Share via

How to automatically fix System and/or Recovery partitions?

Anonymous
2022-03-24T03:16:07+00:00

I've noticed an event log entry about a file failing a security check.

"Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume4\Windows\Installer{01FD1770-03E3-4949-88FE-BD77BA60F51E}\ARPPRODUCTICON.exe"

When I dug deeper I realized it was in the 100MB system partition. How do I tell my OS to check and replace files on those two hidden/system partitions?

" Volume ### Ltr Label Fs Type Size Status Info

Volume 0 H NTFS Simple 2794 GB Healthy
Volume 1 E DVD-ROM 0 B No Media
Volume 2 C NTFS Partition 930 GB Healthy Boot
Volume 3 NTFS Partition 529 MB Healthy Hidden
Volume 4 FAT32 Partition 100 MB Healthy System"

Searching online only turns up tools I don't know if I can trust, or steps for using offline media to rebuild a missing recovery partition (I think this is on the "EFI System Partition" instead). And rebooting into any recovery mode means I can't see the online instructions anymore! At least not easily.

I was hoping some DSIM or SFC or a similar type of program would work from within the normally booted Windows 10.

Windows for home | Windows 10 | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-03-24T05:50:44+00:00

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2022-03-24T05:48:53+00:00

    Partitions can be shrunk in Disk Management, from the right. For more flexible partition management, including extending to/from left or right, borrowing space from any other partition whether it's adjacent or not, adding/changing drive letter, converting to/from Dynamic/Basic, use a Partition manager like free Easeus: https://www.easeus.com/download/epmf-download.html

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2022-03-24T04:54:04+00:00

    The error specified Vol 4 which is EFI System. Recover is Volume 3. You can certainly mount and scan Recovery too, to be thorough. Just follow the same instructions for EFI System.

    Are there any performance issues at all, or slow or unusual startup behavior? If not then I would ignore it. Errors in Event Viewer are most useful when troubleshooting actual performance issues, otherwise they tend to be trivia:

    https://www.howtogeek.com/school/using-windows-...

    Is your Disk1 intentionally a software RAID? A Dynamic partition should only be used to join multiple hard drives into a single volume. More here:

    http://technet.microsoft.com/en-us/library/cc77...(WS.10).aspx

    0 comments
  4. Anonymous
    2022-03-24T04:32:13+00:00

    I did the mount of the EFI System Partition using mountvol, ran chkdsk /f /r and sfc /scannow but neither found issues.

    Looking at the files on the partition it doesn't have the path mentioned in the error. I've never looked at an EFI partition before, but it only has an EFI folder. The error I saw mentioned a \Windows\Installer... path. Is that more likely to be on the recovery partition?

    I'm trying to experiment to mount the recovery partition too, but haven't figured out how. I'm guessing it's one of these two "Possible values for VolumeName..." from mountvol without existing mount points, but I'm surprised there are 2 listed. And worry if I mount the wrong thing it'll be bad. I haven't seen those GUID's anywhere else to match up partitions or whatever to them.

    "Possible values for VolumeName along with current mount points are: 

    \\?\Volume{6bffacf9-e33b-4744-beaa-3b2d3fa362d5}\  
    \*\*\* NO MOUNT POINTS \*\*\*  

\\?\Volume{4751518f-44b4-4297-af1c-28c59fbd70b6}\  
    C:\  

\\?\Volume{43a09441-8f7a-4113-ae41-28e9bf771714}\  
    \*\*\* NO MOUNT POINTS \*\*\*  

\\?\Volume{68b488a5-74f8-11e4-8288-002522a58bf3}\  
    H:\  

\\?\Volume{b59317b7-3b11-11ea-a65e-806e6f6e6963}\  
    E:\  

The EFI System Partition is mounted at F:\"
    0 comments
  5. Anonymous
    2022-03-24T04:07:41+00:00

    Hi ES. I'm Greg, 10 years awarded Windows MVP, specializing in Installation, Performance, Troubleshooting and Activation, here to help you.

    Please post a screenshot of Disk Management, which I read like a doctor reads X-rays. Follow the steps here so I can see everything needed to advise you: http://answers.microsoft.com/en-us/windows/foru...

    It describes here how to mount EFI System partition to assign a drive letter to run Disk Check: https://superuser.com/questions/1228831/how-do-...

    Then while you have a drive letter assigned I'd run System File Checker on it: https://www.wintips.org/how-to-run-sfc-offline-...

    Feel free to ask back any questions. Based on the results you post back I may have other suggestions if necessary.

    ______________________________________________

    Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

    0 comments