That error message is normal when running in the RE - it has no access to anywhere to save the files (it doesn't redirect to the HD, and the folder it wants to save to doesn't exist in the RAMDrive that RE runs from)
Please go back into RE and run the offline SFC scan -
sfc /scannow /OFFBOOTDIR=<drive>:\ /OFFWINDIR=<drive>:\Windows
where <drive> is the letter you found above.
"...did not find any integrity violations."
cbs attached
Code:Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>sfc /scannow Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection found corrupt files but was unable to fix some of th em. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log C:\Windows\system32>
...in that case I have no idea what's happening!
I'll call in the troops and see if they can help.
...second thoughts....
Please try this......
(It's very similar to what we've laready done, but seems to work when everythig else fails)
Please run the following commands in an Elevated Command Prompt
NET STOP CRYPTSVC
REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD
NET START CRYPTSVC
once complete, leave the system alone for at least an hour to rebuild the database, then reboot, and run another MGADiag report.
Note that this will delete your Update History - but all updates will remain installed, and can be viewed in the Installed Updates listing.
sigh.
can't say that I am surprised lol.
there was already a catroot2old, so I added a new one. am waiting an hour.
Code:Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>dir catroot* Volume in drive C is System Volume Serial Number is F240-5C20 Directory of C:\Windows\system32 11/29/2012 08:09 AM <DIR> catroot 11/25/2012 09:25 PM <DIR> catroot2 11/29/2012 08:50 AM <DIR> CATROOT2OLD 08/07/2012 07:35 PM <DIR> CatRoot2_2012111221298 11/23/2012 08:36 PM <DIR> CatRoot2_2012112510542 0 File(s) 0 bytes 5 Dir(s) 429,840,687,104 bytes free C:\Windows\system32>NET STOP CRYPTSVC The Cryptographic Services service is stopping.. The Cryptographic Services service was stopped successfully. C:\Windows\system32>REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD A duplicate file name exists, or the file cannot be found. C:\Windows\system32>REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLDTOO C:\Windows\system32>NET START CRYPTSVC The Cryptographic Services service is starting. The Cryptographic Services service was started successfully. C:\Windows\system32>
Quote