Installing Updates Failure

NoelDP · Dec 3, 2012

Gotcha!
I'll leave it to Tom, ;cos he's the expert on these

trevor burdett · Dec 3, 2012

Thanks Noel.

tom982 · Dec 3, 2012

Hmm, now this is an intriguing one. Looking at the error, it shows that the SURT is hiccuping with a registry key:

Code:

(f)    CSI Corrupt Component Keyform    0x00000000    identity     amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3     identity and keyform do not match; keyform is wrong.
(f)    CSI Corrupt Component Keyform    0x00000000    identity     amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6     identity and keyform do not match; keyform is wrong.
(f)    CSI Corrupt Component Keyform    0x00000000    identity     amd64_server-help-chm.applocker_help_31[COLOR=Red][B]`[/B][/COLOR]f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3     identity and keyform do not match; keyform is wrong.

The latter of the three is obviously corrupt (bitflip), but when I look at the key name in your components hive, it is named normally:

Code:

amd64_server-help-chm.applocker_help_31bf3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3

Ignoring that one, I decided to look at the other two. The SURT doesn't like the keyform and the identity as apparently, they don't match. So I converted the identity to ASCII (from hex) and compared it to the key name:

amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6.1.7600.16385_none_d1291f85838378a3

Server-Help-CHM.pmc_lh, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS

They aren't meant to be identical, but all of the identity matches the key name.

I think I need to take a look at what's calling the registry, so see if that's looking in the wrong place.

Could you navigate to the following folder:

C:\Windows\winsxs\Manifests

And copy all of the following files to your Desktop:

amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3
amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6
amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3 (I'm not sure whether the red character will be an apostrophe or the letter b - choose whichever is there, or both if that's the case)

Then zip these up and attach it to your next post please

Tom

trevor burdett · Dec 3, 2012

Wow Tom.... I've been places I never knew existed before??? lol
Hopefully, the zipped files are what you'rer after?
Trevor

trevor burdett · Dec 3, 2012

Oh Do dahs!!!
Only one uploaded, even though I selected the three of them :-(
Hopefully, the other two?

NoelDP · Dec 3, 2012

Tom - if you do a search on "cce3123abaed13c3" in the file, it is actually present in two lines (in Notepad++)
The first shows as ....

Code:

amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3++++ Server-Help-CHM.applocker_help, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS

The second shows as

Code:

amd64_server-help-chm.applocker_help_31bf3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3+++++ Server-Help-CHM.applocker_help, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS

tom982 · Dec 3, 2012

Hi Trevor,

Noel posted whilst I was typing this. Ignore this all for now!

What file was that in Noel? I'm still missing the corruption

lol, well I'm glad you're learning something then

This just isn't playing nicely at all! There's nothing wrong with those files. The name is correct, as is the contents.

Let's go for a much broader approach - scan your whole registry and hard drive for those names to see where they are! First of all, you will have to load your COMPONENTS hive. Method 2 of this:

Accessing the COMPONENTS sub-hive | niemiro's Website

Ignore the Winners section, it isn't needed here.

System Look

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

Double-click SystemLook.exe to run it.

Copy the content of the following codebox into the main textfield:

Code:

:filefind *amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3* :regfind *amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3*

Click the Look button to start the scan.

When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Tom

NoelDP · Dec 3, 2012

In the Components file - open it In Notepad++, it's line 10932
The second version is in line 19020

tom982 · Dec 3, 2012

Thanks Noel. I must have been looking at the wrong COMPONENTS hive then, I'm sure I searched for those exact strings and nothing came up, yet when I try now there's keys there. I need to organise my components collection!

One was in DerivedData and the other was in DerivedData\VersionIndex which I've never seen before. I didn't even know it existed before today!

Trevor, could you download this file:

https://dl.dropbox.com/u/16537616/TrevorComponents.zip

Extract it to your Desktop. There should be one file inside called COMPONENTS (no extension). Then navigate to:

C:\Windows\system32\config\

And rename the COMPONENTS file in there to COMPONENTS.old

Then copy and paste the COMPONENTS file on your Desktop to the config folder

Reboot, run the SURT and post the CheckSUR.persist.log please!

Tom

trevor burdett · Dec 4, 2012

Right, I've copied and pasted the latest COMPONENTS file into C:\windows\system\32\config\ as directed, (renaming the original one, but can't find the instructions to run the SURT so I can post the log :-(
I believe it was posted on another thread :-(
Mind you, I was a little concerned as on start-up the welcome screen 'hung' for about 10 seconds longer than before!!

Trevor

NoelDP · Dec 4, 2012

Just run the file you already downloaded - the filename starts Windows6.1-KB947821-v25

tom982 · Dec 4, 2012

Hi Trevor,

Not to worry, here are the instructions:

http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html

You've already downloaded it, so as Noel said just run the file that you have saved. Then follow step 4 to give us the logs

I can't think what might've caused the welcome screen to hang, but I don't think it was me! lol.

Tom

trevor burdett · Dec 4, 2012

Here goes.....

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-11-30 10:56

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3 identity and keyform do not match; keyform is wrong.

Summary:
Seconds executed: 545
Found 3 errors
CSI Corrupt Component Keyform Total count: 3

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-12-04 18:48

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6 identity and keyform do not match; keyform is wrong.

Summary:
Seconds executed: 596
Found 2 errors
CSI Corrupt Component Keyform Total count: 2

Trevor

tom982 · Dec 4, 2012

I'm an idiot! Aah, I can't believe I didn't spot if before. Here we have another bitflip, where what should be a 6 has changed, or flipped, to a 4.

amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d56cf76c4c6
amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6

Comparing the binary of the two, we have:

6: 00110110
4: 00110100

The penultimate digit has swapped from a 6 to a 4.

The other key was exactly the same.

I have fixed both problems

The instructions are slightly different this time. Navigate to this folder:

C:\Windows\system32\config\

Delete the file COMPONENTS - do not rename it, delete it. Do not touch COMPONENTS.old please!

Then download this file:

https://dl.dropbox.com/u/16537616/TrevorComponentsV2.zip

Extract it to your Desktop and copy the file COMPONENTS into this folder:

C:\Windows\system32\config\

Reboot, run the SURT and post the log please

Tom

trevor burdett · Dec 4, 2012

Um.... the computer says NO
I'm unable to delete the file 'COMPONENTS as the system is using it?
(I tried to rename it as well, but I got the same message)?

trevor burdett · Dec 4, 2012

Can I not copy and paste and just over-write it?

trevor burdett · Dec 5, 2012

Ha... I vrept up on it this morning and have managed to delete it and drag the newer version across from my desktop!!
I'll reboot and see how it goes!!!

trevor burdett · Dec 5, 2012

Here's the log!

Trevor

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-11-30 10:56

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.applocker_help_31`f3856ad364e35_6.1.7600.16385_none_cce3123abaed13c3 identity and keyform do not match; keyform is wrong.

Summary:
Seconds executed: 545
Found 3 errors
CSI Corrupt Component Keyform Total count: 3

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-12-04 18:48

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_server-help-chm.pmc_lh_31bf3856ad364e35_6,1.7600.16385_none_d1291f85838378a3 identity and keyform do not match; keyform is wrong.
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d54cf76c4c6 identity and keyform do not match; keyform is wrong.

Summary:
Seconds executed: 596
Found 2 errors
CSI Corrupt Component Keyform Total count: 2

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-12-05 09:13

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 518
No errors detected

NoelDP · Dec 5, 2012

YAY!
Well done, Tom and Trevor! Looks like that's sorted

trevor burdett · Dec 5, 2012

Thank you Guys.... have to admit that being some-one who has never ventured into the workings of my computer before, I feel strangely proud of my achievements!! lol
I will however, switch Auto Updates back on before I congratulate myself.....

Installing Updates Failure

Three-Toed Sloth

My Computer

New member

My Computer

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer

New member

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer

Three-Toed Sloth

My Computer

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer

New member

My Computer

&#1641;(&#865;&#3663;&#815;&#865;&#3663;)&#1782;

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Similar threads

٩(͡๏̯͡๏)۶

٩(͡๏̯͡๏)۶

٩(͡๏̯͡๏)۶

٩(͡๏̯͡๏)۶

٩(͡๏̯͡๏)۶