BSODs with KB2778344

[hadenough]

This morning when booting I got a notification of new updates. As they (11) were downloading and installing I got a Critical Error 41 but the pc restarted without my intervention. Going back in to Updates revealed 5 updates had failed.

On resuming the process, 4 of the 5 failures installed but then I got a BSOD as it tried to install KB2778344. This time the pc did not restart by itself.

I so far have not found this particular update reported as causing problems for anyone. I am very concerned as to why it should apparently cause Critical Error 41.

My pc was returned on Monday after having the overclock restored. It had been tested and remained stable under load for 3 days continuously prior to return. Up until now it has been stable at home. But because of this element I cannot for absolute certainty blame today's Critical Errors on the MS update. The evidence is strongly in favour of the update being the culprit.

I have tried the MS Update Fixit download without success.

can anyone throw any light on this issue please.

 

[NoelDP]

Please follow the http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html and post the requested data.

 

[hadenough]

Thank you for the response.

I tried to follow the instructions however the CBS zipped folder appears too large at 11.7 Mb to attach.

When running the SURT it asked if I wanted to install KB947821. I okd but before it completed I got a Critical Error followed by an auto reboot. Returning then to MS Update I found that KB947821 was reported as installed and KB2778344 was awaiting download and install. I tried again to install this once again and got the message...
Code 80073712 Windows Update encountered an unknown error.
The retry did not produce a Critical Error this time.

Do you have any advice about the CBS folder please?

 

[NoelDP]

You can either zip it (if you haven't already done so) before attaching it or upload it to a fileshare site such as dropbox or SkyDrive, and post a link.
You could also split it into smaller files

 

[NoelDP]

Windows crashing during the running of CheckSUR is unusual - and probably going to cause problems, but we should be able to deal with them.
Please do NOT attempt to install any other updates until we say to - it will complicate things.
Try running the CheckSUR tool again - see if it completes this time, and post the log

 

[hadenough]

Please see attached zips of CBS folder.

View attachment 255024
View attachment 255025

 

[NoelDP]

The CheckSUR shows a number of problems....

Unavailable repair files:
 winsxs\manifests\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.17206_none_1f947cafe856e8ab.manifest
 winsxs\manifests\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18043_none_214c9927e5a07856.manifest
 winsxs\manifests\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.22209_none_17b2cef2ca377b92.manifest
 winsxs\manifests\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18043_none_16f7eed5b13fb65b.manifest
 winsxs\manifests\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.21416_none_20134b75017ca18d.manifest
 winsxs\manifests\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.22209_none_22077944fe983d8d.manifest
 winsxs\manifests\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.21416_none_15bea122cd1bdf92.manifest
 winsxs\manifests\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.17206_none_153fd25db3f626b0.manifest
 servicing\packages\Package_2_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_2_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_3_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_3_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_6_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_6_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_7_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_7_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_2_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_2_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_3_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_3_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_6_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_6_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_7_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_7_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat
 servicing\packages\Package_for_KB2778344~31bf3856ad364e35~amd64~~6.1.1.0.cat

I'll post a fix protocol for them later.

 

[NoelDP]

I've uploaded a file - hdnaa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the downloaded file, and select Extract all…
Extract to the default location - which will create a new folder hdnaa in the same place.
Open this folder - there should be two folders inside it (Manifests, and Packages)

Copy the content of the Packages folder to the folder
C:\Windows\Temp\CheckSur\Servicing\Packages

And the content of the manifests folder (.manifest files) into this folder:

C:\Windows\Temp\CheckSur\Winsxs\Manifests

Now run the CheckSUR tool again (it may take a while)

Post the new CheckSUR.log file, and the CheckSUR.persist.log file.

Also, please run another SFC /SCANNOW, and post the new CBS.log file - the changes may affect the results.

 

[hadenough]

Just to let you know I have followed your instructions and I'm now again running the installer for KB947821. It has been running for just over 30 minutes and is still 'Copying packages to the Windows Update cache'.

If this fails to complete what would you say is meant by 'a few hours' in the posting instructions?

 

[NoelDP]

I would think that anything over 2 hours is unusual
Anything over 3 hours could indicate a problem.
After 4 hours, kill it, reboot, and try again or ask for help.

 

[hadenough]

Thank you for the support you are providing.

 

[NoelDP]

No problem - it cuts down on my boozing

 

[hadenough]

After 4 hours I killed the SURT and tried to shut down but it stuck on 'Shutting down'. After several minutes of this I manually shut down.

Next, I tried the SURT again and this time it installed within seconds.

Next, I tried the SFC Scan and it failed at around 44%, so I repeated and this time it completed after a couple of minutes or so with an ok result as you will see from the attached.


So, please now find attched new logs.

View attachment 255075
View attachment 255074

 

[NoelDP]

Well, the fix did everything it was supposed to (second time around, at least), and I can't see any significant errors in the SFC log.

I am worried about these freezes, though - they indicate that there's something amiss somewhere.
When was the last time you checked the system for malware?
What AV is installed? (what other AV's have ever been installed?)

 

[hadenough]

I use MS Essentials and run a 'Full' scan each Friday. With the pc being returned last Monday I ran a scan and all was clear. But some time on Tuesday I noticed the icon had turned orange and found that Anogre.gen!A was in quarantine. I deleted this and rebooted, everything seemed ok until Wednesday and the Update issues as posted here.

However during this recovery process I noticed the same virus had appeared in the quarantine section again. I deleted this once more and to be safe ran another Full scan. This nearly completed until the pc crashed again. Either significantly or by co-incidence, just before the crash I noticed the scan spent a long time on the file name KB947821 which covered several hundred thousand items and it was whilst this was showing that the pc crashed.

Curiously, after the ensuing reboot the MS Esential icon showed green but has now turned orange as I write this. No items are in quarantine, it recognises the 'Last scan' was only a few minutes ago yet is informing me 'I haven't run a scan for a while' as you can see from the attached. This would suggest to me I should re-install Essentials but I will take no action of any sort until you have a chance to comment.

View attachment 255119

.....

It seems odd that all the crashes have occurred when Updates have been 'in the frame' in one way or another.

.....

As we were going through the recovery process I informed my pc supplier of the crashes and they suggested I return the Bios to stock speed and observe what happens because the crashes could be an indication the overclock needs further adjustment. Counter to that is the simple fact the pc was tested under load for 3 days prior to its return and was ok both on Monday afternoon and Tuesday.

.....

To sum up, at the moment there is a possibility the overclock needs further adjustment or there is a malfunction in MS Essentials or the virus has not been eliminated or the Update process is somehow causing a conflict.

KB2778344 still shows as awaiting download and install, should I do that now the logs show ok?

Should I use more than Essentials to scan for malware?

 

[NoelDP]

I'd advise a full scan with MalwareBytes ANti-Malware.... (possibly from Safe Mode w Networking)


Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Delete everything it finds

 

[NoelDP]

FWIW, I also use MSE and had no problems with the patch

 

[hadenough]

I ran Malwarebytes Anti-Malware and the result was nothing found on any drives.

Earlier today Essentials began to perform oddly. On booting, the icon was green but after 10 minutes turned orange. To be safe I ran a Full scan during which after another 10 minutes the icon turned red and the pc crashed.

Without any apparent form of security I thought it best to uninstall Essentials and re-install. On re-install and reboot a Quick scan performed ok. The pc has not crashed since and all seems stable with Essentials as well.

In the terms of the overclocking being a possible cause of crashes, just before going out I was able to run IntelBurnTestV2 which passed ok and then Prime95 but only for a short time, but this too passed ok.

Should I now install KB2778344 and then perhaps run a Full scan on Essentials or is there something else you maybe have in mind before that?

 

[NoelDP]

My preference would be to STOP all overclocking - it only reduces the life of the hardware, and is only necessary under extreme loads. (why do you feel the need to overclock?)
It may only be necessary to stop the overclocking during the update - and that's certainly worth a try.

 

[hadenough]

Why do I have the pc overclocked? Until recently I wrote data processing software for my son who had to deal with large numbers of Excel files in widely disparate formats and size. Speed of operation was key but that was only a part of it. He and his brother are gamers. Now one has emigrated and the other moved away things are different. But once you have got used to speed it is hard to let go. Prior to the pc going in for maintenance recently I set the bios to stock and it seemed to crawl in comparison.

But back to the crashes... just as things seemed to be going well..... I successfully installed KB2778344 and another, KB2804527, which followed. I then tried a Full scan on Essentials but got a crash after only about 12 minutes and around 50k items.
Out of curiosity I immediately ran a Quick Scan which was fine!

View attachment 255210
View attachment 255211
View attachment 255212

• Can I now delete the hdnaa files and the Windows6.1-KB947821-v25-x64.msu file if they were specifically created to resolve the KB2778344 issue?

• Now you have resolved the Update install issue, for which I am very grateful, would you prefer me to post the remaining crash problem to the BSOD forum? Please advise.