CBS.log excerpt

[Gandalf]

2014-03-25 17:53:49, Info                  CBS    Startup processing thread terminated normally
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: SOFTWARE, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SOFTWARE' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SOFTWARE'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: SYSTEM, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SYSTEM' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SYSTEM'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: SECURITY, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SECURITY' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SECURITY'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: SAM, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/SAM' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SAM'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: COMPONENTS, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/COMPONENTS' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\COMPONENTS'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: DEFAULT, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/System32/config/DEFAULT' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\DEFAULT'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: ntuser.dat, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Users/default/ntuser.dat' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Users\default\ntuser.dat'.
2014-03-25 17:53:49, Info                  CBS    Loading offline registry hive: schema.dat, into registry key '{bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy4/Windows/system32/smi/store/Machine/schema.dat' from path '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\system32\smi\store\Machine\schema.dat'.
2014-03-25 17:53:49, Info                  CBS    Offline image is: read-only
2014-03-25 17:53:49, Info                  CBS    Disabling manifest caching, because the image is not writeable

Is this a problem - Disabling manifest caching, because the image is not writeable
If so, how do I fix it?

Thanks

 

[Gandalf]

2014-03-26 05:16:12, Info                  CBS    Session: 30361837_764339791 initialized by client WinMgmt.
2014-03-26 05:16:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-03-26 05:16:13, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-03-26 05:16:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]

This appears to me to be saying that my PC lacks the SP1. SP1 is installed.
Am I correct in my assumption about SP1. If so, how do I fix it.

Thanks

 

[NoelDP]

#1 - not a problem
#2 - a common finding in the CBS log, it arises when the SoftwareDistribution folder doesn't have the downloaded files in it that may be expected either because the update was installed from an offline installer, or because the files have been deleted. Not a problem.

If you do a Search in the CBS.log for ', error' it'll pull all the lines with real errors, and you can track back a few lines to see the source (Notepad++ is highly recommended for this usage!)

 

[Gandalf]

Thank you, Noel, for directing me into the correct direction. This is an example of your , error search.

2014-03-26 06:12:05, Info                  CBS    EvaluateApplicability, package: Microsoft-Windows-EmbeddedSDP-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514, Package applicability: Absent.
2014-03-26 06:12:05, Info                  CBS    Appl: Partial install Status testing, package: Package_for_KB976933~31bf3856ad364e35~amd64~~6.1.7601.17514, partially installed (true/false), 0
2014-03-26 06:12:05, Info                  CBS    Failed to find package from aggreated XML string, package: Package_for_KB976933~31bf3856ad364e35~amd64~fr-FR~6.1.7601.17514 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-26 06:12:05, Info                  CBS    Failed to find package from deployment update [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-26 06:12:05, Error                 CBS    Failed to check whether package is partially installed, package: Windows7SP1-KB976933~31bf3856ad364e35~amd64~~6.1.1.17514 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-26 06:12:05, Info                  CBS    Failed to evaluate external applicability for package update: 976933-0_neutral_PACKAGE [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-26 06:12:05, Error                 CBS    Failed to call external evaluate applicability on package: Package_for_KB976932~31bf3856ad364e35~amd64~~6.1.1.17514, Update: 976933-0_neutral_PACKAGE [HRESULT = 0x80070490 - ERROR_NOT_FOUND]

How do I follow up on this to get it fixed?

 

[NoelDP]

This one is a fairly common error - and I'm not sure that I understand it enough to fix it reliably.
Generally, I think it's not one to worry about - although if there are system problems of some kind it would have to be addressed at some point.

I'll have a hunt through the data I already have from you and see if I can work out what's happened - but a new copy of the COMPONENTS hive would be useful as well, in case it's cause by something that got removed in th epast couple of days.

It should be down to a much more manageable size now - maybe 10MB compressed?

 

[Gandalf]

https://jumpshare.com/v/bzPjpt8IvOgiwjLqpFPi?b=e2iC1WN51y6nDmCXqP3e

The compressed size is like 52M.
Are we going to have to whittle this file down to size too?

 

[NoelDP]

There is NO WAY I'm going to mess with this file unless I have to!
(have you ever tried to read a registry file - even a reasonably small one?)

Like all hives, it's simply a rather large database - so all I'm going to be looking for is a relatively small area with an identifiable error.... if I can see the Sequioa through the grass

 

[Gandalf]

Noel - you wanted me to upload it. Like my Professors always told me, be careful what you ask for.

 

[NoelDP]

Your prof was a few hundred years late

Old Chinese proverb - "be careful what you wish for - you may just get it!"

Cautional corollary, and Chinese curse - " May you live in interesting times!"

 

[Gandalf]

Old Chinese proverb - "be careful what you wish for - you may just get it!"

Who do you think taught it to them?

What no solution yet? You been taking a nap?

 

[Gandalf]

Noel - How can I view the component file? I can't resist a challenge.
I tried your Notebook ++, but it came up with unreadable characters.

 

[Gandalf]

The uploaded file is the error entries in a copy of my CBS.log. I deleted everything else so it would be easier to identify the errors. I could be wrong, but it looks to me that all the errors refer to the same file.

I did a search on [HRESULT = 0x80070490 - ERROR_NOT_FOUND] and it took me to...
"ERROR_NOT_FOUND (0x80070490)" when trying to install - Microsoft Community
"ERROR_NOT_FOUND (0x80070490)" when trying to install SP1 in Windows7Pro (x64):

This is confusing to me especially since I have Windows7Ultimate (x64).
I scanned the Installed Updates for the installed SP1 and it took me to...
Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2
Information about Service Pack 1 for Windows 7
From what I'm reading from this page for the Service Pack 1, Microsoft does not distinguish between Win7Pro and Win7Ult.

The question is, where do I go from there. Should I try to uninstall SP1, then reinstall it?
Would that eliminate these error messages in the CBS.log?

 

[NoelDP]

All the errors refer to the same file - not too surprising, as the system will attempt to search for the same file every time it boots, or for other reasons.

I've got a few minutes now, so maybe I can have a hunt and see what I can find in your COMPONENTS file.

The file is the registry hive for HKLM\COMPONENTS - which is loaded only when the system needs access for Windows Update, or other Windows changes.
You can usually read most of its content in REGEDIT, but you have to force it to load first, using the command

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS

You can also open it in a Hex Editor - HxD is the one I use - which can be useful in cases where corruption has occurred, since Regedit can't cope with much in the way of bitflips, and will barf on many of them.

Back soon.

 

[NoelDP]

Hah! I've been looking in the wrong place

I need to see your SOFTWARE hive - or rather part of it.

Please open Regedit
Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Component Based Servicing branch and highlight the entry.
Right-click on it, and select Export.

in the popup, change the export type to 'Registry Hive Files'
in the File name box, call it 'GandalfSW'
Make sure that it's pointing to a reasonable place to save the file
Click Save

Now find the saved file, and compress it - upload the result to either your reply (if less than 8MB), or to Jumpshare and post a link.

 

[Gandalf]

I have no Component Based Servicing branch.

 

[NoelDP]

Duh!
My fault.

Here's the proper path...
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing

 

[Gandalf]

See attached.

I installed HxD
However, I can't get it to work with the components file.
The HxD open doesn't see it.
Going from the file to open it in HxD, I get this.

 

[Gandalf]

Noel - I don't remember what caused those errors in post 4.
I did a new Windows Update and a new sfc /scannow and neither produced any errors in the cbs.log.

Have we somehow fixed the cause of the errors?

 

[Gandalf]

See attached.

I installed HxD
However, I can't get it to work with the components file.
The HxD open doesn't see it.
Going from the file to open it in HxD, I get this...

I figured it out. You need to make a copy of the file, then open it with HxD.
Sneaky.

However, I don't see how you can make heads or tails out of the presentation.

 

[Gandalf]

The errors are back with the Windows Update...

2014-03-28 12:11:51, Info                  CBS    EvaluateApplicability, package: Microsoft-Windows-EmbeddedSDP-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514, Package applicability: Absent.
2014-03-28 12:11:51, Info                  CBS    Appl: Partial install Status testing, package: Package_for_KB976933~31bf3856ad364e35~amd64~~6.1.7601.17514, partially installed (true/false), 0
2014-03-28 12:11:51, Info                  CBS    Failed to find package from aggreated XML string, package: Package_for_KB976933~31bf3856ad364e35~amd64~fr-FR~6.1.7601.17514 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-28 12:11:51, Info                  CBS    Failed to find package from deployment update [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-28 12:11:51, Error                 CBS    Failed to check whether package is partially installed, package: Windows7SP1-KB976933~31bf3856ad364e35~amd64~~6.1.1.17514 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-28 12:11:51, Info                  CBS    Failed to evaluate external applicability for package update: 976933-0_neutral_PACKAGE [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-03-28 12:11:51, Error                 CBS    Failed to call external evaluate applicability on package: Package_for_KB976932~31bf3856ad364e35~amd64~~6.1.1.17514, Update: 976933-0_neutral_PACKAGE [HRESULT = 0x80070490 - ERROR_NOT_FOUND]