[SOLVED] Request for sfc Help WRP fail 12-30-16

[DrJoeSanDiego]

Re:
Request for sfc Help WRP fail 12-30-16

"Windows Resource Protection could not perform the requested operation."


: CBSlog1230.txt 12/30/2016
:
: from: J DrJoeSanDiego
:
--------------------------------------------------------------------------------------------------------
:
2016-12-30 12:55:25, Error CSI 00000307 (F) STATUS_DELETE_PENDING #10533682# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation|AllowAccessDenied), handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ|FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA|FILE_APPEND_DATA|FILE_WRITE_DATA), oa = @0x102d1c0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[59]"\SystemRoot\WinSxS\ManifestCache\548c1bd2e27235ea_blobs.bin"; aOBJ_CASE_INSENSITIVE)}, iosb = @0x102d1f0, as = (null), fa = (FILE_ATTRIBUTE_NORMAL), sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN_IF, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000056]
2016-12-30 12:55:25, Error CSI 00000308@2016/12/30:20:55:25.972 (F) d:\w7rtm\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_DELETE_PENDING originated in function Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2016-12-30 12:55:26, Error CSI 00000309 (F) STATUS_DELETE_PENDING #10533681# from Windows::Rtl::SystemImplementation::CDirectory::CreateNewFile(...)[gle=0xd0000056]
2016-12-30 12:55:26, Error CSI 0000030a (F) STATUS_DELETE_PENDING #10533588# from CCSDirectTransaction::OperateEnding at index 0 of 1 operations, disposition 0[gle=0xd0000056]
2016-12-30 13:22:01, Info CBS Loading offline registry hive: SOFTWARE, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SOFTWARE' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SOFTWARE'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: SYSTEM, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SYSTEM' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SYSTEM'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: SECURITY, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SECURITY' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SECURITY'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: SAM, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SAM' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SAM'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: COMPONENTS, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/COMPONENTS' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\COMPONENTS'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: DEFAULT, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/DEFAULT' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\DEFAULT'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: ntuser.dat, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Users/default/ntuser.dat' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Users\default\ntuser.dat'.
2016-12-30 13:22:01, Info CBS Loading offline registry hive: schema.dat, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/system32/smi/store/Machine/schema.dat' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\system32\smi\store\Machine\schema.dat'.
2016-12-30 13:22:01, Info CBS Offline image is: read-only
2016-12-30 13:22:01, Info CBS Disabling manifest caching, because the image is not writeable.
2016-12-30 13:22:01, Info CSI 0000030b CSI Store 112169008 (0x0000000006af9030) initialized
2016-12-30 13:22:01, Info CBS Session: 5740_19288650 initialized by client SPP.
2016-12-30 13:22:48, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SOFTWARE
2016-12-30 13:22:48, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SYSTEM
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SECURITY
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SAM
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/COMPONENTS
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/DEFAULT
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Users/default/ntuser.dat
2016-12-30 13:22:49, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/system32/smi/store/Machine/schema.dat
2016-12-30 16:48:36, Error CSI 0000030c (F) STATUS_DELETE_PENDING #11298737# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation|AllowAccessDenied), handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ|FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA|FILE_APPEND_DATA|FILE_WRITE_DATA), oa = @0x102d1c0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[59]"\SystemRoot\WinSxS\ManifestCache\548c1bd2e27235ea_blobs.bin"; aOBJ_CASE_INSENSITIVE)}, iosb = @0x102d1f0, as = (null), fa = (FILE_ATTRIBUTE_NORMAL), sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN_IF, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000056]
2016-12-30 16:48:36, Error CSI 0000030d@2016/12/31:00:48:36.382 (F) d:\w7rtm\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_DELETE_PENDING originated in function Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2016-12-30 16:48:37, Error CSI 0000030e (F) STATUS_DELETE_PENDING #11298736# from Windows::Rtl::SystemImplementation::CDirectory::CreateNewFile(...)[gle=0xd0000056]
2016-12-30 16:48:37, Error CSI 0000030f (F) STATUS_DELETE_PENDING #11298643# from CCSDirectTransaction::OperateEnding at index 0 of 1 operations, disposition 0[gle=0xd0000056]


: End CBS.log


----------------------------------------------------------------------------


:
: CBSlog1230.txt ( was: CBS.log ) 12/30/2016
:
: from: J DrJoeSanDiego


: NOTE:
sfc /SCANNOW


: NOTE:
December 30, 2016
I just got help (from BrianDrab) the other day - all was fine.


But today I ran sfc /SCANNOW
& got err:


"Windows Resource Protection could not perform the requested operation."


: PS I verified I do have directories (emptied by me) :
: C:\Windows\winsxs\Temp\PendingDeletes& PendingRenames
: ran sfc /SCANNOW ~ 5 times; googling yielded no fuitful ideas
I postponed the suggestion to run regedit
per{ SFC Windows Resource Protection could not perform the requested operation FIX! }.


Their suggestion would be to change all the:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
keys from e.g. "%ProgramFiles%" to "C:\Program Files" { and they reported that the scan completed successfully}.
=


Please help:
:huh:
J

 

[DrJoeSanDiego]

1-1-17 HNY !Please close thread, as problem disappeared.Windows Resource Protection did not find any integrity violations.I installed UnHackme (freebie site), but am unsure if deleting the advised stuff was responsible. At any rate, ...........Thanx again, DrJoeSanDiego.