Missing Files SharedAccess.reg & permission issues

[scrolldown]

Hi, I am having issues with viewing the domain network, and I am unable to edit the permissions on the BFE reg key (access denied, even after trying several take ownership utilities and running all as admin).  When I run Tweaking.com's Windows Repair 2018 (v4.4.6), the start up check shows this message:  Missing File: Files\regfiles\10_1809\SharedAccess.reg. I do have a SharedAccess.reg file, but perhaps it is corrupted or incorrect.  I have run MS Windows Repair, but the problem remains.  I did try to import the bfe.reg key from bleeping computer, but I have "insufficient privileges" to do so. 

I am running Windows 10 v1809.  I am an admin on my computer.  My computer is clean of viruses (have run RogueKiller, MalwareBytes, & Adware Removal and all were clear). 

I know that DCOM, BFE, MpsSvc, BITS, firewall, etc. are all intertwined and they need to have correct permissions to run, just not sure how to fix the issues.  I use Avast as my AV. 

Please assist.  Thank you very much!

And here are the errors from a FarBar Scan:

==================== Event log errors: =========================

Application errors:
==================
Error: (04/04/2019 03:19:41 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (04/04/2019 03:19:41 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (04/04/2019 02:32:37 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program regedit.exe version 10.0.17763.168 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 4570

Start Time: 01d4eb1abef2d67c

Termination Time: 0

Application Path: C:\Windows\regedit.exe

Report Id: 05fcdf49-1a67-4818-9439-7ca4e95210a4

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (04/03/2019 02:07:40 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating (unknown) status to SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 02:07:40 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating (unknown) status to SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 02:07:39 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating (unknown) status to SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 02:07:39 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating (unknown) status to SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 02:07:39 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating (unknown) status to SECURITY_PRODUCT_STATE_ON.


System errors:
=============
Error: (04/08/2019 08:12:38 AM) (Source: DCOM) (EventID: 10016) (User: OTC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user OTC\skb SID (S-1-5-21-669097519-3148179253-668925197-1614) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/08/2019 08:12:38 AM) (Source: DCOM) (EventID: 10016) (User: OTC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user OTC\skb SID (S-1-5-21-669097519-3148179253-668925197-1614) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/08/2019 08:04:55 AM) (Source: DCOM) (EventID: 10016) (User: OTC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user OTC\skb SID (S-1-5-21-669097519-3148179253-668925197-1614) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/08/2019 07:19:27 AM) (Source: DCOM) (EventID: 10016) (User: OTC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user OTC\skb SID (S-1-5-21-669097519-3148179253-668925197-1614) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/08/2019 07:15:09 AM) (Source: DCOM) (EventID: 10016) (User: OTC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user OTC\skb SID (S-1-5-21-669097519-3148179253-668925197-1614) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/08/2019 06:41:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network Connectivity Assistant service depends on the Base Filtering Engine service which failed to start because of the following error:
Access is denied.

Error: (04/08/2019 06:41:15 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Base Filtering Engine service terminated with the following error:
Access is denied.

Error: (04/08/2019 05:05:14 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network Connectivity Assistant service depends on the Base Filtering Engine service which failed to start because of the following error:
Access is denied.

[Boggin]

I ignore the DCOM Event ID 10016 as I've never experienced any adverse effects because of them.

However, if you are concerned about them then you can apply these steps for each in cuberti's post of 4 Nov 2012.

https://www.eightforums.com/threads/numerous-event-id-10016-errors-win-8-pro-64-bit.11951/

There are further steps lower down in the thread if you experience what others have.

While it is from a Win 8 forum, I have used these on one of my Win 10 machines but with subsequent repair installs, the Event ID 10016 just reappears in Event Viewer.

I'm not sure if Avast could be the cause of your other problems.

Can you use Avast's Uninstaller to uninstall it and then see if that resolves your other problems.

https://www.avast.com/en-gb/uninstall-utility

It may just need removing and reinstalling but Avast can be a bit over controlling.

[scrolldown]

Thank you for your reply.  I am unable to change security on the applicable entry in Component services.  RuntimeBroker {15c20b67-12e7-4bb6-92bb-7aff07997402}.  When I click on edit, I get a message that "One or more of the permission entries attached to Registry Value has an unrecognized type and cannot be displayed."  I click on OK, but the Add button is grayed out.  And I can't change permissions or take ownership on the associated registry key. 

[Boggin]

I wouldn't bother with the DCOM error.

Uninstall Avast and then run WR 4.4.7 to see if you still get that hang on that repair.

Uninstalling Avast may also resolve those Security Centre errors, although you could try changing the Permissions in Safe Mode with Networking where Avast wouldn't be loaded.

[scrolldown]

Ok, I'll try that.  In the meantime, how would I address this message in the Tweaking.com app? 

Missing File: Files\regfiles\10_1809\SharedAccess.reg.

I do have a SharedAccess.reg file, but perhaps it is corrupted or incorrect. 

[Boggin]

See how you get on with my last suggestions but having performed a repair install, I don't know why you are getting that error message.

You could open a Command Prompt (Admin) and enter these cmds and then download WR 4.4.7 to see if you get the same error on the SharedAccess file.

These cmds will each take a while to run.

dism /online /cleanup-image /startcomponentcleanup

dism /online /cleanup-image /restorehealth

sfc /scannow

The last one should tell you if any corruption remains.

Enter exit to close the cmd window when done.