Impossible to log on to Windows 10: LogonUI.exe Error System & IO error in C:\Windows

-1

I have a MSI GS60 2QC-013XFR Ghost bought in january 2016.

Configuration :
Main disk : 119.25 GiB TOSHIBA THNSNJ12 SSD shared between Windows 10 & Ubuntu 20.04
powered on time : 10 months and 26 days
crystal disk info and SMART data from ubuntu disk utility where OK for /dev/sda4 (windows C:) last week
windows 10 version: 1903 (10.0.18362.892)
antivirus : Avira Free Edition
secure boot unactivated

While trying to boot on Windows I have had a logonUI.exe error, this message reload every 5/10s, without any possibility to log on.

enter image description here

In English:
LogonUI.exe : Error System
System detected a saturation of buffer memory in this apllication. This saturation could lead a malicious user to take control of this apllication.

From windowsRE I tried to :
-boot in safe mode (just a black screen with a mouse)
-did a chkdsk /b d:
-uninstall last update (response : we encountered an issue and can't uninstall the last quality/safety windows update)
-restore from a backup point (no backup point ...)
-boot up diagnostic (everything seems ok)
-did a USB windows 10 2004 with media creation tool to update windows while keeping apps and files (response : keeping apps and files can only be done by booting the media creation tool from windows ...)

Nothing worked.

Then I went in C:\Window\System32 from ubuntu to see if LongonUI.exe was there and had a surprise : a lot of IO error while trying to access to C:\Windows :

me@me-GS60-2QC-4862:/media/me/mount_C/Windows$ ls
ls: impossible to access to  'splwow64.exe': Input / Output error
ls: impossible to access to  'write.exe': Input / Output error
ls: impossible to access to  'notepad.exe': Input / Output error
 A7E07C2B2220441587E3784D5814BC93.TMP   DiagTrack                   INF                    Media                     Provisioning       SoftwareDistribution   Vss
 addins                                 diagwrn.xml                 InfusedApps            mib.bin                   regedit.exe        Speech                 WaaS
 AH794871.bin                           DigitalLocker               InputMethod            Microsoft.NET             Registration       Speech_OneCore         Web
 appcompat                             'Downloaded Program Files'   Installer              Migration                 rescache           splwow64.exe           WebManagement
 apppatch                               driverlist.txt              L2Schemas              ModemLogs                 Resources          System                 WindowsShell.Manifest
 AppReadiness                           ELAMBKUP                    LanguageOverlayCache   notepad.exe               RtlExUpd.dll       System32               WindowsUpdate.log
 assembly                               en-GB                       lfbmp12n.dll           ntbtlog.txt               SchCache           SystemApps             winhlp32.exe
 .........

And this is the same in every folder inside C:\Windows, a lot of IO errors. But no errors in C:\ProgramData or C:\Users.

So obviously, either my SSD is too old (but the SMART data seems to tell the contrary, and it would be strange that only the c:\windows folder is touched), or either "something" have gone wrong with my C:\Windows Folder.

My goal is to repair my windows installation (for keeping apps and parameters installed since 4 years and 1/2). But the

me@me-GS60-2QC-4862:/media/me/mount_C/Windows$ ls
ls: impossible to access to  'splwow64.exe': Input / Output error
ls: impossible to access to  'write.exe': Input / Output error
ls: impossible to access to  'notepad.exe': Input / Output error

seems to tell that problems are heavily serious, >sfc or >dism can even do something if a lot of files are missing or poorly indexed ?

Anyway, I burned a usb flash drive windows 10 1903 (10.0.18362 x64 fr-fr version) to have a fresh image for dism.

I ran sfc /scannow /offbootdir=d:\ /offwindir=d:\windows /offlogfile=g:\logs\sfc.log, which didn't manage to run successfully.

00000001 Shim considered [l:125]'\??\d:\windows\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.892_none_5efe5b5a590f76dc\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
00000002 Shim considered [l:122]'\??\d:\windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.892_none_5efe5b5a590f76dc\wcp.dll' : got STATUS_SUCCESS
00000001@2020/7/13:22:23:45.103 WcpInitialize: wcp.dll version 10.0.18362.892 (WinBuild.160101.0800)
00000002 CSI Store 2558815090800 initialized
00000003 [SR] Verifying 1 components
00000004 [SR] Beginning Verify and Repair transaction
00000005 [SR] Verify complete
00000006 [SR] Verifying 1 components
00000007 [SR] Beginning Verify and Repair transaction
00000008 [SR] Verify complete
00000009 [SR] Verifying 1 components
0000000a [SR] Beginning Verify and Repair transaction
...
...
00000d65 [SR] Verify complete
00000d66 [SR] Verifying 1 components
00000d67 [SR] Beginning Verify and Repair transaction
00000d68@2020/7/13:22:23:56.177 (F) onecore\base\wcp\sil\ntsystem.cpp(3556): Error c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)
00000d69 (F) c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] #2111687# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 264 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_dual_netrtwlane.inf_31bf3856ad364e35_10.0.18362.1_none_f02bfe27af0ebbcc\rtwlane.sys'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x5a5589d9f0, data = {l:0 b:}, byteoffset = 0, key = (null))
00000d6a (F) c000a2a7 [Error,Facility=(system),Code=41639 (0xa2a7)] #2111686# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0 ml:4194304 b:}, Offset = 0, Disposition = 0)
00000d6b Direct SIL provider: Number of files opened: 18811.
00000d6c Direct SIL provider: Number of files opened: 4.
00000003 Servicing stack shim unable to mark handle 47c ('\Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750}\Windows\temp\SSS_47f83d456459d60101000000a8025400\msdelta.dll') for delete-on-close, error STATUS_CANNOT_DELETE
00000004 Servicing stack shim unable to mark handle 18c ('\Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750}\Windows\temp\SSS_47f83d456459d60101000000a8025400') for delete-on-close, error STATUS_DIRECTORY_NOT_EMPTY

Seems a bit like Why Does SFC Always Get Stuck On This One File?, but as it is not answered, I don't know what to do.

>dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /scanHealth also fails, won't put you the entire log but some lines struck me :

2020-07-13 22:32:24, Info                  CBS    Total Operation Time: 1 seconds.
2020-07-13 22:32:24, Info                  CBS    Ensure WCP corruption flag is clear
2020-07-13 22:32:24, Info                  CBS    All CSI corruption was fixed, ensure CorruptionDetectedDuringAcr is clear
2020-07-13 22:32:24, Info                  CBS    Failed to clear CorruptionDetectedDuringAcr store corrupt flag (slow mode trigger). [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2020-07-13 22:32:24, Info                  CBS    CheckSur: hrStatus: 0x80071160 [Unknown Error], download Result: 0x0 [S_OK]
2020-07-13 22:32:24, Info                  CBS    Count of times corruption detected: 1
2020-07-13 22:32:24, Info                  CBS    Seconds between initial corruption detections: -1
2020-07-13 22:32:24, Info                  CBS    Seconds between corruption and repair: -1
2020-07-13 22:32:24, Info                  CBS    Failed to run Detect and repair. [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info                  CBS    Exec: Processing complete, session(Corruption Detecting): 676_999203 [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info                  DISM   DISM Package Manager: PID=676 TID=884  Error in operation: (null) (CBS HRESULT=0x80071160) - CCbsConUIHandler::Error
2020-07-13 22:32:24, Error                 CBS    Session: 676_999203 failed to perform store corruption detect and repair operation. [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Info                  CBS    Session: 676_999203 finalized. Reboot required: no [HRESULT = 0x80071160 - Unknown Error]
2020-07-13 22:32:24, Error                 DISM   DISM Package Manager: PID=676 TID=884 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x80071160)
2020-07-13 22:32:24, Error                 DISM   DISM Package Manager: PID=676 TID=884 Failed processing package changes with session option CbsSessionOptionDetectStoreCorruption - CDISMPackageManager::ScanHealth(hr:0x80071160)
2020-07-13 22:32:24, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SOFTWARE
2020-07-13 22:32:24, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SOFTWARE, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2020-07-13 22:32:24, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SYSTEM
2020-07-13 22:32:24, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SYSTEM, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SECURITY
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/SAM
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/COMPONENTS
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/DRIVERS
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/System32/config/DEFAULT
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Users/Default/ntuser.dat
2020-07-13 22:32:24, Info                  CBS    Force unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}d:/Windows/system32/smi/store/Machine/schema.dat
2020-07-13 22:32:24, Info                  CSI    0000000b Direct SIL provider: Number of files opened: 100.
2020-07-13 22:32:24, Error                 DISM   DISM Package Manager: PID=676 TID=884 Failed to restore the image health. -

Obviously it does have some trouble to travel through c:\Windows\System32, probably the result of misindexing.

>dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /restoreHealth /source:wim:g:\sources\install.wim:1 also failed (prompt the same error as /scanhealth : ERROR: 4448), with a lot of errors in the log.

But strangely, >dism /english /scratchDir:g:\work /image:d:\ /cleanup-image /checkHealth worked, prompting

"The component store is repairable. The operation completed successfully."

So there is maybe something to try to repair the installation but I have no idea ... ? And you ?

Best regards

windows-10
boot
login
reinstall
windows-10-v1903
asked on Super User Jul 12, 2020 by Plaikeeaan • edited Jul 14, 2020 by Plaikeeaan

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0