I have a MSI GS60 2QC-013XFR Ghost bought in january 2016.
Configuration :
Main disk : 119.25 GiB TOSHIBA THNSNJ12 SSD shared between Windows 10 & Ubuntu 20.04
powered on time : 10 months and 26 days
crystal disk info and SMART data from ubuntu disk utility where OK for /dev/sda4 (windows C:) last week
windows 10 version: 1903 (10.0.18362.892)
antivirus : Avira Free Edition
secure boot unactivated
While trying to boot on Windows I have had a logonUI.exe error, this message reload every 5/10s, without any possibility to log on.
In English:
LogonUI.exe : Error System
System detected a saturation of buffer memory in this apllication. This saturation could lead a malicious user to take control of this apllication.
From windowsRE I tried to :
-boot in safe mode (just a black screen with a mouse)
-did a chkdsk /b d:
-uninstall last update (response : we encountered an issue and can't uninstall the last quality/safety windows update)
-restore from a backup point (no backup point ...)
-boot up diagnostic (everything seems ok)
-did a USB windows 10 2004 with media creation tool to update windows while keeping apps and files (response : keeping apps and files can only be done by booting the media creation tool from windows ...)
Nothing worked.
Then I went in C:\Window\System32 from ubuntu to see if LongonUI.exe was there and had a surprise : a lot of IO error while trying to access to C:\Windows :
me@me-GS60-2QC-4862:/media/me/mount_C/Windows$ ls
ls: impossible to access to 'splwow64.exe': Input / Output error
ls: impossible to access to 'write.exe': Input / Output error
ls: impossible to access to 'notepad.exe': Input / Output error
A7E07C2B2220441587E3784D5814BC93.TMP DiagTrack INF Media Provisioning SoftwareDistribution Vss
addins diagwrn.xml InfusedApps mib.bin regedit.exe Speech WaaS
AH794871.bin DigitalLocker InputMethod Microsoft.NET Registration Speech_OneCore Web
appcompat 'Downloaded Program Files' Installer Migration rescache splwow64.exe WebManagement
apppatch driverlist.txt L2Schemas ModemLogs Resources System WindowsShell.Manifest
AppReadiness ELAMBKUP LanguageOverlayCache notepad.exe RtlExUpd.dll System32 WindowsUpdate.log
assembly en-GB lfbmp12n.dll ntbtlog.txt SchCache SystemApps winhlp32.exe
.........
And this is the same in every folder inside C:\Windows, a lot of IO errors. But no errors in C:\ProgramData or C:\Users.
So obviously, either my SSD is too old (but the SMART data seems to tell the contrary, and it would be strange that only the c:\windows folder is touched), or either "something" have gone wrong with my C:\Windows Folder.
My goal is to repair my windows installation (for keeping apps and parameters installed since 4 years and 1/2). But the
me@me-GS60-2QC-4862:/media/me/mount_C/Windows$ ls
ls: impossible to access to 'splwow64.exe': Input / Output error
ls: impossible to access to 'write.exe': Input / Output error
ls: impossible to access to 'notepad.exe': Input / Output error
seems to tell that problems are heavily serious, >sfc
or >dism
can even do something if a lot of files are missing or poorly indexed ?
Anyway, I burned a usb flash drive windows 10 1903 (10.0.18362 x64 fr-fr version) to have a fresh image for dism.
I ran sfc /scannow /offbootdir=d:\ /offwindir=d:\windows /offlogfile=g:\logs\sfc.log
, which didn't manage to run successfully.
00000001 Shim considered [l:125]'\??\d:\windows\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.892_none_5efe5b5a590f76dc\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
00000002 Shim considered [l:122]'\??\d:\windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.892_none_5efe5b5a590f76dc\wcp.dll' : got STATUS_SUCCESS
00000001@2020/7/13:22:23:45.103 WcpInitialize: wcp.dll version 10.0.18362.892 (WinBuild.160101.0800)
00000002 CSI Store 2558815090800 initialized
00000003 [SR] Verifying 1 components
00000004 [SR] Beginning Verify and Repair transaction
00000005 [SR] Verify complete
00000006 [SR] Verifying 1 components
00000007 [SR] Beginning Verify and Repair transaction
00000008 [SR] Verify complete
00000009 [SR] Verifying 1 components
0000000a [SR] Beginning Verify and Repair transaction
...
...
00000d65 [SR] Verify complete
00000d66 [SR] Verifying 1 components
00000d67 [SR] Beginning Verify and Repair transaction
00000d68@2020/7/13:22:23:56.177 (F) onecore\base\wcp\sil\ntsystem.cpp(3556): Error c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)
00000d69 (F) c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] #2111687# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 264 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_dual_netrtwlane.inf_31bf3856ad364e35_10.0.18362.1_none_f02bfe27af0ebbcc\rtwlane.sys'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x5a5589d9f0, data = {l:0 b:}, byteoffset = 0, key = (null))
00000d6a (F) c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] #2111686# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0 ml:4194304 b:}, Offset = 0, Disposition = 0)
00000d6b Direct SIL provider: Number of files opened: 18811.
00000d6c Direct SIL provider: Number of files opened: 4.
00000003 Servicing stack shim unable to mark handle 47c ('\Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750}\Windows\temp\SSS_47f83d456459d60101000000a8025400\msdelta.dll') for delete-on-close, error STATUS_CANNOT_DELETE
00000004 Servicing stack shim unable to mark handle 18c ('\Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750}\Windows\temp\SSS_47f83d456459d60101000000a8025400') for delete-on-close, error STATUS_DIRECTORY_NOT_EMPTY
Seems a bit like Why Does SFC Always Get Stuck On This One File?, but as it is not answered, I don't know what to do.
>dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /scanHealth
also fails, won't put you the entire log but some lines struck me :
2020-07-13 22:32:24, Info CBS Total Operation Time: 1 seconds.
2020-07-13 22:32:24, Info CBS Ensure WCP corruption flag is clear
2020-07-13 22:32:24, Info CBS All CSI corruption was fixed, ensure CorruptionDetectedDuringAcr is clear
2020-07-13 22:32:24, Info CBS Failed to clear CorruptionDetectedDuringAcr store corrupt flag (slow mode trigger). [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2020-07-13 22:32:24, Info CBS CheckSur: hrStatus: 0x80071160 [Unknown Error], download Result: 0x0 [S_OK]
2020-07-13 22:32:24, Info CBS Count of times corruption detected: 1
2020-07-13 22:32:24, Info CBS Seconds between initial corruption detections: -1
2020-07-13 22:32:24, Info CBS Seconds between corruption and repair: -1
2020-07-13 22:32:24, Info CBS Failed to run Detect and repair. [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info CBS Exec: Processing complete, session(Corruption Detecting): 676_999203 [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info DISM DISM Package Manager: PID=676 TID=884 Error in operation: (null) (CBS HRESULT=0x80071160) - CCbsConUIHandler::Error
2020-07-13 22:32:24, Error CBS Session: 676_999203 failed to perform store corruption detect and repair operation. [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info CBS Session: 676_999203 finalized. Reboot required: no [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Error DISM DISM Package Manager: PID=676 TID=884 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x80071160)
2020-07-13 22:32:24, Error DISM DISM Package Manager: PID=676 TID=884 Failed processing package changes with session option CbsSessionOptionDetectStoreCorruption - CDISMPackageManager::ScanHealth(hr:0x80071160)
2020-07-13 22:32:24, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SOFTWARE
2020-07-13 22:32:24, Info CBS Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SOFTWARE, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2020-07-13 22:32:24, Info CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SYSTEM
2020-07-13 22:32:24, Info CBS Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SYSTEM, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SECURITY
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SAM
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/COMPONENTS
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/DRIVERS
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/DEFAULT
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Users/Default/ntuser.dat
2020-07-13 22:32:24, Info CBS Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/system32/smi/store/Machine/schema.dat
2020-07-13 22:32:24, Info CSI 0000000b Direct SIL provider: Number of files opened: 100.
2020-07-13 22:32:24, Error DISM DISM Package Manager: PID=676 TID=884 Failed to restore the image health. -
Obviously it does have some trouble to travel through c:\Windows\System32, probably the result of misindexing.
>dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /restoreHealth /source:wim:g:\sources\install.wim:1
also failed (prompt the same error as /scanhealth : ERROR: 4448
), with a lot of errors in the log.
But strangely, >dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /checkHealth
worked, prompting
"The component store is repairable. The operation completed successfully."
So there is maybe something to try to repair the installation but I have no idea ... ? And you ?
Best regards
User contributions licensed under CC BY-SA 3.0