Unable to install update kb2756921, problem with winsxs(corrupted)

[gorod]

I try to install update kb2756921 and can't do it. (from wu, manual, use kb947821)
I have an error with .net 3.5.1 component and winsxs
I start explore a problem and get this:

after trying to update
screenshot wu in attach (error 80073712)

after sfc working (sorry, russian windows)

C:\Windows\system32>sfc /scannow

Начато сканирование системы. Этот процесс может занять некоторое время.

Начало стадии проверки при сканировании системы.
Проверка 100% завершена.
Защита ресурсов Windows обнаружила поврежденные файлы, но не может восстановить
некоторые из них.
Сведения см. в журнале CBS.log windir\Logs\CBS\CBS.log. Например:
C:\Windows\Logs\CBS\CBS.log

unable to restore

after enable-disable NetFx3: (error 14098, winsxs corrupted)
C:\Windows\system32>DISM /online /enable-feature /FeatureName:NetFx3
Cистема DISM
Версия: 6.1.7600.16385
Версия образа: 6.1.7600.16385

Включение функций (enable ok)
[==========================100.0%==========================]
Операция успешно завершена.
C:\Windows\system32>DISM /online /disable-feature /FeatureName:NetFx3
Cистема DISM
Версия: 6.1.7600.16385
Версия образа: 6.1.7600.16385
Ошибка: 14098
Хранилище компонентов повреждено. (disable not ok)
Файл журнала DISM находится по адресу C:\Windows\Logs\DISM\dism.log

Also it impossible run windows install update mode (winsxs corrupted, error
screenshots and logs in attach) (i'll adde later)

sfcreport.txt
findstr /C:"[SR]" /c:"Hashes for file member" /c:"Manifest hash for component" /c:"Unable to load manifest for component" /c:"Expected:" /c:"Found:" /c:"Store corruption detected in function" /c:"FileHashMismatch on resource"/c:"WARNING: Deleting invalid luacdf" /c:"Repair results created:" /c:"Looking for manifest in Backup Dir..." %windir%\logs\cbs\cbs.log > %userprofile%\Desktop\sfcreport.txt

sfcreport2.txt
findstr /C:"[SR]" /c:"Hashes for file member" /c:"Manifest hash for component" /c:"Unable to load manifest for component" /c:"Expected:" /c:"Found:" /c:"Store corruption detected in function" /c:"FileHashMismatch on resource"/c:"WARNING: Deleting invalid luacdf" /c:"Repair results created:" /c:"Looking for manifest in Backup Dir..." /c:"Error " %windir%\logs\cbs\cbs.log > %userprofile%\Desktop\sfcreport.txt

 

[NoelDP]

Thanks for reposting - welcome to the forum!

This is from the SFCDetails file

2013-02-23 20:13:57, Info                  CSI    00000455 [SR] Repairing 1 components
2013-02-23 20:13:57, Info                  CSI    00000456 [SR] Beginning Verify and Repair transaction
2013-02-23 20:13:57, Info                  CSI    00000459 [SR] Cannot verify component files for system.runtime.serialization.resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture = [l:10{5}]"ru-ru", VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (TRUE)

It appears not to have been found by CheckSUR, so we'll have to do a manual replacement.
The problem here is that I don't have a Russian copy of the appropriate file.

Can you get hold of either an installation disk (any edition of Windows 7) or do you have another PC you can copy the file from?
If we assume that you have another PC, copy the files

C:\Windows\Winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru*.*
to your machine - put it in the folder C:\goraa\Manifests (which you will need to create)


Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\goraa
hit the enter key - if you get a 'Not Found' error try
DIR D:\goraa
or
DIR E:\goraa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\goraa <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

It may be worth running a new CheckSUR scan as well - post the CheckSUR.log file.

 

[gorod]

Thanks for helping. I'll try to found good copies at my work pc.
I need both 2 files dll and manifest? Which is wrong?

Other Bad news, whis problem it is not only one problem. When a setup msconfig to clean run (diagnostic errors), after that some services unable restore starting, i tick standart start, but nothing changed. In services.msc i tryed to change type of start - and see something like this (translating from ru) : "The system can not find the path specified", but it is standart services. Other services, exept 20 of 24 turned offed reconfiguring well. Screenshots attached. It is possibe to change start type in regedit. Mayby i need reset some acces rights.

i try to resolve a problem and get one problem more. =(

Maybe i do something wrong with access rights (i change it for regedit, this way Full Control Permission to Delete or Edit Restricted Windows Registry, but when i set it back)

Also at first i have two errors: (before posting here)

First in checkshur - explorer, i fixit by deleting ie10 and lang packs (for than at first i run change rights for regedit, but i don't do anything in registry)
checksur_pre-fixed.txt (before fixing, after deleting packages all ok)

Second - this error http://social.technet.microsoft.com/Forums/ru/windows7ru/thread/ec258b66-9b39-45e2-8a33-2a8d86a935e5 (just deleting folder files)

Only thing i want, restore system state, when it is possible installing windows by updatings.

 

[NoelDP]

It seems to me that it's likely that your earlier attempts to fix the problem may well have made it worse.
The registry errors in that CheckSUR report are unusual to say the least - and may result from other system problems such as the use of Language Packs on systems not supposed to take them.

You may find that a repair install is going to be the easiest option now.

If you want to carry on trying to fix this - all you need for the moment is the .manifest file - we won't know if anything else is wrong until that is corrected.
Then we can worry about the rest

 

[gorod]

I change both files. (dll and manifest). But error still stays on.

 

[gorod]

And please tell me default permissioms and owner for regedit.exe and services.msc.
I want to resolve problem with starting of services.

 

[NoelDP]

Interesting error in the SFC....

2013-02-25 13:55:30, Info                  CSI    000001f0 Manifest hash for component [ml:280{140},l:196{98}]"msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993" does not match expected value. 
 Expected:{l:32 b:12927a6554382a9829345d58ad8164dff1271f[B]42[/B]97169f9975dd57[B]42[/B]abe9e800}
    Found:{l:32 b:12927a6554382a9829345d7dad8164dff1271f[B]c6[/B]97169f9975dd57[B]e6[/B]abe9e800}.

I'd have expected a greater difference if there were anything odd about the file - instead there are just two characters (hex pairs)

I'm beginning to suspect that the problem is actually in the registry.
Please run the following commands on at least two machines, and compare the output

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS
REG QUERY HKLM\COMPONENTS\DerivedData\Components\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993 /S
REG UNLOAD HKLM\COMPONENTS
 
.

 

[gorod]

windows 7 pro 32bit russian sp1 lenovo x200

C:\Windows\system32>REG QUERY HKLM\COMPONENTS\DerivedData\Components\msil_system
.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd002454
4b2f993 /S

HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.runtime.seriali
zation.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993
identity REG_BINARY 73797374656D2E72756E74696D652E73657269616C697A6174
696F6E2E7265736F75726365732C2043756C747572653D72752D72752C2056657273696F6E3D362E
312E373630302E31363338352C205075626C69634B6579546F6B656E3D6237376135633536313933
34653038392C2050726F636573736F724172636869746563747572653D6D73696C
S256H REG_BINARY 388FD1AB18D804C3327AE8586AF17349D39CB625E9BAFAEBE3E0B
065C04C1D3C
c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_f57dda463e42efcc
REG_BINARY
c!wcf-http-ac..anguagepack_31bf3856ad364e35_6.1.7600.16385_b479f1bae3b15d4d
REG_BINARY
c!wcf-nonhttp..anguagepack_31bf3856ad364e35_6.1.7600.16385_9a80c3f00e5928b6
REG_BINARY
f!system.runtime.serializat_515882fe013793b6 REG_BINARY 53007900730074
0065006D002E00520075006E00540069006D0065002E00530065007200690061006C0069007A0061
00740069006F006E002E005200650073006F00750072006300650073002E0064006C006C00
c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7601.17514_f7aeee0e3b317366
REG_BINARY
c!wcf-http-ac..anguagepack_31bf3856ad364e35_6.1.7601.17514_b6ab0582e09fe0e7
REG_BINARY
c!wcf-nonhttp..anguagepack_31bf3856ad364e35_6.1.7601.17514_9cb1d7b80b47ac50
REG_BINARY


C:\Windows\system32>REG UNLOAD HKLM\COMPONENTS
Операция успешно завершена.

 

[gorod]

windows 7 64 bit russian sp1 hp 5320m
C:\windows\system32>REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONEN
TS
Операция успешно завершена.

C:\windows\system32>REG QUERY HKLM\COMPONENTS\DerivedData\Components\msil_system
.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd002454
4b2f993 /S

HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.runtime.seriali
zation.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993
identity REG_BINARY 73797374656D2E72756E74696D652E73657269616C697A6174
696F6E2E7265736F75726365732C2043756C747572653D72752D72752C2056657273696F6E3D362E
312E373630302E31363338352C205075626C69634B6579546F6B656E3D6237376135633536313933
34653038392C2050726F636573736F724172636869746563747572653D6D73696C
S256H REG_BINARY 12927A6554382A9829345D7DAD8164DFF1271FC697169F9975DD5
7E6ABE9E800
c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_519c75c9f6a06102
REG_BINARY
c!wcf-http-ac..anguagepack_31bf3856ad364e35_6.1.7600.16385_10988d3e9c0ece83
REG_BINARY
c!wcf-nonhttp..anguagepack_31bf3856ad364e35_6.1.7600.16385_f69f5f73c6b699ec
REG_BINARY
f!system.runtime.serializat_515882fe013793b6 REG_BINARY 53007900730074
0065006D002E00520075006E00540069006D0065002E00530065007200690061006C0069007A0061
00740069006F006E002E005200650073006F00750072006300650073002E0064006C006C00
c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7601.17514_53cd8991f38ee49c
REG_BINARY
c!wcf-http-ac..anguagepack_31bf3856ad364e35_6.1.7601.17514_12c9a10698fd521d
REG_BINARY
c!wcf-nonhttp..anguagepack_31bf3856ad364e35_6.1.7601.17514_f8d0733bc3a51d86
REG_BINARY


C:\windows\system32>REG UNLOAD HKLM\COMPONENTS

 

[NoelDP]

Very odd results - the SHA256 values for the two are vastly different (and should be the same, so far as I know)

I suspect that the second machine is the problem one??

 

[gorod]

Hm. No. second machine works well. Sfc ok. First - 32 bit, Second 64 bit.
I'll try one more 64bit machine.

 

[NoelDP]

Ah! - that would explain the difference!
The files are going to be different for the different bitnesses of Windows.

 

[gorod]

Another Windows 7 64 bit sp1 russian results: (hp6465b)

C:\windows\system32>REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONEN
TS
Операция успешно завершена.

C:\windows\system32>REG QUERY HKLM\COMPONENTS\DerivedData\Components\msil_system
.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd002454
4b2f993 /S

HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.runtime.seriali
zation.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993
identity REG_BINARY 73797374656D2E72756E74696D652E73657269616C697A6174
696F6E2E7265736F75726365732C2043756C747572653D72752D72752C2056657273696F6E3D362E
312E373630302E31363338352C205075626C69634B6579546F6B656E3D6237376135633536313933
34653038392C2050726F636573736F724172636869746563747572653D6D73696C
S256H REG_BINARY 12927A6554382A9829345D7DAD8164DFF1271FC697169F9975DD5
7E6ABE9E800
c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7601.17514_53cd8991f38ee49c
REG_BINARY
c!wcf-http-ac..anguagepack_31bf3856ad364e35_6.1.7601.17514_12c9a10698fd521d
REG_BINARY
c!wcf-nonhttp..anguagepack_31bf3856ad364e35_6.1.7601.17514_f8d0733bc3a51d86
REG_BINARY
f!system.runtime.serializat_515882fe013793b6 REG_BINARY 53007900730074
0065006D002E00520075006E00540069006D0065002E00530065007200690061006C0069007A0061
00740069006F006E002E005200650073006F00750072006300650073002E0064006C006C00


C:\windows\system32>REG UNLOAD HKLM\COMPONENTS
Операция успешно завершена.

 

[NoelDP]

S256H REG_BINARY 12927A6554382A9829345D7DAD8164DFF1271FC697169F9975DD5
7E6ABE9E800

S256H REG_BINARY 12927A6554382A9829345D7DAD8164DFF1271FC697169F9975DD5
7E6ABE9E800

They are the same - so it's a real difference between the two files (I think!)

I need to play a little - back later

 

[gorod]

What possible things should i do to fix this problem?

 

[NoelDP]

Ooops! - sorry about that. I seem to have let this one slip


Can you please run a new SFC /SCANNOW and post the new CBS.log file (the whole file please, not just the SFCdetails extract).

It may give me more to work with.

 

[gorod]

Done =)

 

[NoelDP]

The only error remaining n the CBS.log is this one.....

2013-03-09 13:43:55, Info                  CSI    00000325 [SR] Repairing 1 components
2013-03-09 13:43:55, Info                  CSI    00000326 [SR] Beginning Verify and Repair transaction
2013-03-09 13:43:55, Info                  CSI    00000327 Manifest hash for component [ml:280{140},l:196{98}]"msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993" does not match expected value. 
 Expected:{l:32 b:12927a6554382a9829345d58ad8164dff1271f4297169f9975dd5742abe9e800}
 Found:{l:32 b:12927a6554382a9829345d7dad8164dff1271fc697169f9975dd57e6abe9e800}.
2013-03-09 13:43:55, Info                  CSI    00000328 Unable to load manifest for component [ml:280{140},l:196{98}]"msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_ru-ru_ddd0024544b2f993"
2013-03-09 13:43:55, Info                  CSI    00000329 [SR] Cannot verify component files for system.runtime.serialization.resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture = [l:10{5}]"ru-ru", VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (TRUE)
2013-03-09 13:43:55, Info                  CSI    0000032a Repair results created:
POQ 136 starts:
 
POQ 136 ends.
2013-03-09 13:43:55, Info                  CSI    0000032b [SR] Repair complete

I'll post a fix for this - probably tomorrow, now, and we'll see where that gets us

 

[NoelDP]

Ah - I've just realised, that there's a problem, here.

The missing file is a Russian-language-specific version - and I don't have a copy of such a disk to hand.
Do you have such a disk? - preferably the RTM release one, and the edition doesn't matter.
Do you have access to another PC with Win7 (Russian) installed, that you can copy the file from?

 

[gorod]

Yes, i have a disk with rtm release, also i have a pc with windows 7 x64 russian sp1 installed.