BSOD while playing games. Multiple Error codes

NoelDP · 21 May 2015

That's rather confusing!
The file is definitely present, and appears to be OK - but Windows/SFC is not apparently seeing it. All permissions are as expected, and there are no obvious problems.

I can only think that there's a registry problem.

I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

Kharma · 21 May 2015

Posted here:

https://www.dropbox.com/s/vtlmmnvaps...NENTS.zip?dl=0

NoelDP · 22 May 2015

Gotcha!
The problem is a missing entry in the registry...

I've uploaded a file - khaab.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the saved file and select Extract all...
Save it to the default location
This should create a file khaab.reg

right-click on the file, and select Merge
Accept the warnings, - you should then get a 'Success' message.
Close all windows, and reboot.

Run CheckSUR again, and post the new log.

Kharma · 22 May 2015

I am getting an error messages that says "Cannot import C:\Windows\khaab.reg: Error accessing the registry.".

NoelDP · 22 May 2015

OK - this should help...

Open an Elevated Command Prompt, and run the following command

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS

Then try the registry merge again - it should work now.

Kharma · 22 May 2015

File attached with results from latest SFC /scannow

NoelDP · 23 May 2015

Here's the new summary...

Code:

2015-05-22 13:01:22, Info                  CSI    00000352 [SR] Repairing 1 components
2015-05-22 13:01:22, Info                  CSI    00000353 [SR] Beginning Verify and Repair transaction
2015-05-22 13:01:22, Info                  CSI    00000354 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json do not match actual file [l:24{12}]"utc.app.json" :
  Found: {l:32 b:FAEZKiflOiLCOqAa0MS5v3+ESiId8lC76TIolP23ss8=} Expected: {l:32 b:6510UErwHGoFg3sRd3gzh3HSbTceuHem3Rnk0NraKS8=}
2015-05-22 13:01:22, Info                  CSI    00000355 [SR] Cannot repair member file [l:24{12}]"utc.app.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.1.7601.18839, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

So we solved one problem, and another has reared its head.

SFCFix Script

Warning: this fix is specific to the above corruptions only, do not run these fixes if you do not have these corrupt files.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download SFCFix.zip from the below link, and save this to your Desktop. Ensure that this file is named SFCFix.zip – do not rename it.
download this version: SFCFix(x64version)
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.

Drag the file SFCFix.zip onto the file SFCFix.exe and release it.

SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.

Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please – put tags around the log to break up the text.

SFC /SCANNOW

Right click on the Start button
Click on Command prompt (Admin) => Press Yes on the prompt
Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW

Kharma · 23 May 2015

Output from FSCFix:

------------------------------------------------------------------------------------------
SFCFix version 2.4.3.0 by niemiro.
Start time: 2015-05-23 09:00:11.018
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\kharma\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\telemetry.asm-windowsdefault.json
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utcresources.dll

The file \\?\C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll is in use and must be replaced over a reboot.
Successfully copied file C:\Users\kharma\AppData\Local\niemiro\Archive\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\telemetry.asm-windowsdefault.json to C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\telemetry.asm-windowsdefault.json.
Successfully copied file C:\Users\kharma\AppData\Local\niemiro\Archive\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json to C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json.
Successfully copied file C:\Users\kharma\AppData\Local\niemiro\Archive\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utcresources.dll to C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utcresources.dll.

Successfully pended file for replace over reboot: \\?\C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\telemetry.asm-windowsdefault.json
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\telemetry.asm-windowsdefault.json
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utc.app.json
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utcresources.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\utcresources.dll
PowerCopy:: directive completed successfully.

Reboot:: directive completed successfully.

PostRebootCorruptionDetection::
No hash verification failures detected.
PostRebootCorruptionDetection:: directive completed successfully.

PostRebootRestorePermissions::
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll
PostRebootRestorePermissions:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.4.3.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2015-05-23 09:02:08.269
----------------------EOF-----------------------

------------------------------------------------------------------------------------------

Output from SFC SCANNOW:

------------------------------------------------------------------------------------------

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>SFC /SCANNOW

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>

NoelDP · 23 May 2015

Lookin' good!

So - how is the system behaving now?

Kharma · 23 May 2015

Right now it is working pretty well. Haven't had a blue screen since the last fix (which has only been half a day). I will wait a few more days and if nothing new happens I will go ahead and mark this as solved. Otherwise I will update this with any issues.