Windows Server 2008 R2 Standard - Nothing Launching after update

Joshza

Member
Joined
Sep 10, 2015
Posts
21
Hi All

I updated our server Windows Server 2008 R2 Standard and thereafter the Windows Update won't work (Code 80070002), the management console won't start, Intel Control Centre won't start, I get an oobe.exe fatal error at start up, and Intel RST for my Raid configuration won't load amongst seemingly everything else. I cannot restore to an earlier point.

I can still connect to the server remotely and users can still access files.

I've tried for two days to get this up and running again but no joy. Lots of tips on .Net Framework 3.5 which I don't seem to have, as well as deleting and renaming MMC folders.

sfc /scannow doesn't run and returns: "Windows Resource Protection could not perform the requested operation."

I came across SFCFix and ran that and now I'm here. Below is the post from it and the CBS zipped folder file can follow if required - it is 45Mb and didn't want to upload. Any help would be much appreciated.

Thanks,

Josh

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-10 10:24:00.242
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Not using a script file.




AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 0
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 1
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-09-10 10:26:28.536
----------------------EOF-----------------------


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2015-09-07 10:43

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages
(f) CBS Registry Error 0x80070002 Microsoft-Windows-ServerDesktopExperience~31bf3856ad364e35~amd64~~6.1.7601.17514 failed to get CurrentState

Checking Component Store

Summary:
Seconds executed: 1245
Found 1 errors
CBS Registry Error Total count: 1
 
Please try to run SFC /scannow again, then after it fails zip and attach C:\Windows\Logs\CBS\CBS.log
 
Thanks zcomputerwiz for the follow-up. The file is attached, please note I had to zip it as the straight text file was 4.5Mb and wouldn't upload. Hope it's not a problem.

Josh
 

Attachments

Code:
2015-09-15 20:56:48, Info                  CSI    00000004@2015/9/15:18:56:48.233 PopulateComponentFamiliesKey - Begin
2015-09-15 20:56:58, Error                 CSI    00000005 (F) STATUS_OBJECT_NAME_NOT_FOUND #1959940# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0x19fe260->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[148]"\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e\6.1"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 27256360 (0x019fe628))[gle=0xd0000034]
2015-09-15 20:56:58, Error                 CSI    00000006@2015/9/15:18:56:58.591 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
2015-09-15 20:56:58, Error                 CSI    00000007 (F) STATUS_OBJECT_NAME_NOT_FOUND #1959939# from Windows::Rtl::SystemImplementation::CKey::OpenExistingKey(f = 0, da = (KEY_READ), oa = @0x19fe720, key = NULL, disp = (null))[gle=0xd0000034]
2015-09-15 20:56:58, Info                  CBS    NonStart: Failed to get store. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

Please do the following:

Export registry as hive

  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide

  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file SideBySide (with no file extension) and save it to your Desktop.
  7. Right Click on the SideBySide file on your Desktop and choose Send To -> Compressed (Zipped) Folder.

Attach SideBySide.zip with your reply.

SFCFix COMPONENTS Hive Collection Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. [sfcfixdownload]Download SFCFix[/sfcfixdownload] (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
  5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u...eric/Collect/COMPONENTS/SFCFixScript.txt?dl=1
 
SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-15 21:36:02.834
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Using .txt script file at C:\Users\administrator.ROCKSTOCK\Desktop\SFCFixScript.txt [0]




Collect:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-09-15 21:39:38.270
----------------------EOF-----------------------
 

Attachments

Let's try this:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

View attachment SFCFix.zip

When the import completes, reboot and run the System Update Readiness Tool.
When the System Update Readiness Tool has finished, attach C:\Windows\Logs\CBS\CheckSUR.log and C:\Windows\Logs\CBS\CBS.log
 
SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-09-16 07:12:19.112
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Using .zip script file at C:\Users\administrator.ROCKSTOCK\Desktop\SFCFix.zip [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e.
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e.

Successfully imported registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e.
Failed to import registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e\6.1.

Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e.
Failed to open registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e\6.1 with error code ERROR_FILE_NOT_FOUND.
Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e.
RegistryScript:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-09-16 07:12:19.861
Script hash: 2UYo8VVIY7boMLorZpnbPunuhP8cceSAS4Gbc9kApq0=
----------------------EOF-----------------------
 

Attachments

Please run regedit and navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e\6.1
Let me know if it opens or if you get an error message.
 
Hi zcomputerwiz

It won't open and says: "Error Opening Key", "6.1 cannot be opened.", "An error is preventing this key from being opened.", "Details: the system cannot find the file specified."

Thanks,

Josh
 
Unfortunately it appears that key is corrupt.

I'd like to test against your software hive to see if I can make a fix for you to run or if I will have to do the editing manually and have you replace the hive. Hopefully it's the former.

Export SOFTWARE Hive

Please download RegBak (by AceLogix Software) from the link below and save it to your Desktop.


  • Right-click on regbak.zip then select Extract all... and extract the files to your Desktop

    For 32-bit (x86) editions of Windows, double-click on regbak.exe
    For 64-bit (x64) editions of Windows, double-click on regbak64.exe


  • Without changing any options, click Next. RegBak will now backup all of your registry hives.
  • Navigate to C:\Windows\RegBak\{Date}\ and copy the SOFTWARE file (it has no extension) to your Desktop
  • Right click on the SOFTWARE file on your Desktop and choose Send To -> Compressed (zipped) Folder.
  • Upload the zip file for me to analyse please, using any of the following options:

    Microsoft OneDrive
    Dropbox
    SendSpace (or any other file-sharing site of your preference)​

Send me a Private Message (PM) with a link to the uploaded file here: Send zcomputerwiz a Message

WARNING:: Do NOT post the link to this public forum! The SOFTWARE hive contains sensitive information such as your Windows product key.
 
It appears to be a permissions problem.

Take Registry Permissions


  1. Run regedit.
  2. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e
  3. Right click on amd64_wcf-infocard_api_dll_31bf3856ad364e35_none_8564a19982cfb36e and choose permissions.
  4. Click Advanced.
  5. Under the Owner tab, click Edit.
  6. Click "Other Users and Groups".
  7. Click Advanced.
  8. Click "Find Now".
  9. Scroll down and double click on Everyone.
  10. Click OK.
  11. Put the check in "Replace owner on subcontainers and objects", click Apply then change to the Permissions tab.
  12. Under type Deny, single click on any entries and click Remove. (N.B.: There may not be any Deny entries, in which case just ignore this step. Just remove any that do exist)
  13. Click Edit (now on the standard file Property window under the Security tab).
  14. Click Add.
  15. Click Advanced.
  16. Click "Find Now".
  17. Scroll down and double click on Everyone.
  18. Click OK.
  19. Single click on Everyone and then tick the "Full Control" box under Allow.
  20. Click OK TWO times.

Repeat this process for the 6.1 subkey (if possible)

Let me know if you get any error messages.
 
Hi zcomputerwiz

When I get to: 11. Put the check in "Replace owner on subcontainers and objects", click Apply then change to the Permissions tab.

It won't apply to adding Everyone to the Owners Tab, it says: "Registry Editor could not set owner on the key currently selected, or some of its subkeys."

Regards,

Josh
 
Let's try running chkdsk.

chkdsk /f

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following command into it, then press enter

    chkdsk /f

  4. Reboot
  5. Download ListChkdskResult.exe (by SleepyDude) from the link below:

    https://dl.dropboxusercontent.com/u/12354842/My Tools/ListChkdskResult.exe
  6. Double click on it to run it. It will take a few seconds to scan, then it will open a Notepad window with the log. Copy and paste the contents of this into your next post.
Have you run any hardware (ram, disk) tests since the problem started?
 
Hi zcomputerwiz

Sorry for the slow reply. Following is the result:

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 2015/09/20 06:56:23 PM >------
No Events found for Winlogon, Chkdsk or Wininit!

I can't really remember what I've run and not run since the problem but certainly two seperate in depth virus scans including boot scans.

Thanks,

Josh
 
I thought it did, though I'm accessing the machine remotely so it's not so obvious. I started it and actually left. It seemed too quick to me though.
 
Do you have access to the baseboard management controller or is the access only available once Windows is running?
 
Back
Top