CI.dll problem running updates after system restore

fepettersen said:

After a complete system restore everything works fine until Windows update start to configure over 100 updates. The computer restarts and i get the error message:
"Windows failed to start. A recent hardware or Software change might be the cause...
... File: CI.dll Status: 0x0000428 Info: Windows cannot verify the digital signature of this file

i'm not able to get into windows after this (not possible with safe mode or last good configuratio options). The only way is to boot from my recovery disks. I have four system recoveried from discs and this happens every time after installing updates. Before the updates are installed things seem to work fine except a couple of BSOD problems but I'm able to come back in windows again.

I'm not very experienced with computer problems like this and have tried to search internet for similar issues without getting any help from that

No, everything is not fine if the system is experiencing BSODs before any updates are installed.

ci.dll is the Code Intergrity Module for checking drivers. What appears to be occurring is that a driver that can't be verified as being digitally signed is causing the BSODs.
I suspect that a driver is included in the installation of the over 100 updates.

Recommend that you first determine why the BSODs are occurring.
Please see the Blue Screen of Death (BSOD) Posting Instructions
Then post the requested .zip file and system specs to the Crashes and Debugging forum.

And, from 10 plus years experience of helping Users with updating issues, I strongly suggest that one never install a massive amount of updates in one updating session.

Do them in groups of 10 at the most so if one update causes an issue you can determine which one it is much quicker than if 100 updates are installed simultaneously.


Please note, that when you get the BSODs resolved the system can be updated much more efficiently by installing Service Pack 1 as it contains almost all of the updates issued for Windows 7 so far.

The full, standalone of SP1 is supposed to contain all of the prerequisite updates needed to install SP1. However, due to MS rushing out Win 7 SP1 before it was actually ready for release, they may/will not all be present.

This Microsoft Knowledge Base article shows what is required prior to SP1 being offered by Windows Update -
You do not have the option of downloading Windows 7 SP1 when you use Windows Update to check for updates

Under Method 2: Check for pending updates, there are 3 updates listed.

KB976902 is included with the full, standalone of SP1. There is no need to download it.

KB2534366 is not included and the link in the KB to download it from is incorrect.
This is the correct link: Windows 7 Sp1 installation fails on a machine with all Language packs installed Error 0xC0000009A

KB2533552 is also, not included : An update that prevents a "0xC0000034" error message when you try to install Windows 7 SP1 or Windows Server 2008 R2 SP1 is available

Install the 2 updates separately, not at the same time, restarting the system after installing the first update.

Then check Method 3, 4, and 5, too, on the above KB article.
When all prerequisites have been met ...

Method 6 provides the link to the full, standalone of Windows 7 Service Pack 1.
You need to download and save windows6.1-KB976932-X64.exe , which is SP1 for your Win 7 x64 systems.

When the download completes create a folder on the root drive, the drive where Windows is installed on, usually, C:\
Name it SP or ServicePack or whatever suits yer fancy.

Move windows6.1-KB976932-X64.exe to the newly created folder.
Right click windows6.1-KB976932-X64.exe, choose Properties.
Click the Unblock button towards the bottom right of the windows, then click Apply, then OK.

Now right click windows6.1-KB976932-X64.exe, choose 'Run as administrator', and agree to the UAC prompt.
Do the required restarts.
After SP1 is installed, install the remaining offered updates.

That will get your system updated until the next round of updates are offered tomorrow, June 14th.

Please download and save the System Update Readiness Tool (CheckSUR) for Windows x64 -

System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [May 2011]

When the download is finished close all open programs and browsers.
Run CheckSUR (Windows6.1-KB947821-v12-x64.msu).

After it finishes running attach one of the logs that it created so we can see if there are any system consistency issues.

They are located at and named -

Windows\Logs\CBS\CheckSUR.log
Windows\Logs\CBS\CheckSUR.persist.log

Attached is FixFiles.zip. Extract the .zip file to the Desktop.
This will create a folder on the Desktop named FixFiles.
Create the following folders at these specific locations if they do not already exist

Windows\Temp\CheckSUR\servicing packages

Move the files in FixFiles to servicing packages.
Rerun CheckSUR now and it should replace the missing files.
Restart the system afterwards.

Open the CheckSUR.log, located at Windows\Logs\CBS\CheckSUR.log, to ensure that the missing content has been replaced.

If it has, then SP1 should install now. Do not install it along with any other updates, install it by itself only, please.

To be clear here, you created the following subfolders at Windows\Temp

CheckSUR\servicing packages

So now, in the Windows directory, the path to servicing packages appears as

Windows\Temp\CheckSUR\servicing packages

Then you moved the files extracted from FixFiles.zip to servicing packages, correct ?

Attached is the 2 files that are still missing. I've renamed them to match what's missing this time as they did include 'rtm' previously.

Extract KB2544521.zip to the Desktop. Open the KB2544521 folder and move the files to Windows\Temp\CheckSUR\servicing packages, then rerun CheckSUR once more.
Restart after CheckSUR finishes replacing the files.
Rerun it once again to ensure that the files were replaced.

Check the CheckSUR.log and if there are no more errors showing, you should be able to get SP1 installed now.

OK, although the CheckSUR.log shows that it fixed the missing file, let's give it one more shot before replacing it manually.
Attached is Files.zip. Extract it to the Desktop. Open the Files folder and move all 4 files to Windows\Temp\CheckSUR\servicing packages
Run CheckSUR once more and it should replace the files.
Restart the system, run CheckSUR once again, then check the log to see if any files are still missing, please.