BSOD SFC not running from usb

Toggle sidebar Toggle sidebar
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
I recently left for the weekend and shut my computer down Friday night. I came back sunday night to find that my computer had installed updates and was telling me it needed to be restarted so it had not shut down at all.

I'm running windows 8.1. I restarted the computer and got (and still continue to get) a BSOD as soon as windows boots with the error critical system driver is missing or contains errors
File: \windows\system32\drivers\wfplwfs.sys
Error code: 0xc000007b

I put my windows 8 installation usb and booted from it. I tried automatic repair multiple times and it could not fix the problem. I tried a system restore but it tells me I "must specify which windows installation to restore. Restart this computer, select an operating system, and then select system restore." which I don't know how to do since I can't boot windows. Finally I went through command prompt and ran "chkdsk /r" which ran fine. I ran "bootrec" with all it's modifiers one at a time which ran fine except for 'rebuildbcd" Which returns "the requested system device cannot be found." Finally I tried running sfc /scannow which returns "Windows resource protection could not start the repair service" I've tried "net start trustedinstaller" which successfully completes and I've tried running it from X: which is the directory that loads when i start command prompt through the usb and I've tried in in C: which is the hard drive. The only time a different message is given is when I try to run it from C:\windows\system32 I get a popup saying "This app can't run on your PC To find a version for your PC, check with the software publisher." and when I hit okay command prompt displays "Access is denied."

I'd like to fix it without doing a system refresh/restore.
 
Solution
J
note: system file checker will default to check the system of the device it was booted from. you need to have it check the files on a non boot device. This might help, where you specify the drive and directory. (sorry, i have never used it but you might try)

sfc.exe /scannow /offbootdir=d:\ /offwindir=d:\windows


I think otherwise in your case it would default to the usb drive x: (from the environment variables)
just specify the correct drive letter in the command.

if the system does not replace the file you should replace the driver manually if you can.

you might also want to check your cables to your hard drive, maybe move the cables to another port on another controller if you have two sata controllers. If you have...
Sort by date Sort by votes
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
i think the error code 0xc000007b indicates that the file is corrupted on disk (or of the wrong image format 64 bit on 32bit system)

wfplwfs.sys is WFP NDIS 6.30 Lightweight Filter Driver (network dirver)

you should boot in safe mode without networking and run the system file checker (rather than booting on the USB)
(run cmd.exe as a admin)
windows key+x then type A
then
sfc.exe /scannow this should repair corrupted files from the backup copy (if it is not also corrupted)

note: if you delete the file, windows will install the backup copy (good if the backup copy is not corrupted)

if you have a corrupted backup driver saved you have to remove the package using the PNPUTIL.exe command
or the windows PNP subsystem will just reinstall the driver a few seconds after you uninstall it. (you can turn that off in control panel)




 
Upvote 0 Downvote
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
Ah I forgot to mention trying to boot into safe mode returns gives the same BSOD. I press f8 and choosing to boot into safe mode in with or without networking/command prompt immediately goes to the BSOD.

Can I create a folder and save a copy of the file in it, then delete it? Would windows reinstall it after a restart or is there a backup copy somewhere I can copy to the original location? Of course I'd have to do this in command prompt (unless there's another way I can get into safe mode) and I'd delete the file after if it works.
 
Upvote 0 Downvote
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
i just noted the path you provided does not have the c:\

-------------------------
maybe boot on your usb drive go over to the
c:\windows\system32\drivers\wfplwfs.sys rename the old file so the system tries to make a new copy from the backup
(and does not use the corrupted file)

basically
from x:\
c:
cd c:\windows\system32\drivers
ren wfplwfs.sys wfplwfs.old


when you attempt to boot on the drive, the file should be replaced from the driverstore.




 
Upvote 0 Downvote
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
After doing that I rebooted and it got error 0xc000021a and then the computer restarted and gave me error 0xc0000001. I then shut down and tried again and got the same errors, and again once more. I then rebooted and tried booting into safe mode at which point it gave me
file: \windows\system32\drivers\vmstorfl.sys
error: 0xc0000185
Which is the Microsoft Windows virtual storage filter driver system driver file.
Also sfc still gives me the same errors. Should I rename this file aswell?
 
Upvote 0 Downvote
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
I renamed vmstorfl.sys to vmstorfl.old and it now does the same 0xc000021a 0xc0000001 loop with no other errors.
Doing
C:
cd windows\system32\drivers
dir
shows wfplws.old and vmstorfl.old. It does not show either as a .sys file
 
Upvote 0 Downvote
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
note: system file checker will default to check the system of the device it was booted from. you need to have it check the files on a non boot device. This might help, where you specify the drive and directory. (sorry, i have never used it but you might try)

sfc.exe /scannow /offbootdir=d:\ /offwindir=d:\windows


I think otherwise in your case it would default to the usb drive x: (from the environment variables)
just specify the correct drive letter in the command.

if the system does not replace the file you should replace the driver manually if you can.

you might also want to check your cables to your hard drive, maybe move the cables to another port on another controller if you have two sata controllers. If you have a option in BIOS to make the drive hotswap enabled for the sata port your drive is on then enable it.

if your drive is a SSD drive, then try and boot into BIOS and leave the system running powered but not in use for a hour or so to let the drive do internal repairs. (it should not be the cause of this problem though)



 
Upvote 0 Downvote
Solution
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
I've tried running
sfc /scannow /offbootdir=c:\ /offwindir=c:\windows
with C: being the name of the volume under diskpart. I've tried running that from X: C: and D: and got the same error as running just /scannow.

Can I download the drivers online, put them on a usb drive, and copy them over through command prompt? Or is there a copy of one somewhere in a recovery folder I can move into place?

I'm running a wd blue HDD. I'll check the connections and try a different sata port when I get home today.
 
Upvote 0 Downvote
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
I am not sure how to get the copy online without a working system. On windows 8.x you can boot and run the
dism.exe /online /cleanup-image /restorehealth
and it will get a online copy of any corrupted files.

------
if you can get a copy of the file copy it to your usb drive then run a file compare between the new and old file to see if they are different

fc.exe /B c:\windows\system32\drivers\wfplwfs.old x:\wfplwfs.sys

the /B switch tells the program to do a binary compare.


note: the date file time of wfplwfs.sys is 3/8/2014 1:40 PM 136,024 bytes on my windows 8.1 system

the fact that you just hit another file that you could not load may mean you have a corrupted file system.




 
Upvote 0 Downvote
R

raccoon2013

Honorable
Oct 28, 2013
20
0
10,520
Running
dism.exe /online /cleanup-image /restorehealth
reutrns Error: 50 DISM does not support servicing Windows PE with the /online option.

I moved the two files off the drive and onto a jump drive. Restarted the computer and there are still no files, shouldn't they have been recreated? Are these files necessary to boot? I was worried the files might be corrupted but it seems to only be these two. Is there any way I could get more than just those two error codes because they don't seem very helpful. What may cause these files to be corrupted?

You're help is greatly appreciated!!
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom