Cannot install kb5034127 - 0x80070005 - Windows Server 2019

frankwhite

Active member
Joined
Aug 21, 2020
Posts
27
Like [SOLVED] - Cannot install kb5034127 - Windows Server 2019 i am having issues installing the latest rollup to a 2019 server image, mine fails with error code 0x80070005.
See attached for ComponentsScanner output and CBS logs. Appreciate any help!!

SFC scan result:

Code:
C:\Windows\system32>sfc /scannow
Beginning system scan.  This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection could not perform the requested operation.

DISM result:

Code:
C:\Windows\system32>Dism /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.17763.3406

Image Version: 10.0.17763.4131

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

ComponentsScanner.txt
Code:
ComponentsScanner Version 1.5.1.0 by sysnative.com
Windows Version: Windows Server 2019 Standard x64 (10.0.17763.4131)
Start time: 2024-02-07T13:27:21
Hive scanned: %windir%\System32\config\COMPONENTS
Number of keys: 200323
Number of values: 637827

==== Critical Errors ====
None

==== Corrupt Key Names ====
None

==== Corrupt Value Names ====
None

==== Corrupt Value Data Type ====
None

==== Corrupt Value Data ====
None

==== Repair Log ====
No possible repairs

==== Warnings ====
None


Storing 0KB in C:\Users\admin\AppData\Local\Sysnative\ComponentsScanner

Finish Time: 2024-02-07T13:35:15. Corruption scan time: 400,6282366s
===========================EOF===========================
 

Attachments

Hi and welcome to Sysnative,

I am a Windows Update Academy trainee on my final stage of training, and I can assist in your update problem(s). My posts will need prior approval so there may be a slight delay with responses.

I am looking into this and will get back to you in the next day or two.
 
Step#1 - FRST Fix
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

Step#2 - Screenshot

Please take a screenshot of the directory: "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"
1708135297208.png
 

Attachments

Hi, pardon my late answer:

To Step 1: I can run Farbar Recovery Scan Tool 26.2.2024.1 (FRST64.exe) on the system as an administrator, and I see "Backing up registry, this should take a few seconds..." but whether I try to click on "Fix" or wait, the application simply closes completely in the end, unfortunately leaving behind no data. Even if I restart the system and try to run it again, the problem remains the same.

To Step 2: Unfortunately, C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu is completely empty.
 
Make Start Menu Programs Directory

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following command into it


    Code:
    mkdir "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"


    If there any issues, then please provide a screenshot of the Command Prompt window in your next post.
 
Get Permissions

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following command into it

    icacls "%SystemDrive%\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu"

    Please post the results in your reply.
 
Hello,

I would like to try and recreate the Programs Directory based on the files found on a default build.


SFCFix Script

Warning:
this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put
    Code:
    tags around the log to break up the text.


It is concerning that you are getting access denied on the Start Menu folder when creating the Programs directory. I would like to see what other programs, specifically AV products, you have installed on this system. The command in the steps below will generate a list for me to review.

Get Installed AV Product List

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter


    Code:
    WMIC /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct get * /value > "%userprofile%\desktop\AV-list.txt"
    • Attach the AV-list.txt located on your desktop in your reply.
 

Attachments

SFCFix Script Results:

Code:
SFCFix version 3.0.2.1 by niemiro.
Start time: 2024-04-08 03:48:26.930
Microsoft Windows Server 10 Build 17763 - amd64
Using .zip script file at C:\Users\admin\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu

Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility with error code ERROR_ACCESS_DENIED.

Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell (x86).lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell ISE.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Administrative Tools.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Command Prompt.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\computer.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Control Panel.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\File Explorer.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Run.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Maintenance\Desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessories\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessories\Notepad.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\Magnify.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\Narrator.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\On-Screen Keyboard.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk with error code ERROR_ACCESS_DENIED.

Successfully restored ownership for C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Successfully restored permissions on C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
PowerCopy:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2024-04-08 03:48:47.433
Script hash: daY9sZuvk50JoueWr3JMeAygMzjSuKXIZFhLO/LhEjM=
----------------------EOF-----------------------

Get Installed AV Product List Results:
Code:
ERROR:
Description = Invalid namespace

I also tryed:
Code:
Get-WMIObject -Class "Win32_Product" -NameSpace "root\cimv2" -ComputerName "." -filter "Name like '%antivirus%'"

but unfortunately there is no further output on the console, but I know that this server uses CrowdStrike.
 
Thanks for the information. I will review this and ask my peers their thoughts.
 
I would like to reset the permissions back to their default settings. Let me know if this yields any results.

Reset Permissions

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following command into it


Code:
icacls "%SystemDrive%\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu" /t /q /c /reset

Please post the results in your reply.
 
Results:
Code:
C:\Windows\system32>icacls "%SystemDrive%\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu" /t /q /c /reset
Successfully processed 1 files; Failed processing 0 files
 
Let's try the fix again now that the permissions have been reset.

SFCFix Script

Warning:
this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V)the contents of this file into your next post for me to analyse please - put
    Code:
    Code:
    tags around the log to break up the text.
 

Attachments

Code:
SFCFix version 3.0.2.1 by niemiro.
Start time: 2024-04-11 09:53:24.425
Microsoft Windows Server 10 Build 17763 - amd64
Using .zip script file at C:\Users\admin\Desktop\SFCFix.zip [1]




PowerCopy::
Successfully took permissions for file or folder C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu

Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories with error code ERROR_ACCESS_DENIED.
Failed to create directory tree \\?\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility with error code ERROR_ACCESS_DENIED.

Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell (x86).lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell ISE.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Windows PowerShell\Windows PowerShell.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Administrative Tools.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Command Prompt.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\computer.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Control Panel.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\File Explorer.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\System Tools\Run.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Maintenance\Desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessories\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessories\Notepad.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\desktop.ini to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\Magnify.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\Narrator.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk with error code ERROR_ACCESS_DENIED.
Failed to copy file C:\Users\admin\AppData\Local\niemiro\Archive\Programs\Accessibility\On-Screen Keyboard.lnk to C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk with error code ERROR_ACCESS_DENIED.

Successfully restored ownership for C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Successfully restored permissions on C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
PowerCopy:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2024-04-11 09:53:25.883
Script hash: daY9sZuvk50JoueWr3JMeAygMzjSuKXIZFhLO/LhEjM=
----------------------EOF-----------------------
 
Let's take a look at a couple things.

Step 1

Please reply with a screenshot of the C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu Advanced Security Settings as seen below.

1712963726230.png

Step 2
Get Junction Points

  1. Click on the Start button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    Rich (BB code):
    cd C:\Users\Default
    dir /ah

    Please reply with the output of the above commands.

    If there any issues, then please provide a screenshot of the Command Prompt window in your next post.
 
Step 1
1713179510419.png

Step 2

C:\Users\Default>dir /ah
Volume in drive C has no label.
Volume Serial Number is C8FB-759A

Directory of C:\Users\Default

17.05.2021 09:32 <DIR> .
17.05.2021 09:32 <DIR> ..
15.09.2018 09:19 <DIR> AppData
17.05.2021 09:32 <JUNCTION> Application Data [C:\Users\Default\AppData\Roaming]
17.05.2021 09:32 <JUNCTION> Cookies [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies]
17.05.2021 09:32 <JUNCTION> Local Settings [C:\Users\Default\AppData\Local]
17.05.2021 09:32 <JUNCTION> My Documents [C:\Users\Default\Documents]
17.05.2021 09:32 <JUNCTION> NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
15.09.2018 08:09 65.536 NTUSER.DAT.LOG1
15.09.2018 08:09 0 NTUSER.DAT.LOG2
17.05.2021 09:32 65.536 NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TM.blf
17.05.2021 09:32 524.288 NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000001.regtrans-ms
17.05.2021 09:32 524.288 NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000002.regtrans-ms
17.05.2021 09:32 <JUNCTION> PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
17.05.2021 09:32 <JUNCTION> Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
17.05.2021 09:32 <JUNCTION> SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
17.05.2021 09:32 <JUNCTION> Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
17.05.2021 09:32 <JUNCTION> Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
5 File(s) 1.179.648 bytes
13 Dir(s) 18.715.426.816 bytes free
 
Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Then run the System File Checker again with the following command in an elevated prompt
Code:
SFC /Scannow
3. Stop Process Monitor when everything is logged (there could be a delay). You can simply do this by clicking the square (CTRL +E) on the toolbar as shown below.



4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up the LogFile.PML and upload it to WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free and provide the link.
6. Attach also a new copy of the CBS logs for the time stamps.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top