Windows Installer Service

mjthomp95

Member
Joined
Jun 29, 2014
Posts
22
When ever I try to install something with .msi or .exe it brings up a window saying "The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance." I've tried a couple fixes for this, but none of them work for me or I'm not able to complete the steps. "The Windows Installer service could not be accessed" error message when you try to install Office. These are some of the things I've tried. The first couple didn't work for me and the last method I wasn't able to complete some of the commands like ren msi.dll msi.old, which says access denied even though I'm in elevated command prompt. [FONT=Segoe UI, Arial, Verdana, Tahoma, sans-serif]This has been happening for a while but it hasn't really bothered me and I've been super busy so I'm just getting around to really fixing it.[/FONT]
 
Hello mjthomp95

Lets take a look at the services.

Please open up Notepad by Right clicking on the
aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
button -> In the box type in Notepad -> Select Notepad.exe

Once Notepad is open please copy and paste the following into the notepad file
PHP:
@echo off
    ( ver 
	 echo.
	 echo [b]SC QUERYEX msiserver[/b]
			SC QUERYEX msiserver
	 echo.
	 echo [b]SC msiserver[/b]
			sc qc msiserver
	 echo.
	 echo [b]SC QUERYEX TrustedInstaller[/b]	
			SC QUERYEX TrustedInstaller
	 echo.
	 echo [b]sc qc TrustedInstaller[/b]
			sc qc TrustedInstaller
	 echo.
	 echo [b]reg query msiserver[/b]
	        reg query "HKLM\SYSTEM\CurrentControlSet\Services\msiserver" /s
	 echo.
	 echo [b]reg query msiserver[/b]
	        reg query "HKLM\SYSTEM\CurrentControlSet\Services\TrustedInstaller" /s
	)>0
notepad 0

The click on File -> Save As -> Call it Query.bat -> Choose save type as All files -> save it to your desktop

Go to your desktop and you should see a file that looks like this
query.png
called Query.bat -> Double click on this file.

Once complete a text document should appear called 0 -> Please post the contents back into this tread.

I would also like to see if there are any indications of this issue inside the Event Viewer

Event Log Viewer

  1. Please download VEW.exe from Here and save it to your desktop.
  2. Go to your desktop and right click on VEW.exe and choose Run as Administrator
  3. Once open set the following settings
    • 'Select log to query'
      1. Tick Application
      2. Tick System
    • 'Select Type to list'
      1. Tick Critical
      2. Tick Error
      3. Tick Information
      4. Tick Warning
    • 'Number or date events'
      1. Tick Number of Events and set it to 20
  4. Click on Run
  5. Once completed a notepad file will open. Please copy and paste the contents of VEW.txt back into this thread.
 
Last edited:
This is the 0 file:
Code:
[indent] Microsoft Windows [Version 6.3.9600] 
[b]SC QUERYEX msiserver[/b] 


SERVICE_NAME: msiserver 
        TYPE               : 10  WIN32_OWN_PROCESS  
        STATE              : 1  STOPPED 
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
        PID                : 0
        FLAGS              : 
 
[b]SC msiserver[/b] 
[SC] QueryServiceConfig SUCCESS


SERVICE_NAME: msiserver
        TYPE               : 10  WIN32_OWN_PROCESS 
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\WINDOWS\system32\msiexec /V
        LOAD_ORDER_GROUP   : 
        TAG                : 0
        DISPLAY_NAME       : Windows Installer
        DEPENDENCIES       : rpcss
        SERVICE_START_NAME : LocalSystem
 
[b]SC QUERYEX TrustedInstaller[/b]     


SERVICE_NAME: TrustedInstaller 
        TYPE               : 10  WIN32_OWN_PROCESS  
        STATE              : 1  STOPPED 
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
        PID                : 0
        FLAGS              : 
 
[b]sc qc TrustedInstaller[/b] 
[SC] QueryServiceConfig SUCCESS


SERVICE_NAME: TrustedInstaller
        TYPE               : 10  WIN32_OWN_PROCESS 
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\WINDOWS\servicing\TrustedInstaller.exe
        LOAD_ORDER_GROUP   : ProfSvc_Group
        TAG                : 0
        DISPLAY_NAME       : Windows Modules Installer
        DEPENDENCIES       : 
        SERVICE_START_NAME : localSystem
 
[b]reg query msiserver[/b] 


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver
    DisplayName    REG_SZ    @%SystemRoot%\system32\msimsg.dll,-27
    ErrorControl    REG_DWORD    0x1
    ImagePath    REG_EXPAND_SZ    %systemroot%\system32\msiexec /V
    Start    REG_DWORD    0x3
    Type    REG_DWORD    0x10
    Description    REG_SZ    @%SystemRoot%\system32\msimsg.dll,-32
    DependOnService    REG_MULTI_SZ    rpcss
    ObjectName    REG_SZ    LocalSystem
    ServiceSidType    REG_DWORD    0x1
    RequiredPrivileges    REG_MULTI_SZ    SeTcbPrivilege\0SeCreatePagefilePrivilege\0SeLockMemoryPrivilege\0SeIncreaseBasePriorityPrivilege\0SeCreatePermanentPrivilege\0SeAuditPrivilege\0SeSecurityPrivilege\0SeChangeNotifyPrivilege\0SeProfileSingleProcessPrivilege\0SeImpersonatePrivilege\0SeCreateGlobalPrivilege\0SeAssignPrimaryTokenPrivilege\0SeRestorePrivilege\0SeIncreaseQuotaPrivilege\0SeShutdownPrivilege\0SeTakeOwnershipPrivilege\0SeLoadDriverPrivilege
    FailureActions    REG_BINARY    840300000000000000000000030000001400000001000000C0D4010001000000E09304000000000000000000


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Enum
    0    REG_SZ    Root\LEGACY_MSISERVER\0000
    Count    REG_DWORD    0x1
    NextInstance    REG_DWORD    0x1


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Security
    Security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


 
[b]reg query msiserver[/b] 


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller
    BlockTimeIncrement    REG_DWORD    0x384
    PreshutdownTimeout    REG_DWORD    0x36ee80
    BlockTime    REG_DWORD    0x2a30
    DisplayName    REG_SZ    @%SystemRoot%\servicing\TrustedInstaller.exe,-100
    ErrorControl    REG_DWORD    0x1
    Group    REG_SZ    ProfSvc_Group
    ImagePath    REG_EXPAND_SZ    %SystemRoot%\servicing\TrustedInstaller.exe
    Start    REG_DWORD    0x3
    Type    REG_DWORD    0x10
    Description    REG_SZ    @%SystemRoot%\servicing\TrustedInstaller.exe,-101
    ObjectName    REG_SZ    localSystem
    ServiceSidType    REG_DWORD    0x1
    FailureActions    REG_BINARY    840300000000000000000000030000001400000001000000C0D4010001000000E09304000000000000000000


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller\Security
    Security    REG_BINARY    0100148090000000A00000001400000034000000020020000100000002C0180000000C000102000000000005200000002002000002005C000400000000021400FF010F0001010000000000051200000000001800FF01020001020000000000052000000020020000000014008D010200010100000000000504000000000014008D0102000101000000000005060000000102000000000005200000002002000001020000000000052000000020020000 [/indent]

Here is the VEW file:

Code:
[indent] Vino's Event Viewer v01c run on Windows 7 in English
Report run at 02/07/2014 4:46:55 PM


Note: All dates below are in the format dd/mm/yyyy


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 02/07/2014 6:52:36 PM
Type: Error Category: 0
Event: 11719 Source: MsiInstaller
Product: Google Talk Plugin -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.


Log: 'Application' Date/Time: 02/07/2014 7:52:26 AM
Type: Error Category: 0
Event: 11719 Source: MsiInstaller
Product: Google Talk Plugin -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.


Log: 'Application' Date/Time: 02/07/2014 1:52:27 AM
Type: Error Category: 0
Event: 11719 Source: MsiInstaller
Product: Google Talk Plugin -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.


Log: 'Application' Date/Time: 01/07/2014 8:12:35 PM
Type: Error Category: 0
Event: 11719 Source: MsiInstaller
Product: Dawngate -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.


Log: 'Application' Date/Time: 01/07/2014 7:01:12 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 29/06/2014 7:47:56 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 29/06/2014 7:46:24 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 29/06/2014 6:17:57 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program backgroundTaskHost.exe version 6.3.9600.16384 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 2094  Start Time: 01cf93c5b9efc81c  Termination Time: 4294967295  Application Path: C:\WINDOWS\system32\backgroundTaskHost.exe  Report Id: afa23f6c-ffb9-11e3-bece-1c3e849b384b  Faulting package full name: 134D4F5B.Box_1.2.0.1260_neutral__2qk4zy5s3qmee  Faulting package-relative application ID: Box 


Log: 'Application' Date/Time: 29/06/2014 6:17:56 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program LiveComm.exe version 17.4.9600.16384 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 3bbc  Start Time: 01cf93c5b9f609b4  Termination Time: 4294967295  Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe\LiveComm.exe  Report Id: aea8e7c8-ffb9-11e3-bece-1c3e849b384b  Faulting package full name: microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe  Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 


Log: 'Application' Date/Time: 29/06/2014 6:17:56 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program wwahost.exe version 6.3.9600.17031 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 1e68  Start Time: 01cf93c5b9efa0f8  Termination Time: 4294967295  Application Path: C:\WINDOWS\syswow64\wwahost.exe  Report Id: af982d26-ffb9-11e3-bece-1c3e849b384b  Faulting package full name: Microsoft.SkypeApp_2.0.0.5011_x86__kzf8qxf38zg5c  Faulting package-relative application ID: App 


Log: 'Application' Date/Time: 29/06/2014 6:15:22 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 29/06/2014 5:40:08 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: spotify.exe, version: 0.9.10.22, time stamp: 0x53aafbb8 Faulting module name: ntdll.dll, version: 6.3.9600.17031, time stamp: 0x5308893d Exception code: 0xc0000374 Fault offset: 0x000df996 Faulting process id: 0x830 Faulting application start time: 0x01cf93b7dcad8cb4 Faulting application path: C:\Users\Micah\AppData\Roaming\Spotify\spotify.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: 69679c96-ffb4-11e3-bece-1c3e849b384b Faulting package full name:  Faulting package-relative application ID: 


Log: 'Application' Date/Time: 29/06/2014 7:26:21 AM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: spotify.exe, version: 0.9.10.22, time stamp: 0x53aafbb8 Faulting module name: ntdll.dll, version: 6.3.9600.17031, time stamp: 0x5308893d Exception code: 0xc0000374 Fault offset: 0x000df996 Faulting process id: 0x1660 Faulting application start time: 0x01cf927ead816066 Faulting application path: C:\Users\Micah\AppData\Roaming\Spotify\spotify.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: aad661eb-ff5e-11e3-bece-1c3e849b384b Faulting package full name:  Faulting package-relative application ID: 


Log: 'Application' Date/Time: 29/06/2014 2:53:33 AM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 28/06/2014 7:59:06 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program backgroundTaskHost.exe version 6.3.9600.16384 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 202c  Start Time: 01cf930ab74159fb  Termination Time: 4294967295  Application Path: C:\WINDOWS\system32\backgroundTaskHost.exe  Report Id: a75b26f9-fefe-11e3-bece-1c3e849b384b  Faulting package full name: 134D4F5B.Box_1.2.0.1260_neutral__2qk4zy5s3qmee  Faulting package-relative application ID: Box 


Log: 'Application' Date/Time: 28/06/2014 7:56:04 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 27/06/2014 11:46:33 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program Spotify.exe version 0.9.10.22 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 146c  Start Time: 01cf925963ae3e3c  Termination Time: 4294967295  Application Path: C:\Users\Micah\AppData\Roaming\Spotify\Spotify.exe  Report Id: 401d92f3-fe55-11e3-bece-1c3e849b384b  Faulting package full name:   Faulting package-relative application ID:  


Log: 'Application' Date/Time: 27/06/2014 10:48:57 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program LiveComm.exe version 17.4.9600.16384 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.  Process ID: 1270  Start Time: 01cf92593cc66062  Termination Time: 4294967295  Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe\LiveComm.exe  Report Id: 2e8a36e7-fe4d-11e3-bece-1c3e849b384b  Faulting package full name: microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe  Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 


Log: 'Application' Date/Time: 27/06/2014 4:12:10 AM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


Log: 'Application' Date/Time: 27/06/2014 4:10:57 AM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\dragon_support_packager.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 02/07/2014 6:52:37 PM
Type: Information Category: 0
Event: 10001 Source: Microsoft-Windows-RestartManager
Ending session 0 started ?2014?-?07?-?02T18:52:36.618658100Z.


Log: 'Application' Date/Time: 02/07/2014 6:52:36 PM
Type: Information Category: 0
Event: 10000 Source: Microsoft-Windows-RestartManager
Starting session 0 - ?2014?-?07?-?02T18:52:36.618658100Z.


Log: 'Application' Date/Time: 02/07/2014 6:52:37 PM
Type: Information Category: 0
Event: 1042 Source: MsiInstaller
Ending a Windows Installer transaction: C:\Users\Micah\AppData\Local\Google\Update\Install\{367C575E-3A28-44E1-8961-76C0DC9B3379}\googletalkpluginaccel.msi. Client Process Id: 7864.


Log: 'Application' Date/Time: 02/07/2014 6:52:37 PM
Type: Information Category: 0
Event: 1033 Source: MsiInstaller
Windows Installer installed the product. Product Name: Google Talk Plugin. Product Version: 5.4.2.18903. Product Language: 1033. Manufacturer: Google. Installation success or error status: 1603.


Log: 'Application' Date/Time: 02/07/2014 6:52:35 PM
Type: Information Category: 0
Event: 1040 Source: MsiInstaller
Beginning a Windows Installer transaction: C:\Users\Micah\AppData\Local\Google\Update\Install\{367C575E-3A28-44E1-8961-76C0DC9B3379}\googletalkpluginaccel.msi. Client Process Id: 7864.


Log: 'Application' Date/Time: 02/07/2014 6:33:07 PM
Type: Information Category: 0
Event: 0 Source: gupdate
The event description cannot be found.


Log: 'Application' Date/Time: 02/07/2014 6:27:12 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 6:27:10 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 6:27:10 PM
Type: Information Category: 0
Event: 0 Source: DragonSvc
Info: 3 scheduled task(s) pending 


Log: 'Application' Date/Time: 02/07/2014 5:30:51 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 5:10:02 PM
Type: Information Category: 0
Event: 0 Source: PlsvcV2
Service started successfully.


Log: 'Application' Date/Time: 02/07/2014 5:08:52 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 5:08:49 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 5:08:48 PM
Type: Information Category: 0
Event: 0 Source: DragonSvc
Info: 3 scheduled task(s) pending 


Log: 'Application' Date/Time: 02/07/2014 3:48:48 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 3:42:55 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 3:42:54 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 3:42:47 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


Log: 'Application' Date/Time: 02/07/2014 3:42:47 PM
Type: Information Category: 0
Event: 0 Source: DragonSvc
Info: 3 scheduled task(s) pending 


Log: 'Application' Date/Time: 02/07/2014 12:37:33 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 01/07/2014 7:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 6:52:25 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 6:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 9:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 8:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 7:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 6:52:58 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 6:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 5:33:01 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 4:33:01 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 3:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 2:33:00 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 01/07/2014 1:52:32 AM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 11:33:01 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 10:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 9:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 8:52:40 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 3:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 2:33:01 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


Log: 'Application' Date/Time: 30/06/2014 1:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 16/06/2014 12:40:13 AM
Type: Critical Category: 64
Event: 10115 Source: Microsoft-Windows-DriverFrameworks-UserMode
The device Apple iPhone (location Port_#0004.Hub_#0005) is offline due to a user-mode driver crash.  Windows will attempt to restart the device 5 more times in its own process.  Please contact the device manufacturer for more information about this problem.


Log: 'System' Date/Time: 16/06/2014 12:40:13 AM
Type: Critical Category: 64
Event: 10110 Source: Microsoft-Windows-DriverFrameworks-UserMode
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated.  This may temporarily interrupt your ability to access the devices.


Log: 'System' Date/Time: 16/06/2014 12:39:13 AM
Type: Critical Category: 64
Event: 10116 Source: Microsoft-Windows-DriverFrameworks-UserMode
The device Apple iPhone (location Port_#0004.Hub_#0005) is offline due to a user-mode driver crash.  Windows will attempt to restart the device in the shared process 1 more times before moving the device in its own process.  Please contact the device manufacturer for more information about this problem.


Log: 'System' Date/Time: 16/06/2014 12:39:13 AM
Type: Critical Category: 64
Event: 10110 Source: Microsoft-Windows-DriverFrameworks-UserMode
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated.  This may temporarily interrupt your ability to access the devices.


Log: 'System' Date/Time: 02/04/2014 7:50:37 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.


Log: 'System' Date/Time: 02/04/2014 7:47:10 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.


Log: 'System' Date/Time: 09/12/2013 7:55:23 PM
Type: Critical Category: 173
Event: 142 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error is caused because the system stopped responding and the hardware watchdog triggered a system reset.


Log: 'System' Date/Time: 09/12/2013 7:55:23 PM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.


Log: 'System' Date/Time: 25/11/2013 7:38:12 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.


Log: 'System' Date/Time: 08/11/2013 7:23:48 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 02/07/2014 5:08:59 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 02/07/2014 12:32:45 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 02/07/2014 7:34:28 AM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 02/07/2014 3:31:08 AM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 01/07/2014 11:25:59 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 01/07/2014 7:33:00 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 7:33:00 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 6:52:25 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 6:52:25 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 6:36:20 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 01/07/2014 6:33:00 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 6:33:00 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 9:54:52 AM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The PlsvcV2 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.


Log: 'System' Date/Time: 01/07/2014 9:33:00 AM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 9:33:00 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 8:33:00 AM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 8:33:00 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 7:33:00 AM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


Log: 'System' Date/Time: 01/07/2014 7:33:00 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Windows Installer service failed to start due to the following error:  The system cannot find the file specified.


Log: 'System' Date/Time: 01/07/2014 6:52:58 AM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "2" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 02/07/2014 6:27:12 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Power-Troubleshooter
The system has returned from a low power state.  Sleep Time: ?2014?-?07?-?02T17:30:49.013573500Z Wake Time: ?2014?-?07?-?02T18:27:10.804096300Z  Wake Source: Device -ACPI Lid


Log: 'System' Date/Time: 02/07/2014 6:27:08 PM
Type: Information Category: 33
Event: 131 Source: Microsoft-Windows-Kernel-Power
Firmware S3 times. ResumeCount: 19, FullResume: 440, AverageResume: 438


Log: 'System' Date/Time: 02/07/2014 6:27:07 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Kernel-General
The system time has changed to ?2014?-?07?-?02T18:27:07.500000000Z from ?2014?-?07?-?02T17:30:52.904207200Z.  Change Reason: System time synchronized with the hardware clock.


Log: 'System' Date/Time: 02/07/2014 5:30:51 PM
Type: Information Category: 64
Event: 42 Source: Microsoft-Windows-Kernel-Power
The system is entering sleep.  Sleep Reason: Button or Lid


Log: 'System' Date/Time: 02/07/2014 5:30:51 PM
Type: Information Category: 0
Event: 8033 Source: BROWSER
The browser has forced an election on network \Device\NetBT_Tcpip_{6D8DD44A-B54F-4D3E-B5B2-28304BFCD113} because a master browser was stopped.


Log: 'System' Date/Time: 02/07/2014 5:08:52 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Power-Troubleshooter
The system has returned from a low power state.  Sleep Time: ?2014?-?07?-?02T15:48:47.474886700Z Wake Time: ?2014?-?07?-?02T17:08:49.197756700Z  Wake Source: Device -ACPI Lid


Log: 'System' Date/Time: 02/07/2014 5:08:51 PM
Type: Information Category: 0
Event: 6013 Source: EventLog
The system uptime is 411976 seconds.


Log: 'System' Date/Time: 02/07/2014 5:08:49 PM
Type: Information Category: 33
Event: 131 Source: Microsoft-Windows-Kernel-Power
Firmware S3 times. ResumeCount: 18, FullResume: 439, AverageResume: 438


Log: 'System' Date/Time: 02/07/2014 5:08:48 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Kernel-General
The system time has changed to ?2014?-?07?-?02T17:08:48.500000000Z from ?2014?-?07?-?02T15:48:50.461524800Z.  Change Reason: System time synchronized with the hardware clock.


Log: 'System' Date/Time: 02/07/2014 3:48:49 PM
Type: Information Category: 64
Event: 42 Source: Microsoft-Windows-Kernel-Power
The system is entering sleep.  Sleep Reason: Button or Lid


Log: 'System' Date/Time: 02/07/2014 3:48:49 PM
Type: Information Category: 0
Event: 8033 Source: BROWSER
The browser has forced an election on network \Device\NetBT_Tcpip_{6D8DD44A-B54F-4D3E-B5B2-28304BFCD113} because a master browser was stopped.


Log: 'System' Date/Time: 02/07/2014 3:42:51 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Power-Troubleshooter
The system has returned from a low power state.  Sleep Time: ?2014?-?07?-?02T12:37:31.709178800Z Wake Time: ?2014?-?07?-?02T15:42:48.053210000Z  Wake Source: Device -ACPI Lid


Log: 'System' Date/Time: 02/07/2014 3:42:47 PM
Type: Information Category: 33
Event: 131 Source: Microsoft-Windows-Kernel-Power
Firmware S3 times. ResumeCount: 17, FullResume: 441, AverageResume: 438


Log: 'System' Date/Time: 02/07/2014 3:42:47 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Kernel-General
The system time has changed to ?2014?-?07?-?02T15:42:47.500000000Z from ?2014?-?07?-?02T12:37:34.639159700Z.  Change Reason: System time synchronized with the hardware clock.


Log: 'System' Date/Time: 02/07/2014 12:37:33 PM
Type: Information Category: 64
Event: 42 Source: Microsoft-Windows-Kernel-Power
The system is entering sleep.  Sleep Reason: Button or Lid


Log: 'System' Date/Time: 02/07/2014 12:37:33 PM
Type: Information Category: 0
Event: 8033 Source: BROWSER
The browser has forced an election on network \Device\NetBT_Tcpip_{6D8DD44A-B54F-4D3E-B5B2-28304BFCD113} because a master browser was stopped.


Log: 'System' Date/Time: 02/07/2014 12:29:53 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Power-Troubleshooter
The system has returned from a low power state.  Sleep Time: ?2014?-?07?-?02T09:02:28.273030200Z Wake Time: ?2014?-?07?-?02T12:29:50.911868500Z  Wake Source: Device -ACPI Lid


Log: 'System' Date/Time: 02/07/2014 12:29:50 PM
Type: Information Category: 33
Event: 131 Source: Microsoft-Windows-Kernel-Power
Firmware S3 times. ResumeCount: 16, FullResume: 439, AverageResume: 438


Log: 'System' Date/Time: 02/07/2014 12:29:46 PM
Type: Information Category: 0
Event: 1 Source: Microsoft-Windows-Kernel-General
The system time has changed to ?2014?-?07?-?02T12:29:46.500000000Z from ?2014?-?07?-?02T09:02:33.930959400Z.  Change Reason: System time synchronized with the hardware clock.


Log: 'System' Date/Time: 02/07/2014 9:02:32 AM
Type: Information Category: 64
Event: 42 Source: Microsoft-Windows-Kernel-Power
The system is entering sleep.  Sleep Reason: Button or Lid


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 02/07/2014 6:27:10 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 6:27:10 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 02/07/2014 5:08:49 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 5:08:49 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 02/07/2014 3:42:48 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 3:42:48 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 02/07/2014 12:29:47 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 12:29:47 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 02/07/2014 7:10:26 AM
Type: Warning Category: 1014
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name win8.ipv6.microsoft.com. timed out after none of the configured DNS servers responded.


Log: 'System' Date/Time: 02/07/2014 7:10:18 AM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 7:10:18 AM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 02/07/2014 3:26:08 AM
Type: Warning Category: 0
Event: 4 Source: Microsoft-Windows-FilterManager
File System Filter 'CFRMD' (Version 6.1, ?2012?-?07?-?17T01:05:37.000000000Z) failed to attach to volume '\Device\Harddisk0\DR0'.  The filter returned a non-standard final status of 0xC01C0016.  This filter and/or its supporting applications should handle this condition.  If this condition persists, contact the vendor.


Log: 'System' Date/Time: 02/07/2014 1:27:40 AM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 02/07/2014 1:27:40 AM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 01/07/2014 11:23:06 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 01/07/2014 11:23:06 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 01/07/2014 8:51:43 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 01/07/2014 8:51:43 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000).


Log: 'System' Date/Time: 01/07/2014 8:45:02 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv4 0x00000000).


Log: 'System' Date/Time: 01/07/2014 8:45:02 PM
Type: Warning Category: 0
Event: 4291 Source: Tcpip
The network adapter with hardware address 1C-3E-84-9B-38-4B has indicated packet coalescing capability without indicating support for one or more prerequisite receive filter capabilities (IPv6 0x00000000). [/indent]
 
Last edited by a moderator:
Hello,

I have compared your machine's values to the ones on my machine and on two Virtual machines I have for Win8.1 x64 and x86. To see how they compare. There are a few differences:

Your System:
Code:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver
RequiredPrivileges    REG_MULTI_SZ    SeTcbPrivilege\0SeCreatePagefilePrivilege\0SeLockMemoryPrivilege\0SeIncreaseBasePriorityPrivilege\0SeCreatePermanentPrivilege\0SeAuditPrivilege\0SeSecurityPrivilege\0SeChangeNotifyPrivilege\0SeProfileSingleProcessPrivilege\0SeImpersonatePrivilege\0SeCreateGlobalPrivilege\0SeAssignPrimaryTokenPrivilege\0SeRestorePrivilege\0SeIncreaseQuotaPrivilege\0SeShutdownPrivilege\0SeTakeOwnershipPrivilege\0SeLoadDriverPrivilege

My ones:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver
SeTcbPrivilege\0SeCreatePagefilePrivilege\0SeLockMemoryPrivilege\0SeIncreaseBasePriorityPrivilege\0SeCreatePermanentPrivilege\0SeAuditPrivilege\0SeSecurityPrivilege\0SeChangeNotifyPrivilege\0SeProfileSingleProcessPrivilege\0SeImpersonatePrivilege\0SeCreateGlobalPrivilege\0SeAssignPrimaryTokenPrivilege\0SeRestorePrivilege\0SeIncreaseQuotaPrivilege\0SeShutdownPrivilege\0SeTakeOwnershipPrivilege\0SeLoadDriverPrivilege\0SeBackupPrivilege\0SeCreateSymbolicLinkPrivilege

At the end of my value has 0SeBackupPrivilege\0SeCreateSymbolicLinkPrivilege


None of my machines have this reg entry

Code:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Enum
    0    REG_SZ    Root\LEGACY_MSISERVER\0000
    Count    REG_DWORD    0x1
    NextInstance    REG_DWORD    0x1

But it looks like this one may be from one of the fixes you did to try and resolve this issue.

Looking at the event log you I can see these issues, which are coming from MsiInstaller

Log: 'Application' Date/Time: 02/07/2014 6:52:36 PM
Type: Error Category: 0
Event: 11719 Source: MsiInstaller
Product: Google Talk Plugin -- Error 1719. The Windows Installer Service could not be accessed.


Error 1719 = Indicates some cause of corruption with the file.


Log: 'Application' Date/Time: 02/07/2014 6:52:37 PM
Type: Information Category: 0
Event: 1033 Source: MsiInstaller
Windows Installer installed the product. Product Name: Google Talk Plugin. Product Version: 5.4.2.18903. Product Language: 1033. Manufacturer: Google. Installation success or error status: 1603.

The above in read indicates one of the following
  • The folder your running the installer from is encrypted
  • The SYSTEM account doesn't have Full Control permissions of where the system is trying to install. The SYSTEM account has to have full control as the Installer Service runs under the user SYSTEM.
Out of the two the second would be the most likely.

But looking here:

Log: 'Application' Date/Time: 01/07/2014 6:33:00 PM
Type: Warning Category: 0
Event: 1015 Source: MsiInstaller
Failed to connect to server. Error: 0x80070002

Looking up the following error message means

Code:
COR_E_FILENOTFOUND                                            corerror.h
Code:
0x80070002 	-2147024894 	ERROR_FILE_NOT_FOUND 	The System cannot find the file specified

It looks like it is either going to be an issue of the file missing or a permissions error.

Firstly lets run SFC to see if there are some System Corruptions

SFC /SCANNOW

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with rest of the steps.

Convert CBS.log to CBS.txt

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run => Inside the run box copy and paste the following command:
    Code:
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  3. Press Enter
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or ge.tt


If these are not fixed up by SFC /SCANNOW we will be able to try another approach.
 
Sorry I didn't respond yesterday, but I didn't get an email. I just looked today. But, here is the file.

CBS

I hope all of you have had a good 4th. I know I did.
 
Hello mjthomp95,

I live in Australia, we do celebrate the 4th of July, its good to hear you did though :)

Code:
2014-07-04 21:08:33, Info                  CSI    0000084f [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-07-04 21:08:34, Info                  CSI    00000850 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
  Found: {l:32 b:rICax8c8PrQkyXWZHTypAVE+rGX7xnPAM+RDHLI0fcc=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}

There is a file corruption on machine for ile:
\SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB

Lets fix this up first please

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC /SCANNOW

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with rest of the steps.

Convert CBS.log to CBS.txt

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run => Inside the run box copy and paste the following command:
    Code:
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  3. Press Enter
  4. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or ge.tt


Are you able to run installers again?
 
Oh I totally missed your Australian flag. But at least I hope you have a good day since it's like 7 or 8 am there.

Here is the txt file:
Code:
 SFCFix version 2.3.0.0 by niemiro.Start time: 2014-07-05 08:00:43.522
Using .zip script file at C:\Users\Micah\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB


Successfully copied file C:\Users\Micah\AppData\Local\niemiro\Archive\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB to C:\WINDOWS\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB.


Successfully restored ownership for C:\WINDOWS\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.16384_none_9590ba64d5b91f79\Amd64\CNBJ2530.DPB
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 2.3.0.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2014-07-05 08:00:45.887
Script hash: b0HrGK1tb6Ghaao5gKyCVxNIuVTBv8DhAc7RyUId1Ms=
----------------------EOF-----------------------


Also Here is the new CBS File:

CBS2

I'm still not able to install anything. Either a .exe file or a .msi file. Though I was able to update mumble, which was through a .msi file but I don't know if that is because it doesn't load windows installer service or not.
 
The corrupt file appears to be fixed now, which is good.

First thing now is to back up your current registry, just in case something goes wrong.

Registry backup Windows 8

  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Run -> Inside the run box type in Regedit -> Press ok
  3. When prompt by the UAC press OK
  4. Click on File -> Export -> Select Export range to All -> Name the backup Regbackup

Registry Fix
Right click on the
aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
button -> Click on Run -> type in Notepad
Inside the notepad file copy and paste everything from below:
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver]
"DisplayName"="@%SystemRoot%\\system32\\msimsg.dll,-27"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,\
  00,73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,\
  56,00,00,00
"Start"=dword:00000003
"Type"=dword:00000010
"Description"="@%SystemRoot%\\system32\\msimsg.dll,-32"
"DependOnService"=hex(7):72,00,70,00,63,00,73,00,73,00,00,00,00,00
"ObjectName"="LocalSystem"
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,54,00,63,00,62,00,50,00,72,00,69,00,76,\
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,\
  74,00,65,00,50,00,61,00,67,00,65,00,66,00,69,00,6c,00,65,00,50,00,72,00,69,\
  00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,4c,00,6f,00,63,00,\
  6b,00,4d,00,65,00,6d,00,6f,00,72,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,\
  00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6e,00,63,00,72,00,65,00,61,00,\
  73,00,65,00,42,00,61,00,73,00,65,00,50,00,72,00,69,00,6f,00,72,00,69,00,74,\
  00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,\
  65,00,43,00,72,00,65,00,61,00,74,00,65,00,50,00,65,00,72,00,6d,00,61,00,6e,\
  00,65,00,6e,00,74,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
  00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\
  00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,53,00,65,00,63,00,75,00,72,00,\
  69,00,74,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,\
  00,53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,00,6f,00,74,00,69,00,\
  66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,\
  00,65,00,50,00,72,00,6f,00,66,00,69,00,6c,00,65,00,53,00,69,00,6e,00,67,00,\
  6c,00,65,00,50,00,72,00,6f,00,63,00,65,00,73,00,73,00,50,00,72,00,69,00,76,\
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,\
  72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,\
  00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,\
  47,00,6c,00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,\
  00,67,00,65,00,00,00,53,00,65,00,41,00,73,00,73,00,69,00,67,00,6e,00,50,00,\
  72,00,69,00,6d,00,61,00,72,00,79,00,54,00,6f,00,6b,00,65,00,6e,00,50,00,72,\
  00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,52,00,65,00,\
  73,00,74,00,6f,00,72,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,\
  00,65,00,00,00,53,00,65,00,49,00,6e,00,63,00,72,00,65,00,61,00,73,00,65,00,\
  51,00,75,00,6f,00,74,00,61,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,\
  00,65,00,00,00,53,00,65,00,53,00,68,00,75,00,74,00,64,00,6f,00,77,00,6e,00,\
  50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,54,\
  00,61,00,6b,00,65,00,4f,00,77,00,6e,00,65,00,72,00,73,00,68,00,69,00,70,00,\
  50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,4c,\
  00,6f,00,61,00,64,00,44,00,72,00,69,00,76,00,65,00,72,00,50,00,72,00,69,00,\
  76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,42,00,61,00,63,00,6b,\
  00,75,00,70,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\
  53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,53,00,79,00,6d,00,62,00,6f,\
  00,6c,00,69,00,63,00,4c,00,69,00,6e,00,6b,00,50,00,72,00,69,00,76,00,69,00,\
  6c,00,65,00,67,00,65,00,00,00,00,00
"FailureActions"=hex:84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Security]
"Security"=hex:01,00,14,80,b4,00,00,00,d4,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,84,00,05,00,00,00,00,00,28,00,ff,01,0f,00,01,06,00,00,00,00,00,\
  05,50,00,00,00,b5,89,fb,38,19,84,c2,cb,5c,6c,23,6d,57,00,77,6e,c0,02,64,87,\
  00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,18,00,fd,\
  01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,14,00,9d,01,\
  02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,14,00,9d,01,02,00,01,01,00,\
  00,00,00,00,05,06,00,00,00,01,06,00,00,00,00,00,05,50,00,00,00,b5,89,fb,38,\
  19,84,c2,cb,5c,6c,23,6d,57,00,77,6e,c0,02,64,87,01,06,00,00,00,00,00,05,50,\
  00,00,00,b5,89,fb,38,19,84,c2,cb,5c,6c,23,6d,57,00,77,6e,c0,02,64,87

Click on File -> Save As -> Save the file to your desktop and name it fix.regand change Save as type to All Files (*.*)

Go yo your desktop and double click on fix.reg -> Click on yes when prompt to merge into the registry.

Now lets restart the computer, but by doing this:
Right click on the
aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
button -> Click on Run -> type in shutdown /s /f /t 0 press OK

Once the computer is up again try and run an installer. If it fails can you run that batch file for me again and post the results?
 
  1. Right click on the
    aa922834-ed43-40f1-8830-d5507badb56c_39.jpg
    button
  2. Click on Command prompt (Admin) => Press Yes on the prompt
  3. Inside the Command Prompt windows copy and paste the following command's one by one. When one has finished move onto the next
    dir *msimsg* /s >123
    dir *msiexec* /s >>123
    reg query "HKLM\SYSTEM\CurrentControlSet\Services\msiserver" /s >>123
    powershell.exe
    get-acl HKLM:\SYSTEM\CurrentControlSet\Services\msiserver | format-list >>123
    notepad 123

  4. Please post the contents of 123 back into this thread

Sorry these instructions are not the easiest. I am just doing a few different things at once.
 
Here is the contents of 123:

Code:
 Volume in drive C is Windows Volume Serial Number is 7EEA-DDF5


 Directory of C:\WINDOWS\system32


08/22/2013  07:44 AM            25,088 msimsg.dll
               1 File(s)         25,088 bytes


 Directory of C:\WINDOWS\system32\ar-SA


08/22/2013  08:29 AM            70,144 msimsg.dll.mui
               1 File(s)         70,144 bytes


 Directory of C:\WINDOWS\system32\bg-BG


08/22/2013  08:29 AM            90,624 msimsg.dll.mui
               1 File(s)         90,624 bytes


 Directory of C:\WINDOWS\system32\cs-CZ


08/22/2013  08:29 AM            83,968 msimsg.dll.mui
               1 File(s)         83,968 bytes


 Directory of C:\WINDOWS\system32\da-DK


08/22/2013  08:29 AM            83,456 msimsg.dll.mui
               1 File(s)         83,456 bytes


 Directory of C:\WINDOWS\system32\de-DE


08/22/2013  08:29 AM            98,304 msimsg.dll.mui
               1 File(s)         98,304 bytes


 Directory of C:\WINDOWS\system32\el-GR


08/22/2013  08:29 AM            98,304 msimsg.dll.mui
               1 File(s)         98,304 bytes


 Directory of C:\WINDOWS\system32\en-GB


08/22/2013  08:29 AM            79,360 msimsg.dll.mui
               1 File(s)         79,360 bytes


 Directory of C:\WINDOWS\system32\en-US


08/22/2013  08:29 AM            79,360 msimsg.dll.mui
               1 File(s)         79,360 bytes


 Directory of C:\WINDOWS\system32\es-ES


08/22/2013  08:29 AM            91,648 msimsg.dll.mui
               1 File(s)         91,648 bytes


 Directory of C:\WINDOWS\system32\et-EE


08/22/2013  08:29 AM            79,360 msimsg.dll.mui
               1 File(s)         79,360 bytes


 Directory of C:\WINDOWS\system32\fi-FI


08/22/2013  08:29 AM            81,920 msimsg.dll.mui
               1 File(s)         81,920 bytes


 Directory of C:\WINDOWS\system32\fr-FR


08/22/2013  08:29 AM            95,232 msimsg.dll.mui
               1 File(s)         95,232 bytes


 Directory of C:\WINDOWS\system32\he-IL


08/22/2013  08:29 AM            67,072 msimsg.dll.mui
               1 File(s)         67,072 bytes


 Directory of C:\WINDOWS\system32\hr-HR


08/22/2013  08:29 AM            84,992 msimsg.dll.mui
               1 File(s)         84,992 bytes


 Directory of C:\WINDOWS\system32\hu-HU


08/22/2013  08:29 AM            86,528 msimsg.dll.mui
               1 File(s)         86,528 bytes


 Directory of C:\WINDOWS\system32\it-IT


08/22/2013  01:14 AM            94,720 msimsg.dll.mui
               1 File(s)         94,720 bytes


 Directory of C:\WINDOWS\system32\ja-JP


08/22/2013  01:14 AM            53,760 msimsg.dll.mui
               1 File(s)         53,760 bytes


 Directory of C:\WINDOWS\system32\ko-KR


08/22/2013  01:14 AM            50,688 msimsg.dll.mui
               1 File(s)         50,688 bytes


 Directory of C:\WINDOWS\system32\lt-LT


08/22/2013  01:14 AM            82,432 msimsg.dll.mui
               1 File(s)         82,432 bytes


 Directory of C:\WINDOWS\system32\lv-LV


08/22/2013  01:14 AM            83,968 msimsg.dll.mui
               1 File(s)         83,968 bytes


 Directory of C:\WINDOWS\system32\nb-NO


08/22/2013  01:14 AM            80,896 msimsg.dll.mui
               1 File(s)         80,896 bytes


 Directory of C:\WINDOWS\system32\nl-NL


08/22/2013  01:14 AM            91,648 msimsg.dll.mui
               1 File(s)         91,648 bytes


 Directory of C:\WINDOWS\system32\pl-PL


08/22/2013  08:29 AM            87,552 msimsg.dll.mui
               1 File(s)         87,552 bytes


 Directory of C:\WINDOWS\system32\pt-BR


08/22/2013  08:29 AM            87,040 msimsg.dll.mui
               1 File(s)         87,040 bytes


 Directory of C:\WINDOWS\system32\pt-PT


08/22/2013  08:29 AM            87,040 msimsg.dll.mui
               1 File(s)         87,040 bytes


 Directory of C:\WINDOWS\system32\ro-RO


08/22/2013  08:29 AM            86,528 msimsg.dll.mui
               1 File(s)         86,528 bytes


 Directory of C:\WINDOWS\system32\ru-RU


08/22/2013  08:29 AM            82,944 msimsg.dll.mui
               1 File(s)         82,944 bytes


 Directory of C:\WINDOWS\system32\sk-SK


08/22/2013  08:29 AM            86,016 msimsg.dll.mui
               1 File(s)         86,016 bytes


 Directory of C:\WINDOWS\system32\sl-SI


08/22/2013  08:29 AM            83,968 msimsg.dll.mui
               1 File(s)         83,968 bytes


 Directory of C:\WINDOWS\system32\sr-Latn-CS


08/22/2013  01:14 AM            87,040 msimsg.dll.mui
               1 File(s)         87,040 bytes


 Directory of C:\WINDOWS\system32\sr-Latn-RS


08/22/2013  01:14 AM            87,040 msimsg.dll.mui
               1 File(s)         87,040 bytes


 Directory of C:\WINDOWS\system32\sv-SE


08/22/2013  08:29 AM            83,456 msimsg.dll.mui
               1 File(s)         83,456 bytes


 Directory of C:\WINDOWS\system32\th-TH


08/22/2013  08:29 AM            78,336 msimsg.dll.mui
               1 File(s)         78,336 bytes


 Directory of C:\WINDOWS\system32\tr-TR


08/22/2013  08:29 AM            80,896 msimsg.dll.mui
               1 File(s)         80,896 bytes


 Directory of C:\WINDOWS\system32\uk-UA


08/22/2013  08:29 AM            82,944 msimsg.dll.mui
               1 File(s)         82,944 bytes


 Directory of C:\WINDOWS\system32\zh-CN


08/22/2013  08:29 AM            37,376 msimsg.dll.mui
               1 File(s)         37,376 bytes


 Directory of C:\WINDOWS\system32\zh-HK


08/22/2013  08:29 AM            36,864 msimsg.dll.mui
               1 File(s)         36,864 bytes


 Directory of C:\WINDOWS\system32\zh-TW


08/22/2013  08:29 AM            36,864 msimsg.dll.mui
               1 File(s)         36,864 bytes


     Total Files Listed:
              39 File(s)      3,045,376 bytes
               0 Dir(s)  531,416,842,240 bytes free
 Volume in drive C is Windows
 Volume Serial Number is 7EEA-DDF5


 Directory of C:\WINDOWS\system32


08/22/2013  07:23 AM            62,464 msiexec.exe
               1 File(s)         62,464 bytes


 Directory of C:\WINDOWS\system32\en-US


09/29/2013  11:47 PM             2,048 msiexec.exe.mui
               1 File(s)          2,048 bytes


     Total Files Listed:
               2 File(s)         64,512 bytes
               0 Dir(s)  531,416,842,240 bytes free


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver
    DisplayName    REG_SZ    @%SystemRoot%\system32\msimsg.dll,-27
    ErrorControl    REG_DWORD    0x1
    ImagePath    REG_EXPAND_SZ    %systemroot%\system32\msiexec.exe /V
    Start    REG_DWORD    0x3
    Type    REG_DWORD    0x10
    Description    REG_SZ    @%SystemRoot%\system32\msimsg.dll,-32
    DependOnService    REG_MULTI_SZ    rpcss
    ObjectName    REG_SZ    LocalSystem
    ServiceSidType    REG_DWORD    0x1
    RequiredPrivileges    REG_MULTI_SZ    SeTcbPrivilege\0SeCreatePagefilePrivilege\0SeLockMemoryPrivilege\0SeIncreaseBasePriorityPrivilege\0SeCreatePermanentPrivilege\0SeAuditPrivilege\0SeSecurityPrivilege\0SeChangeNotifyPrivilege\0SeProfileSingleProcessPrivilege\0SeImpersonatePrivilege\0SeCreateGlobalPrivilege\0SeAssignPrimaryTokenPrivilege\0SeRestorePrivilege\0SeIncreaseQuotaPrivilege\0SeShutdownPrivilege\0SeTakeOwnershipPrivilege\0SeLoadDriverPrivilege\0SeBackupPrivilege\0SeCreateSymbolicLinkPrivilege
    FailureActions    REG_BINARY    840300000000000000000000030000001400000001000000C0D4010001000000E09304000000000000000000


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Enum
    0    REG_SZ    Root\LEGACY_MSISERVER\0000
    Count    REG_DWORD    0x1
    NextInstance    REG_DWORD    0x1


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver\Security
    Security    REG_BINARY    01001480B4000000D4000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020084000500000000002800FF010F00010600000000000550000000B589FB381984C2CB5C6C236D5700776EC002648700001400FD01020001010000000000051200000000001800FD01020001020000000000052000000020020000000014009D010200010100000000000504000000000014009D010200010100000000000506000000010600000000000550000000B589FB381984C2CB5C6C236D5700776EC0026487010600000000000550000000B589FB381984C2CB5C6C236D5700776EC0026487




 
 
 
 P a t h       :   M i c r o s o f t . P o w e r S h e l l . C o r e \ R e g i s t r y : : H K E Y _ L O C A L _ M A C H I N E \ S Y S T E M \ C u r r e n t C 
 
                   o n t r o l S e t \ S e r v i c e s \ m s i s e r v e r 
 
 O w n e r     :   N T   A U T H O R I T Y \ S Y S T E M 
 
 G r o u p     :   N T   A U T H O R I T Y \ S Y S T E M 
 
 A c c e s s   :   B U I L T I N \ U s e r s   A l l o w     R e a d K e y 
 
                   B U I L T I N \ U s e r s   A l l o w     - 2 1 4 7 4 8 3 6 4 8 
 
                   B U I L T I N \ A d m i n i s t r a t o r s   A l l o w     F u l l C o n t r o l 
 
                   B U I L T I N \ A d m i n i s t r a t o r s   A l l o w     2 6 8 4 3 5 4 5 6 
 
                   N T   A U T H O R I T Y \ S Y S T E M   A l l o w     F u l l C o n t r o l 
 
                   N T   A U T H O R I T Y \ S Y S T E M   A l l o w     2 6 8 4 3 5 4 5 6 
 
                   C R E A T O R   O W N E R   A l l o w     2 6 8 4 3 5 4 5 6 
 
                   A P P L I C A T I O N   P A C K A G E   A U T H O R I T Y \ A L L   A P P L I C A T I O N   P A C K A G E S   A l l o w     R e a d K e y 
 
                   A P P L I C A T I O N   P A C K A G E   A U T H O R I T Y \ A L L   A P P L I C A T I O N   P A C K A G E S   A l l o w     
 
                   - 2 1 4 7 4 8 3 6 4 8 
 
 A u d i t     :   
 
 S d d l       :   O : S Y G : S Y D : A I ( A ; I D ; K R ; ; ; B U ) ( A ; C I I O I D ; G R ; ; ; B U ) ( A ; I D ; K A ; ; ; B A ) ( A ; C I I O I D ; G A 
 
                   ; ; ; B A ) ( A ; I D ; K A ; ; ; S Y ) ( A ; C I I O I D ; G A ; ; ; S Y ) ( A ; C I I O I D ; G A ; ; ; C O ) ( A ; I D ; K R ; ; ; A C ) 
 
                   ( A ; C I I O I D ; G R ; ; ; A C )
 
All the values look correct and all the files are in the correct place.....

Please do the same as above but with these commands:
powershell.exe
get-acl C:\WINDOWS\system32\msimsg.dll | Format-List >3
get-acl C:\WINDOWS\system32\msiexec.exe | Format-List >3
Notepad 3


Process Monitor
  • Please go Here and download Process Monitor -> Save the file to your desktop.
  • Double click on Process Monitor -> Press Yes on the UAC -> you should now have a Filter box appeared -> Select Process Name in the first box -> Is in the second -> and msiexec.exe in the last -> press Ok
  • Now click on File -> Capture Events (make sure this is ticked)
  • Attempt to run a program you have been trying to install -> Once the install fails close out of the installer and go back into Process Monitor. You should now see a lot of events from process name msiexec.exe -> Click on File -> Save -> save the file to your desktop.
  • Now go to your desktop and you should see a file called Logfile.pml -> please but it in a Zip file -> and upload it for me to have a read. As the file is going to be quite big please use Dropbox or ge.tt.

Process Explorer

  • Please go Here and download Process Explorer ave the file to your desktop.
  • Double click on Process Monitor
  • Click on find -> Enter in C:\Windows\System32\msimsg.dll -> Press Search -> Post back with the results
  • Do the same for C:\WINDOWS\system32\msiexec.exe
 
Here is file 3:

Code:
Path   : Microsoft.PowerShell.Core\FileSystem::C:\WINDOWS\system32\msiexec.exeOwner  : NT SERVICE\TrustedInstaller
Group  : NT SERVICE\TrustedInstaller
Access : NT AUTHORITY\SYSTEM Allow  ReadAndExecute, Synchronize
         BUILTIN\Administrators Allow  ReadAndExecute, Synchronize
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
         NT SERVICE\TrustedInstaller Allow  FullControl
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-
         5-80-956008885-3418522649-1831038044-1853292631-2271478464D:PAI(A;;0x1
         200a9;;;SY)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;BU)(A;;FA;;;S-1-5-80-95600
         8885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;AC)

Here is the LogFile: LogFile1

Here are the search results for C:\Windows\System32\msimsg.dll: Zero matching items

Here are the search results for C:\WINDOWS\system32\msiexec.exe: Zero matching items

I hope I did the search right but I think I did, so I'm guessing it's not supposed to be zero matches.
 
No you did that right. If it returned results it meant that a process was using that particular file.

Can you please run this command again:

powershell.exe
get-acl C:\WINDOWS\system32\msimsg.dll | Format-List >4
Notepad 4


its going to take me while to gather the evidence that I find (Well hoping to find!) from Process Monitor. I should hopefully have a response for you by tomorrow.

Also lets just make sure this is not an issue with your profile. Please create a new Account with Admin access and attempt to run an installer
How to create a new user account in Windows 8
 
Here is the file 4:

Code:
 Path   : Microsoft.PowerShell.Core\FileSystem::C:\WINDOWS\system32\msimsg.dllOwner  : NT SERVICE\TrustedInstaller
Group  : NT SERVICE\TrustedInstaller
Access : NT AUTHORITY\SYSTEM Allow  ReadAndExecute, Synchronize
         BUILTIN\Administrators Allow  ReadAndExecute, Synchronize
         BUILTIN\Users Allow  ReadAndExecute, Synchronize
         NT SERVICE\TrustedInstaller Allow  FullControl
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         ReadAndExecute, Synchronize
Audit  : 
Sddl   : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-
         5-80-956008885-3418522649-1831038044-1853292631-2271478464D:PAI(A;;0x1
         200a9;;;SY)(A;;0x1200a9;;;BA)(A;;0x1200a9;;;BU)(A;;FA;;;S-1-5-80-95600
         8885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;AC)

Making a new account with admin access didn't work for either .exe files or .msi files.

If you can get something for me by tomorrow, that would be awesome, but there's no rush. I'm just glad I can finally get this fixed.
 
Code:
HKCU\Software\Policies\Microsoft\SystemCertificates\CA
HKLM\SOFTWARE\Microsoft\SystemCertificates\CA
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\CA
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA
HKLM\SOFTWARE\Microsoft\SystemCertificates\Root
HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Root
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root
HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot
HKCU\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople
HKCU\Software\Policies\Microsoft\SystemCertificates\trust
HKLM\SOFTWARE\Microsoft\SystemCertificates\trust
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\trust
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\trust
HKCU\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed
HKCU\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher
HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublisher
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPublisher

All the above lines msiexec failed on due to the error Access Denied.

lets take a look at some of these files now

Please do the same thing inside CMD but with these commands

powershell.exe
get-acl HKCU:\Software\Policies\Microsoft\SystemCertificates\ | Format-List >5
get-acl HKLM:\SOFTWARE\Microsoft\SystemCertificates | Format-List >>5
get-acl HKLM:\SOFTWARE\Policies\Microsoft\SystemCertificates\ | Format-List >>5
get-acl HKLM:\SOFTWARE\Microsoft\EnterpriseCertificates | Format-List >>5
get-acl HKCU:\Software\Policies\Microsoft\SystemCertificates\CA | Format-List >>5
get-acl HKLM:\SOFTWARE\Microsoft\SystemCertificates\AuthRoot | Format-List >>5
get-acl HKLM:\SOFTWARE\Microsoft\EnterpriseCertificates\CA | Format-List >>5
notepad 5
 
Here is the file 5:

Code:
 Path   : Microsoft.PowerShell.Core\Registry::HKEY_CURRENT_USER\Software\Policie         s\Microsoft\SystemCertificates\
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         NT AUTHORITY\RESTRICTED Allow  ReadKey
         LiveYourLife\Micah Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
Audit  : 
Sddl   : O:SYG:SYD:(A;OICIID;KA;;;SY)(A;OICIID;KA;;;BA)(A;OICIID;KR;;;RC)(A;OIC
         IID;KR;;;S-1-5-21-3815866866-889694404-697695019-1002)(A;OICIID;KR;;;A
         C)










Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Micros
         oft\SystemCertificates
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : BUILTIN\Users Allow  ReadKey
         BUILTIN\Users Allow  -2147483648
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Administrators Allow  268435456
         NT AUTHORITY\SYSTEM Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  268435456
         CREATOR OWNER Allow  268435456
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         -2147483648
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;KR;;;BU)(A;CIIOID;GR;;;BU)(A;ID;KA;;;BA)(A;CIIOID;GA
         ;;;BA)(A;ID;KA;;;SY)(A;CIIOID;GA;;;SY)(A;CIIOID;GA;;;CO)(A;ID;KR;;;AC)
         (A;CIIOID;GR;;;AC)










Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Polici
         es\Microsoft\SystemCertificates\
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : BUILTIN\Users Allow  ReadKey
         BUILTIN\Users Allow  -2147483648
         NT AUTHORITY\Authenticated Users Allow  ReadKey
         NT AUTHORITY\Authenticated Users Allow  -2147483648
         NT AUTHORITY\SYSTEM Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  268435456
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Administrators Allow  268435456
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         -2147483648
Audit  : 
Sddl   : O:SYG:SYD:AI(A;;KR;;;BU)(A;CIIO;GR;;;BU)(A;ID;KR;;;AU)(A;OICIIOID;GR;;
         ;AU)(A;ID;KA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;KA;;;BA)(A;OICIIOID;GA;;;B
         A)(A;ID;KR;;;AC)(A;OICIIOID;GR;;;AC)










Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Micros
         oft\EnterpriseCertificates
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : CREATOR OWNER Allow  268435456
         NT AUTHORITY\SYSTEM Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  268435456
         NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  268435456
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Users Allow  -2147483648
         BUILTIN\Users Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         -2147483648
Audit  : 
Sddl   : O:SYG:SYD:PAI(A;CIIO;GA;;;CO)(A;;KA;;;SY)(A;CIIO;GA;;;SY)(A;;KA;;;SY)(
         A;CIIO;GA;;;BA)(A;;KA;;;BA)(A;CIIO;GR;;;BU)(A;;KR;;;BU)(A;;KR;;;AC)(A;
         CIIO;GR;;;AC)










Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Micros
         oft\EnterpriseCertificates\CA
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : BUILTIN\Users Allow  ReadKey
         BUILTIN\Users Allow  -2147483648
         BUILTIN\Administrators Allow  FullControl
         BUILTIN\Administrators Allow  268435456
         NT AUTHORITY\SYSTEM Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  268435456
         CREATOR OWNER Allow  268435456
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  
         -2147483648
Audit  : 
Sddl   : O:SYG:SYD:AI(A;ID;KR;;;BU)(A;CIIOID;GR;;;BU)(A;ID;KA;;;BA)(A;CIIOID;GA
         ;;;BA)(A;ID;KA;;;SY)(A;CIIOID;GA;;;SY)(A;CIIOID;GA;;;CO)(A;ID;KR;;;AC)
         (A;CIIOID;GR;;;AC)
 
What are all the security program you currently have installed? or have had installed in the past?

Also please Please click on the Start button -> And type Services.msc (you can start typing this as soon as the start menu opens) -> right click on Services.msc -> Choose Run as Admin

Scroll down until you find Remote Procedure Call (RPC) -> Double click on this service-> What is the Service Status set too? It should say 'Running' -> What is the startup type? it should be Automatic -> Press OK

Now find DCOM Server Process Launcher
-Start type should be Automatic
-Service status should be running

Now find RPC Endpoint Mapper
-Start type should be Automatic
-Service status should be running

let me know the settings for all three services please and if anything is currently set different to what I have posted.
 
Last edited:
Back
Top