Silver_Foxy Да, ты оказался прав, спасибо. Логи выдали, что виноват nod, а именно:
<Data Name="Message">(c0000022): Failed to process reg key or one of its descendants: [\REGISTRY\MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Antispam\01010102]</Data>
Самое интересное, что у коллеги в офисе образ нормально снимается и там установлен точно такой же антивирус... ну да ладно, будем разбираться в дальнейшем
Вот, как посмотреть логи:
[more=Решение]When you see the error message, do the following:
1.) Push Shift+F10 to get to a command prompt
2.) Navigate to C:\windows\Panther
3.) Find the Setup.etl file and find a way to copy this file off of the system (I copied it to the D:\ partition and used Ghost to gather that partition and get the file off)
4.) Copy the setup.etl file from the corrupted system to another computer that has Windows 7. Put it on the root of C:\ for easiest access.
5.) Open a Command Prompt on the Windows 7 computer.
6.) Navigate to the root of C:\ (or wherever you saved the file)
7.) Type "tracerpt setup.etl -o logfile.csv"
8.) Close the command prompt and open up logfile.csv in your text editor of choice.
9.) Look through the log file (towards the end probably) for messages that say "Failed to process reg key or one of it's decendants" For me, the exact eror looked like this: "Failed to process reg key or one of its descendants: [\REGISTRY\MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000200\Profiles\@My profile]" If you search for "reg key" or "failed to process" you should find the failure.
10.) Remove this software from your image, or find out how to get the registry key that is failing to work properly.
After this, you should be able to properly identify any problem keys and remove/workaround them on your image.[/more]
Оказывается выдерать не всегда правильно =) 
Теперь научен.
