Jump to content

Many (log) errors on Install

Dogway

By Dogway
in nLite

 Share

Recommended Posts

Dogway

Dogway

Posted
Posted (edited)

I'm getting many log errors in my WINDOWS folder after installation. Here is my last_session.ini

There are a few concerning KB builds all with the same error message:

1.042: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2
6.920: In Function TestVolatileFlag, line 11825, RegOpenKeyEx failed with error 0x2
6.920: In Function TestVolatileFlag, line 11857, RegOpenKeyEx failed with error 0x2

The KB are:

KB942288-v3.log
KB2360937.log
KB2570791.log
KB2570947.log
KB2603381.log
KB2698365.log
KB2736233.log

I also seem to get numerous errors in dd_XPS_LP.txt and dd_XPS.txt, and an array of logs from net framework I believe named similar to dd_wcf_retCA7AF8.txt with next errors:

ServiceModelReg [04:34:51:662]: Warning: Could not detect IIS installation or IIS is disabled, skipping the Web Host Script Mappings component since it depends upon IIS to function properly.
(...)
ServiceModelReg [04:34:51:732]: Installing: Machine.config Section Groups and Handlers
ServiceModelReg [04:34:51:782]: Warning: Configuration section system.serviceModel already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.
ServiceModelReg [04:34:51:792]: Warning: Configuration section system.runtime.serialization already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.
ServiceModelReg [04:34:51:802]: Warning: Configuration section system.serviceModel.activation already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.

At the bottom it says completed successfully, but I could not tell the same since I'm getting also many errors in the Event Viewer (only included one instance of repetitive entries):

Error	22/03/2013	4:42:52	.NET Runtime	None	0	Not Available	DOGWAY
Warning	22/03/2013	4:39:55	System.ServiceModel.Install 3.0.0.0	None	0	Not Available	DOGWAY
Info	22/03/2013	4:39:36	ASP.NET 2.0.50727.0	Setup 	1019	Not Available	DOGWAY
Warning	22/03/2013	4:39:36	ASP.NET 2.0.50727.0	Setup 	1020	Not Available	DOGWAY
Warning	22/03/2013	4:09:22	WinMgmt	None	5603	SYSTEM	DOGWAY
Warning	22/03/2013	4:08:02	WinMgmt	None	63	SYSTEM	DOGWAY

Here is a pack containing all my errors for details.

edit: I'm also checking an old build, and I get the exact same errors, so it's not something tied to anything I have specifically done, but rather a workflow issue. I would think this is the normal behavior when installing OS in a VM?

Edited by Dogway

Dogway

Dogway

Posted
  • Author
Posted

yes, but this is rather general errors from an unattended installation, that's why I posted here.

I think everything is fine nlite, that's why I posted my script.

Dogway

Dogway

Posted
  • Author
Posted

Ok, the WinMgmt ID5603 error is just a known warning explained here. Probably because I'm on the Administrator account.

I would like to hear about the other errors, specially this one:

Warning 22/03/2013 4:39:55 System.ServiceModel.Install 3.0.0.0 None 0 Not Available DOGWAY

And also about the Windows Installer 4.5 (KB942288-v3.log) that is driving me mad. I can't install it, well it gets installed because I check the version on command line by typing msiexec and it's indeed v4.5, but the log is always full of errors.

Should I integrate it? add in RunOnce (as I have it)? manually after reboot? What I read somewhere is:

"KB942288 is problematic. You can edit SFCFiles.dll to exclude these Windows Installer files or disable WFP completely."

And I tried to disable WFP, but the log still is full of errors.

Guest

Guest

Posted
Posted

Use QFECheck to verify that the updates are installed properly. If it gives no errors then your log errors are safe to ignore.

Dogway

Dogway

Posted
  • Author
Posted (edited)

The link doesn't work, but I found QFECheck googling around.

All my hotfixes report as successful except kb942288-v3:

KB942288-v3: This hotfix should be reinstalled.

The following files are not valid in the system catalog:
   C:\WINDOWS\SYSTEM32\MSISIP.DLL
   C:\WINDOWS\SYSTEM32\MSISIP.DLL
   C:\WINDOWS\SYSTEM32\MSIHND.DLL
   C:\WINDOWS\SYSTEM32\MSIHND.DLL
   C:\WINDOWS\SYSTEM32\MSI.DLL
   C:\WINDOWS\SYSTEM32\MSI.DLL

I'm also having issues installing Java at RunOnce, this is my code, maybe I missed something? it says "copied successful", but then "Can't find C:\jre-7u17-windows-i586.exe", indeed it seems it couldn't be copied to begin with. What drives me nuts, is that my code seems to work running from HDD, while testing, but not from the CD/ISO image in a real XP Install scenario.

xcopy /Y "%~dp0EXECUTE\folder\jre-7u17-windows-i586.exe" %SystemDrive%
start /w %SystemDrive%\jre-7u17-windows-i586.exe /lang=1034 /s /v\"/qn ADDLOCAL=jrecore JAVAUPDATE=0 REBOOT=Suppress EXPLORER=0 MOZILLA=1 SYSTRAY=0 WEBSTARTICON=0
DEL "%SystemDrive%\jre-7u17-windows-i586.exe"

EDIT: and more errors from Procmon. I don't claim all of them are to worry about but I would like to know at least if any, specially minding the lsass.exe one, with ID 664, it's constantly writting without me doing anything at all. I'm gonna install on VM a base OS (without nlite) and check what do I get to compare.

10:18:57,5406121	lsass.exe	500	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Groups\000001F4	NAME NOT FOUND	Desired Access: Read/Write
10:18:57,5406588	lsass.exe	500	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Aliases\000001F4	NAME NOT FOUND	Desired Access: Read/Write
10:18:57,5407211	lsass.exe	500	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Users\000001F4	SUCCESS	Desired Access: Read/Write
9:56:23,7704674	    lsass.exe	664	RegQueryValue	HKLM\SECURITY\Policy\SecDesc\(Default)	BUFFER OVERFLOW	Length: 12
10:18:34,0362145	svchost.exe	788	RegOpenKey	HKLM\system\currentcontrolset\control\minint	NAME NOT FOUND	Desired Access: Read
10:18:32,2834130	svchost.exe	788	RegQueryValue	HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServer32\InprocServer32	NAME NOT FOUND	Length: 144
10:18:32,2835200	svchost.exe	788	RegOpenKey	HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServerX86	NAME NOT FOUND	Desired Access: Maximum Allowed
10:18:32,2835633	svchost.exe	788	RegOpenKey	HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\LocalServer32	NAME NOT FOUND	Desired Access: Maximum Allowed
10:20:03,0682194	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Policies\Microsoft\Control Panel\Desktop	NAME NOT FOUND	Desired Access: Read
10:20:03,0683214	Explorer.EXE	1112	RegQueryValue	HKCU\Control Panel\Desktop\MultiUILanguageId	NAME NOT FOUND	Length: 256
10:20:02,8111144	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\WVXFile	NAME NOT FOUND	Desired Access: Maximum Allowed
10:20:02,8114731	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\WVXFile\CLSID	NAME NOT FOUND	Desired Access: Query Value
10:20:02,8115069	Explorer.EXE	1112	RegOpenKey	HKCR\WVXFile\CLSID	NAME NOT FOUND	Desired Access: Query Value
10:20:02,8115784	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\.wvx	NAME NOT FOUND	Desired Access: Query Value
10:20:02,7996277	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\WSHFile\Shell\Open\command	NAME NOT FOUND	Desired Access: Query Value
10:20:02,8001454	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\WSHFile	NAME NOT FOUND	Desired Access: Maximum Allowed
10:20:02,8003029	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\WSHFile\CurVer	NAME NOT FOUND	Desired Access: Query Value
10:20:02,7916594	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC}	NAME NOT FOUND	Desired Access: Query Value
10:20:02,7920228	Explorer.EXE	1112	RegOpenKey	HKCR\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC}\Factory bindable using IPersistMoniker	NAME NOT FOUND	Desired Access: Query Value
10:20:02,3688842	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\.r07	NAME NOT FOUND	Desired Access: Maximum Allowed
10:20:02,6722101	Explorer.EXE	1112	RegOpenKey	HKCU\Software\Classes\ttcfile\CurVer	NAME NOT FOUND	Desired Access: Query Value
10:20:02,6722518	Explorer.EXE	1112	RegOpenKey	HKCR\ttcfile\CurVer	NAME NOT FOUND	Desired Access: Query Value
10:20:49,9908872	Notepad2.exe	272	UnlockFileSingle	C:\Documents and Settings\Administrador\Datos de programa\Notepad2\Notepad2.ini	RANGE NOT LOCKED	Offset: 0, Length: 4.294.967.295
10:20:21,5378470	Notepad2.exe	272	RegQueryValue	HKLM\System\CurrentControlSet\Control\Nls\CodePage\0	NAME NOT FOUND	Length: 532

Edited by Dogway
Dogway

Dogway

Posted
  • Author
Posted (edited)

Well, i think I'm not even gonna bother, look at all the faulty entries in procmon, this coming from a clean fresh install (didn't touch nlite):

14:30:47,2113318	svchost.exe	948	RegOpenKey	HKLM\SOFTWARE\Microsoft\Ole\ChannelHook	NAME NOT FOUND	Desired Access: Query Value
14:30:47,2167814	lsass.exe	664	RegQueryValue	HKLM\SECURITY\Policy\SecDesc\(Default)	BUFFER OVERFLOW	Length: 12
14:30:47,4074794	svchost.exe	1040	RegOpenKey	HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs	NAME NOT FOUND	Desired Access: Query Value
14:30:47,4083725	svchost.exe	1040	RegQueryValue	HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\AppID	NAME NOT FOUND	Length: 144
14:30:47,4163925	Explorer.EXE	1544	RegOpenKey	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}	NAME NOT FOUND	Desired Access: Query Value
14:30:47,4178086	Explorer.EXE	1544	RegOpenKey	HKLM\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3	NAME NOT FOUND	Desired Access: Query Value
14:30:47,4179874	Explorer.EXE	1544	RegOpenKey	HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3	NAME NOT FOUND	Desired Access: Query Value
14:30:47,4206511	Explorer.EXE	1544	RegOpenKey	HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32	NAME NOT FOUND	Desired Access: Maximum Allowed
14:30:47,4206986	Explorer.EXE	1544	RegQueryValue	HKCR\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32\InprocServer32	NAME NOT FOUND	Length: 144
14:32:23,8315550	csrss.exe	584	CreateFile	C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_es_ba63c9eb	NAME NOT FOUND	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:23,8317308	csrss.exe	584	CreateFile	C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls\	PATH NOT FOUND	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:23,8320487	csrss.exe	584	QueryOpen	C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_es_cbac8214.Manifest	NAME NOT FOUND	
14:32:23,8321180	csrss.exe	584	QueryOpen	C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls\6.0.0.0_es_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL	PATH NOT FOUND	
14:32:23,8325105	csrss.exe	584	QueryOpen	C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls.DLL	NAME NOT FOUND	
14:32:23,8333419	csrss.exe	584	QueryOpen	C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls.MANIFEST	NAME NOT FOUND	
14:32:23,8335153	csrss.exe	584	QueryOpen	C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL	PATH NOT FOUND	
14:32:23,8339841	csrss.exe	584	QueryOpen	C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.MANIFEST	PATH NOT FOUND	
14:32:23,8252880	notepad.exe	188	CreateFile	C:\WINDOWS\system32\SHELL32.dll.124.Manifest	NAME NOT FOUND	Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
14:32:23,8257216	notepad.exe	188	RegOpenKey	HKCU\Software\Policies\Microsoft\Control Panel\Desktop	NAME NOT FOUND	Desired Access: Read
14:32:23,8258322	notepad.exe	188	RegQueryValue	HKCU\Control Panel\Desktop\MultiUILanguageId	NAME NOT FOUND	Length: 256
14:32:23,8265055	notepad.exe	188	CreateFile	C:\WINDOWS\system32\SHELL32.dll.124.Config	NAME NOT FOUND	Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
14:32:23,8279356	csrss.exe	584	CreateFile	C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_es-ES_249c8dca	NAME NOT FOUND	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:24,0983166	Explorer.EXE	1544	RegOpenKey	HKCU\Software\Classes\Applications\Explorer.exe\Drives\C\DefaultIcon	NAME NOT FOUND	Desired Access: Query Value
14:32:24,0983593	Explorer.EXE	1544	RegOpenKey	HKCR\Applications\Explorer.exe\Drives\C\DefaultIcon	NAME NOT FOUND	Desired Access: Query Value
14:32:24,0984186	Explorer.EXE	1544	RegOpenKey	HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\C\DefaultIcon	NAME NOT FOUND	Desired Access: Query Value
14:32:24,0985085	Explorer.EXE	1544	RegOpenKey	HKCU\Software\Classes\Applications\Explorer.exe\Drives\C\DefaultIcon	NAME NOT FOUND	Desired Access: Query Value
14:32:24,0985496	Explorer.EXE	1544	RegOpenKey	HKCR\Applications\Explorer.exe\Drives\C\DefaultIcon	NAME NOT FOUND	Desired Access: Query Value
14:32:24,1052057	Explorer.EXE	1544	RegEnumKey	HKCR\Drive\shellex\FolderExtensions	NO MORE ENTRIES	Index: 1, Length: 288
14:32:24,1249921	Explorer.EXE	1544	UnlockFileSingle	C:\Documents and Settings\doggy\Menú Inicio\desktop.ini	RANGE NOT LOCKED	Offset: 0, Length: 4.294.967.295
14:32:24,3537315	wuauclt.exe	1860	CreateFile	C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk	NAME INVALID	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a
14:32:24,3540382	wuauclt.exe	1860	CreateFile	C:\WINDOWS\SoftwareDistribution\DataStore\Logs	IS DIRECTORY	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a
14:34:35,3866468	lsass.exe	664	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Groups\000003EB	NAME NOT FOUND	Desired Access: Read/Write
14:34:35,3866932	lsass.exe	664	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Aliases\000003EB	NAME NOT FOUND	Desired Access: Read/Write
14:35:09,7717840	notepad.exe	188	RegQueryValue	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{871C5380-42A0-1069-A2EA-08002B30309D}	NAME NOT FOUND	Length: 144
14:35:09,7718810	notepad.exe	188	RegOpenKey	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}	NAME NOT FOUND	Desired Access: Query Value

All the errors are present:

Event Viewer:

DHCP ID 1005

PRINT ID 20

WMI Adapter ID 5603

WMI Adapter ID 63

and after installing .NET

ASP.NET 2.0.50727 ID 1020

System.ServiceModel.Install 3.0.0.0

So if that's how Microsoft designed it to be... then let it be. I will just add a reminder so I don't come again asking for it.

Still I want to fix the following, I haven't seen this error again on this install so it makes me wonder.

Error 22/03/2013 4:42:52 .NET Runtime None 0 Not Available DOGWAY

and also KB942288-v3 is impossible to install, even on GUI mode it fails (tested with QFECheck).

How is this Hotfix (Windows Installer 4.5) supposed to be installed? There's no freaking way.

Edited by Dogway
Guest

Guest

Posted
Posted

At what point are you trying to install KB942288?

  1. SvcPack.inf (T-13)
  2. CMDLines.txt (T-12)
  3. RunOnceEx or GUIRunOnce (First Logon)
  4. Other (please explain...)

Dogway

Dogway

Posted
  • Author
Posted

RunOnceEx? I call a .bat from nlite that includes all my 3rd party software installs (and further .reg and modifications)

I call it as:

"%~dp0EXECUTE\WindowsXP-KB942288-v3-x86.exe" /q /norestart

But I don't think it's relevant, now upon a clean install of Windows (no nlite, no nothing), I tried to install from GUI (double click), it seems to go smooth but the created log contains the same "errors" and QFECheck report it as "needs to be reinstalled".

Dogway

Dogway

Posted
  • Author
Posted

Yes. You don't have issues with kb942288-v3? It seems to be faulty rather than me being the problem, but I don't know that's why I ask.

Guest

Guest

Posted
Posted

The XPx64 package has no such issues. I'll give the XPx86 package a try in VirtualBox shortly.

Dogway

Dogway

Posted
  • Author
Posted (edited)

where do I download qfecheck from for x64? i just installed WindowsServer2003-KB942288-v4-x64.exe (my current OS is XP x64 too, for the sake of comparing both installers)

Edited by Dogway
Guest

Guest

Posted
Posted (edited)

A recent version (v6.1.0.0) can be found in the Microsoft Premier Field Engineering Platform Reporting Tool. Can't remember where I found the latest known version (v6.2.29.0), but the x64 binary can be found in my update pack.

WindowsXP-KB942288-v3-x86.exe works for me when double-clicked after a clean XP SP3 Pro install. Is your EXE corrupted? The MD5 should be 448447e0ba4560cd558eddb5f5b0809e.

Edited by 5eraph
Dogway

Dogway

Posted
  • Author
Posted

Because I recently had a similar problem I also tested that (file integrity) but the file it's ok. And tested on a clean XP SP3 Pro Install as well.

If I type msiexec -h I get a dialog and a the top "Windows Installer v.4.5.6001.22159", but the log and qfecheck report it as faulty, is there another way to check?

Anyway, it seems that the three relevant files MSISIP.DLL, MSI.DLL, and MSIHND.DLL are successfully copied to system32, checked properties and they are v.4.5.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...