Unable to update server2016 past 14393.2368

[asplet]

Hello, and thanks for helping, my 1st post.

I have a remote server 2016 that is stuck on 14393.2368.

Windows update does not work, also Defender not working & none of the troubleshooters on control panel.

Using TotalAV currently. System is very responsive, does not seem to be virus related (totalav complete scan got nothing).

Unable to simply do a fresh install (travel needed).

Already tried those "net stop" on several services, then renaming a folder to .old, no success.

Tried chkdsk /r /f

sfc /scannow has this result: Windows Resource Protection could not perform the requested operation.

dism /online /cleanup-image /restorehealth results on error 1450 (Insufficient system resources exist to complete the requested service) after a VERY LONG time running (up to only 4.5%)

Link to COMPONENTS.RAR (358mb): COMPONENTS.rar

FRST files are attached to the post.

Tried to run ComponentsScanner:

Loading registry hive from C:\Windows\System32\config\COMPONENTS
Failed to load registry hive (System.ArgumentOutOfRangeException)

Would you please help me make this server updatable again?

Thanks!!
Best regards from Sao Paulo, Brazil
Bruno

 

[asplet]

CBS Folder attached

 

[Maxstar]

Hi and welcome to Sysnative,

1. This server is very outdated and the last cumulative update is from July 2018 as it seems.

2. Also, the log shows the following files which are related to an KMS toolkit? So is this server legitimately activated or not?

IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll
IFEO\SppExtComObj.exe: [VerifierDlls] SppExtComObjHook.dll

"silsvc" => service could not be unlocked. <==== ATTENTION
HKLM\SYSTEM\ControlSet001\Services\silsvc =>  <==== ATTENTION (Rootkit!/Locked Service)

2024-09-20 21:20 - 2024-09-20 21:20 - 000019968 _____ C:\Windows\system32\SppExtComObjHook.dll
2024-09-20 21:19 - 2024-09-20 21:20 - 000000000 ____D C:\Users\Correios\Downloads\KMS_VL_ALL_AIO-52
2024-09-20 21:19 - 2024-09-20 21:19 - 000086498 _____ C:\Users\Correios\Downloads\KMS_VL_ALL_AIO-52.7z

3. Your COMPONENTS hive is 2GB in size, which is not quite common or even unusual. I've never seen such a big hive and cannot load it normally in any tools, so it seems this hive is corrupted beyond repair?! cc @Tekno Venus

 

[asplet]

Thanks for replying!!

1. Yes...it seems that there was a security update on february 2024, but the last would be from 2018 as noticed. Its a remote server that just kept working this whole time (with no maintenance).

2. As far as I remember this server came with windows license. Dont recall why I tried that recently. I could try removing that - if possible, include removal on fix please.

3. Would it be possible to replace it then? The whole components?

Thanks again for the help.

 

[Maxstar]

Hi,

I tried loading this hive into a linux tool to see what happens, but that failed as well. So your hive is damaged beyond repair.
Do you have backups of the COMPONENTS hive?