CheckSUR file - CBS MUM Corrupt 0x800F0900

ClareLox · Jan 26, 2013

Hi- this time the scannow ran and said it fixed the corrupt files. I've also run Windows Update and it installed the update that it hadn't managed to install initially - so this looks like it is fixed.

CBS.log is attached.

Is there anything left to do around the Group Policy error - I've not checked this one yet.

Thanks for everything so far!!

ClareLox · Jan 26, 2013

just to confirm the group policy error is still there but the update issue is resolved - all updates now successfully installed.

NoelDP · Jan 26, 2013

There's still that odd manifest error....

Code:

2013-01-26 19:32:21, Info                  CSI    000002ea Unable to load manifest for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3"
2013-01-26 19:32:21, Info                  CSI    000002eb [SR] Cannot verify component files for Microsoft-Windows-DriverFrameworks-UserMode.Resources, Version = 6.1.7601.17803, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (TRUE)
2013-01-26 19:32:21, Info                  CSI    000002ec Manifest hash for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3" does not match expected value. 
 Expected:{l:32 b:010fc89c5d8c6dd9d51b722e9f981fcc65cbb37a3228cbb184a47ff84bb81df2}
 Found:{l:32 b:a11937f356a9b0ba592c82f5290bac8016cb33a3f9bc68d3490147c158ebb10d}.
2013-01-26 19:32:21, Info                  CSI    000002ed Unable to load manifest for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3"
2013-01-26 19:32:21, Info                  CSI    000002ee [SR] Recovered manifest from backup for Microsoft-Windows-DriverFrameworks-UserMode.Resources, Version = 6.1.7601.17803, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2013-01-26 19:32:21, Info                  CSI    000002ef Repair results created:
POQ 123 starts:
     0: Create File: File = [l:278{139}]"\SystemRoot\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest", Attributes = 00000080
    1: Move File: Source = [l:364{182}]"\SystemRoot\WinSxS\Temp\PendingRenames\af5e0fdcfbfbcd01f3350000500f6c0f.amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest", Destination = [l:278{139}]"\SystemRoot\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest"
POQ 123 ends.
2013-01-26 19:32:21, Info                  CSI    000002f0 [SR] Repair complete

I'm not sure exactly how to deal with that - I'll ask someone else to have a look and see if they have any ideas.

ClareLox · Feb 4, 2013

Noel - just wondered if you had had any further suggestions or any other thoughts on how I should address this "cannot access group policy client service" error for normal user log-ons?

Thanks
Clare

NoelDP · Feb 4, 2013

Sorry - I seem to have been neglecting you

I think I remember seeing a reference to a similar problem elsewhere - let me see what I can find.....

let's see what this tells us...

Open an Elevated Command Prompt, and run the following commands....

NET START GPSVC
SC QC GPSVC
SC QUERYEX GPSVC
SC QPRIVS GPSVC
SV SDSHOW GPSVC

post the results.

(I'll remind my contact about the manifests problem in the CBS log.)

tom982 · Feb 4, 2013

(I'll remind my contact about the manifests problem in the CBS log.)

Oops!

I'm off to bed now, but I'll try and reply before tomorrow's lectures.

So sorry for the delay Clare! You wouldn't believe how easy it is for a thread to be lost into the darkness when we handle so many per day.

ClareLox · Feb 9, 2013

Thanks - here is a copy from the screen - as ever, much appreciated - hope it helps? Thanks, Clare

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Admin>NET START GPSVC
System error 5 has occurred.
Access is denied.

C:\Users\Admin>SC QC GPSVC
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: GPSVC
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k GPSvcGroup
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : Group Policy Client
DEPENDENCIES : RPCSS
: Mup
SERVICE_START_NAME : LocalSystem
C:\Users\Admin>SC QUERYEX GPSVC
SERVICE_NAME: GPSVC
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :
C:\Users\Admin>SC QPRIVS GPSVC
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: GPSVC
PRIVILEGES : SeImpersonatePrivilege
: SeTcbPrivilege
: SeTakeOwnershipPrivilege
: SeIncreaseQuotaPrivilege
: SeAssignPrimaryTokenPrivilege
: SeSecurityPrivilege
: SeChangeNotifyPrivilege
: SeCreatePermanentPrivilege
: SeShutdownPrivilege
: SeLoadDriverPrivilege
: SeRestorePrivilege
: SeBackupPrivilege
C:\Users\Admin>SV SDSHOW GPSVC
'SV' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\Admin>

NoelDP · Feb 9, 2013

That looks normal to me - I'd forgotten that you're using Home Premium, which doesn't have access to gpsvc (which is probably the problem

- something is attempting to apply policies which are available in Home Premium. )

I'll have a think...

tom982 · Feb 9, 2013

Hi Clare,

Sorry I wasn't able to post when I hoped to - I've been hit by a horrible cold over the past two weeks and it's completely draining me. Would you mind zipping up and attaching this file for me please:

C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest

Tom

ClareLox · Mar 4, 2013

Hi Tom,

Apologies for the delay - attached is the file you requested.

Many thanks for looking into this.

Thanks
Clare

tom982 · Mar 4, 2013

Hi Clare,

Thanks for the file. Strangely, it is intact contrary to what SFC is reporting.

I'm completely lost here, have you got any more ideas Noel? The only thing that strikes me as odd is the attributes in the CBS log:

Code:

0: Create File: File = [l:278{139}]"\SystemRoot\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest", Attributes = 00000080

00000080 is the hex flag marker for "LO" Directory Object List Object 0x00000080, whatever that means

Tom

NoelDP · Mar 4, 2013

I think we'd better have a new SFC scan and CBS.log - the last one is 5+ weeks old

Clare - can you please run another SFC /SCANNOW , and post the new CBS.log file?

What I do see in the last CBS is

Code:

 Line 6994: 2013-01-14 17:10:09, Error                 CSI    00000086 (F) Unable to load manifest for component [ml:280{140},l:200{100}]"amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260"[gle=[B]0x80004005][/B]
 Line 6995: 2013-01-14 17:10:09, Error                 CSI    00000087@2013/1/14:17:10:09.840 (F) d:\win7sp1_gdr\base\wcp\componentstore\storelayout.cpp(2714): Store corruption detected in function ComponentStore::CRawStoreLayout::FetchManifestContent expression: 0
 Line 7001: 2013-01-14 17:10:13, Error                 CSI    0000008a (F) Unable to load manifest for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3"[gle=[B]0x80004005][/B]
 Line 7002: 2013-01-14 17:10:13, Error                 CSI    0000008b@2013/1/14:17:10:13.225 (F) d:\win7sp1_gdr\base\wcp\componentstore\storelayout.cpp(2714): Store corruption detected in function ComponentStore::CRawStoreLayout::FetchManifestContent expression: 0
 Line 9874: 2013-01-14 17:20:35, Error                 CSI    00000301 (F) Unable to load manifest for component [ml:280{140},l:202{101}]"amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3"[gle=[B]0x80004005][/B]
 Line 9875: 2013-01-14 17:20:35, Error                 CSI    00000302@2013/1/14:17:20:35.978 (F) d:\win7sp1_gdr\base\wcp\componentstore\storelayout.cpp(2714): Store corruption detected in function ComponentStore::CRawStoreLayout::FetchManifestContent expression: 0
 Line 9881: 2013-01-14 17:20:39, Error                 CSI    00000305 (F) Unable to load manifest for component [ml:280{140},l:200{100}]"amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260"[gle=[B]0x80004005][/B]
 Line 9882: 2013-01-14 17:20:39, Error                 CSI    00000306@2013/1/14:17:20:39.254 (F) d:\win7sp1_gdr\base\wcp\componentstore\storelayout.cpp(2714): Store corruption detected in function ComponentStore::CRawStoreLayout::FetchManifestContent expression: 0

They are Access Denied errors - I'm just not sure whether they are because of registry corruption, permissions problems in the registry, or filesystem problems.

tom982 · Mar 4, 2013

lol, yeah, good shout!

With the funny attributes flag and the 80004005s throughout the CBS log, it might be worth seeing an icacls output on the file.

NoelDP · Mar 4, 2013

Hmmm - I didn't see too many other 4005 errors (filtered on ', error' ).....
Nope - the other ones are pretty standard messages that appear in nearly every report
So it's specific to either the file or the registry entries

tom982 · Mar 4, 2013

Hi Clare,

Could you try this please:

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Click on the Start

button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following command into it, press enter afterwards

icacls C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest
Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
Paste (Ctrl+V) it into your next post please.

Tom

ClareLox · Mar 13, 2013

Sorry for delayed response - have been away with work and therefore not had access to my son's laptop. Here is the output from the last command. Just running the SCANNOW and will post the CBS.log shortly.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Admin>icacls C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-d..-us
ermode.resources_31bf3856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest
C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-d..-usermode.resources_31bf3
856ad364e35_6.1.7601.17803_en-us_251461586e43c0e3.manifest NT SERVICE\TrustedIns
taller

F)
NT AUTHORITY\SYSTEM

RX)
BUILTIN\Administrator
s

RX)
BUILTIN\Users

RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Admin>

tom982 · Mar 13, 2013

Hi Clare,

No worries about the delay. Just post at your convenience and we'll be around.

That icacls output is fine so the problem lies elsewhere. Hopefully the CBS log will reveal a little more on this.

Tom

ClareLox · Mar 13, 2013

Here is the CBS Log

ClareLox · Mar 18, 2013

I was wondering whether we've reached the point where I should look at reinstalling the operating system and starting from scratch again? Let me know your thoughts. I appreciate all of your help but it feels like we've reached a point where we can't fix it - it just seems to have this Group Policy issue for standard users who can't access the client service.
Thanks
Clare

CheckSUR file - CBS MUM Corrupt 0x800F0900

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

My Computer