[SOLVED] Update error 0x80073712 and SFCFix crashed!

H

HapaxOromenon

Well-known member
Joined
Nov 3, 2018
Posts
81
Hello. I recently had some update issues fixed here about a month ago (see [SOLVED] - WU error 0x800f0982, but SFCFix found no corruptions) and after that things seemed to be working fine, but now another update issue has occurred. Trying to install the latest cumulative update, KB4512941, gives the error "Some update files are missing or have problems. We'll try to download the update again later. Error code: (0x80073712)". Running an SFC scan gave the result of nothing found except the usual Windows Defender PowerShell files; DISM completed successfully; but SFCFix actually said crashed and said "something has gone horribly wrong". It asked me if I wanted to send a crash dump to the developers and I said yes, so maybe you can access that file and see if it sheds any light on my situation. Other than that, I attach the SFCFix logfile (which simply records that it had an unhandled exception) as well as my CBS folder and my COMPONENTS hive. Finally, a Process Monitor log from the failed update run can be found at Files shared via Tresorit (as it's too large to attach). Any assistance would be much appreciated.
 

Attachments

Hello again!

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Hello and good to hear from you again. The FRST fixlog is attached. Also, FRST64.exe was detected by my AV (Kaspersky) as a Trojan, but this is presumably a false positive - when I uploaded FRST64.exe to VirusTotal, only 3/67 AVs said it was malicious. So I'll be reporting this to Kaspersky as a false positive, and in the mean time, I've had to set up an exclusion to prevent FRST64.exe from being deleted.
 

Attachments

Thanks!

FRST is being detected due to the way it was developed in order to detect and delete malware. Hopefully Kaspersky fixes this.

Please retry updates with ProcMon.
 
Hello. I'm aware of the general fact that some of these advanced malware removal tools can be detected falsely as malware by AVs, but Kaspersky didn't detect FRST the last time we used it, so I'm guessing it's something to do with a recent update to either program. Anyway, I've now submitted FRST64.exe to them for analysis, so hopefully they'll push out a database update reasonably soon to fix it. As for updates, they gave the same error code as before (0x80073712). The new ProcMon log can be found at Files shared via Tresorit.
 
Thanks.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 

Attachments

Hello. Please see the logfile below.
Code: 
SFCFix version 3.0.2.1 by niemiro.
Start time: 2019-09-02 15:58:29.126
Microsoft Windows 10 Build 18362 - amd64
Using .zip script file at C:\Users\Amrit\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\Manifests

Successfully copied file C:\Users\Amrit\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-ppiprojection.appxmain_31bf3856ad364e35_10.0.18362.1_none_d8bb285630bde052.manifest to C:\WINDOWS\Winsxs\Manifests\amd64_microsoft-ppiprojection.appxmain_31bf3856ad364e35_10.0.18362.1_none_d8bb285630bde052.manifest.

Successfully restored ownership for C:\WINDOWS\Winsxs\Manifests
Successfully restored permissions on C:\WINDOWS\Winsxs\Manifests
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-09-02 15:58:40.698
Script hash: HWkXOGWgqmDGL8EntVTlQttPlQM+zXzFW3TLWLZ3okA=
----------------------EOF-----------------------
 
Hello. The update failed again, but with a different error code: 0x800f0986. Please find the CBS log attached.
 

Attachments

Hi!

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 

Attachments

Hello. Please see the log below.
Code: 
SFCFix version 3.0.2.1 by niemiro.
Start time: 2019-09-02 16:44:05.187
Microsoft Windows 10 Build 18362 - amd64
Using .zip script file at C:\Users\Amrit\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\Winsxs\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9

Successfully created directory tree \\?\C:\WINDOWS\Winsxs\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9\r.

Successfully copied file C:\Users\Amrit\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9\r\wcsetupagent.exe to C:\WINDOWS\Winsxs\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9\r\wcsetupagent.exe.

Successfully restored ownership for C:\WINDOWS\Winsxs\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9
Successfully restored permissions on C:\WINDOWS\Winsxs\amd64_microsoft-onecore-utilityvm-setupagent_31bf3856ad364e35_10.0.18362.329_none_6f99dea4579a81d9
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2019-09-02 16:44:05.722
Script hash: 525A2Th/ukKQx5VRn7aItTH5L0L+ZErsa76NYhq0kq4=
----------------------EOF-----------------------
 
Hi!

This is a new error, so I am documenting it for research purposes:

Code: 
gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000024 (F) Hydration failed with original error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) . Delta Type: 1 , IntegrityState Valid: true , RetrievedChecksum: 1714888234 , ComputedChecksum: 1714888234[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000025@2019/9/2:16:00:12.733 (F) onecore\base\wcp\deltahydrator\deltahydrator.cpp(64): Error 800f0986 [Warning,Facility=15 (0x000f),Code=2438 (0x0986)] originated in function DeltaHydrator::`anonymous-namespace'::GetPsfxSpecificError expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x986))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000026 (F) Hydration failed for component Microsoft-PPIProjection.AppxMain, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} on file Receiver.exe with NTSTATUS -2146498170[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000027@2019/9/2:16:00:12.733 (F) Attempting to mark store corrupt with category [l:18 ml:19]'CorruptPayloadFile'[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000028 (F) Component directory missing for Microsoft-PPIProjection.AppxMain, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}.[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000029@2019/9/2:16:00:12.756 (F) onecore\base\wcp\componentstore\storelayout.cpp(1887): Error 800f0983 [Warning,Facility=15 (0x000f),Code=2435 (0x0983)] originated in function ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x983))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000002a@2019/9/2:16:00:12.763 (F) onecore\base\wcp\rtllib\win32lib\delta_library.cpp(287): Error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) originated in function Windows::Rtl::DeltaDecompressBuffer expression: g_pfnApplyDeltaB(( (DELTA_FLAG_TYPE)0x00000000 ), ReferenceInput, CompressedInput, &UncompressedOutput)
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000002b (F) Hydration failed with original error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) . Delta Type: 1 , IntegrityState Valid: true , RetrievedChecksum: 3543899566 , ComputedChecksum: 3543899566[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000002c@2019/9/2:16:00:12.763 (F) onecore\base\wcp\deltahydrator\deltahydrator.cpp(64): Error 800f0986 [Warning,Facility=15 (0x000f),Code=2438 (0x0986)] originated in function DeltaHydrator::`anonymous-namespace'::GetPsfxSpecificError expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x986))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000002d (F) Hydration failed for component Microsoft-PPIProjection.AppxMain, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} on file resources.pri with NTSTATUS -2146498170[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000002e@2019/9/2:16:00:12.763 (F) Attempting to mark store corrupt with category [l:18 ml:19]'CorruptPayloadFile'[gle=0x80004005]
2019-09-02 17:00:12, Info                  CSI    0000002f Component Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} does not have a winner but has 2 other component version(s)
2019-09-02 17:00:12, Error                 CSI    00000030 (F) Component directory missing for Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}.[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000031@2019/9/2:16:00:12.769 (F) onecore\base\wcp\componentstore\storelayout.cpp(1887): Error 800f0983 [Warning,Facility=15 (0x000f),Code=2435 (0x0983)] originated in function ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x983))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000032@2019/9/2:16:00:12.769 (F) Attempting to mark store corrupt with category [l:21 ml:22]'CorruptComponentValue'[gle=0x80004005]
2019-09-02 17:00:12, Info                  CSI    00000033 Component Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} does not have a winner but has 2 other component version(s)
2019-09-02 17:00:12, Error                 CSI    00000034 (F) Component directory missing for Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}.[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000035@2019/9/2:16:00:12.770 (F) onecore\base\wcp\componentstore\storelayout.cpp(1887): Error 800f0983 [Warning,Facility=15 (0x000f),Code=2435 (0x0983)] originated in function ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x983))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000036@2019/9/2:16:00:12.770 (F) Attempting to mark store corrupt with category [l:21 ml:22]'CorruptComponentValue'[gle=0x80004005]
2019-09-02 17:00:12, Info                  CSI    00000037 Component Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} does not have a winner but has 2 other component version(s)
2019-09-02 17:00:12, Error                 CSI    00000038 (F) Component directory missing for Microsoft-PPIProjection.AppxSetup, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}.[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    00000039@2019/9/2:16:00:12.771 (F) onecore\base\wcp\componentstore\storelayout.cpp(1887): Error 800f0983 [Warning,Facility=15 (0x000f),Code=2435 (0x0983)] originated in function ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x983))) )
[gle=0x80004005]
2019-09-02 17:00:12, Error                 CSI    0000003a@2019/9/2:16:00:12.771 (F) Attempting to mark store corrupt with category [l:21 ml:22]'CorruptComponentValue'[gle=0x80004005]
2019-09-02 17:00:14, Info                  CSI    0000003b Component Microsoft-Windows-DirectoryServices-NTDSAI, version 10.0.18362.329, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} does not have a winner but has 2 other component version(s)
2019-09-02 17:00:14, Error                 CSI    0000003c@2019/9/2:16:00:14.563 (F) onecore\base\wcp\sil\ntsystem.cpp(2926): Error STATUS_DELETE_PENDING originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2019-09-02 17:00:14, Error                 CSI    0000003d (F) STATUS_DELETE_PENDING #3655765# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0, name= ("null")}, da = (DELETE|SYNCHRONIZE|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES), oa = @0xb945f7c188->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[129]'\SystemRoot\WinSxS\Temp\InFlight\f8758c7fa761d501be3200003c3a300b\019d8c7fa761d501c03200003c3a300b_microsoft.virt..ientaxhost.dll'; a:(OBJ_CASE_INSENSITIVE)}, iosb = @[gle=0xd0000056]
2019-09-02 17:00:14, Error                 CSI    0xb945f7c200, as = (null), fa = (FILE_ATTRIBUTE_NORMAL), sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000056]


Please do the following:

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try updating the system just like you have in the past.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.
i3yiUac.png


4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and provide the link to the LogFile.PML file as well as your CBS.log Examples of services to upload to are Dropbox or OneDrive or SendSpace.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top