Rich (BB code):
8/8/2024 7:13:18 PM TiWorker.exe RegOpenKey HKLM\COMPONENTS 0xC0190005 Desired Access: Set Value
Rich (BB code):
2024-08-08 13:13:18, Error CSI 000019ed (F) STATUS_RM_NOT_ACTIVE #10309949# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x156b1fe8c0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]'\Registry\Machine\COMPONENTS'; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 1797252760)[gle=0xd0190005]
2024-08-08 13:13:18, Error CSI 000019ee@2024/8/8:17:13:18.503 (F) onecore\base\wcp\sil\merged\ntu\ntsystem.cpp(5238): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
Please run the following command again to see if the (same) transaction files are re-created.
Code:
dir /s /a C:\Windows\System32\config\TxR > "%userprofile%\Desktop\Dirlist.txt"