[SOLVED] Error CSI 0000035b@2022/9/21:14:37:17.067 (F) onecore\base\wcp\sil\ntsystem.cpp(5407): Error STATUS_ACCESS_DENIED

[jkellyfish]

I have been trying to apply a security patch (KB5016629) to my Windows 11 system for the past several weeks with no luck.
Each time I try to apply, I experience the "Something unexpected happened dialog" and then it tries to roll back the changes.
Sometimes it even leaves the computer in an unusable state where I have to go back to a restore point to get a bootable system.
I have read through all these forum and have done everything from SFC checks to DISM and finally did a Repair install with a Windows
11 ISO as per the instructions on this site but still no luck. When I look in the CBS.log file, it would appear that the following is the issue:

2022-09-21 10:37:17, Error CSI 0000035b@2022/9/21:14:37:17.067 (F) onecore\base\wcp\sil\ntsystem.cpp(5407): Error STATUS_ACCESS_DENIED originated in function Windows::Rtl::SystemImplementation:irectRegistryProvider::SysQueryValueKey expression: (null)
[gle=0x80004005]

I cannot find this file on my system anywhere.

Any input would be greatly appreciated.

 

[x BlueRobot]

Please follow these posting instructions - Windows Update Forum Posting Instructions

 

[jkellyfish]

I followed the instructions here:

Windows Update Forum Posting Instructions

Attached are the files that you requested.

 

[x BlueRobot]

FRST Script
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

[jkellyfish]

I followed the instructions and attached is the output from the Farbar Recovery Scan Tool.

 

[x BlueRobot]

It seems that the subkey it's trying to access doesn't exist? Could you please run the update assistant and then check wherever the system has been updated:

Download the

Windows 11 Installation Assistant to your desktop.

• Right-click on Windows11InstallationAssistant.exe and select the option: Run as administrator.
• Press the Update now button, click after the compatibility check on Next.
• The Update Assistant will now download the latest Feature Update.
• After verifying the download, the Feature Update will be installed.
• When this process is ready, click on the Restart now button to complete the installation.

 

[jkellyfish]

I downloaded the Windows 11 Installation Assistant and ran as Administrator. It made me download
the PC health Checker app and run it first which I did. Once I completed running the health checker
then the installation assistant ran and once done I restarted. Everything seem to go fine. I then
tried to apply some Windows Updates. The first update session went fine however when I tried to
install the KB5017389 update, I got the 'something went wrong screen'. I have attached the two updates
screen as well as the something went wrong message. I also am attaching the CBS log directory.

 

[x BlueRobot]

SFCFixScript.txt
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

 

[jkellyfish]

Here is the results of the sysfix program execution. Let me know if I should try to proceed with
the Windows Updates again. I currently have the Windows Updates paused.

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-10-14 14:01:09.593
Microsoft Windows 10 Build 22621 - amd64
Using .txt script file at C:\Users\jkelly.HPZB202104\Desktop\SFCFixScript.txt [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\wow64_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_10.0.22621.608_none_81e4670606ec9fdc.

Successfully imported registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\wow64_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_10.0.22621.608_none_81e4670606ec9fdc.

Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\wow64_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_10.0.22621.608_none_81e4670606ec9fdc.
RegistryScript:: directive completed successfully.




Successfully processed all directives.



Failed to generate a complete zip file. Upload aborted.


SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2022-10-14 14:03:46.414
Script hash: rC4Z1/T6FzkdPX1P+oofrTKgZntu5ZEMvc0//PRJMBY=
----------------------EOF-----------------------

 

[jkellyfish]

I tried running Windows Update again and it downloaded and installed KB5018427. The PC rebooted several
times and when I reached 36%, I once again got the "something went wrong screen" and the changes
were once again rolled back. I have attached the CBS directory again to this thread.

 

[x BlueRobot]

Could you please try the attached SFCFix script?

 

[jkellyfish]

When I'm done running the script should I tried running windows updates again or send you the results and
wait for further instruction?

 

[x BlueRobot]

Please try and update again.

 

[jkellyfish]

No luck still. I applied the SFCFix script and then reran Windows Updates with the same outcome.
I have attached the output of the SFCFix and also the CBS files. Windows updates gets to about 35%
and then I get the "Something went wrong" screen and the updates are rolled backed.

 

[x BlueRobot]

FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB5017389 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.

 

[jkellyfish]

Attached is the results of the FRST64 tool searching for registry item KB5017389.

 

[x BlueRobot]

Install Update with DISM

1. Download the update MSU here: https://catalog.s.download.windowsu..._d00f888f840efb2f30164447b4e0eca6ff621e21.msu
2. Copy the .msu file to a convenient location (such as %userprofile%\Desktop).
3. Click on the Start button and in the search box, type Command Prompt
4. When you see Command Prompt on the list, right-click on it and select Run as administrator
5. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   cd %userprofile%\Desktop
   replace %userprofile%\Desktop with your path if different
   
   expand windows11.0-kb5017389-x64_d00f888f840efb2f30164447b4e0eca6ff621e21.msu -f:* %userprofile%\Desktop
   
   DISM /Online /Add-Package /PackagePath:%userprofile%\Desktop\windows11.0-kb5017389-x64.cab
   
6. You should receive the message:
   The operation completed successfully.
   Make sure to allow the computer to restart if prompted.
7. If you receive any other message:
   Post a screenshot of the Command Prompt window.
   Zip and attach the file %systemroot%\Logs\CBS\CBS.log

 

[jkellyfish]

All seem to go well. No error messages. Do I now try to run Windows Updates again? I tried to upload my CBS zip
folder but I am getting a "The uploaded file is too large" error. The zipped filer size is 32MB.

 

[x BlueRobot]

Please reboot the computer and then check your build number using the command from command prompt:

winver

Please post a screenshot the window which will be shown.

 

[jkellyfish]

I guess I spoke too soon. When the DISM finished, it never prompted for a reboot however when I
did go to shutdown, it started updating and restarting several times. It got to the 36% point again
and then gave me the usual "something didn't go as planned" message and rolled back. I am attaching the
CBS zip file and the screenshot of winver command.