[SOLVED] Components Hive may be corrupt

S

steve985

Active member
Joined
Jul 22, 2015
Posts
40
I have run the sfcfix and the log says that the Copmonents Hive may be corrupt. I cannot run sfc /scannow. It does not work. Cannot do any updates. This is on a SBS 2008 R2 Std.
 
Hi and welcome to Sysnative. Send me your components hive and I can see if it's corrupt.

Retrieve Components Hive
 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.
 
Looks OK. As a result, please do the following. Even if you have done previously, please re-do so I have a fresh log.

SFC Scan

  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Thanks for the info. Your hive appears OK to me but your system can't read it for some reason. Please do the following.

Step#1 - Capture Process Monitor Trace
 1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Open an elevated Command Prompt and run SFC /Scannow just like you have in the past.
3. Stop Process Monitor as soon as SFC fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.
11908d1430506241-windows-updates-fail-repeatedly-stop-jpg


4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and attach the LogFile.PML file as well as your CBS.log.
 
BrianDrab said:
Thanks for the info. Your hive appears OK to me but your system can't read it for some reason. Please do the following.

Step#1 - Capture Process Monitor Trace
 1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Open an elevated Command Prompt and run SFC /Scannow just like you have in the past.
3. Stop Process Monitor as soon as SFC fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.
11908d1430506241-windows-updates-fail-repeatedly-stop-jpg


4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and attach the LogFile.PML file as well as your CBS.log.
Click to expand...
 
OK I see what is happening. Please do the following and let me know the results.

1. Click your Start button and type cmd into the search box.
2. Right-click on cmd.exe that appears from the search results and select Run as administrator. Answer Yes if the User Account Control prompt comes up.
3. Copy/Paste the following into the command-prompt window and hit enter.
reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. You should see the following be returned in the command prompt window: The operation completed successfully.

Please let me know.
 
Ok. I did get that message. It worked. But it still will not do updates (might be my firewall) and when I run the sfc /scannow I get "Windows Resource Protection could not perform requested operation" I have tried that command before and get the same issue
 
OK, I didn't want you to try anything else yet. I guess I should have mentioned that. Now that the command was successful, please do the following as the next step.

1. Click the Start button and type regedit in the search box.
2. Right-click on regedit.exe that shows up in the search results and select Run as administrator. Answer Yes to the UAC prompt if it comes up.
3. Let me know if you can see the COMPONENTS hive.
Capture.JPG
 
OK. Then do the following.

Load Components hive manually
1. While in the registry from the previous step, click on HKEY_LOCAL_MACHINE.
2. Select the File menu and choose Load Hive...
3. Navigate to C:\Windows\System32\Config and select the COMPONENTS hive.
4. You will be prompted for a name of the hive. Type COMPONENTS and click OK.

If all works you will have the COMPONENTS hive shown now. But I suspect you will get an error. Please let me know.
 
I did get an error. "This file is in use. Enter a new name or close the file that's open in another program" But once I closed it, I now have the Component hive listed under the reg key
 
Good. It's all timing. It probably loaded before you had a chance to try. Can you now expand the COMPONENTS hive and then expand CanonicalData and click on Deployments?

Capture1.JPG
 
No. But I added the "CanonicalData" folder along with the ones you have under the screen shot you have
 
No. But I added the "CanonicalData" folder along with the ones you have under the screen shot you have
Click to expand...
You don't want to do that. You may have ruined your hive by doing this.

Select the COMPONENTS hive and choose the File menu and select Unload Hive and let me know what it says.
 
Sorry. It just said "are you sure you want to remove this and the subs" I said yes and they are removed.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top