[SOLVED] got a blue screen :( and I can't run SFC. Err. 0x74:Bad_system_config_info; DEFAULT hive corrupt. FIX: I replaced it with the one in W10-20H2-eng ISO.

Miguel10

Miguel10

Well-known member
Joined
Jan 9, 2021
Posts
55
everytime I run sfc /scannow from the recovery enviroment not while on Windows 10 cause I can't get to windows desktop, it gets to 100% scanning and then says resource protection can't perform the requested operation. I tried tutorials to fix this and still get the same error. I think if I run succesfuly SFC /scannow I'll get my windows 10 back again. It will started when I switched the power switch to off instead then shutting down as usual. I don't think there is any other errors other than corrupted system files can someone check this with me?

I tried startup auto repair but it doesn't fix it as shown on the photograph.
IMG_20210109_141129.jpgIMG_20210109_141239.jpg
IMG_20210109_141424.jpgThat's my current partition setup on Disk 0 and the only partition with windows 10 is partition 3.
 
Please boot your computer with Windows Setup Media and from Windows Recovery Environment start the Command Prompt.

Please type below command into Command Prompt and press Enter key.

The following command scans integrity of all protected Windows system files and repairs files with problems when possible.

Code: 
Sfc  /Scannow   /OFFBOOTDIR=D:\   /OFFWINDIR=D:\Windows



Please replace partition letter D: with Windows installed partition letter. When computer boots into Windows Recovery Environment (WinRE) environment the drive letter assign to Windows partition may not be C: drive letter because Windows 7, 8 , 8.1 and 10 creates a separate system partition when it's installed from scratch. The system partition contains boot files WinRE assigns the system partition the C: drive letter and the Windows installed partition will be assigned any other drive letter usually D: drive letter is assign to Windows installed partition. The Bcdedit | find "osdevice" command can be use to find out the drive letter of the Windows installed partition the output of the Bcdedit command is similar to this osdevice partition=D:. The drive letter after partition= is the drive letter of the Windows partition.
 
FreeBooter said:
Please boot your computer with Windows Setup Media and from Windows Recovery Environment start the Command Prompt.

Please type below command into Command Prompt and press Enter key.

The following command scans integrity of all protected Windows system files and repairs files with problems when possible.

Code: 
Sfc  /Scannow   /OFFBOOTDIR=D:\   /OFFWINDIR=D:\Windows
Click to expand...
it says the partition is C: and I get error for SFC command "windows resource protection can not perform the operation"
 
Miguel10 said:
I don't have any restore or last good configuration. Is there other alternative to fix the registry?
Click to expand...

Yes, if you have W10 version 1709 or a previous one.
Or if you have re-enabled Windows automatic registry backup (regback).
Or if you have got a recent backup done with other tools (acelogix, tweaking.com, others).
The file c:\windows\system32\logfiles\srt\srttrail.txt could reveal some other things.
 
Last edited:
It's likely that there are registry problems by the BSOD bugcheck 74 and failure to run scannow.

Regback used to be an option that could fix failure to boot related to registry problems.

(2) Microsoft explains the lack of Registry backups in Windows 10 - Windows 10 Forums (tenforums.com)

Options

a) Search for CBS and mini dump > post share links

Windows RE command prompt > type notepad > search for each file below > save to a flash drive > move the flash drive to a working computer > post share links into the thread using one drive, drop box, or google drive

%systemroot%\Minidump
%systemroot%\memory.dmp
%systemroot%\LiveKernelReports
%windir%\Logs\CBS\CBS.log
C:\WINDOWS\Logs\CBS\CBS.log
C:\Windows\memory.dmp
C:\Windows\Minidump
C:\Windows\LiveKernelReports


b) Reset save files equivalent (saves files, drivers and applications need to be reinstalled)

c) Backup files > clean install Windows 10 20H2 > install drivers and applications > restore files


Open Microsoft Hub: Send feedback to Microsoft with the Feedback Hub app
Report problems > suggest automatic regback
 
xilolee said:
Yes, if you have W10 version 1709 or a previous one.
Or of you have re-enabled Windows automatic registry backup (regback).
Or if you have got a recent backup done with other tools (acelogix, tweaking.com, others).
The file c:\windows\system32\logfiles\srt\srttrail.txt could reveal some other things.
Click to expand...
I have H20 I updated windows 10 not too long before it crashed.
my config/regback folder is empty.
I don't have other backups that I know.
here's the srt trail file>since date Dec5 day of the tragic event.
 

Attachments

zbook said:
It's likely that there are registry problems by the BSOD bugcheck 74 and failure to run scannow.

Regback used to be an option that could fix failure to boot related to registry problems.

(2) Microsoft explains the lack of Registry backups in Windows 10 - Windows 10 Forums (tenforums.com)

Options

a) Search for CBS and mini dump > post share links

Windows RE command prompt > type notepad > search for each file below > save to a flash drive > move the flash drive to a working computer > post share links into the thread using one drive, drop box, or google drive

%systemroot%\Minidump
%systemroot%\memory.dmp
%systemroot%\LiveKernelReports
%windir%\Logs\CBS\CBS.log
C:\WINDOWS\Logs\CBS\CBS.log
C:\Windows\memory.dmp
C:\Windows\Minidump
C:\Windows\LiveKernelReports
Click to expand...

here's the CBS text, can't find minidump or other dumps. and recently when windows 10 fails, the memory dumper rather than counting to 100% of dump it simply sits there without counting.
 

Attachments

Unfortunately it says "Startup Repair has tried several times but still cannot determine the cause of the problem.".

I wonder why ms reserved partition is 16 MB in size.
Did you modify the first two partitions sizes by any chance? Or any other partitions sizes?

Could you zip and send the system hive? (c:\windows\system32\config)
 
xilolee said:
Unfortunately it says "Startup Repair has tried several times but still cannot determine the cause of the problem.".

I wonder why ms reserved partition is 16 MB in size.
Did you modify the first two partitions sizes by any chance? Or any other partitions sizes?

Could you zip and send the system hive? (c:\windows\system32\config)
Click to expand...
yes when it first crashed I deleted the efi msr and recovery partitions and recreated them with empty ones, then got rid of them again cause I reinstalled H20 on the same drive, then deleted the newly windows partition to swap back the original windows partition I had imaged on another drive. I think SFC or REGBACK will save me, if they worked.

---Failed to create a directory Content.IE5 while copying (access denied)
everything else about the config folder should be in the zip.
config.zip
 
Miguel10 said:
yes when it first crashed I deleted the efi msr and recovery partitions and recreated them with empty ones, then got rid of them again cause I reinstalled H20 on the same drive, then deleted the newly windows partition to swap back the original windows partition I had imaged on another drive. I think SFC or REGBACK will save me, if they worked.

---Failed to create a directory Content.IE5 while copying (access denied)
everything else about the config folder should be in the zip.
config.zip
Click to expand...

Then it could refuse to work because:
- the ms reserved partition is modified (it should be 128MB in size)
- the efi partition is empty

Could you check it?
These are my partitions; diskpart:
Read More:

MS reserved is 128MB in size and has got type e3c9e316-0b5c-4db8-817d-f92df00215ae, attrib 0X8000000000000000

ESP is 300MB in size (but I've seen different sizes in different systems) and has got type c12a7328-f81f-11d2-ba4b-00a0c93ec93b, attrib 0X0000000000000001

I can't assign a letter to MS reserved partition.
This is the ESP content:
Read More:
 
My MSR is the one that worked with windows 10 right after installing H20, it worked with the different windows 10 partition (not the one I want to save). 16MB was assigned.

EFI partition is 100MB and has like 18 files and additional folders else it wouldn't boot at all, it's the efi partition that was installed with the new windows 10. I don't think I need more MB on the efi partition because that's for 4K drives and I don't think I need it or could make it work. I have a Samsung 850 evo for Windows on C. Not sure if I can make use for more MB on EFI.

other details: Partition 2 is MSR / Partition 1 is EFI

DISKPART> detail partition

Partition 2
Type : e3c9e316-0b5c-4db8-817d-f92df00215ae
Hidden : Yes
Required: No
Attrib : 0X8000000000000000
Offset in Bytes: 105906176

There is no volume associated with this partition.

DISKPART> detail partition

Partition 1
Type : c12a7328-f81f-11d2-ba4b-00a0c93ec93b
Hidden : Yes
Required: No
Attrib : 0X8000000000000000
Offset in Bytes: 1048576

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 FAT32 Partition 100 MB Healthy Hidden


-------------------------------------------------------
wierd my EFI partition reports being not Required.
 
It could be I changed something in the past...
Hence I'm not sure that's the correct attribute.
But my system is on... :-)

May you want to try to change its attributes and re-try to start the system?

The command is (after you selected the partition):
Code: 
gpt attributes=0X0000000000000001
 
Today is 1/9/2021



The Srttrail.txt displayed: Last successful boot time: ‎12/‎5/‎2020 1:37:08 PM (GMT)

The CBS file was dated 12/3/2020 - 12/4/2020





For BIOS / UEFI / GPT the partition sizes are normal for system 100 MB and reserved 16 MB.

UEFI/GPT-based hard drive partitions | Microsoft Docs

The device must contain a system partition.

On GPT drives, this is known as the EFI System Partition, or the ESP.

This partition is usually stored on the primary hard drive. The device boots to this partition.

The minimum size of this partition is 100 MB, and must be formatted using the FAT32 file format.

Beginning in Windows 10, the size of the MSR is 16 MB.


Code: 
2020-12-04 13:59:11, Info                  CBS    InternalOpenPackage failed for Package_for_KB3025096~31bf3856ad364e35~amd64~~6.4.1.0 [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to create open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to OpenPackage using worker session [HRESULT = 0x800f0805]
2020-12-04 13:59:11, Info                  CBS    Session: 30853760_1356618168 initialized by client WindowsUpdateAgent, external staging directory: (null), external registry directory: (null)
2020-12-04 13:59:11, Info                  CBS    InternalOpenPackage failed for Package_for_KB3025096~31bf3856ad364e35~x86~~6.4.1.0 [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to create open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2020-12-04 13:59:11, Info                  CBS    Failed to OpenPackage using worker session [HRESULT = 0x800f0805]




If the timeliness of a fix is important then consider performing steps b or c in post #7.


The Windows update forum members troubleshoot hives.
 
Last edited:
zbook said:
This is a link for the Windows update forum: Windows Update Forum Posting Instructions | Sysnative Forums

Find a camera or smartphone camera.

Post images for these results:

bcdedit | find "osdevice"
bcdedit /fixboot
bcdedit /scanos
bcdedit /rebuildbcd

One additional option if necessary may be using the hives in the folder: somebackup
Click to expand...
I don't want to run I think you meant "bootrec" cause that's for mbr disks. but see my bcdedits copied text. And some log from SFC when it failed.
 

Attachments

Will embootkit-1.6k-demo ¿fix my registry issues? I know it costs money to write changes to device.
 
Did you try to change the esp gpt attributes?

Another thing to try: if you didn't already do it, download the windows 10 media creation tool and create the windows 10 installation media (USB or CD).

Then:
Rich (BB code): 
dism /image:YourWindowsDriveLetter:\windows /cleanup-image /restorehealth /source:esd:YourESDDriveLetter:\sources\install.esd:x

Index 1 should be for windows 10 home
Index 2 should be for Windows 10 Home N
Index 3 should be for Windows 10 Education
Index 4 should be for Windows 10 Education N
Index 5 should be for windows 10 pro
Index 6 should be for Windows 10 Pro N
 
Last edited:

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top