[SOLVED] Components Hive may be corrupt

steve985 · Jul 22, 2015

I have run the sfcfix and the log says that the Copmonents Hive may be corrupt. I cannot run sfc /scannow. It does not work. Cannot do any updates. This is on a SBS 2008 R2 Std.

BrianDrab · Jul 23, 2015

Hi and welcome to Sysnative. Send me your components hive and I can see if it's corrupt.

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.

steve985 · Jul 24, 2015

https://www.sendspace.com/file/8vixe8
Thanks

BrianDrab · Jul 24, 2015

Looks OK. As a result, please do the following. Even if you have done previously, please re-do so I have a fresh log.

SFC Scan

Click on the Start

button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

steve985 · Jul 24, 2015

https://www.sendspace.com/file/he77nz
Thanks

BrianDrab · Jul 24, 2015

Thanks for the info. Your hive appears OK to me but your system can't read it for some reason. Please do the following.

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Open an elevated Command Prompt and run SFC /Scannow just like you have in the past.
3. Stop Process Monitor as soon as SFC fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.

11908d1430506241-windows-updates-fail-repeatedly-stop-jpg

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and attach the LogFile.PML file as well as your CBS.log.

steve985 · Jul 24, 2015

BrianDrab said:
Thanks for the info. Your hive appears OK to me but your system can't read it for some reason. Please do the following.

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Open an elevated Command Prompt and run SFC /Scannow just like you have in the past.
3. Stop Process Monitor as soon as SFC fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and attach the LogFile.PML file as well as your CBS.log.

steve985 · Jul 24, 2015

Download multiple files from Sendspace.com - send big files the easy way
Thanks

BrianDrab · Jul 24, 2015

OK I see what is happening. Please do the following and let me know the results.

1. Click your Start button and type cmd into the search box.
2. Right-click on cmd.exe that appears from the search results and select Run as administrator. Answer Yes if the User Account Control prompt comes up.
3. Copy/Paste the following into the command-prompt window and hit enter.
reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. You should see the following be returned in the command prompt window: The operation completed successfully.

Please let me know.

steve985 · Jul 24, 2015

Ok. I did get that message. It worked. But it still will not do updates (might be my firewall) and when I run the sfc /scannow I get "Windows Resource Protection could not perform requested operation" I have tried that command before and get the same issue

BrianDrab · Jul 24, 2015

OK, I didn't want you to try anything else yet. I guess I should have mentioned that. Now that the command was successful, please do the following as the next step.

1. Click the Start button and type regedit in the search box.
2. Right-click on regedit.exe that shows up in the search results and select Run as administrator. Answer Yes to the UAC prompt if it comes up.
3. Let me know if you can see the COMPONENTS hive.

steve985 · Jul 24, 2015

No I do not see the Components hive.

BrianDrab · Jul 24, 2015

OK. Then do the following.

Load Components hive manually
1. While in the registry from the previous step, click on HKEY_LOCAL_MACHINE.
2. Select the File menu and choose Load Hive...
3. Navigate to C:\Windows\System32\Config and select the COMPONENTS hive.
4. You will be prompted for a name of the hive. Type COMPONENTS and click OK.

If all works you will have the COMPONENTS hive shown now. But I suspect you will get an error. Please let me know.

steve985 · Jul 24, 2015

I did get an error. "This file is in use. Enter a new name or close the file that's open in another program" But once I closed it, I now have the Component hive listed under the reg key

BrianDrab · Jul 24, 2015

Good. It's all timing. It probably loaded before you had a chance to try. Can you now expand the COMPONENTS hive and then expand CanonicalData and click on Deployments?

steve985 · Jul 27, 2015

I only have the folder called "Components" nothing is under that.

BrianDrab · Jul 27, 2015

Is there a plus sign to the left of COMPONENTS that you can click on to expand it?

steve985 · Jul 27, 2015

No. But I added the "CanonicalData" folder along with the ones you have under the screen shot you have

BrianDrab · Jul 27, 2015

No. But I added the "CanonicalData" folder along with the ones you have under the screen shot you have

You don't want to do that. You may have ruined your hive by doing this.

Select the COMPONENTS hive and choose the File menu and select Unload Hive and let me know what it says.

steve985 · Jul 27, 2015

Sorry. It just said "are you sure you want to remove this and the subs" I said yes and they are removed.

[SOLVED] Components Hive may be corrupt

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member