Jump to content

Many (log) errors on Install


Dogway

Recommended Posts

I'm getting many log errors in my WINDOWS folder after installation. Here is my last_session.ini

There are a few concerning KB builds all with the same error message:

1.042: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2
6.920: In Function TestVolatileFlag, line 11825, RegOpenKeyEx failed with error 0x2
6.920: In Function TestVolatileFlag, line 11857, RegOpenKeyEx failed with error 0x2

The KB are:

KB942288-v3.log
KB2360937.log
KB2570791.log
KB2570947.log
KB2603381.log
KB2698365.log
KB2736233.log

I also seem to get numerous errors in dd_XPS_LP.txt and dd_XPS.txt, and an array of logs from net framework I believe named similar to dd_wcf_retCA7AF8.txt with next errors:

ServiceModelReg [04:34:51:662]: Warning: Could not detect IIS installation or IIS is disabled, skipping the Web Host Script Mappings component since it depends upon IIS to function properly.
(...)
ServiceModelReg [04:34:51:732]: Installing: Machine.config Section Groups and Handlers
ServiceModelReg [04:34:51:782]: Warning: Configuration section system.serviceModel already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.
ServiceModelReg [04:34:51:792]: Warning: Configuration section system.runtime.serialization already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.
ServiceModelReg [04:34:51:802]: Warning: Configuration section system.serviceModel.activation already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.

At the bottom it says completed successfully, but I could not tell the same since I'm getting also many errors in the Event Viewer (only included one instance of repetitive entries):

Error	22/03/2013	4:42:52	.NET Runtime	None	0	Not Available	DOGWAY
Warning 22/03/2013 4:39:55 System.ServiceModel.Install 3.0.0.0 None 0 Not Available DOGWAY
Info 22/03/2013 4:39:36 ASP.NET 2.0.50727.0 Setup 1019 Not Available DOGWAY
Warning 22/03/2013 4:39:36 ASP.NET 2.0.50727.0 Setup 1020 Not Available DOGWAY
Warning 22/03/2013 4:09:22 WinMgmt None 5603 SYSTEM DOGWAY
Warning 22/03/2013 4:08:02 WinMgmt None 63 SYSTEM DOGWAY

Here is a pack containing all my errors for details.

edit: I'm also checking an old build, and I get the exact same errors, so it's not something tied to anything I have specifically done, but rather a workflow issue. I would think this is the normal behavior when installing OS in a VM?

Edited by Dogway
Link to comment
Share on other sites


Ok, the WinMgmt ID5603 error is just a known warning explained here. Probably because I'm on the Administrator account.

I would like to hear about the other errors, specially this one:

Warning 22/03/2013 4:39:55 System.ServiceModel.Install 3.0.0.0 None 0 Not Available DOGWAY

And also about the Windows Installer 4.5 (KB942288-v3.log) that is driving me mad. I can't install it, well it gets installed because I check the version on command line by typing msiexec and it's indeed v4.5, but the log is always full of errors.

Should I integrate it? add in RunOnce (as I have it)? manually after reboot? What I read somewhere is:

"KB942288 is problematic. You can edit SFCFiles.dll to exclude these Windows Installer files or disable WFP completely."

And I tried to disable WFP, but the log still is full of errors.

Link to comment
Share on other sites

The link doesn't work, but I found QFECheck googling around.

All my hotfixes report as successful except kb942288-v3:

KB942288-v3: This hotfix should be reinstalled.

The following files are not valid in the system catalog:
C:\WINDOWS\SYSTEM32\MSISIP.DLL
C:\WINDOWS\SYSTEM32\MSISIP.DLL
C:\WINDOWS\SYSTEM32\MSIHND.DLL
C:\WINDOWS\SYSTEM32\MSIHND.DLL
C:\WINDOWS\SYSTEM32\MSI.DLL
C:\WINDOWS\SYSTEM32\MSI.DLL

I'm also having issues installing Java at RunOnce, this is my code, maybe I missed something? it says "copied successful", but then "Can't find C:\jre-7u17-windows-i586.exe", indeed it seems it couldn't be copied to begin with. What drives me nuts, is that my code seems to work running from HDD, while testing, but not from the CD/ISO image in a real XP Install scenario.

xcopy /Y "%~dp0EXECUTE\folder\jre-7u17-windows-i586.exe" %SystemDrive%
start /w %SystemDrive%\jre-7u17-windows-i586.exe /lang=1034 /s /v\"/qn ADDLOCAL=jrecore JAVAUPDATE=0 REBOOT=Suppress EXPLORER=0 MOZILLA=1 SYSTRAY=0 WEBSTARTICON=0
DEL "%SystemDrive%\jre-7u17-windows-i586.exe"

EDIT: and more errors from Procmon. I don't claim all of them are to worry about but I would like to know at least if any, specially minding the lsass.exe one, with ID 664, it's constantly writting without me doing anything at all. I'm gonna install on VM a base OS (without nlite) and check what do I get to compare.

10:18:57,5406121	lsass.exe	500	RegOpenKey	HKLM\SAM\SAM\DOMAINS\Account\Groups\000001F4	NAME NOT FOUND	Desired Access: Read/Write
10:18:57,5406588 lsass.exe 500 RegOpenKey HKLM\SAM\SAM\DOMAINS\Account\Aliases\000001F4 NAME NOT FOUND Desired Access: Read/Write
10:18:57,5407211 lsass.exe 500 RegOpenKey HKLM\SAM\SAM\DOMAINS\Account\Users\000001F4 SUCCESS Desired Access: Read/Write
9:56:23,7704674 lsass.exe 664 RegQueryValue HKLM\SECURITY\Policy\SecDesc\(Default) BUFFER OVERFLOW Length: 12
10:18:34,0362145 svchost.exe 788 RegOpenKey HKLM\system\currentcontrolset\control\minint NAME NOT FOUND Desired Access: Read
10:18:32,2834130 svchost.exe 788 RegQueryValue HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServer32\InprocServer32 NAME NOT FOUND Length: 144
10:18:32,2835200 svchost.exe 788 RegOpenKey HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServerX86 NAME NOT FOUND Desired Access: Maximum Allowed
10:18:32,2835633 svchost.exe 788 RegOpenKey HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\LocalServer32 NAME NOT FOUND Desired Access: Maximum Allowed
10:20:03,0682194 Explorer.EXE 1112 RegOpenKey HKCU\Software\Policies\Microsoft\Control Panel\Desktop NAME NOT FOUND Desired Access: Read
10:20:03,0683214 Explorer.EXE 1112 RegQueryValue HKCU\Control Panel\Desktop\MultiUILanguageId NAME NOT FOUND Length: 256
10:20:02,8111144 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\WVXFile NAME NOT FOUND Desired Access: Maximum Allowed
10:20:02,8114731 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\WVXFile\CLSID NAME NOT FOUND Desired Access: Query Value
10:20:02,8115069 Explorer.EXE 1112 RegOpenKey HKCR\WVXFile\CLSID NAME NOT FOUND Desired Access: Query Value
10:20:02,8115784 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\.wvx NAME NOT FOUND Desired Access: Query Value
10:20:02,7996277 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\WSHFile\Shell\Open\command NAME NOT FOUND Desired Access: Query Value
10:20:02,8001454 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\WSHFile NAME NOT FOUND Desired Access: Maximum Allowed
10:20:02,8003029 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\WSHFile\CurVer NAME NOT FOUND Desired Access: Query Value
10:20:02,7916594 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC} NAME NOT FOUND Desired Access: Query Value
10:20:02,7920228 Explorer.EXE 1112 RegOpenKey HKCR\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC}\Factory bindable using IPersistMoniker NAME NOT FOUND Desired Access: Query Value
10:20:02,3688842 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\.r07 NAME NOT FOUND Desired Access: Maximum Allowed
10:20:02,6722101 Explorer.EXE 1112 RegOpenKey HKCU\Software\Classes\ttcfile\CurVer NAME NOT FOUND Desired Access: Query Value
10:20:02,6722518 Explorer.EXE 1112 RegOpenKey HKCR\ttcfile\CurVer NAME NOT FOUND Desired Access: Query Value
10:20:49,9908872 Notepad2.exe 272 UnlockFileSingle C:\Documents and Settings\Administrador\Datos de programa\Notepad2\Notepad2.ini RANGE NOT LOCKED Offset: 0, Length: 4.294.967.295
10:20:21,5378470 Notepad2.exe 272 RegQueryValue HKLM\System\CurrentControlSet\Control\Nls\CodePage\0 NAME NOT FOUND Length: 532

Edited by Dogway
Link to comment
Share on other sites

Well, i think I'm not even gonna bother, look at all the faulty entries in procmon, this coming from a clean fresh install (didn't touch nlite):

14:30:47,2113318	svchost.exe	948	RegOpenKey	HKLM\SOFTWARE\Microsoft\Ole\ChannelHook	NAME NOT FOUND	Desired Access: Query Value
14:30:47,2167814 lsass.exe 664 RegQueryValue HKLM\SECURITY\Policy\SecDesc\(Default) BUFFER OVERFLOW Length: 12
14:30:47,4074794 svchost.exe 1040 RegOpenKey HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs NAME NOT FOUND Desired Access: Query Value
14:30:47,4083725 svchost.exe 1040 RegQueryValue HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\AppID NAME NOT FOUND Length: 144
14:30:47,4163925 Explorer.EXE 1544 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{F3364BA0-65B9-11CE-A9BA-00AA004AE837} NAME NOT FOUND Desired Access: Query Value
14:30:47,4178086 Explorer.EXE 1544 RegOpenKey HKLM\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3 NAME NOT FOUND Desired Access: Query Value
14:30:47,4179874 Explorer.EXE 1544 RegOpenKey HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3 NAME NOT FOUND Desired Access: Query Value
14:30:47,4206511 Explorer.EXE 1544 RegOpenKey HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32 NAME NOT FOUND Desired Access: Maximum Allowed
14:30:47,4206986 Explorer.EXE 1544 RegQueryValue HKCR\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32\InprocServer32 NAME NOT FOUND Length: 144
14:32:23,8315550 csrss.exe 584 CreateFile C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_es_ba63c9eb NAME NOT FOUND Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:23,8317308 csrss.exe 584 CreateFile C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls\ PATH NOT FOUND Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:23,8320487 csrss.exe 584 QueryOpen C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_es_cbac8214.Manifest NAME NOT FOUND
14:32:23,8321180 csrss.exe 584 QueryOpen C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls\6.0.0.0_es_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND
14:32:23,8325105 csrss.exe 584 QueryOpen C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls.DLL NAME NOT FOUND
14:32:23,8333419 csrss.exe 584 QueryOpen C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls.MANIFEST NAME NOT FOUND
14:32:23,8335153 csrss.exe 584 QueryOpen C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND
14:32:23,8339841 csrss.exe 584 QueryOpen C:\WINDOWS\system32\es\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.MANIFEST PATH NOT FOUND
14:32:23,8252880 notepad.exe 188 CreateFile C:\WINDOWS\system32\SHELL32.dll.124.Manifest NAME NOT FOUND Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
14:32:23,8257216 notepad.exe 188 RegOpenKey HKCU\Software\Policies\Microsoft\Control Panel\Desktop NAME NOT FOUND Desired Access: Read
14:32:23,8258322 notepad.exe 188 RegQueryValue HKCU\Control Panel\Desktop\MultiUILanguageId NAME NOT FOUND Length: 256
14:32:23,8265055 notepad.exe 188 CreateFile C:\WINDOWS\system32\SHELL32.dll.124.Config NAME NOT FOUND Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
14:32:23,8279356 csrss.exe 584 CreateFile C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_es-ES_249c8dca NAME NOT FOUND Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: DOGWAY\doggy
14:32:24,0983166 Explorer.EXE 1544 RegOpenKey HKCU\Software\Classes\Applications\Explorer.exe\Drives\C\DefaultIcon NAME NOT FOUND Desired Access: Query Value
14:32:24,0983593 Explorer.EXE 1544 RegOpenKey HKCR\Applications\Explorer.exe\Drives\C\DefaultIcon NAME NOT FOUND Desired Access: Query Value
14:32:24,0984186 Explorer.EXE 1544 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\C\DefaultIcon NAME NOT FOUND Desired Access: Query Value
14:32:24,0985085 Explorer.EXE 1544 RegOpenKey HKCU\Software\Classes\Applications\Explorer.exe\Drives\C\DefaultIcon NAME NOT FOUND Desired Access: Query Value
14:32:24,0985496 Explorer.EXE 1544 RegOpenKey HKCR\Applications\Explorer.exe\Drives\C\DefaultIcon NAME NOT FOUND Desired Access: Query Value
14:32:24,1052057 Explorer.EXE 1544 RegEnumKey HKCR\Drive\shellex\FolderExtensions NO MORE ENTRIES Index: 1, Length: 288
14:32:24,1249921 Explorer.EXE 1544 UnlockFileSingle C:\Documents and Settings\doggy\Menú Inicio\desktop.ini RANGE NOT LOCKED Offset: 0, Length: 4.294.967.295
14:32:24,3537315 wuauclt.exe 1860 CreateFile C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk NAME INVALID Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a
14:32:24,3540382 wuauclt.exe 1860 CreateFile C:\WINDOWS\SoftwareDistribution\DataStore\Logs IS DIRECTORY Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a
14:34:35,3866468 lsass.exe 664 RegOpenKey HKLM\SAM\SAM\DOMAINS\Account\Groups\000003EB NAME NOT FOUND Desired Access: Read/Write
14:34:35,3866932 lsass.exe 664 RegOpenKey HKLM\SAM\SAM\DOMAINS\Account\Aliases\000003EB NAME NOT FOUND Desired Access: Read/Write
14:35:09,7717840 notepad.exe 188 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{871C5380-42A0-1069-A2EA-08002B30309D} NAME NOT FOUND Length: 144
14:35:09,7718810 notepad.exe 188 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D} NAME NOT FOUND Desired Access: Query Value

All the errors are present:

Event Viewer:

DHCP ID 1005

PRINT ID 20

WMI Adapter ID 5603

WMI Adapter ID 63

and after installing .NET

ASP.NET 2.0.50727 ID 1020

System.ServiceModel.Install 3.0.0.0

So if that's how Microsoft designed it to be... then let it be. I will just add a reminder so I don't come again asking for it.

Still I want to fix the following, I haven't seen this error again on this install so it makes me wonder.

Error 22/03/2013 4:42:52 .NET Runtime None 0 Not Available DOGWAY

and also KB942288-v3 is impossible to install, even on GUI mode it fails (tested with QFECheck).

How is this Hotfix (Windows Installer 4.5) supposed to be installed? There's no freaking way.

Edited by Dogway
Link to comment
Share on other sites

RunOnceEx? I call a .bat from nlite that includes all my 3rd party software installs (and further .reg and modifications)

I call it as:

"%~dp0EXECUTE\WindowsXP-KB942288-v3-x86.exe" /q /norestart

But I don't think it's relevant, now upon a clean install of Windows (no nlite, no nothing), I tried to install from GUI (double click), it seems to go smooth but the created log contains the same "errors" and QFECheck report it as "needs to be reinstalled".

Link to comment
Share on other sites

where do I download qfecheck from for x64? i just installed WindowsServer2003-KB942288-v4-x64.exe (my current OS is XP x64 too, for the sake of comparing both installers)

Edited by Dogway
Link to comment
Share on other sites

A recent version (v6.1.0.0) can be found in the Microsoft Premier Field Engineering Platform Reporting Tool. Can't remember where I found the latest known version (v6.2.29.0), but the x64 binary can be found in my update pack.

WindowsXP-KB942288-v3-x86.exe works for me when double-clicked after a clean XP SP3 Pro install. Is your EXE corrupted? The MD5 should be 448447e0ba4560cd558eddb5f5b0809e.

Edited by 5eraph
Link to comment
Share on other sites

Because I recently had a similar problem I also tested that (file integrity) but the file it's ok. And tested on a clean XP SP3 Pro Install as well.

If I type msiexec -h I get a dialog and a the top "Windows Installer v.4.5.6001.22159", but the log and qfecheck report it as faulty, is there another way to check?

Anyway, it seems that the three relevant files MSISIP.DLL, MSI.DLL, and MSIHND.DLL are successfully copied to system32, checked properties and they are v.4.5.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...