Solved Almost complete hang after login, only on SP1

tom982 · Sep 9, 2013

Hi BotenRedWolf,

Yeah, it's recommended that you disable Windows Sidebar altogether now:

Disable Windows Sidebar and Gadgets NOW on Vista and Windows 7. Microsoft warns of security risk | Naked Security

It will definitely decrease your boot time, but I'm not sure whether you would notice it. How many gadgets do you currently run? If it's a lot, then you might notice the difference, but if it's just your network gadget, then I doubt it would make much change. If you love your network gadget, there are other ways of getting gadgets on your Desktop. I use Rainmeter and love it:

View attachment 285243

Tom

BotenRedWolf · Sep 10, 2013

Please do tell me more about this rainmeter thing. Yeah, all I use is Network Monitor II to keep an eye on bandwidth usage (not like it's a problem with either a 42Mbps or a 1Gbps connection depending on location).

tom982 · Sep 10, 2013

1GB/s!? Wow! I get 100MB/s at uni and I thought that was fast!

Rainmeter is a tool to display custom skins on your desktop. The skins are developed by the community and hosted all across the net, but all you have to do is download it and load it in Rainmeter for it to be shown on your desktop, much like Windows Sidebar. Download it from here:

Rainmeter, desktop customization tool

You can pick up skins and layouts from loads of websites, take a look at these:

Rainmeter Skins - Customize.org
Browsing deviantART
Skins on #Rainmeter - deviantART
Rainmeter Skin Gallery. Rainmeter skin and theme Download. RMSkin file download.

You can mix and match them, and reposition them to suit your needs.

Let me know if you have any questions, or want a hand setting it up

Tom

BotenRedWolf · Sep 10, 2013

That's max throughput, in bits/megabits/gigabits. Realized download speeds are around 60MB/s for the gigabit pipe (it's a campus pipe), and about 1.5-3MB/s on my other one, which is actually tethered off my mobile.

BotenRedWolf · Sep 10, 2013

Oh, and what's the best and most efficient way to remove/disable the sidebar/gadgets in Windows?

tom982 · Sep 10, 2013

BotenRedWolf said:
That's max throughput, in bits/megabits/gigabits. Realized download speeds are around 60MB/s for the gigabit pipe (it's a campus pipe), and about 1.5-3MB/s on my other one, which is actually tethered off my mobile.

60MB/s is still pretty speedy! I meant to say 100Mb/s in my last post and get somewhere in the region of 11.5MB/s on a good day. That's incredible for a tethered connection; is that 4G, per chance?

BotenRedWolf said:
Oh, and what's the best and most efficient way to remove/disable the sidebar/gadgets in Windows?

This FixIt is easiest: Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution

BotenRedWolf · Sep 10, 2013

Yeah, that's a 4G 42Mbps off of a CDMA/LTE carrier out here. It's really impressive. It's also off of an "unlimited" plan that doesn't throttle. Ever. I've used >150GB this bill cycle. Still max speed.

BotenRedWolf · Sep 10, 2013

Also, would you either teach me the trick of looking at the CBS.log files or volunteer looking at a few more? I just set up three computers today all on the same build/image of Win7.

tom982 · Sep 10, 2013

BotenRedWolf said:
Yeah, that's a 4G 42Mbps off of a CDMA/LTE carrier out here. It's really impressive. It's also off of an "unlimited" plan that doesn't throttle. Ever. I've used >150GB this bill cycle. Still max speed.

4G hasn't really taken off yet this side of the pond. It's too expensive, and scarce, for it to be considered by most people

BotenRedWolf said:
Also, would you either teach me the trick of looking at the CBS.log files or volunteer looking at a few more? I just set up three computers today all on the same build/image of Win7.

Is there anything in particular you want to know about? The CBS log contains information on a lot of things and though I'd be more than happy to teach you, I'm not sure you fully understand how much there is to learn

Are these computers having problems that you want to troubleshoot, or do you simply want to know for the future?

Tom

BotenRedWolf · Sep 10, 2013

I was afraid I'd hear that. I figured with logs measured in the tens of megabytes that there'd be a lot to go through. Basically, how to look for the problem we just went over. All the machines I'm currently setting up are all based off the same image. So once they go through all the updates and such I bet they'll all have that "break" in them. How do I spot if the machine has those corrupt files and how best do I search for what's up, and will the SFC fix those problems on it's own? I didn't grasp how any of this really worked. I'd love to know but I was so worked up about getting my personal machine up and running that I wasn't trying to pay any attention to how any of this works. Any basic crash course would be appreciated.

BTW: Data over here is typically quite expensive. Rather on the range of $5-10US per GB of mobile data. I just got lucky during a promotion and captured an unlimited plan for the same price their 10GB typically is.

New: Just tried out that Rainmeter software... that is epic, bro, thank you! Only had it a few minutes and already discovered how customizable it is right "out of the box" if you will.

tom982 · Sep 11, 2013

Taking your CBS log as an example: http://www.sevenforums.com/windows-...ost-complete-hang-after-login-only-sp1-3.html

CBS logs all start with the following header, where the servicing stack is loaded and your computer becomes ready for action:

Code:

2013-09-08 23:11:26, Info                  CBS    Starting TrustedInstaller initialization.
2013-09-08 23:11:26, Info                  CBS    Loaded Servicing Stack v6.1.7601.17592 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\cbscore.dll
2013-09-08 23:11:28, Info                  CSI    00000001@2013/9/9:04:11:28.016 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fee6a8f0ad @0x7fee6f19849 @0x7fee6ee34e3 @0xffebe97c @0xffebd799 @0xffebdb2f)
2013-09-08 23:11:28, Info                  CSI    00000002@2013/9/9:04:11:28.046 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fee6a8f0ad @0x7fee6f66816 @0x7fee6f32aac @0x7fee6ee35b9 @0xffebe97c @0xffebd799)
2013-09-08 23:11:28, Info                  CSI    00000003@2013/9/9:04:11:28.046 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fee6a8f0ad @0x7feebc08738 @0x7feebc08866 @0xffebe474 @0xffebd7de @0xffebdb2f)
2013-09-08 23:11:28, Info                  CBS    Ending TrustedInstaller initialization.
2013-09-08 23:11:28, Info                  CBS    Starting the TrustedInstaller main loop.
2013-09-08 23:11:28, Info                  CBS    TrustedInstaller service starts successfully.
2013-09-08 23:11:28, Info                  CBS    SQM: Initializing online with Windows opt-in: False
2013-09-08 23:11:28, Info                  CBS    SQM: Cleaning up report files older than 10 days.
2013-09-08 23:11:28, Info                  CBS    SQM: Requesting upload of all unsent reports.
2013-09-08 23:11:28, Info                  CBS    SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2013-09-08 23:11:28, Info                  CBS    SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2013-09-08 23:11:28, Info                  CBS    SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2013-09-08 23:11:28, Info                  CBS    SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2013-09-08 23:11:28, Info                  CBS    No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2013-09-08 23:11:28, Info                  CBS    NonStart: Checking to ensure startup processing was not required.
2013-09-08 23:11:28, Info                  CSI    00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0xc1fbc0
2013-09-08 23:11:28, Info                  CSI    00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2013-09-08 23:11:28, Info                  CSI    00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x214
2013-09-08 23:11:28, Info                  CSI    00000007@2013/9/9:04:11:28.816 CSI perf trace:
CSIPERF:TXCOMMIT;2082
2013-09-08 23:11:28, Info                  CBS    NonStart: Success, startup processing not required as expected.
2013-09-08 23:11:28, Info                  CBS    Startup processing thread terminated normally
2013-09-08 23:11:28, Info                  CSI    00000008 CSI Store 1269712 (0x0000000000135fd0) initialized

Anything under the following line is where you need to start looking, for the majority of cases:

Code:

2013-09-08 23:11:28, Info                  CSI    00000008 CSI Store ******* (0x****************) initialized

The rest of your CBS log is the SFC log, which is appended to the CBS log as the SFC scan progresses. The SFC information is summarised at the bottom of the log, so it's best to start at the bottom and work upwards.

When SFC detects a corrupt file, it will say Hashes for file member..., then list the file path and the hashes it found for the corrupt files, so if you move the cursor to the bottom of the log and search upwards, in Notepad, for "hashes for file member", you will be brought to the details on the file corruption. Yes, there are other cases where this will fail, but they're rare enough to not have to worry about them for now. By doing what I outlined previously, and copying the associated log lines around the search results, I have found the problem:

Code:

2013-09-08 23:25:38, Info                  CSI    00000314 [SR] Verify complete
2013-09-08 23:25:38, Info                  CSI    00000315 [SR] Repairing 1 components
2013-09-08 23:25:38, Info                  CSI    00000316 [SR] Beginning Verify and Repair transaction
2013-09-08 23:25:39, Info                  CSI    00000317 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}
2013-09-08 23:25:39, Info                  CSI    00000318 [SR] Cannot repair member file [l:36{18}]"Pretty_Peacock.jpg" of Microsoft-Windows-TabletPC-Journal, Version = 6.1.7601.18126, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-09-08 23:25:39, Info                  CSI    00000319 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}
2013-09-08 23:25:39, Info                  CSI    0000031a [SR] Cannot repair member file [l:36{18}]"Pretty_Peacock.jpg" of Microsoft-Windows-TabletPC-Journal, Version = 6.1.7601.18126, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-09-08 23:25:39, Info                  CSI    0000031b [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2835364~31bf3856ad364e35~amd64~~6.1.1.1.2835364-8_neutral_GDR"
2013-09-08 23:25:39, Info                  CSI    0000031c Hashes for file member \??\C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}
2013-09-08 23:25:39, Info                  CSI    0000031d Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}
2013-09-08 23:25:39, Info                  CSI    0000031e [SR] Could not reproject corrupted file [ml:520{260},l:122{61}]"\??\C:\Program Files\Common Files\Microsoft Shared\Stationery"\[l:36{18}]"Pretty_Peacock.jpg"; source file in store is also corrupted

Let's break this down, line by line.

Code:

2013-09-08 23:25:38, Info                  CSI    00000314 [SR] Verify complete

The SFC scan completed successfully.

Code:

2013-09-08 23:25:38, Info                  CSI    00000315 [SR] Repairing 1 components

It found one file that is corrupt.

Code:

2013-09-08 23:25:38, Info                  CSI    00000316 [SR] Beginning Verify and Repair transaction

Starting the repair procedure.

Code:

2013-09-08 23:25:39, Info                  CSI    00000317 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :

The hash of the WinSxS copy (technically it's not a copy, but that's for another time) of Pretty_Peacock.jpg don't match the copy elsewhere in the system, so at least one of them is corrupt.

Code:

  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}

Hash of file: hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=
Hash file should be: tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=

Code:

2013-09-08 23:25:39, Info                  CSI    00000318 [SR] Cannot repair member file [l:36{18}]"Pretty_Peacock.jpg" of Microsoft-Windows-TabletPC-Journal, Version = 6.1.7601.18126, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

Can't repair Pretty_Peacock.jpg.
Parent package (what it's part of): Microsoft-Windows-TabletPC-Journal
Version: 6.1.7601.18126
Architecture: x64 (though it doesn't matter for a .jpg file, the x86 and x64 copies of this file will be the same)
Language: Neutral
Public Key: 31bf3856ad364e35
Hash of file is wrong.

Code:

2013-09-08 23:25:39, Info                  CSI    0000031b [SR] This component was referenced by [l:154{77}]"Package_2_for_KB2835364~31bf3856ad364e35~amd64~~6.1.1.1.2835364-8_neutral_GDR"

What package (.mum file) this file is listed in. By downloading and extracting KB2835364, we will find a clean copy of this file:

Code:

 Volume in drive C has no label.
 Volume Serial Number is 7C4C-6725

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab

11/09/2013  12:43    <DIR>          .
11/09/2013  12:43    <DIR>          ..
11/09/2013  12:43                 0 0
12/04/2013  16:52               708 amd64_23f880c114cab8a1f946ca394d069be6_31bf3856ad364e35_7.1.7601.22296_none_8d70805edd52551b.manifest
12/04/2013  16:52               708 amd64_6b3959a2dbbebc94f9f0fb6ff13ce019_31bf3856ad364e35_6.1.7601.18126_none_f6dd899ce23841cd.manifest
12/04/2013  16:52             1,080 amd64_75edfb6af79f5aa0861357d93edbd5af_31bf3856ad364e35_6.1.7601.18126_none_6dcd7c3a1b55c09c.manifest
12/04/2013  16:52               721 amd64_76e09380e85bdc7be1ae1e98effac7ab_31bf3856ad364e35_6.1.7601.22296_none_0ec8b96997fbff57.manifest
12/04/2013  16:52               718 amd64_8720d6acd98dd6d8c12a46dd2233bcf7_31bf3856ad364e35_6.1.7601.18126_none_9bcf68eb605b0dbb.manifest
12/04/2013  16:52             1,080 amd64_9a05ec24d4a7bc31dcdcd9c221f4905b_31bf3856ad364e35_6.1.7601.22296_none_185118f3290bf1c2.manifest
12/04/2013  16:52               718 amd64_ce191d246ee2985a09fdda8866278971_31bf3856ad364e35_6.1.7601.22296_none_42c603396e97486f.manifest
12/04/2013  16:52               708 amd64_de532efc06a31996ac36e1051fd288ba_31bf3856ad364e35_7.1.7601.18126_none_cce2a0802a772ef5.manifest
12/04/2013  16:52               721 amd64_e2a448a3c5e4da4fc1b786892cc8fe1e_31bf3856ad364e35_6.1.7601.18126_none_a55a4bb2cde3952d.manifest
12/04/2013  16:52               708 amd64_f20f75e859862caa92ef9538c1f07518_31bf3856ad364e35_6.1.7601.22296_none_715f11e362d01c8b.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18126_none_a082072163ab7b11
12/04/2013  16:53             5,800 amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18126_none_a082072163ab7b11.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.22296_none_a0bff4787d01de72
12/04/2013  16:53             5,800 amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.22296_none_a0bff4787d01de72.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18126_none_abb551c8954acc8b
12/04/2013  16:53             5,116 amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18126_none_abb551c8954acc8b.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.22296_none_abf33f1faea12fec
12/04/2013  16:53             5,116 amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.22296_none_abf33f1faea12fec.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_28ad9f904db55fb8
12/04/2013  16:53           200,860 amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_28ad9f904db55fb8.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_28eb8ce7670bc319
12/04/2013  16:53           200,860 amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_28eb8ce7670bc319.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca
12/04/2013  16:53           138,749 amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.22296_none_760c8d5fd494972b
12/04/2013  16:53           138,749 amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.22296_none_760c8d5fd494972b.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.18126_none_673f1c4e4624dc99
12/04/2013  16:53           113,277 amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.18126_none_673f1c4e4624dc99.manifest
11/09/2013  12:42    <DIR>          amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.22296_none_677d09a55f7b3ffa
12/04/2013  16:53           113,277 amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.22296_none_677d09a55f7b3ffa.manifest
12/04/2013  16:59            11,250 package_1_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:53             2,244 package_1_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:54            15,100 package_1_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:52             3,219 package_1_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:59            25,210 package_2_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:53             3,103 package_2_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:54            43,020 package_2_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:52             5,265 package_2_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:59            29,060 package_3_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:53             4,143 package_3_for_kb2835364_bf~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:54            50,720 package_3_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:52             7,280 package_3_for_kb2835364~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:59             7,400 package_for_kb2835364_sp1_bf~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:53             2,739 package_for_kb2835364_sp1_bf~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:54             7,400 package_for_kb2835364_sp1~31bf3856ad364e35~amd64~~6.1.1.1.cat
12/04/2013  16:52             2,799 package_for_kb2835364_sp1~31bf3856ad364e35~amd64~~6.1.1.1.mum
12/04/2013  16:59             7,400 update-bf.cat
12/04/2013  16:53             2,204 update-bf.mum
12/04/2013  16:54             7,400 update.cat
12/04/2013  16:52             2,242 update.mum
11/09/2013  12:42    <DIR>          x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_cc8f040c9557ee82
12/04/2013  16:53           200,856 x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_cc8f040c9557ee82.manifest
11/09/2013  12:42    <DIR>          x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_ccccf163aeae51e3
12/04/2013  16:53           200,856 x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_ccccf163aeae51e3.manifest
              43 File(s)      1,576,384 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18126_none_a082072163ab7b11

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/04/2013  06:46         1,402,880 jnwdrv.dll
14/07/2009  02:41            98,816 jnwdui.dll
14/07/2009  02:41            24,576 jnwmon.dll
14/07/2009  02:41            27,648 jnwppr.dll
14/07/2009  02:39            51,200 pdialog.exe
               5 File(s)      1,605,120 bytes

Split post because it's way over the limit!

tom982 · Sep 11, 2013

Code:

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.22296_none_a0bff4787d01de72

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/04/2013  06:21         1,402,880 jnwdrv.dll
14/07/2009  02:41            98,816 jnwdui.dll
14/07/2009  02:41            24,576 jnwmon.dll
14/07/2009  02:41            27,648 jnwppr.dll
14/07/2009  02:39            51,200 pdialog.exe
               5 File(s)      1,605,120 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18126_none_abb551c8954acc8b

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/04/2013  06:46         1,402,880 jnwdrv.dll
14/07/2009  02:41            98,816 jnwdui.dll
14/07/2009  02:41            24,576 jnwmon.dll
14/07/2009  02:41            27,648 jnwppr.dll
               4 File(s)      1,553,920 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.22296_none_abf33f1faea12fec

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/04/2013  06:21         1,402,880 jnwdrv.dll
14/07/2009  02:41            98,816 jnwdui.dll
14/07/2009  02:41            24,576 jnwmon.dll
14/07/2009  02:41            27,648 jnwppr.dll
               4 File(s)      1,553,920 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_28ad9f904db55fb8

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
14/07/2009  02:41           353,280 inkdiv.dll
14/07/2009  02:41           275,456 inked.dll
14/07/2009  02:41         2,103,296 inkobj.dll
10/04/2013  06:46         1,367,040 journal.dll
14/07/2009  02:41           169,984 rtscom.dll
               5 File(s)      4,269,056 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_28eb8ce7670bc319

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
14/07/2009  02:41           353,280 inkdiv.dll
14/07/2009  02:41           275,456 inked.dll
10/04/2013  06:21         2,103,808 inkobj.dll
10/04/2013  06:21         1,367,552 journal.dll
14/07/2009  02:41           169,984 rtscom.dll
               5 File(s)      4,270,080 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/06/2009  21:44             5,470 blank.jtp
10/06/2009  21:44             2,575 blue_gradient.jpg
10/06/2009  21:44             4,587 cave_drawings.gif
10/06/2009  21:44             2,319 connectivity.gif
10/06/2009  21:45                91 desktop.ini
10/06/2009  21:44            11,494 dotted_line.jtp
10/06/2009  21:44             3,792 dotted_lines.emf
10/06/2009  21:44             5,524 genko_1.emf
10/06/2009  21:44            13,852 genko_1.jtp
10/06/2009  21:44            10,340 genko_2.emf
10/06/2009  21:44            19,596 genko_2.jtp
10/06/2009  21:44           116,724 graph.emf
10/06/2009  21:44           123,228 graph.jtp
10/06/2009  21:44             2,920 grid_(cm).wmf
10/06/2009  21:44             7,498 grid_(inch).wmf
14/07/2009  02:41           929,792 inkseg.dll
10/04/2013  06:46         1,393,152 jntfiltr.dll
20/11/2010  14:24         2,164,224 journal.exe
10/06/2009  21:44             4,544 journal.jnt
10/06/2009  21:44           152,300 memo.emf
10/06/2009  21:44           159,598 memo.jtp
10/06/2009  21:44             2,209 monet.jpg
10/06/2009  21:44             4,192 month_calendar.emf
10/06/2009  21:44            10,076 month_calendar.jtp
14/07/2009  02:41           668,672 mspvwctl.dll
10/06/2009  21:44            26,036 music.emf
10/06/2009  21:44            40,792 music.jtp
10/04/2013  06:48         1,732,608 nbdoc.dll
14/07/2009  02:41            62,976 nbmaptip.dll
10/06/2009  21:44             2,950 notebook.jpg
10/06/2009  21:44             3,981 pine_lumber.jpg
10/06/2009  21:44             5,115 pretty_peacock.jpg
10/06/2009  21:44            14,049 psychedelic.jpg
10/06/2009  21:44            15,776 sand_paper.jpg
10/06/2009  21:44            37,316 seyes.emf
10/06/2009  21:44            43,354 seyes.jtp
10/06/2009  21:44            81,292 shorthand.emf
10/06/2009  21:44            87,898 shorthand.jtp
10/06/2009  21:44             1,990 small_news.jpg
10/06/2009  21:44             1,864 stucco.gif
10/06/2009  21:44             3,650 tanspecks.jpg
10/06/2009  21:44             4,638 tiki.gif
10/06/2009  21:44            26,720 to_do_list.emf
10/06/2009  21:44            32,602 to_do_list.jtp
10/06/2009  21:44             3,168 white_chocolate.jpg
10/06/2009  21:44            15,063 wrinkled_paper.gif
              46 File(s)      8,062,607 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.22296_none_760c8d5fd494972b

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/06/2009  21:44             5,470 blank.jtp
10/06/2009  21:44             2,575 blue_gradient.jpg
10/06/2009  21:44             4,587 cave_drawings.gif
10/06/2009  21:44             2,319 connectivity.gif
10/06/2009  21:45                91 desktop.ini
10/06/2009  21:44            11,494 dotted_line.jtp
10/06/2009  21:44             3,792 dotted_lines.emf
10/06/2009  21:44             5,524 genko_1.emf
10/06/2009  21:44            13,852 genko_1.jtp
10/06/2009  21:44            10,340 genko_2.emf
10/06/2009  21:44            19,596 genko_2.jtp
10/06/2009  21:44           116,724 graph.emf
10/06/2009  21:44           123,228 graph.jtp
10/06/2009  21:44             2,920 grid_(cm).wmf
10/06/2009  21:44             7,498 grid_(inch).wmf
14/07/2009  02:41           929,792 inkseg.dll
10/04/2013  06:21         1,393,664 jntfiltr.dll
10/04/2013  06:20         2,163,712 journal.exe
10/06/2009  21:44             4,544 journal.jnt
10/06/2009  21:44           152,300 memo.emf
10/06/2009  21:44           159,598 memo.jtp
10/06/2009  21:44             2,209 monet.jpg
10/06/2009  21:44             4,192 month_calendar.emf
10/06/2009  21:44            10,076 month_calendar.jtp
14/07/2009  02:41           668,672 mspvwctl.dll
10/06/2009  21:44            26,036 music.emf
10/06/2009  21:44            40,792 music.jtp
10/04/2013  06:21         1,732,608 nbdoc.dll
14/07/2009  02:41            62,976 nbmaptip.dll
10/06/2009  21:44             2,950 notebook.jpg
10/06/2009  21:44             3,981 pine_lumber.jpg
10/06/2009  21:44             5,115 pretty_peacock.jpg
10/06/2009  21:44            14,049 psychedelic.jpg
10/06/2009  21:44            15,776 sand_paper.jpg
10/06/2009  21:44            37,316 seyes.emf
10/06/2009  21:44            43,354 seyes.jtp
10/06/2009  21:44            81,292 shorthand.emf
10/06/2009  21:44            87,898 shorthand.jtp
10/06/2009  21:44             1,990 small_news.jpg
10/06/2009  21:44             1,864 stucco.gif
10/06/2009  21:44             3,650 tanspecks.jpg
10/06/2009  21:44             4,638 tiki.gif
10/06/2009  21:44            26,720 to_do_list.emf
10/06/2009  21:44            32,602 to_do_list.jtp
10/06/2009  21:44             3,168 white_chocolate.jpg
10/06/2009  21:44            15,063 wrinkled_paper.gif
              46 File(s)      8,062,607 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.18126_none_673f1c4e4624dc99

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/06/2009  21:44             5,470 blank.jtp
10/06/2009  21:44             2,575 blue_gradient.jpg
10/06/2009  21:44             4,587 cave_drawings.gif
10/06/2009  21:44             2,319 connectivity.gif
10/06/2009  21:45                91 desktop.ini
10/06/2009  21:44            11,494 dotted_line.jtp
10/06/2009  21:44             3,792 dotted_lines.emf
10/06/2009  21:44             5,524 genko_1.emf
10/06/2009  21:44            13,852 genko_1.jtp
10/06/2009  21:44            10,340 genko_2.emf
10/06/2009  21:44            19,596 genko_2.jtp
10/06/2009  21:44           116,724 graph.emf
10/06/2009  21:44           123,228 graph.jtp
10/06/2009  21:44             2,920 grid_(cm).wmf
10/06/2009  21:44             7,498 grid_(inch).wmf
02/04/2010  04:46           929,792 inkseg.dll
10/04/2013  06:46         1,393,152 jntfiltr.dll
20/11/2010  14:24         2,164,224 journal.exe
10/06/2009  21:44             4,544 journal.jnt
10/06/2009  21:44           152,300 memo.emf
10/06/2009  21:44           159,598 memo.jtp
10/06/2009  21:44             2,209 monet.jpg
10/06/2009  21:44             4,192 month_calendar.emf
10/06/2009  21:44            10,076 month_calendar.jtp
02/04/2010  04:49           668,672 mspvwctl.dll
10/06/2009  21:44            26,036 music.emf
10/06/2009  21:44            40,792 music.jtp
10/04/2013  06:48         1,732,608 nbdoc.dll
02/04/2010  04:46            62,976 nbmaptip.dll
10/06/2009  21:44             2,950 notebook.jpg
10/06/2009  21:44             3,981 pine_lumber.jpg
10/06/2009  21:44             5,115 pretty_peacock.jpg
10/06/2009  21:44            14,049 psychedelic.jpg
10/06/2009  21:44            15,776 sand_paper.jpg
10/06/2009  21:44            37,316 seyes.emf
10/06/2009  21:44            43,354 seyes.jtp
10/06/2009  21:44            81,292 shorthand.emf
10/06/2009  21:44            87,898 shorthand.jtp
10/06/2009  21:44             1,990 small_news.jpg
10/06/2009  21:44             1,864 stucco.gif
10/06/2009  21:44             3,650 tanspecks.jpg
10/06/2009  21:44             4,638 tiki.gif
10/06/2009  21:44            26,720 to_do_list.emf
10/06/2009  21:44            32,602 to_do_list.jtp
10/06/2009  21:44             3,168 white_chocolate.jpg
10/06/2009  21:44            15,063 wrinkled_paper.gif
              46 File(s)      8,062,607 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_7.1.7601.22296_none_677d09a55f7b3ffa

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
10/06/2009  21:44             5,470 blank.jtp
10/06/2009  21:44             2,575 blue_gradient.jpg
10/06/2009  21:44             4,587 cave_drawings.gif
10/06/2009  21:44             2,319 connectivity.gif
10/06/2009  21:45                91 desktop.ini
10/06/2009  21:44            11,494 dotted_line.jtp
10/06/2009  21:44             3,792 dotted_lines.emf
10/06/2009  21:44             5,524 genko_1.emf
10/06/2009  21:44            13,852 genko_1.jtp
10/06/2009  21:44            10,340 genko_2.emf
10/06/2009  21:44            19,596 genko_2.jtp
10/06/2009  21:44           116,724 graph.emf
10/06/2009  21:44           123,228 graph.jtp
10/06/2009  21:44             2,920 grid_(cm).wmf
10/06/2009  21:44             7,498 grid_(inch).wmf
02/04/2010  04:46           929,792 inkseg.dll
10/04/2013  06:21         1,393,664 jntfiltr.dll
10/04/2013  06:20         2,163,712 journal.exe
10/06/2009  21:44             4,544 journal.jnt
10/06/2009  21:44           152,300 memo.emf
10/06/2009  21:44           159,598 memo.jtp
10/06/2009  21:44             2,209 monet.jpg
10/06/2009  21:44             4,192 month_calendar.emf
10/06/2009  21:44            10,076 month_calendar.jtp
02/04/2010  04:49           668,672 mspvwctl.dll
10/06/2009  21:44            26,036 music.emf
10/06/2009  21:44            40,792 music.jtp
10/04/2013  06:21         1,732,608 nbdoc.dll
02/04/2010  04:46            62,976 nbmaptip.dll
10/06/2009  21:44             2,950 notebook.jpg
10/06/2009  21:44             3,981 pine_lumber.jpg
10/06/2009  21:44             5,115 pretty_peacock.jpg
10/06/2009  21:44            14,049 psychedelic.jpg
10/06/2009  21:44            15,776 sand_paper.jpg
10/06/2009  21:44            37,316 seyes.emf
10/06/2009  21:44            43,354 seyes.jtp
10/06/2009  21:44            81,292 shorthand.emf
10/06/2009  21:44            87,898 shorthand.jtp
10/06/2009  21:44             1,990 small_news.jpg
10/06/2009  21:44             1,864 stucco.gif
10/06/2009  21:44             3,650 tanspecks.jpg
10/06/2009  21:44             4,638 tiki.gif
10/06/2009  21:44            26,720 to_do_list.emf
10/06/2009  21:44            32,602 to_do_list.jtp
10/06/2009  21:44             3,168 white_chocolate.jpg
10/06/2009  21:44            15,063 wrinkled_paper.gif
              46 File(s)      8,062,607 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18126_none_cc8f040c9557ee82

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
14/07/2009  02:15           274,944 inkdiv.dll
14/07/2009  02:15           216,064 inked.dll
14/07/2009  02:15         1,415,168 inkobj.dll
10/04/2013  06:03           936,448 journal.dll
14/07/2009  02:16           126,464 rtscom.dll
               5 File(s)      2,969,088 bytes

 Directory of C:\Users\Tom\AppData\Local\Temp\KBExtractor_Windows6.1-KB2835364-x64.msu\Windows6.1-KB2835364-x64.cab\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.22296_none_ccccf163aeae51e3

11/09/2013  12:42    <DIR>          .
11/09/2013  12:42    <DIR>          ..
14/07/2009  02:15           274,944 inkdiv.dll
14/07/2009  02:15           216,064 inked.dll
10/04/2013  06:14         1,416,192 inkobj.dll
10/04/2013  06:14           936,960 journal.dll
14/07/2009  02:16           126,464 rtscom.dll
               5 File(s)      2,970,624 bytes

     Total Files Listed:
             265 File(s)     54,623,740 bytes
              38 Dir(s)  1,057,774,637,056 bytes free

Code:

2013-09-08 23:25:39, Info                  CSI    0000031c Hashes for file member \??\C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}

Found the wrong hash for the other "copy" of Pretty_Peacock.jpg.

Code:

2013-09-08 23:25:39, Info                  CSI    0000031d Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18126_none_75cea008bb3e33ca\Pretty_Peacock.jpg do not match actual file [l:36{18}]"Pretty_Peacock.jpg" :
  Found: {l:32 b:hLMYgoYEaSd6WHNAcMpQlj3ndwYSJanHCJ0EaEjgsTg=} Expected: {l:32 b:tfmxBgEeHYSqU0nOhrdrRtqL98a1xYC32if7l90WiOg=}

Same error as before

Code:

2013-09-08 23:25:39, Info                  CSI    0000031e [SR] Could not reproject corrupted file [ml:520{260},l:122{61}]"\??\C:\Program Files\Common Files\Microsoft Shared\Stationery"\[l:36{18}]"Pretty_Peacock.jpg"; source file in store is also corrupted

This is the most important line. source file in store is also corrupted means that there is no clean copy of this file on your computer. It doesn't matter how many times you run SFC, it's impossible to fix this without user interaction - like with a SFCFix script.

SFC will tell you whether it found any corruption or not, so you don't need to look at a CBS log if SFC didn't find any 'integrity violations'

Any questions?

Tom

BotenRedWolf · Sep 11, 2013

Yeah, but I think I can do research into anything more. The crash course in SFC and it's logs here was really interesting. In a good way though.

tom982 · Sep 11, 2013

BotenRedWolf said:
New: Just tried out that Rainmeter software... that is epic, bro, thank you! Only had it a few minutes and already discovered how customizable it is right "out of the box" if you will.

Glad you like it! I used to use the Omnimo skin to simulate a Windows 8 desktop on Windows 7, but have since got rid of it. Really comprehensive package though, might be worth checking out. There's a load of amazing Rainmeter setups that get posted in this thread:

http://www.sevenforums.com/customization/239463-show-us-your-desktop-112.html

BotenRedWolf said:
Yeah, but I think I can do research into anything more. The crash course in SFC and it's logs here was really interesting. In a good way though.

Windows Update and SFC issues are one of the most undocumented topics I've ever learnt about and it can be a pain researching some errors, so if you've ever got a question feel free to drop me a PM, or post back here, and I'll do my best to answer.

Want me to take a look at the other two CBS logs, or are you up for the challenge now?

Tom

NoelDP · Sep 11, 2013

You want 'undocumented', try MGADiag!

tom982 · Sep 11, 2013

NoelDP said:
You want 'undocumented', try MGADiag!

lol, okay, you win

Solved Almost complete hang after login, only on SP1

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Town Psych Patient

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer My Computer

At a glance

Similar threads

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer

My Computer

٩(͡๏̯͡๏)۶

My Computer