power up, that the Registery Hive was recovered. UsrClass.data. This error occurs frequently for this PC.

4) Should I run anything on my laptop use during my trip to ensure that it does not affect the PC we continue to debug?



Thanks.
 
There is no good replacement for mfplat.dll on your computer so I uploaded the file from my Win 7 installation here: https://www.sendspace.com/file/i1nb59
Download it.

Restart computer in safe mode.
How to start Windows in Safe Mode

Open Windows Explorer.
Navigate to C:\Windows\SysWOW64 folder.
Find mfplat.dll file there and rename it to mfplat.old.
Paste my mfplat.dll file into C:\Windows\SysWOW64 folder.

Restart computer and see how it goes.
 
I believe I need to change file permission to accomplish this. The file is owned by TrustedInstaller. Do you want me to take ownership, Replace the file with your copy, and then restore ownership to TrustedInstaller?

Thanks
 
Hi Broni,

I did the following:

1) Changed permission on C:\Windows\SysWOW64\mfplat.dll so that I could replace the file.

2) Replace the file with a copy from a good PC that runs sfc /scannow without issue.

3) Restore permissions to make TrustedInstaller the file owner.

4) Reboot the PC

5) Run sfc /scannow, then check for errors. I still get reports like this:

2014-10-05 15:13:20, Info CSI 00000345 [SR] Cannot repair member file [l:20{10}]"mfplat.dll" of Microsoft-Windows-MFPlat, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2014-10-05 15:13:20, Info CSI 00000347 [SR] Cannot repair member file [l:20{10}]"mfplat.dll" of Microsoft-Windows-MFPlat, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2014-10-05 15:13:20, Info CSI 00000348 [SR] This component was referenced by [l:206{103}]"Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsMediaFormatRuntime"


Maybe the file that contains the hash code is corrupted and mfplat.dll is fine.


What do you recommend we try next? Thanks.
 
Hi Broni,

Most things work but my machine may still have some issues. I am not sure if the remaining problems are virus related.

1) WIN7 updates fail to install.
The failed installs are related to Internet Explorer and security.

2) Internet Explorer 10 fails to install.

3) I got .NET 3.5 and 4.5 updates to install but SyncToy fails to work.
SynchToy identifies files that have not changed as requiring a replacement.

These could be just Microsoft issues. Is there anything else you would recommend I try?

Thanks for your help with this.
 
Download Windows Repair (All in One) from this site

Install the program then run it.

NOTE 1. In Windows Vista, 7 and 8 right click on the program, click "Run As Administrator".
NOTE 2. Disable your antivirus program before running Windows Repair.


Go to Step 3 and click on Check button next to 1. See If Check Disk Is Needed.
If the tool that the Check Disk is needed click on Do It button next to 2. Check Disk.
In that case make sure you restart computer.

p22004342.gif



Once the above is done go to Step 4 and allow it to run System File Check by clicking on Do It button:

p22004343.gif



Go to Step 5 and under "System Restore" click on Create button:

p22004346.gif



Go to Start Repairs tab and click Start button.

Leave all checkmarks as they're.
NOTE for Windows 8 users. Reset Registry Permissions is NOT checked by design.

Click on Start button.

p22004347.gif


Post Windows Repair log which is located in the following folder:
64-bit systems - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Logs
32-bit systems - C:\Program Files\Tweaking.com\Windows Repair (All in One)\Logs
 
Here are the _Windows_Repair_Log.txt
Tweaking.com - Windows Repair v2.9.2

--------------------------------------------------------------------------------



System Variables

--------------------------------------------------------------------------------

OS: Windows 7 Ultimate

OS Architecture: 64-bit

OS Version: 6.1.7601

OS Service Pack: Service Pack 1

Computer Name: MOSSLANDING

Windows Drive: C:\

Windows Path: C:\Windows

Program Files: C:\Program Files

Program Files (x86): C:\Program Files (x86)

Current Profile: C:\Users\Fred

Current Profile SID: S-1-5-21-3443260511-751025859-1096921692-1000

Current Profile Classes: S-1-5-21-3443260511-751025859-1096921692-1000_Classes

Profiles Location: C:\Users

Profiles Location 2: C:\Windows\ServiceProfiles

Local Settings AppData: C:\Users\Fred\AppData\Local

--------------------------------------------------------------------------------



System Information

--------------------------------------------------------------------------------

System Up Time: 0 Days 00:14:36



Process Count: 90

Commit Total: 2.37 GB

Commit Limit: 9.00 GB

Commit Peak: 3.85 GB

Handle Count: 23759

Kernel Total: 739.02 MB

Kernel Paged: 589.73 MB

Kernel Non Paged: 149.30 MB

System Cache: 5.99 GB

Thread Count: 1114

--------------------------------------------------------------------------------



Memory Before Cleaning with CleanMem

--------------------------------------------------------------------------------

Memory Total: 8.00 GB

Memory Used: 2.20 GB(27.4583%)

Memory Avail.: 5.80 GB

--------------------------------------------------------------------------------



Cleaning Memory Before Starting Repairs...



Memory After Cleaning with CleanMem

--------------------------------------------------------------------------------

Memory Total: 8.00 GB

Memory Used: 1.67 GB(20.9146%)

Memory Avail.: 6.33 GB

--------------------------------------------------------------------------------



Starting Repairs...

Started at (2014-10-05 5:01:06 PM)



Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair...

Total Missing 'InstallDate' Fixed: 190


01 - Reset Registry Permissions 01/03

HKEY_CURRENT_USER & Sub Keys

Start (2014-10-05 5:01:07 PM)

Running Repair Under Current User Account

Done (2014-10-05 5:01:37 PM)



01 - Reset Registry Permissions 02/03

HKEY_LOCAL_MACHINE & Sub Keys

Start (2014-10-05 5:01:37 PM)

Running Repair Under System Account

Done (2014-10-05 5:07:05 PM)



01 - Reset Registry Permissions 03/03

HKEY_CLASSES_ROOT & Sub Keys

Start (2014-10-05 5:07:05 PM)

Running Repair Under System Account

Done (2014-10-05 5:08:31 PM)



03 - Reset Service Permissions

Start (2014-10-05 5:08:31 PM)

Running Repair Under System Account

Done (2014-10-05 5:08:35 PM)



04 - Register System Files

Start (2014-10-05 5:08:35 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:08:52 PM)



05 - Repair WMI

Start (2014-10-05 5:08:52 PM)



Starting Security Center So We Can Export The Security Info.



Exporting Antivirus Info...

Microsoft Security Essentials Exported.



Exporting AntiSpyware Info...

Microsoft Security Essentials Exported.

Windows Defender Exported.



Exporting 3rd Party Firewall Info...

No Firewall Products Reported.



Running Repair Under Current User Account

Done (2014-10-05 5:09:55 PM)



06 - Repair Windows Firewall

Start (2014-10-05 5:09:55 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:10:29 PM)



07 - Repair Internet Explorer

Start (2014-10-05 5:10:29 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:10:46 PM)



08 - Repair MDAC/MS Jet

Start (2014-10-05 5:10:46 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:10:51 PM)



09 - Repair Hosts File

Start (2014-10-05 5:10:51 PM)

Running Repair Under System Account

Done (2014-10-05 5:10:52 PM)



10 - Remove Policies Set By Infections

Start (2014-10-05 5:10:52 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:10:54 PM)



11 - Repair Start Menu Icons Removed By Infections

Start (2014-10-05 5:10:54 PM)

Running Repair Under System Account

Done (2014-10-05 5:10:55 PM)



12 - Repair Icons

Start (2014-10-05 5:10:55 PM)

Running Repair Under Current User Account

Done (2014-10-05 5:10:57 PM)



13 - Repair Winsock & DNS Cache

Start (2014-10-05 5:10:57 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:11:13 PM)



15 - Repair Proxy Settings

Start (2014-10-05 5:11:13 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:11:15 PM)



17 - Repair Windows Updates

Start (2014-10-05 5:11:15 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.

Done (2014-10-05 5:11:34 PM)



18 - Repair CD/DVD Missing/Not Working

Start (2014-10-05 5:11:34 PM)

iTunes not found, not applying UpperFilters iTunes Reg Key

Done (2014-10-05 5:11:34 PM)



19 - Repair Volume Shadow Copy Service

Start (2014-10-05 5:11:34 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:11:53 PM)



21 - Repair MSI (Windows Installer)

Start (2014-10-05 5:11:53 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:02 PM)



23.01 - Repair bat Association

Start (2014-10-05 5:12:02 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:04 PM)



23.02 - Repair cmd Association

Start (2014-10-05 5:12:04 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:06 PM)



23.03 - Repair com Association

Start (2014-10-05 5:12:06 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:08 PM)



23.04 - Repair Directory Association

Start (2014-10-05 5:12:08 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:10 PM)



23.05 - Repair Drive Association

Start (2014-10-05 5:12:10 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:13 PM)



23.06 - Repair exe Association

Start (2014-10-05 5:12:13 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:15 PM)



23.07 - Repair Folder Association

Start (2014-10-05 5:12:15 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:17 PM)



23.08 - Repair inf Association

Start (2014-10-05 5:12:17 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:19 PM)



23.09 - Repair lnk (Shortcuts) Association

Start (2014-10-05 5:12:19 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:21 PM)



23.10 - Repair msc Association

Start (2014-10-05 5:12:21 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:23 PM)



23.11 - Repair reg Association

Start (2014-10-05 5:12:23 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:26 PM)



23.12 - Repair scr Association

Start (2014-10-05 5:12:26 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:28 PM)



24 - Repair Windows Safe Mode

Start (2014-10-05 5:12:28 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:30 PM)



25 - Repair Print Spooler

Start (2014-10-05 5:12:30 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:43 PM)



26 - Restore Important Windows Services

Start (2014-10-05 5:12:43 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:48 PM)



27 - Set Windows Services To Default Startup

Start (2014-10-05 5:12:48 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:51 PM)



Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1



Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1



Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1



31 - Repair Windows 'New' Submenu

Start (2014-10-05 5:12:51 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (2014-10-05 5:12:53 PM)



Cleaning up empty logs...



All Selected Repairs Done.

Done at (2014-10-05 5:12:53 PM)

Total Repair Time: 00:11:49





...YOU MUST RESTART YOUR SYSTEM...=================
 
Hi Broni,



I used the system most of the day. Here is what I see:

1) Basic abilities are fine.

2) WIN7 updates fail. I hid these to prevent them from being reinstalled on every shut down. Is there anything that you can recommend here?

KB2962872, IE9 Security

KB2976627, IE9 Security

KB2868725, Security x64

KB2977629, IE9;

KB2894844, .NET 3.5.1;

KB2973112, .NET 3.5.1 ;

KB2868626, Security x64;

KB2871997, Security x64;

KB2971850, Security x64;

KB2972280, Security x64;

KB2973201, “;

KB2973351, “;

KB2982378, “;

KB2966583, update;

KB2973337, “;

KB2985461, “

KB2998527, “;

KB3001554, “;

3) I gave up on SyncToy because it keeps flagging files that do not need updating.

4) I created a restore point before installing FreeFileSync. Then I read it may contain malware, OpenCandy. Is this something you recommend I remove? Do you have a file sync alternative I can look at?

4) Nothing I do permits me to install IE11. This may because I have two video cards to support three monitors.

5) Win7 File Index was corrupted today (first time since virus free) and is being rebuilt.



Thanks for your continued support. Sorry it is not going smoothly.
 
I am not sure if OpenCandy was installed with FreeFileSync. Is there a way to determine this? I can uninstall the FreeFileSych and use my restore point to remove the potential problem. Do you recommend this?


I will review the repair installation you pointed me to.


I made a small donation. Thanks for your help.
 
Thank you :)

OpenCandy (if installed) should be listed in Control Panel.
You can also re-run AdwCleaner and JRT. They take care of OpenCandy.
 
Hi Broni,

Here is a brief update on my system. This may prompt you to provide a last piece of helpful advice.

Status
1. Win7 indexing last longer but still gets redone. I have not figured out what triggers the redo of the index.

2. Replaced SyncToy with FreeFileSync, which is much better.

3. WIN7 updates fail. This is the biggest problem. I have not tried this fix yet: (http://www.sevenforums.com/tutorials/3413-repair-install.html).

Here is a rough idea of what has been done:

1. Virus scan and cleanup.

2. WIN7 install cleanup tool ran fine.

3. WIN7 Fixit ran fine.

4. Manual installs fail.

5. Ran various WIN cleanup utilities.

6. Sfc /scannow; indicates file mfplat.dll has an invalid signature. I replaced it with a new clean file but continue to get the same error.

I have WIN7 Professional with SP1. I cannot install IE10, or IE11.

This could all be related to my NVIDA driver. I backed out of the last install and manually removed spyware that NIVIDA now installs (some do not have the latest driver). I have seen that systems with two video cards cause IEx install issues and prevents some WIN7 updates.

Thanks.
 
Hi Broni,


I built a new PC (Win7 Ultimate) rather than resurrect my 6-year old one. Things were basically okay and then USB2 or USB3 access to any thumb drive failed. I did everything covered in:

http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html


And removed and replaced all my USB2 and USB3 drivers and programs. Sfc /scan now is clean, the device manager shows no problems. Microsoft FixIt USB shows a clean USB system.


So I am wondering if my new system has a virus on it. The only thing that was suspect during my build process was when I installed MyPhoneExplorer. I did not prevent LavaSoft from getting on my system during the MyPhoneExplorer install. I immediately uninstalled it and cleaned up IE11 and Firefox 33.


What do you recommend I use to check if a virus is the cause of my problems?


Thanks
 
I suggest you start new topic, complete preliminaries and we'll see what's there.
 
Back