New
#21
Gotcha!
I'll leave it to Tom, ;cos he's the expert on these :)
Thanks Noel.
Hmm, now this is an intriguing one. Looking at the error, it shows that the SURT is hiccuping with a registry key:
The latter of the three is obviously corrupt (bitflip), but when I look at the key name in your components hive, it is named normally:Code:(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3 identity and keyform do not match; keyform is wrong. (f) CSI Corrupt Component Keyform 0x00000000 identity amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6 identity and keyform do not match; keyform is wrong. (f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3 identity and keyform do not match; keyform is wrong.
Ignoring that one, I decided to look at the other two. The SURT doesn't like the keyform and the identity as apparently, they don't match. So I converted the identity to ASCII (from hex) and compared it to the key name:Code:amd64_server-help-chm.applocker_help_31bf3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3
amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6.1.7600.16385_none_d1291f85838378a3
Server-Help-CHM.pmc_lh, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
They aren't meant to be identical, but all of the identity matches the key name.
I think I need to take a look at what's calling the registry, so see if that's looking in the wrong place.
Could you navigate to the following folder:
C:\Windows\winsxs\Manifests
And copy all of the following files to your Desktop:
amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3
amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6
amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3 (I'm not sure whether the red character will be an apostrophe or the letter b - choose whichever is there, or both if that's the case)
Then zip these up and attach it to your next post please :)
Tom
Wow Tom.... I've been places I never knew existed before??? lol
Hopefully, the zipped files are what you'rer after?
Trevor
Oh Do dahs!!!
Only one uploaded, even though I selected the three of them :-(
Hopefully, the other two?
Tom - if you do a search on "cce3123abaed13c3" in the file, it is actually present in two lines (in Notepad++)
The first shows as ....
The second shows asCode:amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3++++ Server-Help-CHM.applocker_help, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Code:amd64_server-help-chm.applocker_help_31bf3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3+++++ Server-Help-CHM.applocker_help, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Hi Trevor,
Noel posted whilst I was typing this. Ignore this all for now!
What file was that in Noel? I'm still missing the corruption
lol, well I'm glad you're learning something then :)
This just isn't playing nicely at all! There's nothing wrong with those files. The name is correct, as is the contents.
Let's go for a much broader approach - scan your whole registry and hard drive for those names to see where they are! First of all, you will have to load your COMPONENTS hive. Method 2 of this:
Accessing the COMPONENTS sub-hive | niemiro's Website
Ignore the Winners section, it isn't needed here.
System Look
Please download SystemLook from one of the links below and save it to your Desktop.
- Double-click SystemLook.exe to run it.
- Copy the content of the following codebox into the main textfield:
Code::filefind *amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3* :regfind *amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3*- Click the Look button to start the scan.
- When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Tom
In the Components file - open it In Notepad++, it's line 10932
The second version is in line 19020
Thanks Noel. I must have been looking at the wrong COMPONENTS hive then, I'm sure I searched for those exact strings and nothing came up, yet when I try now there's keys there. I need to organise my components collection!
One was in DerivedData and the other was in DerivedData\VersionIndex which I've never seen before. I didn't even know it existed before today!
Trevor, could you download this file:
https://dl.dropbox.com/u/16537616/TrevorComponents.zip
Extract it to your Desktop. There should be one file inside called COMPONENTS (no extension). Then navigate to:
C:\Windows\system32\config\
And rename the COMPONENTS file in there to COMPONENTS.old
Then copy and paste the COMPONENTS file on your Desktop to the config folder :)
Reboot, run the SURT and post the CheckSUR.persist.log please!
Tom
Right, I've copied and pasted the latest COMPONENTS file into C:\windows\system\32\config\ as directed, (renaming the original one, but can't find the instructions to run the SURT so I can post the log :-(
I believe it was posted on another thread :-(
Mind you, I was a little concerned as on start-up the welcome screen 'hung' for about 10 seconds longer than before!!
Trevor