windows 10 Error code: 0xc0000428

Hi, I was getting a featured update bringing my windows 10 20h2 to the new version 21h1. The update went well and I worked for some days already when I suddenly got a virus (Trojan:Win32/Tnega!ml) on my system. Because it seems to be too complicated to get rid of this, I decided to restore a backup I have made successfully with Aomei Backupper v 5.6 just before the update to the new version 21h1. Everything went well with the restore, but after booting up my system I've got the message

Recovery
Your PC/Device needs to be repaired.
The digital signature for this file couldn't be verified.
Error code: 0xc0000428
You'll need to use recovery tools. If you don't have any installation media (like a disc or USB device), contact your PC administrator or PC/Device manufacturer.

Processing a startup repair with a windows installation medium was not successful.
The log file said beside others:

"Root cause found.
A recently serviced boot binary is corrupt"

Also trying to repair the mbr using the following instructions I've been reading in the internet

C:
cd boot
attrib bcd -s -h –r
bootrec /rebuildbcd

did not help.

I do not know if this would make any sense with my system. The motherboard of my desktop is a MSI B406 Tomahawk which is running with a UEFI only - meaning there is no CSM mode. The C partition which was hosting Windrose 10 was created as GPT. I guess this means there is no mbr which could be rebuild or repaired with the above mentioned instructions.

Last may be helpful information:
The backup I was using to restore was created when all updates at this time has been finished. There was no pending update left.

I really don't know what to do and any help is urgently welcome!

I read some post here about this error code but none seems 100 % related to my problem. Specially when it comes to repair the boot manager with an uefi only board. But I'm not very sure about that...

Ten Forums has a search feature.
These are the results for searching "A recently serviced boot binary is corrupt"

https://www.tenforums.com/gtsearch.p...&sa.x=0&sa.y=0

One or more are from my computers.

So if you find a fix I'm very interested.

The error code: 0xc0000428 is

Status invalid image hash

Code:

Windows cannot verify the digital signature for this file.
A recent hardware or software change might have installed a
file that is signed incorrectly or damaged, or that might be 
malicious software from an unknown source.

So there may be unexpected problems with the restored image.

Troubleshooting can be time consuming.

With malware consider backing up files followed by a clean install and file restoration:
Clean Install Windows 10

If you must troubleshoot then create tools that you may be able to use during the troubleshooting process:



Bootable flash drives:

a) bootable Windows 10 iso
Create Bootable USB Flash Drive to Install Windows 10
Download Windows 10 ISO File
https://www.microsoft.com/en-us/soft...load/windows10

b) bootable Ubuntu:
Create a bootable USB stick on Windows | Ubuntu

c) bootable Windows PE: (Hiren's, Bob.Ombs, Kyhi, Gandalf's, etc.)
https://www.makeuseof.com/tag/bootab...ecovery-discs/

zbook said:

Ten Forums has a search feature.
These are the results for searching "A recently serviced boot binary is corrupt"

Thank you for your reply and all your links and suggestions. Sorry, but your link to the search results is not working for me. There was only an empty white page to be seen.

Anyway I told already I've searched a lot - also here in the forum - but nothing helps me really.

I've run the start repair option from a installation medium several times. Always it ends with the message start repair could not solve the problem.

I wanted to attach the latest log SrtTrail.txt for that with this post. But I was not able to copy this file to the stick I'm booting from. I know how to use the cmd copy instruction for that
(Change directory from boot directory to C:, walk to C:\windows\system32\logfiles\srt and copy srttrail.txt to x:) and I'm able to see the file after that in x:. But when I plug the stick to my tablet I cannot see the file. I'll try again tomorrow.

Also I've tried to repair the mbr - but as I wrote I'm not sure if that helps when using an uefi only system.

So there may be unexpected problems with the restored image.

Troubleshooting can be time consuming.

Ok, there might be problems. But I've used this backup tool many times before without any problem. And this time I've tried two backup images and the problem showed up with both! I do not believe there is a problem with both files!

Today I've used another, older HDD with a Windows 10 while removing the two HDD's which I use normally with the computer. After a longer boot process this windows 10 started without any problem!
But this does not solve my problem - I want to get back the normal system...
Again, any idea is very welcome!

To save files from a viewable administrative command prompt (ACP) box in Windows recovery environment:

Type notepad > this opens one notepad window
Type notepad again to open another or multiple notepad windows as needed.

On the ACP box > right click no the top bar or title bar of the ACP box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into notepad

From notepad > file > save as

Or take pictures with a camera or smartphone camera.


UEFI has an insignificant MBR and rarely ever needs troubleshooting.
It is done out of habit and typically completes without any impact.



Some trial and error steps:
Try BIOS legacy, UEFI with CSM, and UEFI without CSM
Try Macrium boot repair option.
Try bcdboot commands.

These were some of the early links in the search results:

A recently serviced boot binary is corrupt


A recently serviced boot binary is corrupt.
Unable to boot Windows10, "A recently serviced boot binary is corrupt"
start up repair: A recently serviced boot binary is corrupt.
Unable to boot Windows10, "A recently serviced boot binary is corrupt"
Unable to boot Windows10, "A recently serviced boot binary is corrupt"
A recently serviced boot binary is corrupt.

Hi, thank you for you reply. I appreciate your efforts very much. Today I have no more time but I'll be back to you tomorrow...

- - - Updated - - -

Hi, first of all the good news: I have my system back! Fixing the boot problems for GPT/UEFI boot system using the Macrium Rescue Environment was doing it!

Thank you for that good advice!!

UEFI has an insignificant MBR and rarely ever needs troubleshooting.
It is done out of habit and typically completes without any impact

Seems that I have had these very rare need...

Anyway - again thank you very much for your great help. I'm soooo happy!

One last thing:
To copy the log files from the ACP box using two notepads and save the one as... it works only using a second USB. To copy it to the same USB I was booting from does not work. I did not attached the files due to my success with the system. Have a bright day...

That's great news.
I'm glad to read about your success.

You're welcome.