Ile Iforukọsilẹ Windows ti bajẹ (BAD_SYSTEM_CONFIG_INFO BSOD): Kí nìdí RegBack Ṣe ofo ni Windows 10/11 ati Bii o ṣe le Mu pada awọn Hives lati Awọn ẹda Ojiji VSS¶
Awọn nọmba pajawiri yato nipasẹ orilẹ-ede. Oju-iwe yii nlo 911, nọmba fun Amẹrika ati Kanada. Ọpọlọpọ awọn orilẹ-ede miiran lo 112, 999, tabi nọmba miiran. Wa nọmba fun orilẹ-ede rẹ.
Wiwo Windows 10, Windows 11, tabi jamba ẹrọ Windows Server lakoko ibẹrẹ sinu iboju Iku buluu ti ailopin (BSOD) ifihan lupu Stop code: BAD_SYSTEM_CONFIG_INFO (0x00000074, CRITICAL_PROCESS_DIED, tabi iboju Alakoso Windows Boot dudu ti o sọ \Windows\System32\config\SYSTEM is missing or contains errors (Status: 0xc000014c / 0xc0000225) tumọ si ọkan tabi diẹ ẹ sii ti awọn hives iforukọsilẹ alakomeji Windows (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT) tabi Data Iṣeto Boot (BCD) Ile itaja ti ya lakoko ijade agbara, tiipa tiipa, tabi imudojuiwọn akojọpọ kuna. Buru sibẹsibẹ, nigbati awọn alakoso tẹle awọn ikẹkọ ori ayelujara ti o dagba ti n sọ fun wọn lati ṣii Ayika Imularada Windows (WinRE) Aṣẹ Tọ ati daakọ awọn faili iforukọsilẹ afẹyinti jade ni C:\Windows\System32\config\RegBack\, nwọn iwari pe awọn RegBack folda ti ṣofo patapata (tabi ninu 0-byte awọn faili) ***. Bibẹrẹ ninu Windows 10 ẹya 1803 ati kọja gbogbo awọn itumọ ti Windows 11, Microsoft ṣe alaabo patapata. RegIdleBackup iṣẹ-ṣiṣe lati fi aaye disk pamọ. Maṣe mu ese ki o tun fi Windows sori ẹrọ: PC rẹ fẹrẹẹ daju pe o wa ni mimule, awọn ẹda ti o ṣe laipẹ ti gbogbo ile-iwe iforukọsilẹ inu tifarapamọ ** Iṣẹ Daakọ Ojiji Iwọn didun (VSS) awọn fọto (HarddiskVolumeShadowCopyN** ati idunadura .LOG1 / .LOG2 awọn iwe iroyin ti o le jade ni iṣẹju 3 lati WinRE. Fun awakọ gbogbogbo tabi hardware BSOD laasigbotitusita, wo Iboju buluu Windows (BSOD) ati atunṣe bata; ti o ba jẹ BitLocker béèrè fun bọtini imularada oni-nọmba 48 ṣaaju ṣiṣi Command Prompt, kan si alagbawo BitLocker, FileVault, ati LUKS fifi ẹnọ kọkọrọ imularada bọtini titiipa ati atunto TPM ati Ipo kika-nikan SSD ati NVMe lojiji ati TRIM di piparẹ igbala. Ti ikuna eto yii ba mu awọn iṣẹ iṣẹ ile-iwosan kuro, fifiranṣẹ pajawiri (CAD), tabi awọn iṣakoso aabo-aye, pe nọmba pajawiri ti agbegbe rẹ (911 ni Ilu Amẹrika ati Kanada, 112 jakejado European Union, 999 ni United Kingdom) tabi ṣayẹwo wa liana ti pajawiri awọn nọmba.
Ṣe eyi ni bayi¶
- ** MAA ṢE tẹ "Ṣatunkọ PC yii -> Yọ ohun gbogbo kuro" tabi daakọ ni afọju
0-byteawọn faili jade tiC:\Windows\System32\config\RegBack\**: Ti o ba ṣiṣecopy C:\Windows\System32\config\RegBack\* C:\Windows\System32\config\lori Windows 10 (1803+) tabi Windows 11 laisi ṣayẹwodir RegBackakọkọ, o yoo ìkọlélórí rẹ die-die ti bajẹ iforukọsilẹ hives pẹlu0-byteawọn faili ti o ṣofo, run awọn hives ti o ku ati ṣiṣe imularada pupọ sii. - ** Bata sinu Ayika Imularada Windows (
WinRE) ati ṣiiTroubleshoot -> Advanced options -> Command Prompt**: - Ti Windows ba kuna lati bata ni igba mẹta ni ọna kan, yoo ṣe ifilọlẹ laifọwọyi ** Atunṣe Aifọwọyi -> Awọn aṣayan ilọsiwaju ***.
- Ni omiiran, bata lati eyikeyi **Windows 10/11 Media fifi sori ẹrọ USB ***, tẹ
Shift + F10(tabiShift + Fn + F10lori kọǹpútà alágbèéká) ọtun ni iboju yiyan ede akọkọ, ati pe o gaX:\Sources>Command Prompt ṣii lẹsẹkẹsẹ laisi titẹ nipasẹ awọn akojọ aṣayan. - ** Wa lẹta awakọ otitọ ti ipin Windows rẹ (
diskpart -> list vol), bi o ti jẹ nigbagbogboD:tabiE:inu WinRE, NOTC:**: Ninu agbegbe imularada,C:ti wa ni nigbagbogbo sọtọ si 100 megabyteSystem ReservedtabiRecoveryipin lakoko ti fifi sori Windows gangan rẹ joko loriD:tabiE:. Ṣiṣedir C:\Windows,dir D:\Windows,dir E:\Windowslati jẹrisi eyi ti drive lẹta ni\Windows\System32\config\. - ** Ṣe afẹyinti nigbagbogbo ti o wa tẹlẹ (paapaa fifọ)
config\folda siC:\Config_Backup\Ṣaaju ki o to fọwọkan faili kan *: Ṣiṣemkdir D:\Config_Backupatixcopy /h /i /c /k /e /r /y D:\Windows\System32\config D:\Config_Backup. O gbọdọ tọju mejeeji awọn faili hive akọkọ marun (SYSTEM,SOFTWARE,SAM,SECURITY,DEFAULTati *** awọn faili iforukọsilẹ iṣowo ti o farapamọ wọn (SYSTEM.LOG1,SYSTEM.LOG2,SOFTWARE.LOG1,SOFTWARE.LOG2). - ** Ṣaaju ki o to rọpo eyikeyi Ile Agbon, ṣe idanwo boya
BCD(Boot Configuration Data) gige tabi iwe iṣowo ile oyin ti o dọti (.LOG1/.LOG2) ni idi gidi tiBAD_SYSTEM_CONFIG_INFO**: - Ninu
30%tiBAD_SYSTEM_CONFIG_INFOBSODs, awọn hives iforukọsilẹ jẹ itanran 100 ogorun ati awọnBCDitaja nìkan ni o ni a ibajetruncatememory/numprocasia (msconfigpakute) tabi ainireg loadlati tun awọn.LOG1/.LOG2idunadura log laifọwọyi. - Ti o ba
SYSTEMtabiSOFTWAREjẹ ibajẹ nitootọ, jade ẹda ti o ni ilera taara lati ẹda VSS Shadow kan (\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\System32\config\) lilovssadmin list shadows: Paapaa nigba tiSystem Restore (rstrui.exe)kuna pẹlu aṣiṣe ninu GUI, iwọn didun ẹda VSS Shadow ti o wa labẹ disiki wa lori disiki ati pe o jẹ ki o daakọ mọ.SYSTEMatiSOFTWAREhives taara sinu\Windows\System32\config\lilocopytabirobocopy.
Danger
**Maṣe tunkọ rara SAM tabi SECURITY pẹlu kan osu-atijọ afẹyinti ayafi ti awon kan pato meji kekere awọn faili ni o wa 0 bytes tabi ibajẹ ***: O fẹrẹ to ida 99 ti awọn ipadanu iforukọsilẹ kan SYSTEM (15 MB si 30 MB) tabi SOFTWARE (80 MB si 150 MB), nitori awọn hives meji naa ni a kọ nigbagbogbo lakoko bata ati Awọn imudojuiwọn Windows. Awọn SAM (Security Accounts Manager, deede 64 KB si 256 KB) ati SECURITY awọn hives mu awọn hashes olumulo olumulo agbegbe rẹ ati ọrọ igbaniwọle igbẹkẹle ẹrọ agbegbe (ašẹ)$machine.ACC). Ti o ba tun kọ kan ni ilera SAM ati SECURITY Ile Agbon pẹlu ẹda ojiji oṣu meji 2 lori PC ti o darapọ mọ agbegbe Directory Active tabi lẹhin iyipada ọrọ igbaniwọle kan, iwọ yoo fọ ibatan igbẹkẹle agbegbe naa (The trust relationship between this workstation and the primary domain failed) tabi tii awọn ayipada ọrọ igbaniwọle agbegbe laipẹ. Rọpo ** nikan *** Ile Agbon kan pato (SYSTEM tabi SOFTWARE) ti o kuna awọn reg load idanwo ni ipele 2.
Igi ipinnu: BAD_SYSTEM_CONFIG_INFO (0x00000074) ati 0xc000014c triage iforukọsilẹ¶
Lo yi sisan chart lati awọn WinRE Aṣẹ Tọ (Shift + F10) lati tọka faili ti o bajẹ gangan ati mu pada laisi pipadanu awọn eto ti a fi sii tabi awọn akọọlẹ olumulo:
flowchart TD
Start["Awọn jamba Windows ni Boot: BAD_SYSTEM_CONFIG_INFO (0x74) tabi 0xc000014c"] --> OpenCmd["Bata sinu WinRE tabi Windows USB -> Ṣii Aṣẹ Tọ (Shift + F10)"]
OpenCmd --> FindDrive["Wa Otitọ Lẹta Windows Drive (fun apẹẹrẹ D:) nipasẹ: diskpart -> akojọ vol -> jade"]
FindDrive --> BackupFirst["Ṣe afẹyinti Folda Iṣeto lọwọlọwọ (pẹlu Farasin .LOG1/.LOG2): xcopy / h D: \\ Windows \ System32 \ konfigi D: \\ Config_Orig \\"]
BackupFirst --> CheckBcd["Ṣayẹwo 1: Ṣiṣe bcdedit -> Njẹ Ẹnikan Ṣeto Truncatememory tabi nuproc ni msconfig?"]
CheckBcd -->|"Bẹẹni: truncatememory tabi badvalue Present"| FixBcd["Run: bcdedit /deletevalue {default} truncatememory AND bcdedit /deletevalue {default} numproc -> Reboot"]
CheckBcd -->|"Rara: BCD Mimọ"| TestReplay["Ṣayẹwo 2: Idanwo & Tunṣe Awọn iforukọsilẹ Iṣowo (.LOG1 / .LOG2) fun Ile Agbon kọọkan nipasẹ fifuye reg HKLM \ TempHive"]
TestReplay --> WhichBroken{"Ṣe fifuye reg Ṣe Aṣeyọri ki o tun ṣe .LOG1/.LOG2 ni mimọ bi?"}
WhichBroken -->|"Bẹẹni: fifuye reg Tun ṣe Idọti Idunadura Wọle -> Ṣe igbasilẹ nipasẹ gbigbe silẹ reg"| BootFixed["Atunbere PC: Akọsori Ile Agbon Idọti Ti o wa titi Ni-Ile pẹlu Yiyipo Odo"]
WhichBroken -->|"Rara: SYSTEM tabi SOFTWARE Pada 'Data data iforukọsilẹ iṣeto ti bajẹ' tabi Ṣe 0 Bytes"| CheckVss["Ṣiṣe: vssadmin akojọ Shadows"]
CheckVss --> HasVss{"Njẹ Awọn adakọ Ojiji Iwọn didun Tosi (HarddiskVolumeShadowCopy1..N)?"}
HasVss -->|"Bẹẹni: Awọn ẹda ojiji wa"| CopyVss["Daakọ NIKAN Ile Agbon ti bajẹ (fun apẹẹrẹ SYSTEM / SOFTWARE) lati Hunting HarddiskVolumeShadowCopyN si D: \ Windows \ System32 \ konfigi \\"]
HasVss -->|"Rara: 0 Awọn ẹda Ojiji Akojọ"| CheckAlt["Ṣayẹwo Awọn orisun Ile Agbon Yiyan: D: \ Windows \ System32 \\ config \\ TxR \\ OR Windows.old OR WinSxS Component Hive Repair"]
Ipele 1: Kilode BAD_SYSTEM_CONFIG_INFO ṣẹlẹ ati idi ti RegBack sofo ni Windows 10/11¶
Ṣaaju ki o to yipada eyikeyi awọn faili inu \Windows\System32\config\, loye ohun ti awọn faili Ile Agbon iforukọsilẹ marun ṣe gangan ati idi ti aṣa RegBack ọna ko si ohun to ṣiṣẹ.
1. Anatomi ti \Windows\System32\config\¶
Nigbati ekuro Windows (ntoskrnl.exe) ati Boot Loader (winload.efi) bẹrẹ lakoko ibẹrẹ, wọn kojọpọ awọn faili data alakomeji marun (ti a pe ni ** Hives ***, bẹrẹ pẹlu ibuwọlu 4-byte ASCII). regf ni baiti 0) lati \Windows\System32\config\:
| Orukọ faili Ile Agbon Iforukọsilẹ | Ona Iforukọsilẹ Ti gbe sinu regedit |
Aṣoju ni ilera iwọn faili | Kini yoo ṣẹlẹ Ti Faili Kan pato Ba bajẹ |
|---|---|---|---|
SYSTEM |
HKEY_LOCAL_MACHINE\SYSTEM |
15 MB si 40 MB (15.7 million si 41.9 million baiti) |
** Ikuna bata lẹsẹkẹsẹ (0xc000014c) tabi BAD_SYSTEM_CONFIG_INFO (0x00000074***: winload.efi ka SYSTEM ṣaaju ki ekuro paapaa bẹrẹ lati mọ iru awọn awakọ ipamọ (storahci.sys, stornvme.sys), awọn iṣẹ, ati ControlSet001 hardware sile lati fifuye. |
SOFTWARE |
HKEY_LOCAL_MACHINE\SOFTWARE |
80 MB si 200 MB (83.8 million si 209.7 million baiti) |
Awọn jamba diẹ nigbamii ni bata (BAD_SYSTEM_CONFIG_INFO tabi CRITICAL_PROCESS_DIED ọtun ki o to iboju wiwọle) nigbati smss.exe / winlogon.exe fifuye awọn kilasi Windows, awọn eto imulo, ati awọn ẹya paati ti a fi sori ẹrọ farahan. |
SAM |
HKEY_LOCAL_MACHINE\SAM |
64 KB si 256 KB |
Aaye data akọọlẹ olumulo agbegbe (RID 500 Administrator, awọn olumulo agbegbe). Ṣọwọn ibaje ayafi ti disk ti kun. |
SECURITY |
HKEY_LOCAL_MACHINE\SECURITY |
64 KB si 512 KB |
Alaṣẹ Aabo Agbegbe (LSA) awọn aṣiri, awọn bọtini ẹrọ BitLocker/DPI, ati ọrọ igbaniwọle igbẹkẹle kọnputa Active Directory. Ṣọwọn ibaje. |
DEFAULT |
HKEY_USERS\.DEFAULT |
256 KB si 2 MB |
Eto profaili fun awọn LOCAL SYSTEM (S-1-5-18) tabili iṣaaju-iwọle (nibiti iboju iwọle funrararẹ nṣiṣẹ). |
*.LOG1 & *.LOG2 (Awọn faili eto ti o farapamọ)* |
Awọn akọọlẹ Iṣowo Kọ-iwaju fun Ile Agbon kọọkan (SYSTEM.LOG1, SYSTEM.LOG2) |
256 KB si 8 MB |
** Lominu ni ***: Nigbakugba ti Windows ba ṣe atunṣe Ile Agbon, o kọ awọn ayipada si .LOG1 / .LOG2 akọkọ ṣaaju ki o to imudojuiwọn ipilẹ regf akọsori (Primary Sequence Number == Secondary Sequence Number). |
2. Kí nìdí C:\Windows\System32\config\RegBack sofo ni Windows 10 (1803+) ati Windows 11¶
Lati Windows XP nipasẹ Windows 10 ẹya 1709, iṣẹ-ṣiṣe ti a ṣeto ti a npè ni \Microsoft\Windows\Registry\RegIdleBackup daakọ laifọwọyi SYSTEM, SOFTWARE, SAM, SECURITY, ati DEFAULT sinu \Windows\System32\config\RegBack\ nigbakugba ti awọn eto wà laišišẹ.
- **Kini Microsoft yipada ***: Bibẹrẹ ni **Windows 10 ẹya 1803 (Oṣu Karun 2018) ati tẹsiwaju nipasẹ gbogbo itusilẹ ti Windows 11 ***, Microsoft ni alaabo ni aṣẹ laifọwọyi. RegBack olugbe nipa aiyipada lati dinku ifẹsẹtẹ disiki (ti a ṣe akọsilẹ ni Atilẹyin Microsoft KB4509719).
- ** Abajade ***: Ayafi ti o ba fi ọwọ kun EnablePeriodicBackup = 1 DWORD si HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager * ṣaaju * PC rẹ kọlu, nṣiṣẹ dir D:\Windows\System32\config\RegBack yoo fihan 0 File(s) (tabi awọn faili marun ti iwọn 0 awọn baiti).
- ** Kini idi ti o tun ni afẹyinti ***: botilẹjẹpe RegBack sofo, Windows 10 ati Windows 11 ṣẹda laifọwọyi ** Daakọ Ojiji Iwọn (VSS) snapshots *** ṣaaju Awọn imudojuiwọn Windows, awọn fifi sori ẹrọ ohun elo MSI, awọn fifi sori ẹrọ awakọ, ati awọn ibi ayẹwo pada sipo ọsẹ. Gbogbo aworan VSS ni pipe, idaako ti o tutunini-akoko ti \Windows\System32\config\.
Ipele 2: Awọn atunṣe Aisi Yipada Yiyara (msconfig BCD Pakute & amupu; .LOG1/.LOG2 Atunse iṣowo)¶
Ṣaaju ki o to rọpo SYSTEM tabi SOFTWARE lati kan ojiji daakọ, idanwo awọn meji odo-rollback atunse ninu awọn WinRE Aṣẹ Tọ (Shift + F10). Ju idaji gbogbo rẹ lọ BAD_SYSTEM_CONFIG_INFO (0x00000074) Awọn ipadanu ti wa ni ipinnu ọtun nibi labẹ awọn aaya 60 laisi yiyi eto ẹyọkan pada.
Igbesẹ 1: Ṣe idanimọ lẹta wiwakọ Windows otitọ rẹ (D: vs C:) ati ṣe afẹyinti config\¶
Ninu awọn X:\Sources> Window Aṣẹ Tọ, wa iru lẹta awakọ di fifi sori Windows rẹ:
Size ati Label awọn ọwọn lati wo iru lẹta awakọ (C:, D:, tabi E:) jẹ ipin akọkọ Windows OS rẹ (fun iyoku itọsọna yii, a yoo lo D:; rọpo lẹta awakọ gangan rẹ).
Lẹsẹkẹsẹ ṣe afẹyinti pipe ti D:\Windows\System32\config (lilo /h ki farasin .LOG1 ati .LOG2 Awọn faili idunadura wa pẹlu):
mkdir D:\Config_Emergency_Backup
xcopy /h /i /c /k /e /r /y D:\Windows\System32\config D:\Config_Emergency_Backup
Igbesẹ 2: Ṣayẹwo Fix A: Njẹ ẹnikan yipada Number of processors tabi Maximum memory ninu msconfig?¶
Iwe aṣẹ osise Microsoft fun Ṣayẹwo kokoro 0x74 (BAD_SYSTEM_CONFIG_INFO) ṣe afihan pakute olokiki kan: awọn olumulo ṣii **msconfig -> Boot -> Awọn aṣayan ilọsiwaju ** atẹle fidio buburu “iṣapeye ere”, ṣayẹwo Number of processors tabi Maximum memory (ṣeto si 0 tabi iye buburu), ati atunbere. Lẹsẹkẹsẹ lẹhin atunbere, Windows deba ayeraye BAD_SYSTEM_CONFIG_INFO BSOD ṣaaju ki o to fọwọkan awọn hives iforukọsilẹ.
Ṣayẹwo Data Iṣeto Boot rẹ (BCD) fipamọ ni bayi:
truncatememory, numproc, tabi removememory. Ti eyikeyi ninu awọn ila wọnyẹn ba han, paarẹ wọn lẹsẹkẹsẹ:
bcdedit /deletevalue {default} truncatememory
bcdedit /deletevalue {default} numproc
bcdedit /deletevalue {default} removememory
wpeutil reboot bayi: PC rẹ yoo bata taara si deskitọpu.
Igbesẹ 3: Ṣayẹwo Fix B: Tun ṣe idọti .LOG1 / .LOG2 Ile Agbon idunadura àkọọlẹ ni-ibi lilo reg load¶
Kini ti agbara ba ge nigba ti Windows nkọwe si SYSTEM tabi SOFTWARE?
+-------------------------------------------------------------------------+
| HOW WINDOWS REGISTRY HIVE HEADER SEQUENCE NUMBERS WORK |
| |
| Base Block Header of SYSTEM Hive (First 4,096 bytes: "regf"): |
| Offset 0x04: Primary Sequence Number = 0x0004810A |
| Offset 0x08: Secondary Sequence Number = 0x00048109 (MISMATCH) |
| |
| Why it fails at boot: |
| Power died mid-write before Primary == Secondary. The missing |
| dirty pages are sitting safely inside SYSTEM.LOG1 / SYSTEM.LOG2. |
| If winload.efi cannot reconcile the log at early boot, it throws |
| 0xc000014c or BAD_SYSTEM_CONFIG_INFO (0x74). |
| |
| How to force-replay the .LOG1/.LOG2 file in WinRE: |
| Running `reg load HKLM\Temp D:\Windows\System32\config\SYSTEM` |
| invokes the full WinRE Configuration Manager, which reads |
| SYSTEM.LOG1 + SYSTEM.LOG2, replays the dirty vector pages into |
| SYSTEM, sets Primary == Secondary, and flushes a clean hive on unload |
+-------------------------------------------------------------------------+
Ṣe idanwo kọọkan ninu awọn hives marun (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT) ọkan nipa ọkan ninu WinRE Aṣẹ Tọ lilo reg load:
The operation completed successfully**:
Ko nikan ti o ti fihan wipe SYSTEM jẹ igbala, ** ti o ba jẹ SYSTEM ní idọti .LOG1/.LOG2 aiṣedeede lẹsẹsẹ, reg load o kan tun ṣe akọọlẹ idunadura ati tunse ile-iṣọ ni iranti *. Bayi fọ akọsori ti a tunṣe ni mimọ ni mimọ pada si disk nipa gbigbejade rẹ:
- Tun fifuye-ati-un gbejade idanwo kanna fun SOFTWARE, SAM, SECURITY, ati DEFAULT:
reg load HKLM\TestSoft D:\Windows\System32\config\SOFTWARE
reg unload HKLM\TestSoft
reg load HKLM\TestSam D:\Windows\System32\config\SAM
reg unload HKLM\TestSam
reg load HKLM\TestSec D:\Windows\System32\config\SECURITY
reg unload HKLM\TestSec
reg load HKLM\TestDef D:\Windows\System32\config\DEFAULT
reg unload HKLM\TestDef
reg load / reg unload Awọn aṣẹ ṣaṣeyọri? Ti ọkan ninu wọn ba gba iṣẹju meji si 3 lati fifuye (tun ṣe awọn oniwe- .LOG1/.LOG2 iwe akọọlẹ) ati lẹhinna ṣi silẹ ni mimọ, gbiyanju atunbere (wpeutil reboot) ni bayi: tun ṣe akọọlẹ idọti nipasẹ reg load nigbagbogbo atunse 0xc000014c ati BAD_SYSTEM_CONFIG_INFO patapata.
- Ti o ba jẹ reg load kuna lori SYSTEM tabi SOFTWARE pẹlu ERROR: The configuration registry database is corrupt tabi The file or directory is corrupted and unreadable? Bayi o mọ ** gangan ** Ile Agbon ti o fọ (e.g., SYSTEM), ati pe o mọ pe awọn oyin mẹrin miiran ni ilera. Tẹsiwaju lẹsẹkẹsẹ si Ipele 3 lati rọpo * nikan * Ile Agbon ti o fọ lati ẹda VSS Shadow kan.
Ipele 3: Yiyọ Awọn Hives Iforukọsilẹ Ni ilera lati VSS Awọn ẹda ojiji (HarddiskVolumeShadowCopyN)¶
Kini idi ti a fi yọkuro Ile Agbon ti o fọ pẹlu ọwọ lati Daakọ Ojiji Iwọn didun dipo tite ** Laasigbotitusita -> Awọn aṣayan ilọsiwaju -> Mu pada eto *** ni GUI?
1. Ni akọkọ, ti o ba SYSTEM tabi SOFTWARE jẹ unreadable, awọn ayaworan System Restore (rstrui.exe) oluṣeto igba ipadanu pẹlu System Restore failed to extract the original copy of the directory from the restore point (0x80070002 / 0x80070017).
2. Ẹlẹẹkeji, Ipadabọ System ayaworan rọpo * gbogbo * hives ati yipo awọn ọgọọgọrun ti awakọ / awọn faili ti o ṣee ṣe kọja disiki naa, lakoko didakọ ẹda kan ti bajẹ nikan SYSTEM tabi SOFTWARE Ile Agbon lati HarddiskVolumeShadowCopyN gba iṣẹju-aaya 10 ati fi awọn hives miiran silẹ (SAM, SECURITY) ti ko fọwọkan.
Igbesẹ 1: Ṣe atokọ gbogbo Awọn ẹda Ojiji Iwọn didun to wa lori disiki naa¶
Ninu awọn WinRE Aṣẹ Tọ, ṣiṣe:
Contained 1 shadow copies at creation time: 10/30/2026 11:14:02 PM):
Contents of shadow copy set ID: {4b9128a1-8812-4091-a910-112938475610}
Contained 1 shadow copies at creation time: 10/30/2026 11:14:02 PM
Shadow Copy ID: {99182736-1122-3344-5566-77889900aabb}
Original Volume: (D:)\\?\Volume{12345678-0000-0000-0000-100000000000}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1
Shadow Copy Volume ṣẹda *ṣaaju * jamba bẹrẹ (fun apẹẹrẹ, \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2 tabi HarddiskVolumeShadowCopy1).
Igbesẹ 2: Daju awọn hives iforukọsilẹ inu iwọn didun Daakọ Shadow¶
Nitori boṣewa cd tabi dir ase ma choke lori awọn \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 ekuro namespace ona, o le boya kọja awọn ọna ni avvon si dir, tabi ṣẹda ọna asopọ aami ti o rọrun (mklink /d) lori D:\ ntoka taara sinu Daakọ Shadow:
# Create a folder symlink on D:\ pointing into the newest Shadow Copy (e.g., ShadowCopy1):
mklink /d D:\ShadowMount \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\
# Inspect the file sizes and dates of the registry hives inside that Shadow Copy:
dir D:\ShadowMount\Windows\System32\config
SYSTEM (-15-35 MB) ati SOFTWARE (-80-180 MB) inu D:\ShadowMount\Windows\System32\config ni ilera awọn iwọn faili ti kii ṣe odo ati awọn ọjọ aipẹ.
Igbesẹ 3: Daakọ NIKAN Ile Agbon (awọn) ti bajẹ lati Daakọ Shadow sinu D:\Windows\System32\config\¶
Ṣebi idanwo rẹ ni Ipele 2 Igbesẹ 3 fihan pe SYSTEM kuna lati fifuye (tabi mejeeji SYSTEM ati SOFTWARE kuna).
Warning
**Parẹ tabi gbe atijọ .LOG1 ati .LOG2 awọn faili fun awọn kan pato Ile Agbon ti o ti wa ni rọpo ***: Ti o ba ropo a ibaje SYSTEM faili pẹlu kan ni ilera SYSTEM faili lati Daakọ Ojiji lana, ** o tun gbọdọ gbe tabi paarẹ ti oni SYSTEM.LOG1 ati SYSTEM.LOG2 awọn faili *** (eyiti o ti ṣe afẹyinti tẹlẹ si D:\Config_Emergency_Backup ni Ipele 2 Igbesẹ 1). Ti o ba lọ kuro loni .LOG1 ati .LOG2 joko tókàn si awọn lana SYSTEM Ile Agbon, Windows le gbiyanju lati lo iwe-iṣowo ti ko baamu loni lori ile Agbon ana.
Ṣiṣe awọn aṣẹ gangan wọnyi lati rọpo awọn fifọ SYSTEM (ati/tabi SOFTWARE) Ile Agbon ni mimọ:
# 1. Remove the dirty .LOG1 / .LOG2 files for the hive being replaced (already backed up in D:\Config_Emergency_Backup)
attrib -h -s -r D:\Windows\System32\config\SYSTEM.LOG*
del D:\Windows\System32\config\SYSTEM.LOG1
del D:\Windows\System32\config\SYSTEM.LOG2
# 2. Copy the healthy SYSTEM hive from the Shadow Copy into D:\Windows\System32\config\
copy /y D:\ShadowMount\Windows\System32\config\SYSTEM D:\Windows\System32\config\SYSTEM
# (If SOFTWARE was ALSO broken in Phase 2 Step 3, run the same for SOFTWARE:)
attrib -h -s -r D:\Windows\System32\config\SOFTWARE.LOG*
del D:\Windows\System32\config\SOFTWARE.LOG1
del D:\Windows\System32\config\SOFTWARE.LOG2
copy /y D:\ShadowMount\Windows\System32\config\SOFTWARE D:\Windows\System32\config\SOFTWARE
# 3. Clean up the temporary symlink so you don't leave a dangling link on D:\
rmdir D:\ShadowMount
Igbesẹ 4: Ṣe idaniloju awọn ẹru Ile Agbon ti a mu pada ni mimọ (reg load) ati ṣayẹwo CurrentControlSet¶
Ṣe idanwo pe titun daakọ SYSTEM awọn ẹru Ile Agbon pẹlu awọn aṣiṣe odo:
reg load HKLM\TestRestored D:\Windows\System32\config\SYSTEM
reg query HKLM\TestRestored\Select
reg unload HKLM\TestRestored
reg query HKLM\TestRestored\Select:
HKEY_LOCAL_MACHINE\TestRestored\Select
Current REG_DWORD 0x1
Default REG_DWORD 0x1
Failed REG_DWORD 0x0
LastKnownGood REG_DWORD 0x2
wpeutil reboot (tabi sunmọ Aṣẹ Tọ ki o tẹ Tẹsiwaju si Windows 10/11). PC rẹ yoo bata ni mimọ si iboju iwọle Windows.
Ipele 4: Kini ti o ba jẹ vssadmin list shadows Awọn ifihan No items found (0 Awọn ẹda Ojiji)?¶
Kini ti Idaabobo Eto (VSS) ti wa ni pipa patapata lori awakọ, RegBack ti ṣofo, ati reg load kuna lori SYSTEM tabi SOFTWARE? O tun ni awọn ọna imularada ipadabọ mẹta ṣaaju fifi Windows tun:
Ipadabọ 1: Yipada Default si LastKnownGood (ControlSet002) inu SYSTEM¶
Ti o ba jẹ reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM ** ṣe aṣeyọri **, ati BSOD (BAD_SYSTEM_CONFIG_INFO) n ṣẹlẹ nitori awakọ tabi bọtini iṣẹ inu ControlSet001 (Current = 0x1) ti bajẹ nigba ti ControlSet002 (LastKnownGood = 0x2) inu kanna SYSTEM Ile Agbon ti wa ni mule:
reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM
reg query HKLM\TestSys\Select
# If ControlSet002 exists (verify via: reg query HKLM\TestSys\ControlSet002), switch Default from 1 to 2:
reg add HKLM\TestSys\Select /v Default /t REG_DWORD /d 2 /f
reg unload HKLM\TestSys
F8 fun "Last mọ Good iṣeto ni" a kuro lati awọn bata akojọ, ṣugbọn awọn Select\Default ijuboluwole iforukọsilẹ inu SYSTEM si tun ola ControlSet002 nigba ti yipada pẹlu ọwọ nipasẹ reg add.)
Ipadabọ 2: Ṣayẹwo C:\Windows\System32\config\TxR\ ati C:\Windows.old\Windows\System32\config\¶
Ṣayẹwo boya ẹya imudojuiwọn PC laipẹ kọ (22H2 -> 23H2 -> 24H2) tabi ni Oluṣakoso Iṣowo Kernel (TxR) awọn akọọlẹ apoti:
D:\Windows.old\Windows\System32\config\SYSTEM wa lati imudojuiwọn ẹya Windows aipẹ, o le ṣayẹwo ati gba ohun elo hardware/igi iṣẹ lọwọ rẹ, tabi yi imudojuiwọn ẹya pada (Troubleshoot -> Advanced options -> Uninstall Updates -> Uninstall latest feature update).
Ipadabọ 3: Yii imudojuiwọn Akopọ ti a fi sori ẹrọ idaji kan pada (dism /RevertPendingActions)¶
Nigbagbogbo, BAD_SYSTEM_CONFIG_INFO tabi CRITICAL_PROCESS_DIED waye nitori PC nu agbara ni 30% nigba Working on updates... Don't turn off your computer, nlọ SOFTWARE ati \Windows\WinSxS\pending.xml jade ti ìsiṣẹpọ.
Lati awọn WinRE Aṣẹ Tọ, sọ fun Iṣẹ Iṣẹ Aworan Ifiranṣẹ ati Isakoso (DISMengine lati yi pada gbogbo awọn iṣowo imudojuiwọn ti ko ni adehun lodi si aworan Windows aisinipo (D:\):
dism /RevertPendingActions pari ni aṣeyọri, paarẹ D:\Scratch ati atunbere.
Ipadabọ 4: Titunṣe Data Iṣeto Boot ti ko ṣee ka (BCD) itaja (bootrec /rebuildbcd ati bcdboot)¶
Ohun ti o ba ti gbogbo marun iforukọsilẹ hives inu D:\Windows\System32\config\ fifuye ati ki o unload mọ pẹlu reg load, sibẹsibẹ PC si tun ju 0xc000014c (The Boot Configuration Data for your PC is missing or contains errors) tabi 0xc000000f? Nitori Windows BCD faili lori rẹ pamọ 100 MB FAT32 EFI Eto Ipin (\EFI\Microsoft\Boot\BCD) ti wa ni ipamọ funrararẹ ni alakomeji gangan kanna regf iforukọsilẹ Ile Agbon kika bi SYSTEM ati SOFTWARE, a agbara pipadanu le ba awọn BCD Ile Agbon nigba ti nlọ D:\Windows\System32\config\ aifọwọkan.
Tun-tuntun kọ BCD Ile Agbon lori Eto Eto EFI rẹ ni iṣẹju-aaya 15:
diskpart
list volume
# Find the 100 MB to 300 MB FAT32 EFI System Partition (e.g. Volume 2)
select volume 2
assign letter=S
exit
# Back up the old broken BCD hive and generate a fresh one from D:\Windows:
ren S:\EFI\Microsoft\Boot\BCD BCD.bak
bcdboot D:\Windows /s S: /f UEFI
Tip
** Ṣayẹwo ilera SMART disk naa (wmic diskdrive get status) ati eto faili (chkdsk D: /f) lẹhin ti n ṣe afẹyinti ***: Awọn hives iforukọsilẹ ko ba ara wọn jẹ ni ibikibi ayafi ti a ba ge agbara ni aarin-kikọ, Ramu ni apọju XMP / EXPO ti ko duro, tabi SSD / HDD ni idagbasoke awọn apakan buburu ni inu. \Windows\System32\config\. Ni kete ti o ba ti ṣe afẹyinti D:\Config_Emergency_Backup (ati daakọ eyikeyi awọn iwe aṣẹ olumulo pataki ni pipa D:\Users\ si kọnputa USB), ṣiṣe chkdsk D: /f ni WinRE ṣaaju atunbere sinu Windows.
Ipele 5: Tun-ṣiṣẹ laifọwọyi RegBack awọn afẹyinti ni Windows 10 ati Windows 11¶
Ni kete ti PC Windows rẹ ba ti pada sori deskitọpu, tun mu-itumọ ti Microsoft ṣiṣẹ RegIdleBackup iṣẹ-ṣiṣe bẹ C:\Windows\System32\config\RegBack\ ti wa ni olugbe laifọwọyi ni gbogbo ọsẹ, ati rii daju Ipadabọ System (VSS) nṣiṣẹ lọwọ:
- ** Tun-ṣiṣẹ laifọwọyi
RegBackawọn afẹyinti hive ni Windows 10 (1803+) ati Windows 11 ***: Ṣii Apejọ Aṣẹ ti o ga (Run as Administrator) ati ṣiṣe aṣẹ iforukọsilẹ osise kan ṣoṣo yii (KB4509719):Lẹhinna ṣe okunfa iṣẹ-ṣiṣe afẹyinti ni ẹẹkan lẹsẹkẹsẹ lati rii dajureg add "HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager" /v EnablePeriodicBackup /t REG_DWORD /d 1 /fC:\Windows\System32\config\RegBackkún pẹlu awọn ẹda ilera ti gbogbo awọn hives marun: - ** Ṣe idaniloju Idaabobo Eto (
VSSAwọn ojuami pada) ti wa ni titanONfunC:**: TẹWin + R, Irusysdm.cpl ,4, yan tirẹC:wakọ, tẹ ** Tunto ***, yan ** Tan aabo eto **, ṣeto Lilo Max si5%(10 GBsi25 GB), ki o si tẹ ** Ṣẹda *** lati ṣe ẹda ojiji ojiji ipilẹ mimọ ni bayi. - Ṣiṣe
sfc /scannowatiDISM /Online /Cleanup-Image /RestoreHealthni kete ti o ti gbe sinu Windows lati rii daju pe ko si awọn eto DLL tabi ile itaja paati ti o ṣafihan (COMPONENTSIle Agbon) ti bajẹ lakoko ijamba naa.
Awọn nọmba pajawiri agbegbe ati awọn ilana ile-ibẹwẹ¶
Lakoko Windows kan BAD_SYSTEM_CONFIG_INFO BSOD jẹ deede IT inu tabi ọrọ atunṣe kọnputa ti ara ẹni, iṣẹ iṣẹ tabi awọn ikuna olupin ti o kan awọn ile-iwosan, fifiranṣẹ pajawiri, tabi awọn amayederun gbogbogbo nilo igbega lẹsẹkẹsẹ:
- Amẹrika ati Kanada : Kiakia
911ti jamba Windows ba mu abojuto alaisan ile-iwosan ṣiṣẹ, fifiranṣẹ pajawiri (CAD), tabi awọn iṣakoso aabo-aye, ati yipada si awọn ilana akoko idaduro ohun elo. Jabọ awọn bootloops ile-iṣẹ kaakiri ti o ṣẹlẹ nipasẹ awọn imudojuiwọn aṣoju aabo tabi awọn iṣẹlẹ cyber si ** CISA (1-844-Say-CISA/cisa.gov/reporttabi Ile-iṣẹ Ilu Kanada fun Aabo Cyber (1-833-CYBER-88). - ** United Kingdom **: Kiakia
999fun awọn eewu si igbesi aye tabi awọn idalọwọduro ile-iwosan NHS nla. Jabọ cyber pataki tabi awọn iṣẹlẹ wiwa si NCSC (ncsc.gov.uktabi NHS England Cyber Mosi. - **European Union ***: Kiakia
112kọja gbogbo awọn orilẹ-ede ọmọ ẹgbẹ EU. Awọn ile-iṣẹ ti a bo labẹ ** NIS2 Itọsọna *** gbọdọ jabo awọn ijade iṣẹ ṣiṣe pataki si CSIRT orilẹ-ede wọn laarin awọn wakati 24. - ** Australia ati Ilu Niu silandii ***: Kiakia
000ni Australia tabi111ni Ilu Niu silandii; jabo awọn iṣẹlẹ amayederun to ṣe pataki si ACSC (1300 CYBER1). - **India ati Asia-Pacific ***: Kiakia
112ni India fun esi pajawiri; jabo amayederun tabi awọn iṣẹlẹ ori ayelujara si CERT-In (incident@cert-in.org.in).
Awọn ibeere ti a beere nigbagbogbo¶
Kini ti profaili olumulo mi funrararẹ kuna lati wọle lẹhin bata ("We can't sign in to your account" / Profaili igba die) nitori NTUSER.DAT ti bajẹ?¶
Ni afikun si marun eto hives inu `\Windows\System32\config\`, gbogbo akọọlẹ olumulo kọọkan ni ile-iforukọsilẹ tirẹ (`HKEY_CURRENT_USER`) ti a fipamọ si **`C:\Users\
Kí nìdí WinRE beere fun Bọtini Imularada BitLocker oni-nọmba 48 ṣaaju ki o to jẹ ki n ṣii Command Prompt, nigbati Emi ko tan BitLocker si ara mi bi?¶
Lori fere gbogbo igbalode Windows 11 (ati Windows 10) kọǹpútà alágbèéká pẹlu `TPM 2.0` ati Imurasilẹ Igbalode, wíwọlé pẹlu Akọọlẹ Microsoft kan lakoko iṣeto akọkọ jẹ ki o muu ṣiṣẹ laifọwọyi ** fifi ẹnọ kọ nkan ẹrọ (`BitLocker`*** ni abẹlẹ ati gbejade bọtini imularada oni-nọmba 48 rẹ si Akọọlẹ Microsoft rẹ. Ṣii **`https://aka.ms/myrecoverykey`** lori foonu alagbeka rẹ, wọle pẹlu akọọlẹ Microsoft (`@outlook.com`, `@hotmail.com`, `@gmail.com`) tabi ID iṣẹ-iwọle / Ile-iwe (`myaccount.microsoft.com`) ti a lo lori PC yẹn, ki o tẹ bọtini oni-nọmba 48 ti o baamu pẹlu `Key ID` han loju iboju. Ni kete ti ṣiṣi silẹ, `D:\Windows\System32\config` jẹ wiwọle patapata ni WinRE Command Prompt.
Ti o ba jẹ copy kuna pẹlu The process cannot access the file because it is being used by another process nigbati mo gbiyanju lati tun SYSTEM tabi SOFTWARE ni WinRE?¶
Aṣiṣe yẹn ṣẹlẹ fun ọkan ninu awọn idi meji: (1) o tẹ lairotẹlẹ `C:\Windows\System32\config\SYSTEM` nigbawo `C:` tabi `X:` Nitootọ ni ifiwe nṣiṣẹ WinRE RAM disk (`X:\Windows\System32\config\SYSTEM` ti wa ni titiipa nipasẹ WinRE funrararẹ; nigbagbogbo rii daju rẹ gidi aisinipo SSD wakọ lẹta `D:` tabi `E:` pẹlu `diskpart -> list vol`); tabi (2) o sare `reg load HKLM\TestSys D:\Windows\System32\config\SYSTEM` ni iṣaaju ninu igba ati gbagbe lati ṣiṣe **`reg unload HKLM\TestSys`** ṣaaju ṣiṣe `copy`.
Kí nìdí ni mi PC jamba pẹlu BAD_SYSTEM_CONFIG_INFO (0x00000074) paapaa lori ẹrọ fifi sori ẹrọ USB USB tuntun ṣaaju ki o to kan SSD?¶
Ti o ba jẹ `BAD_SYSTEM_CONFIG_INFO` (`0x00000074`) waye lakoko ti o n gbe ẹrọ ami-ami tuntun Windows 10/11 USB insitola ** (nibiti olupilẹṣẹ ti n ṣajọpọ tirẹ `boot.wim` Iforukọsilẹ Ramu sinu iranti eto), iforukọsilẹ SSD rẹ kii ṣe iṣoro naa: ** Ramu eto rẹ (`DDR4 / DDR5`) ti n ba ile-iforukọsilẹ jẹ ni iranti bi o ti n ṣi silẹ ***. Tẹ rẹ modaboudu `BIOS / UEFI` iṣeto (`Del` tabi `F2`), pa `XMP / EXPO` awọn profaili overclocking iranti ki Ramu ṣiṣẹ ni awọn iyara JEDEC boṣewa, tabi ṣe idanwo pẹlu igi Ramu kan ni akoko kan ni lilo `MemTest86`.
Le Antivirus ti ẹnikẹta tabi Wiwa Ipari (EDR) imudojuiwọn awakọ kernel fa BSOD lupu ti o dabi ibajẹ iforukọsilẹ?¶
Bẹẹni. Awọn awakọ aabo ipo Kernel (`BOOT_START` awakọ pẹlu `Start = 0` inu `HKLM\SYSTEM\ControlSet001\Services\
Kini ni COMPONENTS Ile Agbon inu C:\Windows\System32\config\, ati idi ti o jẹ 100 MB?¶
Ko dabi `SYSTEM`, `SOFTWARE`, `SAM`, `SECURITY`, ati `DEFAULT` (eyi ti o ti kojọpọ ni gbogbo bata), awọn **`COMPONENTS`** Ile Agbon (`C:\Windows\System32\config\COMPONENTS`) ti kojọpọ ni agbara nikan lori ibeere nigbati ** Imudojuiwọn Windows (`TiWorker.exe` / Iṣẹ orisun-eroja)** tabi `sfc /scannow` nṣiṣẹ. A ti bajẹ `COMPONENTS` Ile Agbon kii yoo daduro Windows lati booting (`0x00000074`), botilẹjẹpe yoo fa Awọn imudojuiwọn Windows lati kuna pẹlu `0x80073712` titi ti tunṣe pẹlu `DISM /Online /Cleanup-Image /RestoreHealth`.
Jẹmọ awọn itọsọna¶
- Iboju buluu Windows (BSOD) ati atunṣe bata
- BitLocker, FileVault, ati LUKS fifi ẹnọ kọkọrọ imularada bọtini titiipa ati atunto TPM
- BIOS ati UEFI famuwia ṣe imudojuiwọn biriki, ipadanu agbara, ati Dual-BIOS Flashback
- Ipo kika-ojiji ojiji SSD ati NVMe, 0% awọn bulọọki apoju, ati piparẹ TRIM igbala
- Dirafu lile ikuna ati data imularada
- Awọn afẹyinti Kọmputa, ilana 3-2-1, ati imularada ajalu
- Awọn nọmba pajawiri nipasẹ orilẹ-ede
Awọn orisun ati osise itoni¶
- Kọ ẹkọ Microsoft (
learn.microsoft.com): * Ṣayẹwo kokoro0x74:BAD_SYSTEM_CONFIG_INFOItọkasi Laasigbotitusita osise (BCDtruncatememory/numprocAtunṣe ati Ijẹrisi Ile Agbon Iforukọsilẹ)*. - Atilẹyin Microsoft (
KB4509719): * Iforukọsilẹ eto ko si ohun to lona soke si awọnRegBackfolda ti o bẹrẹ ni Windows 10 ẹya 1803 (EnablePeriodicBackupIṣeto Iforukọsilẹ)*. - Microsoft Windows Internals (Ẹya 7th, Russinovich et al.): * Iṣatunṣe Alakoso Iṣeto, Eto alakomeji Iforukọsilẹ Ile Agbon (
regf,hbin), ati Akọọlẹ Iṣowo Meji (.LOG1/.LOG2) Imularada*. - Iwe Ibi ipamọ olupin Microsoft: Iṣẹ Daakọ Ojiji Iwọn didun (
VSS) Isakoso (vssadmin list shadowsatiGLOBALROOTWiwọle Aye Orukọ ẹrọ). - National Institute of Standards and Technology (
NIST) (United States): Atẹjade pataki 800-86: Iforukọsilẹ Oniwadi Ipilẹṣẹ Windows ati Imularada.