Another update currupt file problem

tom982 · Apr 30, 2013

Hi Andy,

Thanks for the logs. The corruption has all been repaired now but let's take a look whether the permissions have actually restored as there seems to be a bit of conflict in the log:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the below file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.

https://dl.dropboxusercontent.com/u...iro/SFCFix Scripts/PrintDataBlocks/SFCFix.txt
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a log should be created on your Desktop: SFCFix.txt.
Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Click on the Start

button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

icacls C:\Windows\System32\* /save %USERPROFILE%\Desktop\sysACLfile

icacls C:\Windows\IME\IMESC5\DICTS\* /save %USERPROFILE%\Desktop\dicACLfile
This will create two files on your Desktop, sysACLfile and dicACLfile, please zip these up (right click > send to > compressed zipped archive) and attach this file to your next post.

Tom

Bobble262 · Apr 30, 2013

Here's the SFCFIX

SFCFix version 1.4.1.0 by niemiro.
Start time: 2013-04-30 22:40:10.736
Using .txt script file at C:\Users\q\Desktop\SFCFix.txt

PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll
Successfully took permissions for file or folder C:\Windows\System32\mciqtz32.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD
Successfully took permissions for file or folder C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD

Successfully copied file \\?\C:\mciqtz32.dll to \\?\C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll.
Successfully copied file \\?\C:\mciqtz32.dll to \\?\C:\Windows\System32\mciqtz32.dll.
Successfully copied file \\?\C:\PINTLGAS.IMD to \\?\C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD.
Successfully copied file \\?\C:\PINTLGAS.IMD to \\?\C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD.

Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll
Failure code returned from icacls process in RestoreFromDataBlock function for file C:\Windows\System32\mciqtz32.dll. Error code 0x5.
Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD
Failure code returned from icacls process in RestoreFromDataBlock function for file C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD. Error code 0x5.
PowerCopy:: directive failed to complete successfully.

Failed to process all directives successfully.
SFCFix version 1.4.1.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2013-04-30 22:40:11.120
----------------------EOF------------------

I'm hoping the zip file is attached ...

tom982 · May 1, 2013

Hi Bobble,

Can you use the attached SFCFix script as you have previously done please? Post the log when it finishes :)

Tom

Bobble262 · May 1, 2013

SFCFix version 1.4.1.0 by niemiro.
Start time: 2013-05-01 16:42:22.194
Using .txt script file at C:\Users\q\Downloads\SFCFix.txt

PrintDataBlocks::
C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll|D

AI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;SY)(A;;0x1200a9;;;BU)S:AI|S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464
C:\Windows\System32\mciqtz32.dll|D

AI(A;;FA;;;WD)S:AI|S-1-1-0
C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD|D

AI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;SY)(A;;0x1200a9;;;BU)S:AI|S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464
C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD|D

AI(A;;FA;;;WD)S:AI|S-1-1-0
PrintDataBlocks:: directive completed successfully.

Successfully processed all directives.
SFCFix version 1.4.1.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2013-05-01 16:42:22.210
----------------------EOF-----------------------

Bobble262 · May 4, 2013

... Would this fixed now then ... ?

tom982 · May 4, 2013

Hi Andy,

Sorry for keeping you in the dark, there's been a lot of work done in SFCFix recently and I didn't want to interfere with that.

We've successfully repaired the corruption on your system however the ownership of the files still needs resetting as SFCFix was unable to do so with that script.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a log should be created on your Desktop: SFCFix.txt.
Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

Tom

Bobble262 · May 4, 2013

Please dont apologies Tom, you have done me a massive favour and for that i salute you.
The reason i ask is that i'm still having certain problems with the computer which i thought were linked to these corrupt files but obviously there must be other issuses.
For at least six months firefox has been crashing regularly, then when i had to do a clean windows install i'm unable to update Microsoft security essential as it states there's no internet connection and now i'm this past week in unable to load things properly, ie tweetdeck, Hp printer software and an electronic car parts catalogue..
I'll have to sort the other stuff out at a later date, at least i can start loading stuff onto the computer again without fear it wont crash while updating .. anyway here's the log :

SFCFix version 1.4.2.0 by niemiro.

Start time: 2013-05-04 23:46:36.757

Using .txt script file at C:\Users\q\Downloads\SFCFix(1).txt

TrustedInstaller::

Successfully set file ownership to TrustedInstaller for C:\Windows\System32\mciqtz32.dll

Successfully set file ownership to TrustedInstaller for C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD

TrustedInstaller:: directive completed successfully.

Successfully processed all directives.

SFCFix version 1.4.2.0 by niemiro has completed.

Currently storing 4 datablocks.

Finish time: 2013-05-04 23:46:36.778

----------------------EOF-----------------------

Bobble262 · May 4, 2013

What is *Currently storing 4 datablocks* ?

Bobble262 · May 5, 2013

Now ive had the Blue screen of Death twice this morning also had a pop up saying MSCOMCTL.OCX part of it's dependencies is missing.
Is it just best to reformat the drive then do another clean install ?

tom982 · May 5, 2013

Hi Andy,

Hmm those sort of symptoms are usually an indication of malware being present on the system, it might be a good idea to start a thread over at the security forum:

Security Arena - Sysnative Forums

It may well turn out to be nothing but it's better to be safe than sorry!

The corruption has been repaired and we have now restored both the permissions and the ownership so you shouldn't be having any more problems running SFC.

As for the DataBlocks, they are essentially a backup of the permissions and the ownership of a file. If you look back a few posts, you'll see we ran a PrintDataBlocks:: command, which returned this (the 4 datablocks):

Code:

PrintDataBlocks::
C:\Windows\WinSxS\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6000.16386_none_0b1ac5fde3cf7f3f\mciqtz32.dll|D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;SY)(A;;0x1200a9;;;BU)S:AI|S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464
C:\Windows\System32\mciqtz32.dll|D:PAI(A;;FA;;;WD)S:AI|S-1-1-0
C:\Windows\WinSxS\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6000.16386_none_15da9be54b086d36\PINTLGAS.IMD|D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;SY)(A;;0x1200a9;;;BU)S:AI|S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464
C:\Windows\IME\IMESC5\DICTS\PINTLGAS.IMD|D:PAI(A;;FA;;;WD)S:AI|S-1-1-0
PrintDataBlocks:: directive completed successfully.

These are known as a Security Descriptors. Windows uses Security Descriptors to store permissions and they indicate who can read, modify, execute etc. the files. SFCFix usually stores the SID (Security Identifier - a string of numbers unique to that user) of the file owner at the end of the DataBlock however it was unable to do so here and this is why we ran into a few problems - the last SFCFix script you ran manually set the owner back to TrustedInstaller.

Tom

tom982 · May 5, 2013

Hi Andy,

Just seen your last post. Can you start a thread over in the BSOD forum please? They'll have you up and running in no time:

BSOD, Crashes, Kernel Debugging - Sysnative Forums

If you're still having the MSCOMCTL.ocx problem afterwards then post back here and we'll sort that out :)

Tom

Bobble262 · May 5, 2013

Ok Tom i'll pop across and start a new thread but before i go i just like to thank you for all your help, you have been a star so thank you very much,

tom982 · May 5, 2013

Hi Andy,

You're most welcome, it has been a pleasure to work with you :) In future, try to keep to one forum at a time because it can get very confusing for us if our fixes start undoing themselves - fortunately it didn't happen here but it's happened in the past.

http://forums.v3.co.uk/showthread.php?p=1393573
http://forums.pcw.co.uk/showthread.php?p=1393217

Plus, we're better here

On another note, you'll need to attach your minidumps to your post over in the BSOD forum for them to analyse:

https://www.sysnative.com/forums/bs...g-instructions-windows-8-7-windows-vista.html

Tom

Bobble262 · May 5, 2013

I've generaly gone to the other forum with little niggling problems and to be fair they have helped me out every time so obviously i went there again but, even though good people have took their time to help no one has an answer so i had to look further afield and here i am .
Not wanting to put the other forum down, there is a more personal 1-2-1 on here.
Anyway thanks again .

tom982 · May 6, 2013

Hi Andy,

Having just been informed that you're still having update issues, I would like you to download and install the System Update Readiness Tool (SURT):

Download System Update Readiness Tool for Windows Vista (KB947821) [February 2013] from Official Microsoft Download Center

It's quite a big download so keep it in a convenient location so we can use it again without having to download it.

When it finishes installing, post the log please:

C:\Windows\Logs\CBS\CheckSUR.persist.log

Tom

Bobble262 · May 6, 2013

=================================
Checking System Update Readiness.
Version 6.0.6001.22275
2013-05-06 11:20

Checking Deployment Packages

Checking Package Manifests and catalogs.

Checking package watchlist.

Checking component watchlist.

Checking packages.

Checking component store
(f) CSI Manifest Bad XML 0xC0150006 WinSxS\Manifests\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4.manifest x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4

Checking SMI Store
Summary:
Milliseconds: 1014771
Found 1 errors
CSI Manifest Bad XML Total Count: 1

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 18.0
2013-05-06 19:40

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 18.0
2013-05-06 19:47

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.22574
Package Version 18.0
2013-05-06 20:11

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 1025
No errors detected

tom982 · May 6, 2013

Hi Andy,

No luck there, let's see what the other logs have to say about things.

Export CBS folder

Click the Start button

then click Computer.
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.

Attach CBS.zip to your next post if it is within the forum size limits, if not upload it to Free large file hosting. Send big files the easy way!

Tom

Bobble262 · May 6, 2013

Ta-Dah ...

tom982 · May 9, 2013

Hi Andy,

Your CBS log is showing that an 0x8007000d error was returned when you attempted to install SP1:

Code:

2013-05-06 17:40:48, Info                  CBS    Exec: Processing started.  Client: SP Coordinater Engine, Session: 30296696:1980069146, Package: VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.0.180002013-05-06 17:40:48, Info                  CBS    Appl: Evaluating package applicability for package VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.0.18000, applicable state: 7
2013-05-06 17:43:20, Error                        DpxException hr=0x8007000d code=0x020201
2013-05-06 17:43:20, Error                        DpxException hr=0x8007000d code=0x020217
2013-05-06 17:43:20, Info                  CBS    WER: Generating failure report for package: VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.0.18000, status: 0x8007000d, failure source: CBS Other, start state: 0, target state: 4
2013-05-06 17:43:24, Info                  CBS    SQM: Install counter not opted-in for package: VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.0.18000
2013-05-06 17:43:24, Info                  CBS    Exec: Processing complete.  Session: 30296696:1980069146, Package: VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.0.18000, hr: 0x8007000d

0x8007000d tranlates to ERROR_INVALID_DATA:

Code:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.


C:\Windows\System32>err 0xd
# for hex 0xd / decimal 13 :
  BTH_ERROR_HOST_REJECTED_LIMITED_RESOURCES                     bthdef.h
  MUTEX_LEVEL_NUMBER_VIOLATION                                  bugcodes.h
  EVENT_MSCEP_FAIL_TO_ENCRYPT                                   ceplog.mc
# SCEP Add-on cannot encrypt the return CertRep (3) message
# to the client's certificate (%2).  %3  Please find support
# information at http://%1/certsrv/mscep/mscephlp.htm.
  MSG_E_CANNOT_GET_KEY_PROVIDER                                 certlog.mc
# Certificate Services did not start: Unable to extract key
# provider information from the CA certificate for %1.  %2.
  CR_NO_SUCH_DEVNODE                                            cfgmgr32.h
  LOG_MODULE_EVTLOG                                             clusvmsg.h
  IAAPI_BADNUM                                                  iaapi.h
# /* Bad INTEGER or ENUMERATED number */
  MD_ERROR_SUB403_CERT_REVOKED                                  iiscnfg.h
  KDC_ERR_BADOPTION                                             kerberr.h
# KDC cannot accommodate requested option
  RSVP_Err_UNKN_OBJ_CLASS                                       lpmapi.h
  POLICY_ERRV_SUBNET_DEF_FLOW_DURATION                          lpmapi.h
  MAPI_DIAG_LENGTH_CONSTRAINT_VIOLATD                           mapidefs.h
  MMSYSERR_INVALIDALIAS                                         mmsystem.h
  MSIDBERROR_BADFILENAME                                        msiquery.h
# bad filename
  NRC_DUPNAME                                                   nb30.h
# /* duplicate name                             */
  NDDE_INVALID_APPNAME                                          nddeapi.h
  NMERR_INVALID_HPROPERTY                                       netmon.h
  ODBC_ERROR_LOAD_LIB_FAILED                                    odbcinst.h
  OLE_ERROR_OBJECT,                                             ole.h
# Not a valid object                      */
  MSG_LOAD_TEMPLATE                                             pollog.mc
# The %1 Certificate Template could not be loaded.  %2.
  MFE_NO_SPACE                                                  routprot.h
# not enough room in packet
  SCESTATUS_ALREADY_RUNNING                                     scesvc.h
  SNMP_ERRORSTATUS_RESOURCEUNAVAILABLE                          snmp.h
  GE_SSC_ERR_OBJ_CLOSED                                         ssc.h
# /* object is not available for use due  to configuration */
  TWCC_CAPUNSUPPORTED                                           twain.h
# /* Capability not supported by source            */
  MSG_NT4_DOMAIN                                                w32timemsg.mc
# Time Provider NtpClient:  This machine is configured to use
# the domain hierarchy to
# determine its time source, but the computer is joined to a
# Windows NT 4.0 domain. Windows NT 4.0 domain controllers do
# not have
# a time service and do not support domain hierarchy as a
# time source.
# NtpClient will attempt to use an alternate configured
# external time
# source if available.  If an external time source is not
# configured
# or used for this computer, you may choose to disable the
# NtpClient.
[B]  ERROR_INVALID_DATA                                            winerror.h[/B]
[B]# The data is invalid.[/B]
  LDAP_CONFIDENTIALITY_REQUIRED                                 winldap.h
  SNMP_ERROR_RESOURCEUNAVAILABLE                                winsnmp.h
# 29 matches found for "0xd"


C:\Windows\System32>

I suspect that something isn't quite right with your SP1 download so I would like you to run this FixIt in aggressive mode please:

How do I reset Windows Update components?

Then try to update and post your CBS log if it fails please.

Tom

Bobble262 · May 9, 2013

Tom,
It failed.

Another update currupt file problem

Emeritus

Active member

Attachments

Emeritus

Attachments

Active member

Active member

Emeritus

Attachments

Active member

Active member

Active member

Emeritus

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Attachments

Emeritus

Active member

Attachments