Kua Hamate te Hive Rēhita Windows (BAD_SYSTEM_CONFIG_INFO BSOD): He aha RegBack He Putua kei roto Windows 10/11 me te pehea te whakahoki mai i nga Hives mai i nga kape Atarangi VSS¶
He rereke nga nama ohorere i ia whenua. Ka whakamahia e tenei wharangi te 911, te nama mo te United States me Canada. He maha nga whenua e whakamahi ana i te 112, 999, tetahi atu nama ranei. Kimihia te nama mo to whenua.
Ka kite i te Windows 10, Windows 11, Windows Server ranei ka tukinga te miihini i te tiimatanga ki te Mata Kahurangi o te Mate (BSOD) kopikopiko e whakaatu ana Stop code: BAD_SYSTEM_CONFIG_INFO (0x00000074), CRITICAL_PROCESS_DIED, he mata pango Windows Boot Manager ranei e kii ana \Windows\System32\config\SYSTEM is missing or contains errors (Status: 0xc000014c / 0xc0000225) ko te tikanga kotahi, neke atu ranei o nga hive rehita-rua matua a Windows (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT) ranei te Raraunga Whirihoranga Whakaara (BCD) i pakaruhia te toa i te wa e mate ana te hiko, i aukatia, i rahua ranei te whakahou whakahiato. Ko te mea kino atu, ina whai nga kaiwhakahaere i nga akoranga ipurangi tawhito e kii ana kia whakatuwheratia te Taiao Whakaora Windows (WinRE) Whakatairanga Whakatairanga me te kape i nga konae rehita rehita mai i C:\Windows\System32\config\RegBack\, ka kitea e ratou ko te RegBack kua putua katoa te kōpaki (kei roto ranei 0-byte kōnae). Ka timata i roto i te Windows 10 putanga 1803 me nga hanga katoa o Windows 11, i monoa e Microsoft te RegIdleBackup mahi ki te tiaki mokowā kōpae. Kaua e muru me te whakauru ano i te Matapihi: ka mau tonu to PC, katahi ano ka tukuna he kape o nga urunga rehitatanga kei roto huna Ratonga Kape Atarangi (Volume Shadow Copy Service) (VSS) whakaahua (HarddiskVolumeShadowCopyN) me te tauwhitinga .LOG1 / .LOG2 hautaka ka taea e koe te tango i roto i te 3 meneti mai WinRE. Mo te taraiwa whaanui, taputapu BSOD rapurongoā ranei, tirohia Matapihi kahurangi (BSOD) me te whakatika patu; mehemea BitLocker ka tono mo te taviri whakaora 48-mati i mua i te whakatuwheratanga Whakatairanga Whakatairanga, korero BitLocker, FileVault, me te LUKS whakamunatanga maukati ki te whakaora me te tautuhi TPM a SSD me te NVMe te aratau panui-anake ohorere me te TRIM whakakore i te whakaoranga. Mena ka whakakorehia e tenei ngoikoretanga o te punaha nga teihana mahi haumanu o te hohipera, tuku ohorere (CAD), ki nga mana haumaru-ora ranei, waea atu ki to nama whawhati tata (911 i te United States me Canada, 112 puta noa i te Kotahitanga o Europi, 999 i roto i te United Kingdom) tirohia to maatau raarangi ingoa tau ohorere.
Mahia tenei inaianei¶
- ** KAUA e panui "Tautuhi i tenei PC -> Tango i nga mea katoa" ka kape matapo ranei
0-bytekōnae mai iC:\Windows\System32\config\RegBack\**: Mena ka oma koecopy C:\Windows\System32\config\RegBack\* C:\Windows\System32\config\i runga Windows 10 (1803+) ranei Windows 11 me te kore arowhaidir RegBacktuatahi, ka tuhiruatia e koe o hives rehita kua pakaru ki te0-bytenga konae kore, te whakangaro i nga toenga o nga hives me te whakaora kia tino uaua. - Whakaoho ki te Taiao Whakaora Windows (
WinRE) ka tuwheraTroubleshoot -> Advanced options -> Command Prompt: - Mena ka rahua a Windows ki te whawhai e toru nga wa i te rarangi, ka tukuna aunoatia e ia Whakatika Aunoa -> Kōwhiringa Arā Atu Anō.
- I tua atu, puta mai i tetahi Windows 10 / 11 USB Tāuta Media, pēhia
Shift + F10(raneiShift + Fn + F10i runga rorohiko) kei te mata whiriwhiri reo tuatahi, me te teiteiX:\Sources>Ka tuwhera tonu te Tohuaki Whakahau me te kore e paato i nga tahua. - Kimihia te reta puku pono o to wehewehenga Windows (
diskpart -> list vol), he maha tonuD:raneiE:roto WinRE, NOTC:: I roto i te taiao whakaora,C:he maha nga wa ka tohua ki te 100 megabyteSystem ReservedraneiRecoverywehewehe i te wa e noho ana to whakaurunga WindowsD:raneiE:. Reredir C:\Windows,dir D:\Windows,dir E:\Windowshei whakaū ko tehea reta puku kei roto\Windows\System32\config\. - Whakahokia i nga wa katoa to waahi (ahakoa kua pakaru)
config\kōpaki kiC:\Config_Backup\I mua i te pa ki te konae kotahi: Reremkdir D:\Config_Backupaxcopy /h /i /c /k /e /r /y D:\Windows\System32\config D:\Config_Backup. Me pupuri e koe nga konae hive tuatahi e rima (SYSTEM,SOFTWARE,SAM,SECURITY,DEFAULT) me o ratou kōnae rangitaki tauwhitinga huna (SYSTEM.LOG1,SYSTEM.LOG2,SOFTWARE.LOG1,SOFTWARE.LOG2). - I mua i te whakakapi i tetahi taenga, whakamatauria mehemea
BCD(Boot Configuration Data) te tapahi, te raarangi hokohoko taenga paru ranei (.LOG1/.LOG2) ko te tino take oBAD_SYSTEM_CONFIG_INFO: - I roto
30%oBAD_SYSTEM_CONFIG_INFOBSODs, he 100 paiheneti nga hives rehita me teBCDkua pakaru noa te toatruncatememory/numprochaki (msconfigmahanga) hiahia raneireg loadki te purei ano i te.LOG1/.LOG2rangitaki tauwhitinga aunoa. - Mehemea
SYSTEMraneiSOFTWAREkua tino kino, tangohia he kape hauora tika mai i te VSS Shadow Copy (\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\System32\config\) te whakamahivssadmin list shadows: Ahakoa i te waSystem Restore (rstrui.exe)ka rahua i te hapa i te GUI, kei te takoto te rōrahi VSS Shadow Copy i runga i te kōpae ka taea e koe te kape maSYSTEMaSOFTWAREhives tika ki roto\Windows\System32\config\te whakamahicopyraneirobocopy.
Danger
Kaua rawa e tuhirua SAM ranei SECURITY me te taapiri marama-marama ki te kore e rua nga konae iti 0 bytes kua pirau ranei: Tata ki te 99 paiheneti o nga tukinga rehita ka pa anake SYSTEM(15 MB ki 30 MB) ranei SOFTWARE(80 MB ki 150 MB), na te mea ka tuhia enei hive e rua i nga wa katoa i te wa e whawhai ana me nga Whakahoutanga Windows. Ko te SAM(Security Accounts Manager, te tikanga 64 KB ki 256 KB) me SECURITY ka mau nga hives i to hashes kupuhipa kaiwhakamahi rohe me te kupuhipa whakawhirinaki kaute miihini rohe ($machine.ACC). Mena ka tuhirua koe i te hauora SAM a SECURITY hive me te kape atarangi 2-marama-tawhito i runga i tetahi PC kua honoa ki te rohe Active Directory, i muri ranei i te huringa kupuhipa, ka pakaru koe i te hononga whakawhirinaki rohe (The trust relationship between this workstation and the primary domain failed) maukati ranei i nga huringa kupuhipa paetata tata. Whakakapihia anake te taenga motuhake (SYSTEM ranei SOFTWARE) e rahua te reg load whakamātautau i te Wāhanga 2.
Rakau whakatau: BAD_SYSTEM_CONFIG_INFO (0x00000074) me 0xc000014c whakamatautau rehita¶
Whakamahia tenei tūtohi rerenga mai i te WinRE Tohuaki Tono (Shift + F10) ki te tohu i te konae kua kino me te whakahoki mai me te kore e ngaro nga papatono kua whakauruhia, nga kaute kaiwhakamahi ranei:
flowchart TD
Start["Kua Tutuki a Windows i te Whakaara: BAD_SYSTEM_CONFIG_INFO (0x74) 0xc000014c ranei"] --> OpenCmd["Whakaarahia ki WinRE, Windows USB ranei -> Whakatuwherahia te Tohu Whakahau (Shift + F10)"]
OpenCmd --> FindDrive["Kimihia te Reta Puku Matapihi Tika (hei tauira D:) ma te: diskpart -> list vol -> exit"]
FindDrive --> BackupFirst["Whakahokia te Kōpaki Whirihora o nāianei (Kei roto i te .LOG1/.LOG2 Huna): xcopy /h D:\\Windows\\System32\\config D:\\Config_Orig\\"]
BackupFirst --> CheckBcd["Tirohanga 1: Whakahaerehia te bcdedit -> I whakaturia e tetahi te truncatememory, te numproc ranei i roto i te msconfig?"]
CheckBcd -->|"Ae: truncatememory or badvalue Anaianei"| FixBcd["Run: bcdedit /deletevalue {default} truncatememory AND bcdedit /deletevalue {default} numproc -> Reboot"]
CheckBcd -->|"Kao: BCD Clean"| TestReplay["Tirohanga 2: Whakamatau me te Whakahoahoa Nga Rangitaki Tauwhitinga (.LOG1/.LOG2) mo ia Hive ma te uta reg HKLM\\TempHive"]
TestReplay --> WhichBroken{"Ka angitū te uta reg reg, ka purei ano i te .LOG1/.LOG2?"}
WhichBroken -->|"Ae: reg load Kua Whakahokihia te Rangitaki Whakawhitinga paru -> Wewetehia ma te tango i te reg"| BootFixed["Whakahoutia te PC: Ko te Pane Hive Dirty Kua Whakau I-Waahi me te Kore Hurihuri"]
WhichBroken -->|"Kao: SYSTEM or SOFTWARE Whakahoki mai 'Kei te kino te papaa raraunga rehita whirihoranga' he 0 Paita ranei"| CheckVss["Whakahaere: vssadmin rārangi atarangi"]
CheckVss --> HasVss{"Kei te Rarangihia nga kape Atarangi Volume (HarddiskVolumeShadowCopy1..N)?"}
HasVss -->|"Āe: He Tārua Kōruru"| CopyVss["Tārua ANAKE i te Hive kua kino (hei tauira. SYSTEM / SOFTWARE) mai i Hōu HarddiskVolumeShadowCopyN ki D:\\Windows\\System32\\config\\"]
HasVss -->|"Kao: 0 nga kape Atarangi kua Rarangihia"| CheckAlt["Tirohia etahi atu punaa Hive: D:\\Windows\\System32\\config\\TxR\\ OR Windows.old OR WinSxS Component Hive Repair"]
Wāhanga 1: He aha BAD_SYSTEM_CONFIG_INFO ka tupu me te aha RegBack kei roto Windows 10/11¶
I mua i te whakarereke i nga konae kei roto \Windows\System32\config\, kia mohio koe he aha nga mahi a nga konae rehita rehita e rima me te aha te tikanga tuku iho RegBack kua kore te tikanga e mahi.
1. Anatomy of \Windows\System32\config\¶
I te wa o te pata Windows (ntoskrnl.exe) me te Kaiuta Whakaara (winload.efi) ka arawhiti i te wa o te tiimatanga, ka utaina e ratou nga konae paatengi raraunga e rima (e kiia ana ko Hives, timata mai i te hainatanga 4-paita ASCII regf i te paita 0) mai \Windows\System32\config\:
| Ingoa Kōnae Rēhita Hive | Ara Rēhita kua mau ki roto regedit |
Rahi Kōnae Hauora Tikanga | Ka aha Mēnā Kua Hāmate tēnei Kōnae Tauwhāiti |
|---|---|---|---|
SYSTEM |
HKEY_LOCAL_MACHINE\SYSTEM |
15 MB ki 40 MB(15.7 million ki 41.9 million paita) |
Ka rahua te whawhai tonu (0xc000014c) ranei BAD_SYSTEM_CONFIG_INFO (0x00000074): winload.efi panui SYSTEM i mua i te tiimata o te kernel ki te mohio ko wai nga taraiwa rokiroki (storahci.sys, stornvme.sys), ratonga, me ControlSet001 tawhā taputapu ki te uta. |
SOFTWARE |
HKEY_LOCAL_MACHINE\SOFTWARE |
80 MB ki 200 MB(83.8 million ki 209.7 million paita) |
Ka takatakahia i muri mai i te boot (BAD_SYSTEM_CONFIG_INFO ranei CRITICAL_PROCESS_DIED i mua tonu i te mata takiuru) ina smss.exe / winlogon.exe ka utaina nga karaehe Windows, nga kaupapa here, me nga whakaaturanga waahanga kua whakauruhia. |
SAM |
HKEY_LOCAL_MACHINE\SAM |
64 KB ki 256 KB |
Pātengi raraunga pūkete kaiwhakamahi paetata (RID 500 Administrator, kaiwhakamahi rohe). He iti te kino ki te kore e ki tonu te kōpae. |
SECURITY |
HKEY_LOCAL_MACHINE\SECURITY |
64 KB ki 512 KB |
Mana Haumarutanga Paetata (LSA) nga mea ngaro, nga taviri miihini BitLocker/DPAPI, me te kupuhipa whakawhirinaki rorohiko rohe Active Directory. He iti noa te pirau. |
DEFAULT |
HKEY_USERS\.DEFAULT |
256 KB ki 2 MB |
Tautuhinga kōtaha mo te LOCAL SYSTEM (S-1-5-18) papamahi mua-takiuru (kei reira te mata takiuru e rere ana). |
*.LOG1 & *.LOG2 (Kōnae Pūnaha Huna) |
Tuhia-Mua Nga Rangitaki Tauwhitinga mo ia taenga (SYSTEM.LOG1, SYSTEM.LOG2) |
256 KB ki 8 MB |
Arotake: I nga wa katoa ka whakarereke a Windows i tetahi taenga, ka tuhia e ia nga huringa ki .LOG1 / .LOG2 tuatahi i mua i te whakahou i te turanga regf pane (Primary Sequence Number == Secondary Sequence Number). |
2. He aha C:\Windows\System32\config\RegBack kei roto Windows 10 (1803+) me Windows 11¶
Mai i te Windows XP ki te Windows 10 putanga 1709, he mahi kua whakaritea kua whakaingoatia \Microsoft\Windows\Registry\RegIdleBackup ka tārua aunoa SYSTEM, SOFTWARE, SAM, SECURITY, a DEFAULT ki roto \Windows\System32\config\RegBack\ i nga wa e mangere ana te punaha.
- He aha nga mea i whakarereketia e Microsoft: Ka timata i roto i Windows 10 putanga 1803 (Mei 2018) me te haere tonu i nga tukunga katoa o Windows 11, kua whakakorehia e Microsoft te mana aunoa RegBack taupori ma te taunoa hei whakaiti i te tapuwae kōpae (kua tuhia ki Microsoft Support KB4509719).
- Ko te hua: Ki te kore koe e tapiri a ringa i te EnablePeriodicBackup = 1 DWORD ki HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager i mua i tukitukia to PC, rere dir D:\Windows\System32\config\RegBack ka whakaatu 0 File(s) (e rima nga konae te rahi 0 paita).
- He aha kei a koe tonu he taapiri: Ahakoa RegBack he putua, Windows 10 me Windows 11 te hanga aunoa Volume Shadow Copy (VSS) nga whakaahua i mua i te Whakahoutanga Windows, te whakaurunga tono MSI, te whakaurunga taraiwa, me nga waahi tirotiro whakaora ia wiki. Kei ia whakaahua VSS he kape tio katoa, tohu-i-wa o \Windows\System32\config\.
Wāhanga 2: Whakatika Tere Kore-Whakahoki (msconfig Mahanga BCD & .LOG1/.LOG2 Tauwhitinga Tukurua)¶
I mua i te whakakapi SYSTEM ranei SOFTWARE mai i te kape marumaru, whakamatauria enei whakatikatika kore-whakamuri e rua i roto i te WinRE Tohuaki Tono (Shift + F10). Neke atu i te haurua o te katoa BAD_SYSTEM_CONFIG_INFO (0x00000074) ka whakatauhia nga tukinga i konei i raro i te 60 hēkona me te kore e huri whakamuri i tetahi tautuhinga.
Hipanga 1: Tautuhia to reta puku Windows pono (D: vs C:) ka hoki ki runga config\¶
I roto i te X:\Sources> Matapihi Tohuaki Whakahau, kimihia ko tehea reta puku e mau ana i to whakaurunga Windows:
Size a Label nga pou hei kite ko tehea reta puku (C:, D:, ranei E:) ko to wehewehenga OS Windows matua (mo te toenga o tenei aratohu, ka whakamahia e matou D:; whakakapihia to reta puku tuuturu).
Tonu hanga he tārua katoa o D:\Windows\System32\config (whakamahi /h na huna .LOG1 a .LOG2 kei roto nga konae tauwhitinga):
mkdir D:\Config_Emergency_Backup
xcopy /h /i /c /k /e /r /y D:\Windows\System32\config D:\Config_Emergency_Backup
Hipanga 2: Tirohia Whakatika A: I huri tetahi Number of processors ranei Maximum memory i roto msconfig?¶
Ko nga tuhinga mana a Microsoft mo te Tirohanga Bug 0x74 (BAD_SYSTEM_CONFIG_INFO) e whakaatu ana i tetahi mahanga rongonui: ka tuwhera nga kaiwhakamahi **msconfig -> Whakaara -> Ko nga whiringa taapiri ** whai muri i te ataata "arotautanga petipeti" kino, tirohia Number of processorsranei Maximum memory (whakaturia ki 0 he uara kino ranei), ka whakaara ano. I muri tonu i te whakaara ano, ka mau tonu a Windows BAD_SYSTEM_CONFIG_INFO BSOD i mua i te pa ki nga hives rehita.
Tirohia to Raraunga Whirihoranga Whakaara (BCD) toa inaianei:
truncatememory, numproc, ranei removememory. Mena ka puta tetahi o aua rarangi, mukua tonu:
bcdedit /deletevalue {default} truncatememory
bcdedit /deletevalue {default} numproc
bcdedit /deletevalue {default} removememory
wpeutil reboot inaianei: ka whawhai to PC ki te papamahi.
Hipanga 3: Tirohia Whakatika B: Replay paru .LOG1 / .LOG2 hive hokohoko rangitaki i roto i-wahi whakamahi reg load¶
He aha mena ka tapahia te hiko i te wa e tuhi ana a Windows ki a SYSTEM ranei SOFTWARE?
+-------------------------------------------------------------------------+
| HOW WINDOWS REGISTRY HIVE HEADER SEQUENCE NUMBERS WORK |
| |
| Base Block Header of SYSTEM Hive (First 4,096 bytes: "regf"): |
| Offset 0x04: Primary Sequence Number = 0x0004810A |
| Offset 0x08: Secondary Sequence Number = 0x00048109 (MISMATCH) |
| |
| Why it fails at boot: |
| Power died mid-write before Primary == Secondary. The missing |
| dirty pages are sitting safely inside SYSTEM.LOG1 / SYSTEM.LOG2. |
| If winload.efi cannot reconcile the log at early boot, it throws |
| 0xc000014c or BAD_SYSTEM_CONFIG_INFO (0x74). |
| |
| How to force-replay the .LOG1/.LOG2 file in WinRE: |
| Running `reg load HKLM\Temp D:\Windows\System32\config\SYSTEM` |
| invokes the full WinRE Configuration Manager, which reads |
| SYSTEM.LOG1 + SYSTEM.LOG2, replays the dirty vector pages into |
| SYSTEM, sets Primary == Secondary, and flushes a clean hive on unload |
+-------------------------------------------------------------------------+
Whakamatautauria ia o nga hive e rima (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT) kotahi ki roto WinRE Tohuaki Whakahau ma te whakamahi reg load:
The operation completed successfully**:
Ehara i te mea kua whakamatauria e koe tena SYSTEM he salvageable, mehemea SYSTEM he paru .LOG1/.LOG2 raupapa koretake, reg load i purei ano i te raarangi tauwhitinga me te whakatika i te taenga mai i roto i te mahara. Inaianei ka horoia te pane kua whakatikahia kia hoki ki te kōpae ma te tango:
- Whakahokia ano te whakamatautau uta-a-tuku mo SOFTWARE, SAM, SECURITY, a DEFAULT:
reg load HKLM\TestSoft D:\Windows\System32\config\SOFTWARE
reg unload HKLM\TestSoft
reg load HKLM\TestSam D:\Windows\System32\config\SAM
reg unload HKLM\TestSam
reg load HKLM\TestSec D:\Windows\System32\config\SECURITY
reg unload HKLM\TestSec
reg load HKLM\TestDef D:\Windows\System32\config\DEFAULT
reg unload HKLM\TestDef
reg load / reg unload i angitu nga whakahau? Mēnā ka 2 ki te 3 hēkona te roa o tētahi o aua mea ki te uta (whakatangihia ana .LOG1/.LOG2 hautaka) katahi ka wetewete marie, ngana ki te whakaara ano (wpeutil reboot) inaianei: te purei ano i te hautaka paru ma reg load maha whakatika 0xc000014c a BAD_SYSTEM_CONFIG_INFO tino.
- Pehea mena reg load rahua i runga SYSTEM ranei SOFTWARE me ERROR: The configuration registry database is corrupt ranei The file or directory is corrupted and unreadable? Inaianei kua mohio koe ki te tika hive kua pakaru (e.g., SYSTEM), a ka mohio koe he hauora era atu hive e wha. Haere tonu ki te Wāhanga 3 ki te whakakapi anake te taenga pakaru mai i te VSS Shadow Copy.
Wāhanga 3: Te tango i nga Hives Rehita Hauora mai i VSS Tārua Kōruru (HarddiskVolumeShadowCopyN)¶
He aha te take ka tangohia a ringatia e matou te taenga pakaru mai i te Kape Atarangi Rōrahi, kaua ki te paato i te Rapanga -> Nga whiringa Arā -> Whakaora Pūnaha i te GUI?
1. Tuatahi, mena SYSTEM ranei SOFTWARE kaore e taea te panui, te kauwhata System Restore (rstrui.exe) ruānuku maha tukinga ki System Restore failed to extract the original copy of the directory from the restore point (0x80070002 / 0x80070017).
2. Tuarua, ka whakakapihia e te Whakaora Pūnaha whakairoiro katoa nga hiwi ka huri whakamuri i nga rau o nga konae taraiwa/whakahaere puta noa i te kōpae, engari ko te kape noa i te kotahi kua kino. SYSTEM ranei SOFTWARE hive mai HarddiskVolumeShadowCopyN 10 hēkona, ka waiho i ētahi atu hiwi (SAM, SECURITY) kaore i pa.
Hipanga 1: Whakarārangihia nga kape Atarangi Rōrahi katoa kei runga i te kōpae¶
I roto i te WinRE Tohuaki Tono, whakahaere:
Contained 1 shadow copies at creation time: 10/30/2026 11:14:02 PM):
Contents of shadow copy set ID: {4b9128a1-8812-4091-a910-112938475610}
Contained 1 shadow copies at creation time: 10/30/2026 11:14:02 PM
Shadow Copy ID: {99182736-1122-3344-5566-77889900aabb}
Original Volume: (D:)\\?\Volume{12345678-0000-0000-0000-100000000000}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1
Shadow Copy Volume i hanga i mua i timata te tukinga (hei tauira, \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2 ranei HarddiskVolumeShadowCopy1).
Hipanga 2: Manatokohia nga hives rehita kei roto i te Rōrahi Tārua Kōruru¶
No te mea paerewa cd ranei dir whakahau i etahi wa ka kowaowaotia te \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 ara mokowā ingoa kernel, ka taea e koe te whakawhiti i te ara i roto i nga korukī ki dir, hanga ranei he hononga tohu watea (mklink /d) kei runga D:\ te tohu tika ki te Tārua Kōruru:
# Create a folder symlink on D:\ pointing into the newest Shadow Copy (e.g., ShadowCopy1):
mklink /d D:\ShadowMount \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\
# Inspect the file sizes and dates of the registry hives inside that Shadow Copy:
dir D:\ShadowMount\Windows\System32\config
SYSTEM (-15-35 MB) me SOFTWARE (-80-180 MB) roto D:\ShadowMount\Windows\System32\config he pai te rahi o nga konae kore-kore me nga ra tata.
Hipanga 3: Tārua ANAKE i te (ngā) taenga kua kino mai i te Tārua Kōruru ki roto D:\Windows\System32\config\¶
Mehemea ko to whakamatautau i te Wāhanga 2 Hipanga 3 i whakaatu ko SYSTEM i rahua te uta (e rua ranei SYSTEM me SOFTWARE i rahua).
Warning
Mukua, nekehia ranei te tawhito .LOG1 a .LOG2 nga konae mo te hive motuhake e whakakapia ana e koe: Ki te whakakapi koe i te mea kua pirau SYSTEM kōnae ki te hauora SYSTEM kōnae mai i te Tārua Kōruru onanahi, me nuku, me muku rānei e koe i tēnei rā SYSTEM.LOG1 a SYSTEM.LOG2 kōnae (kua tautokohia e koe D:\Config_Emergency_Backup i te Wāhanga 2 Hipanga 1). Mena ka wehe koe i tenei ra .LOG1 a .LOG2 noho i te taha o inanahi SYSTEM hive, ka ngana pea a Windows ki te tono i te takiuru tauwhitinga kore e taurite o tenei ra ki te taenga mai o inanahi.
Whakahaerehia enei whakahau tika hei whakakapi i te pakaru SYSTEM (me/ranei SOFTWARE) hive ma:
# 1. Remove the dirty .LOG1 / .LOG2 files for the hive being replaced (already backed up in D:\Config_Emergency_Backup)
attrib -h -s -r D:\Windows\System32\config\SYSTEM.LOG*
del D:\Windows\System32\config\SYSTEM.LOG1
del D:\Windows\System32\config\SYSTEM.LOG2
# 2. Copy the healthy SYSTEM hive from the Shadow Copy into D:\Windows\System32\config\
copy /y D:\ShadowMount\Windows\System32\config\SYSTEM D:\Windows\System32\config\SYSTEM
# (If SOFTWARE was ALSO broken in Phase 2 Step 3, run the same for SOFTWARE:)
attrib -h -s -r D:\Windows\System32\config\SOFTWARE.LOG*
del D:\Windows\System32\config\SOFTWARE.LOG1
del D:\Windows\System32\config\SOFTWARE.LOG2
copy /y D:\ShadowMount\Windows\System32\config\SOFTWARE D:\Windows\System32\config\SOFTWARE
# 3. Clean up the temporary symlink so you don't leave a dangling link on D:\
rmdir D:\ShadowMount
Hipanga 4: Manatokohia nga kawenga o te taenga mai kua whakahokia mai (reg load) me te tirotiro CurrentControlSet¶
Whakamatauhia ko te mea hou i kape SYSTEM ka utaina nga hive kaore he hapa:
reg load HKLM\TestRestored D:\Windows\System32\config\SYSTEM
reg query HKLM\TestRestored\Select
reg unload HKLM\TestRestored
reg query HKLM\TestRestored\Select:
HKEY_LOCAL_MACHINE\TestRestored\Select
Current REG_DWORD 0x1
Default REG_DWORD 0x1
Failed REG_DWORD 0x0
LastKnownGood REG_DWORD 0x2
wpeutil reboot (Katia ranei te Tohuaki Whakahau ka paato i te Haere tonu ki Windows 10/11). Ka pupuhi to PC ki te mata takiuru Windows.
Wāhanga 4: He aha mehemea vssadmin list shadows Whakaaturanga No items found (0 Tārua Kōruru)?¶
Me pehea te Parenga Pūnaha (VSS) kua weto katoa i runga i te puku, RegBack he kau, a reg load rahua i runga SYSTEM ranei SOFTWARE? E toru tonu nga ara whakaora whakamuri i mua i te whakauru ano i a Windows:
Whakamuri 1: Huri Default ki LastKnownGood (ControlSet002) roto SYSTEM¶
Mehemea reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM i angitu, me te BSOD (BAD_SYSTEM_CONFIG_INFO) kei te tupu na te mea he taraiwa, he taviri ratonga ranei kei roto ControlSet001 (Current = 0x1) kua kino i te wa ControlSet002 (LastKnownGood = 0x2) kei roto ano SYSTEM kua mau te hive:
reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM
reg query HKLM\TestSys\Select
# If ControlSet002 exists (verify via: reg query HKLM\TestSys\ControlSet002), switch Default from 1 to 2:
reg add HKLM\TestSys\Select /v Default /t REG_DWORD /d 2 /f
reg unload HKLM\TestSys
F8 mo te "Whakamutunga Pai Whakamutunga" i tangohia mai i te tahua whawhai, engari ko te Select\Default tohu rehita kei roto SYSTEM honore tonu ControlSet002 ina whakawhiti ā-ringa mā reg add.)
Whakamuri 2: Tirohia C:\Windows\System32\config\TxR\ a C:\Windows.old\Windows\System32\config\¶
Tirohia mehemea kei te hanga te ahua o te PC kua whakahou ake nei (22H2 -> 23H2 -> 24H2) kei a ia ranei te Kaiwhakahaere Tauwhitinga Kernel (TxR) rangitaki ipu:
D:\Windows.old\Windows\System32\config\SYSTEM ka puta mai i tetahi whakahoutanga ahuatanga Windows tata nei, ka taea e koe te tirotiro me te whakaora i nga rakau taputapu/ratonga mai i a ia, ka huri ranei i te whakahou ahuatanga (Troubleshoot -> Advanced options -> Uninstall Updates -> Uninstall latest feature update).
Whakamuri 3: Huri whakamuri i tetahi Whakahou Whakapiri kua oti te haurua (dism /RevertPendingActions)¶
He maha nga wa, BAD_SYSTEM_CONFIG_INFO ranei CRITICAL_PROCESS_DIED ka puta na te mea kua ngaro te mana o te PC i 30% i te wa Working on updates... Don't turn off your computer, ka wehe SOFTWARE a \Windows\WinSxS\pending.xml i te tukutahi.
Mai i te WinRE Tohuaki Whakahau, korero ki te Whakamahinga Atahanga Ratonga me te Whakahaere (DISM(D:\):
dism /RevertPendingActions ka oti pai, muku D:\Scratch ka whakaara ano.
Whakamuri 4: Te whakatikatika i te Raraunga Whirihoranga Whakaara kaore e taea te panui (BCD) toa (bootrec /rebuildbcd a bcdboot)¶
He aha mena ka uru nga rehita e rima ki roto D:\Windows\System32\config\ utaina me te wetewete ma te reg load, heoi ka maka tonu te PC 0xc000014c (The Boot Configuration Data for your PC is missing or contains errors) ranei 0xc000000f? No te mea ko te Matapihi BCD kōnae i runga i to huna 100 MB Wehewehenga Pūnaha FAT32 EFI (\EFI\Microsoft\Boot\BCD) kei te rongoa i roto i te ahua-rua regf whakatakotoranga hive rēhita rite SYSTEM a SOFTWARE, ka taea e te ngaronga hiko te pirau te BCD hive i te wa e wehe atu ana D:\Windows\System32\config\ kaore i pa.
Hangaia he waitohu-hou BCD hive i runga i to Wehewehenga Pūnaha EFI i roto i te 15 hēkona:
diskpart
list volume
# Find the 100 MB to 300 MB FAT32 EFI System Partition (e.g. Volume 2)
select volume 2
assign letter=S
exit
# Back up the old broken BCD hive and generate a fresh one from D:\Windows:
ren S:\EFI\Microsoft\Boot\BCD BCD.bak
bcdboot D:\Windows /s S: /f UEFI
Tip
Tirohia te hauora SMART o te kōpae (wmic diskdrive get status) me te punaha konae (chkdsk D: /f) i muri i te tautokotanga: Karekau nga hiwi rehita e pirau i a ratau ano mena ka tapahia te hiko i waenganui i te tuhi, he karaka XMP/EXPO kore i te RAM, ka whakawhanakehia ranei e te SSD/HDD nga waahanga kino kei roto tonu. \Windows\System32\config\. Ina kua tautoko koe D:\Config_Emergency_Backup (me te kape i nga tuhinga kaiwhakamahi whakahirahira D:\Users\ ki te puku USB), rere chkdsk D: /f i WinRE i mua i te whakaara ano ki Windows.
Wāhanga 5: Whakahohe aunoa RegBack pūrua ki Windows 10 me Windows 11¶
Kia hoki mai to PC Windows ki runga papamahi, whakahohea ano te whakaurunga a Microsoft RegIdleBackup mahi pera C:\Windows\System32\config\RegBack\ ka whakakiia aunoatia ia wiki, ka manatokohia te Whakaora Pūnaha (VSS) kei te hohe:
- Whakahohe aunoa
RegBackhive backups in Windows 10 (1803+) and Windows 11: Whakatuwheratia he Tohu Whakahau (Run as Administrator) ka whakahaere i tenei whakahau rehita mana kotahi (KB4509719):Na ka whakaoho i te mahi taapiri kia kotahi tonu te manatokoreg add "HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager" /v EnablePeriodicBackup /t REG_DWORD /d 1 /fC:\Windows\System32\config\RegBackka whakakiia ki nga kape hauora o nga hive e rima: - Whakamana Parenga Pūnaha (
VSSWhakaora Ira) kua hurihiaONmoC:: PerehiWin + R, momosysdm.cpl ,4, tohua toC:puku, pāwhiri ** Whirihora **, tīpako ** Tahuri i te tiaki pūnaha **, whakaturia Max Whakamahinga ki5%(10 GBki25 GB), ka paato i te Waihanga ki te hanga i tetahi kape whakamarumaru tuuturu ma tenei inaianei. - Rere
sfc /scannowaDISM /Online /Cleanup-Image /RestoreHealthka pekehia ki te Matapihi ki te manatoko kaore he DLL punaha, he whakaaturanga toa waahanga ranei (COMPONENTShive) i pakaru i te wa o te tukinga.
Nga nama ohorere a rohe me nga tikanga umanga¶
Ahakoa he Windows BAD_SYSTEM_CONFIG_INFO Ko te tikanga ko te BSOD he take whakatika rorohiko a-roto, rorohiko whaiaro ranei, he teihana mahi, he rahunga tūmau ranei e pa ana ki nga hohipera, te tuku ohorere, me nga hanganga a-iwi ranei me tere tere:
- Te Hononga o Amerika me Kanata: Waea
911ki te whakakorehia e te tukinga Windows te aro turuki i nga turoro haumanu, tuku ohorere (CAD), he mana haumaru-ora ranei, ka huri ki nga tikanga mo te wa heke. Tukuna atu nga putunga hinonga kua horapa mai na nga whakahoutanga a te kaihoko haumaru, nga maiki ipurangi ranei ki CISA (1-844-Say-CISA/cisa.gov/report) ranei te Canadian Center for Cyber Security (1-833-CYBER-88). - United Kingdom: Waea
999mo nga whakatuma ki te ora, ki nga raruraru haumanu kaha NHS. Panuitia nga maiki ipurangi nui, te waatea ranei ki te NCSC (ncsc.gov.uk) ranei NHS Ingarangi Cyber Operations. - Uniana Pākehā: Waea
112puta noa i nga whenua mema EU katoa. Ko nga hinonga kua hipokina i raro i te NIS2 Directive me tuku korero nui ki a ratou CSIRT motu i roto i te 24 haora. - Ahitereiria me Aotearoa: Waea
000i Ahitereiria ranei111kei Aotearoa; pūrongo i ngā maiki hanganga tino nui ki te ACSC (1300 CYBER1). - India me Ahia-Kiwa: Waea
112i Inia mo te urupare ohorere; pūrongo i ngā hanganga me ngā maiki ipurangi ki CERT-In (incident@cert-in.org.in).
Pātai auau¶
He aha mena ka kore taku kōtaha kaiwhakamahi ake ki te takiuru i muri i te puhipuhi ("We can't sign in to your account" / Kōtaha Rangitahi) nā te mea NTUSER.DAT kua pirau?¶
I tua atu i nga hives pūnaha e rima i roto `\Windows\System32\config\`, kei ia pūkete kaiwhakamahi tana ake rehitatanga rehita (`HKEY_CURRENT_USER`) kua rongoa ki **`C:\Users\
Na te aha WinRE tono mo te Kī Whakaora BitLocker 48-mati i mua i te tuku i ahau ki te whakatuwhera i te Whakatairanga Whakatairanga, i te mea kaore au i huri i te BitLocker ki runga i ahau?¶
Tata ki te katoa o nga rorohiko hou Windows 11 (me Windows 10) rorohiko me `TPM 2.0` me te Standby Hou, te takiuru me te Pūkete Microsoft i te wa o te tatūnga tuatahi ka taea aunoatia **Whakamuna Pūrere (`BitLocker`)** kei te papamuri me te tuku ake i to kii whakaora 48-mati ki to Kaute Microsoft. Tuwhera **`https://aka.ms/myrecoverykey`** i runga i to waea atamai, haina me te Microsoft Account (`@outlook.com`, `@hotmail.com`, `@gmail.com`) ranei Mahi/Kura Whakauru ID (`myaccount.microsoft.com`) whakamahia i runga i taua PC, ka tomo ki te 48-mati matua e rite ana ki te `Key ID` whakaaturia ki te mata. Kia wetekina, `D:\Windows\System32\config` he tino watea ki te WinRE Command Prompt.
He aha mehemea copy rahua ki The process cannot access the file because it is being used by another process ina ngana ana ahau ki te tuhirua SYSTEM ranei SOFTWARE i roto i te WinRE?¶
Ka puta taua hapa mo tetahi o nga take e rua: (1) i pato aitua koe `C:\Windows\System32\config\SYSTEM` inahea `C:` ranei `X:` Ko te tino kopae WinRE RAM ora e rere ana (`X:\Windows\System32\config\SYSTEM` kua raka e WinRE ake; manatoko tonu to reta puku SSD tuimotu `D:` ranei `E:` me `diskpart -> list vol`); ranei (2) i oma koe `reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM` i mua i te wahanga ka wareware ki te oma **`reg unload HKLM\TestSys`** i mua i te oma `copy`.
He aha taku PC ka pakaru ki BAD_SYSTEM_CONFIG_INFO (0x00000074) ahakoa i runga i te taputapu Windows USB hou i mua i te pa ki te SSD?¶
Mehemea `BAD_SYSTEM_CONFIG_INFO` (`0x00000074`) ka puta i te wa e whakaara ana i te **hou Windows 10/11 USB installer stick** (kei te utaina e te kaiwhakaputa tana ake `boot.wim` Ko te rehitatanga RAM ka uru ki te mahara punaha), ko to rehita SSD ** ehara i te mea te raru: **to RAM punaha (`DDR4 / DDR5`) kei te kino te urunga rehita i roto i te mahara i a ia e wetewete ana**. Whakauruhia to papahoahoa `BIOS / UEFI` tatūnga (`Del` ranei `F2`), mono `XMP / EXPO` mahara ki runga ake i nga korero mo te tere o te JEDEC, ka whakamatau ranei me te rakau kotahi o te RAM i ia wa. `MemTest86`.
Ka taea e tetahi Wetereo-tuatoru te Tirohanga Whakamutunga ranei (EDR) Ko te whakahou atekōkiri kernel ka puta he kopikopiko BSOD e rite ana ki te pirau rehita?¶
Ae. Ko nga taraiwa haumaru aratau-kernel (`BOOT_START` taraiwa me `Start = 0` roto `HKLM\SYSTEM\ControlSet001\Services\
He aha te COMPONENTS hive i roto C:\Windows\System32\config\, he aha te 100 MB?¶
Rerekē `SYSTEM`, `SOFTWARE`, `SAM`, `SECURITY`, a `DEFAULT` (e utaina ana i ia putu), te **`COMPONENTS`** hiwi (`C:\Windows\System32\config\COMPONENTS`) ka utaina hihiri noa i runga i te tono ina **Whakahou Windows (`TiWorker.exe` / Tiaki Waahanga)** ranei `sfc /scannow` rere ana. He pirau `COMPONENTS` Ko te hive ka **kaore e aukati i a Windows ki te whakaohooho (`0x00000074`), ahakoa ka rahua nga Whakahoutanga Windows `0x80073712` tae noa ki te whakatika me `DISM /Online /Cleanup-Image /RestoreHealth`.
Nga kaiarahi e pa ana¶
- Matapihi kahurangi (BSOD) me te whakatika patu
- BitLocker, FileVault, me te LUKS whakamunatanga maukati ki te whakaora me te tautuhi TPM
- BIOS me te UEFI firmware whakahou pereki, te mate hiko, me te Dual-BIOS Flashback
- SSD me NVMe aratau panui-anake ohorere, 0% poraka e manawapa ana, me te TRIM whakakore i te whakaoranga
- Rahunga puku mārō me te whakaora raraunga
- Nga taapiri rorohiko, te rautaki 3-2-1, me te whakaora i nga aitua
- Ko nga nama ohorere ma te whenua
Nga puna me nga aratohu whai mana¶
- Microsoft Ako (
learn.microsoft.com): Tirohanga Pepe0x74:BAD_SYSTEM_CONFIG_INFOTohutoro Raparongoā Whaimana (BCDtruncatememory/numprocWhakatikatika me te Rehita Hive Manatoko). - Tautoko Microsoft (
KB4509719): Kaore te rehita punaha i te tautokohia ki teRegBackkōpaki timata i roto Windows 10 putanga 1803 (EnablePeriodicBackupWhirihoranga Rēhita). - Microsoft Windows Internals (Putanga Tuawhitu, Russinovich et al.): Whakaahuatanga Kaiwhakahaere Whirihoranga, Hanganga Arua Rehita Hive (
regf,hbin), me te Rangitaki Tauwhitinga Takirua (.LOG1/.LOG2) Whakaora. - Tuhinga Rokiroki Tūmau Microsoft: Ratonga Tārua Kōruru Rōrahi (
VSS) Whakahaere (vssadmin list shadowsaGLOBALROOTTe Uru Mokowāingo Pūrere). - National Institute of Standards and Technology (
NIST) (Te Hononga o Amerika): Te Whakaputa Motuhake 800-86: Te Tirohanga Whakaora me te Whakaora Rehita Windows.