Issues installing Win 7 SP1, CSI payload files missing

wildfire20uk · Dec 2, 2012

Hi,

I'm having trouble installing Win 7 SP1, after running the system update readiness tool I got this output

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2012-12-02 11:53

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Payload File Missing 0x00000000 cryptsvc.dll amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f
(f) CSI Payload File Missing 0x00000000 crypt32.dll.mui amd64_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.17856_en-us_2c23a993d10498c7
(f) CSI Payload File Missing 0x00000000 crypt32.dll x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.22010_none_5dfca53e5537450a
(f) CSI Payload File Missing 0x00000000 cryptnet.dll amd64_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.1.7601.17856_none_75160d1f1293dd6c
(f) CSI Payload File Missing 0x00000000 crypt32.dll amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.22010_none_ba1b40c20d94b640
(f) CSI Payload File Missing 0x00000000 cryptsvc.dll amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211
(f) CSI Payload File Missing 0x00000000 crypt32.dll x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.17856_none_5d4df25d3c3479cc
(f) CSI Payload File Missing 0x00000000 crypt32.dll.mui amd64_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.22010_en-us_2cd25c74ea076405

Summary:
Seconds executed: 450
Found 8 errors
CSI Payload File Missing Total count: 8

whilst I know how to fix this I do not know where to get the files from, any ideas?

NoelDP · Dec 2, 2012

Please run an SFC /SCANNOW, as it may show fursther problems, and we may as well try fixing them all at once

SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and attach it to your reply

wildfire20uk · Dec 3, 2012

Hi,

I ran the SFC /SCANNOW but no errors were reported, I have attached the CBS.log file anyway though.

Cheers

NoelDP · Dec 3, 2012

SFC failed completely - there's no signs in that log of it having run at all.

I'll work on a fix protocol for the files we know about, and get back to you later.

wildfire20uk · Dec 3, 2012

Ok, cheers

NoelDP · Dec 3, 2012

I've uploaded a file - wfire.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
This should create a folder C:\wfire
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\wfire
hit the enter key - if you get a 'Not Found' error try
DIR D:\wfire
or
DIR E:\wfire

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\wfire <drive>:\windows\winsxs /y /i /s /v /h

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link
Also run a new MGADiag report, and post the result.

wildfire20uk · Dec 3, 2012

Hi,

I've run the SFC /SCANNOW again and also the System Update Readiness tool and attached the log files as requested.

here's a link to my skydrive https://skydrive.live.com/?cid=B1AF4D75671F4E76&id=B1AF4D75671F4E76!130

What do you mean by a MGADiag report?

Thanks again

NoelDP · Dec 3, 2012

(sorry - forgot to excise that... I mostly deal in activation/validaton errors!)

Both logs are clear now
Try installing SP1 from a downloaded installer - Download Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932) from Official Microsoft Download Center
You'll want the windows6.1-KB976932-X64.exe file

wildfire20uk · Dec 3, 2012

Hi,

Some progress, the SP1 install will now run however it stalls and states that installation cannot be completed until the computer is restarted, problem is no matter how many times I restart I get the same message. Same thing happens when I run windows update. I have attached screen shots as a PDF.

Thanks again

NoelDP · Dec 3, 2012

If you look in the Update History, there should be an entry for SP1 - right click on it and select Details.
What is the error code that shows?

I suspect that the problem will turn out to be the existence of a 'pending.xml' file which tells the system what changes are in progress - but it could also be that services are unloading or loading in the wrong order.

Please open Services.msc
If you click on the Startup type column header, what services are listed as 'Automatic (delayed start)' ??

wildfire20uk · Dec 4, 2012

Hi,

The is no entry in the update history for SP1 since replacing the missing files, however one update is showing as failed several times 'security update for microsoft visual C++ 2008 service pack 1 redistributable package (KB2538243)', the error code is 643.

the services that are auto (delayed start) are shown in the attached file.

Thanks again

NoelDP · Dec 4, 2012

There's one service which is missing from the list - the Media Player Network Sharing service....

Please run teh following command in a Command Prompt window, and post the result.

SC QC WMPNetworkSvc

( can't see it being at all relevant, but...)

wildfire20uk · Dec 4, 2012

Hi,

Ran the command and the output is shown in the image.

Cheers

NoelDP · Dec 4, 2012

please check for the existence of C:\Windows\winsxs\pending.xml
If you find it, please attach it to your reply.

wildfire20uk · Dec 4, 2012

Hi,

Yeah pending.xml exists but I can't view it as it has a weird file extension, it is attached

cheers

NoelDP · Dec 4, 2012

36MB of XML file! - it's the original file created by an attempted SP1 install (I think) which failed during the prep process. I don't think it's affecting anything, as the file extension tends to indicate that the process was interrupted before it was needed.

Please run the following commands in a COmmand prompt window - post the results....

DIR C:\Windows\pending.* /S
DIR C:\Windows\pending.* /AH /S
DIR C:\Windows\pending.* /AS /S

Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

wildfire20uk · Dec 4, 2012

Hi,

Here is the response

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>DIR C:\Windows\pending.* /S
Volume in drive C has no label.
Volume Serial Number is D0E6-353B

Directory of C:\Windows\winsxs

29/09/2012 15:25 37,823,599 pending.xml.01cd9e572d6e67b0
1 File(s) 37,823,599 bytes

Directory of C:\Windows\winsxs\amd64_microsoft-windows-mfgrl_31bf3856ad364e35_6
.1.7600.16385_none_b557b2a5fc14c4c1

10/06/2009 20:44 14,972 Pending.GRL
1 File(s) 14,972 bytes

Total Files Listed:
2 File(s) 37,838,571 bytes
0 Dir(s) 153,940,275,200 bytes free

C:\Windows\system32>DIR C:\Windows\pending.* /AH /S
Volume in drive C has no label.
Volume Serial Number is D0E6-353B
File Not Found

C:\Windows\system32>DIR C:\Windows\pending.* /AS /S
Volume in drive C has no label.
Volume Serial Number is D0E6-353B
File Not Found

C:\Windows\system32>

cheers again

NoelDP · Dec 5, 2012

There's nothing amiss thrre, that we didn't already know about.
I'm going to dive into your CBS log a bit deeper in the hpe of finding something useful

NoelDP · Dec 5, 2012

Here's the problem lines from your earlier CBS log....
(more for ease of access, so I don't lose them, than anything else!)

Code:

 Line 21: 2012-12-03 11:27:58, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x10feea0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17821248 (0x010fee40))[gle=0xd0190005]
 Line 22: 2012-12-03 11:27:58, Error                 CSI    [EMAIL="00000008@2012/12/3:11:27:58.122"]00000008@2012/12/3:11:27:58.122[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 26: 2012-12-03 11:27:58, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x10feea0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17821720 (0x010ff018))[gle=0xd0190005]
 Line 27: 2012-12-03 11:27:58, Error                 CSI    [EMAIL="0000000a@2012/12/3:11:27:58.184"]0000000a@2012/12/3:11:27:58.184[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 31: 2012-12-03 11:27:58, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
 Line 64: 2012-12-03 11:38:07, Error                 CSI    00000011 (F) E_UNEXPECTED #13701# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 65: 2012-12-03 11:38:07, Error                 CSI    [EMAIL="00000012@2012/12/3:11:38:07.754"]00000012@2012/12/3:11:38:07.754[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 67: 2012-12-03 11:38:07, Error                 CSI    00000013 (F) E_UNEXPECTED #13699# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 22 (0x00000016), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x8000ffff]
 Line 68: 2012-12-03 11:38:07, Error                 CSI    00000014 (F) E_UNEXPECTED #13698# 218453 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000016, pSink = NULL, disp = 0)
 Line 100: 2012-12-03 13:09:19, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x18deb10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 26077872 (0x018deab0))[gle=0xd0190005]
 Line 101: 2012-12-03 13:09:19, Error                 CSI    [EMAIL="00000008@2012/12/3:13:09:19.429"]00000008@2012/12/3:13:09:19.429[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 105: 2012-12-03 13:09:19, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x18deb10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 26078344 (0x018dec88))[gle=0xd0190005]
 Line 106: 2012-12-03 13:09:19, Error                 CSI    [EMAIL="0000000a@2012/12/3:13:09:19.460"]0000000a@2012/12/3:13:09:19.460[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 110: 2012-12-03 13:09:19, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
 Line 144: 2012-12-03 13:19:19, Error                 CSI    00000013 (F) E_UNEXPECTED #207# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 145: 2012-12-03 13:19:19, Error                 CSI    [EMAIL="00000014@2012/12/3:13:19:19.639"]00000014@2012/12/3:13:19:19.639[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 147: 2012-12-03 13:19:19, Error                 CSI    00000015 (F) E_UNEXPECTED #205# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 22 (0x00000016), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x8000ffff]
 Line 148: 2012-12-03 13:19:19, Error                 CSI    00000016 (F) E_UNEXPECTED #204# 165374 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000016, pSink = NULL, disp = 0)
 Line 180: 2012-12-03 14:47:50, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x182eed0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 25357936 (0x0182ee70))[gle=0xd0190005]
 Line 181: 2012-12-03 14:47:50, Error                 CSI    [EMAIL="00000008@2012/12/3:14:47:50.693"]00000008@2012/12/3:14:47:50.693[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 185: 2012-12-03 14:47:50, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x182eed0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 25358408 (0x0182f048))[gle=0xd0190005]
 Line 186: 2012-12-03 14:47:50, Error                 CSI    [EMAIL="0000000a@2012/12/3:14:47:50.740"]0000000a@2012/12/3:14:47:50.740[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 190: 2012-12-03 14:47:50, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
 Line 224: 2012-12-03 14:57:50, Error                 CSI    00000013 (F) E_UNEXPECTED #207# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 225: 2012-12-03 14:57:50, Error                 CSI    [EMAIL="00000014@2012/12/3:14:57:50.893"]00000014@2012/12/3:14:57:50.893[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 227: 2012-12-03 14:57:51, Error                 CSI    00000015 (F) E_UNEXPECTED #205# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 22 (0x00000016), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x8000ffff]
 Line 228: 2012-12-03 14:57:51, Error                 CSI    00000016 (F) E_UNEXPECTED #204# 166166 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000016, pSink = NULL, disp = 0)
 Line 260: 2012-12-03 16:01:53, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x168eb10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 23653040 (0x0168eab0))[gle=0xd0190005]
 Line 261: 2012-12-03 16:01:53, Error                 CSI    [EMAIL="00000008@2012/12/3:16:01:53.237"]00000008@2012/12/3:16:01:53.237[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 265: 2012-12-03 16:01:53, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x168eb10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 23653512 (0x0168ec88))[gle=0xd0190005]
 Line 266: 2012-12-03 16:01:53, Error                 CSI    [EMAIL="0000000a@2012/12/3:16:01:53.283"]0000000a@2012/12/3:16:01:53.283[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 270: 2012-12-03 16:01:53, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
 Line 429: 2012-12-03 16:02:10, Error                 CSI    0000001a (F) STATUS_RM_NOT_ACTIVE #1578# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = 0, handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ), oa = @0xcbd638->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[57]"\SystemRoot\WinSxS\Temp\b0bd628d6fd1cd01020000007005c40c\"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xcbd6c0, as = (null), fa = (FILE_ATTRIBUTE_DIRECTORY), sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
 Line 431: 2012-12-03 16:02:10, Error                 CSI    [EMAIL="0000001b@2012/12/3:16:02:10.818"]0000001b@2012/12/3:16:02:10.818[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
 Line 435: 2012-12-03 16:02:11, Error                 CSI    0000001c (F) STATUS_RM_NOT_ACTIVE #1577# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenFilesystemDirectory(flags = 0, da = (FILE_GENERIC_READ), dn = [ml:196{98},l:114{57}]"\SystemRoot\WinSxS\Temp\b0bd628d6fd1cd01020000007005c40c\", sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)
 Line 445: 2012-12-03 16:02:11, Error                 CSI    00000022 (F) E_UNEXPECTED #1619# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 446: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="00000023@2012/12/3:16:02:11.161"]00000023@2012/12/3:16:02:11.161[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 452: 2012-12-03 16:02:11, Error                 CSI    00000025 (F) E_UNEXPECTED #1637# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 453: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="00000026@2012/12/3:16:02:11.769"]00000026@2012/12/3:16:02:11.769[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 459: 2012-12-03 16:02:11, Error                 CSI    00000028 (F) E_UNEXPECTED #1655# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 460: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="00000029@2012/12/3:16:02:11.816"]00000029@2012/12/3:16:02:11.816[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 466: 2012-12-03 16:02:11, Error                 CSI    0000002b (F) E_UNEXPECTED #1673# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 467: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="0000002c@2012/12/3:16:02:11.863"]0000002c@2012/12/3:16:02:11.863[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 473: 2012-12-03 16:02:11, Error                 CSI    0000002e (F) E_UNEXPECTED #1691# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 474: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="0000002f@2012/12/3:16:02:11.894"]0000002f@2012/12/3:16:02:11.894[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 480: 2012-12-03 16:02:11, Error                 CSI    00000031 (F) E_UNEXPECTED #1709# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 481: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="00000032@2012/12/3:16:02:11.941"]00000032@2012/12/3:16:02:11.941[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 487: 2012-12-03 16:02:11, Error                 CSI    00000034 (F) E_UNEXPECTED #1727# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 488: 2012-12-03 16:02:11, Error                 CSI    [EMAIL="00000035@2012/12/3:16:02:11.988"]00000035@2012/12/3:16:02:11.988[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 494: 2012-12-03 16:02:12, Error                 CSI    00000037 (F) E_UNEXPECTED #1745# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 495: 2012-12-03 16:02:12, Error                 CSI    [EMAIL="00000038@2012/12/3:16:02:12.019"]00000038@2012/12/3:16:02:12.019[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 501: 2012-12-03 16:02:12, Error                 CSI    0000003a (F) E_UNEXPECTED #1763# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 502: 2012-12-03 16:02:12, Error                 CSI    [EMAIL="0000003b@2012/12/3:16:02:12.159"]0000003b@2012/12/3:16:02:12.159[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 508: 2012-12-03 16:02:12, Error                 CSI    0000003d (F) E_UNEXPECTED #1781# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 509: 2012-12-03 16:02:12, Error                 CSI    [EMAIL="0000003e@2012/12/3:16:02:12.191"]0000003e@2012/12/3:16:02:12.191[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 515: 2012-12-03 16:02:12, Error                 CSI    00000040 (F) E_UNEXPECTED #1799# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 516: 2012-12-03 16:02:12, Error                 CSI    [EMAIL="00000041@2012/12/3:16:02:12.237"]00000041@2012/12/3:16:02:12.237[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 543: 2012-12-03 16:13:12, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x107eea0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17296960 (0x0107ee40))[gle=0xd0190005]
 Line 544: 2012-12-03 16:13:12, Error                 CSI    [EMAIL="00000008@2012/12/3:16:13:12.516"]00000008@2012/12/3:16:13:12.516[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 548: 2012-12-03 16:13:12, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x107eea0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17297432 (0x0107f018))[gle=0xd0190005]
 Line 549: 2012-12-03 16:13:12, Error                 CSI    [EMAIL="0000000a@2012/12/3:16:13:12.953"]0000000a@2012/12/3:16:13:12.953[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
 Line 553: 2012-12-03 16:13:12, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
 Line 138892: 2012-12-03 16:33:33, Error                 CSI    00001612 (F) E_UNEXPECTED #1490943# from Windows::COM::CComponentStore::InternalTransact(...)[gle=0x8000ffff]
 Line 138893: 2012-12-03 16:33:33, Error                 CSI    [EMAIL="00001613@2012/12/3:16:33:33.035"]00001613@2012/12/3:16:33:33.035[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\com\store.cpp(4430): Error E_UNEXPECTED originated in function Windows::COM::CComponentStore::InternalTransact expression: ((HRESULT)0x8000FFFFL)
 Line 138895: 2012-12-03 16:33:33, Error                 CSI    00001614 (F) E_UNEXPECTED #1490941# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 22 (0x00000016), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x8000ffff]
 Line 138896: 2012-12-03 16:33:33, Error                 CSI    00001615 (F) E_UNEXPECTED #1490940# 440058 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000016, pSink = NULL, disp = 0)

Please try running a new SFC /SCANNOW, and post a new log - I'd like to try comparing them.
Please also run teh following commands....

DIR C:\Windows\System32\config
ICACLS C:\Windows\System32\config
ICACLS C:\Windows\System32\config\COMPONENTS
REG QUERY HKU

and post teh results.

Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

wildfire20uk · Dec 10, 2012

Hi,

Sorry for the delayed reply I've been a little busy at work, here's the results from running the commands and I've attached the CBS log file.

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>DIR C:\Windows\System32\config
Volume in drive C has no label.
Volume Serial Number is D0E6-353B

Directory of C:\Windows\System32\config

10/12/2012 12:18 <DIR> .
10/12/2012 12:18 <DIR> ..
29/09/2012 21:33 28,672 BCD-Template
10/12/2012 13:13 33,292,288 COMPONENTS
10/12/2012 12:28 262,144 DEFAULT
14/07/2009 02:34 <DIR> Journal
29/11/2012 08:32 <DIR> RegBack
10/12/2012 12:19 262,144 SAM
10/12/2012 12:27 262,144 SECURITY
10/12/2012 13:19 58,195,968 SOFTWARE
10/12/2012 13:13 13,107,200 SYSTEM
29/09/2012 12:34 <DIR> systemprofile
06/10/2012 15:44 <DIR> TxR
02/12/2012 21:07 262,144 userdiff
8 File(s) 105,672,704 bytes
6 Dir(s) 148,918,640,640 bytes free

C:\Windows\system32>ICACLS C:\Windows\System32\config
C:\Windows\System32\config NT SERVICE\TrustedInstaller

CI)(F)
NT AUTHORITY\SYSTEM

OI)(CI)(F)
BUILTIN\Administrators

OI)(CI)(F)
CREATOR OWNER

OI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\System32\config\COMPONENTS
C:\Windows\System32\config\COMPONENTS NT AUTHORITY\SYSTEM

I)(F)
BUILTIN\Administrators

I)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>REG QUERY HKU

HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-21-2250376911-2498546207-1616232988-1000
HKEY_USERS\S-1-5-21-2250376911-2498546207-1616232988-1000_Classes
HKEY_USERS\S-1-5-21-2250376911-2498546207-1616232988-1001
HKEY_USERS\S-1-5-21-2250376911-2498546207-1616232988-1001_Classes
HKEY_USERS\S-1-5-18

C:\Windows\system32>

Cheers

Issues installing Win 7 SP1, CSI payload files missing

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Similar threads