Hi, I am new to this forum, I have a system with Win 10 1607 IOT LTSB, last friday I have seen that couple devices with same configuration and Windows build number has high CPU Load and TiWorker.exe is running as process with %40 - %50 load,
When I looked through event manager, I have seen under CBS there are logs attached to it. Is there anyone has any idea why this is happening?
Normal TiWorker.exe always runs and checks if the Windows Update is running. But because its disabled it will just end the process and run after couple minutes again as same. But on the time around at 2025-05-30 04:40 multiple devices that have same windows version and build number had this crash.
FYI: on the system Windows Updates are disabled, the issue is cleaning up when I disable also Windows Modules Installer service.
Here are the logs:
TI: --- Initializing Trusted Installer ---
2025-05-30 04:43:24, Info CBS TI: Last boot time: 2024-12-16 11:25:21.120
2025-05-30 04:43:24, Info CBS Starting TrustedInstaller initialization.
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:5
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:6
2025-05-30 04:43:24, Info CBS Lock: New lock added: WinlogonNotifyLock, level: 8, total lock:7
2025-05-30 04:43:24, Info CBS Ending TrustedInstaller initialization.
2025-05-30 04:43:24, Info CBS Starting the TrustedInstaller main loop.
2025-05-30 04:43:24, Info CBS TrustedInstaller service starts successfully.
2025-05-30 04:43:24, Info CBS No startup processing required, TrustedInstaller service was not set as autostart
2025-05-30 04:43:24, Info CBS Startup processing thread terminated normally
2025-05-30 04:43:24, Info CBS TI: Startup Processing completes, release startup processing lock.
2025-05-30 04:43:24, Info CBS Starting TiWorker initialization.
2025-05-30 04:43:24, Info CBS Lock: New lock added: TiWorkerClassFactory, level: 30, total lock:2
2025-05-30 04:43:24, Info CBS Ending TiWorker initialization.
2025-05-30 04:43:24, Info CBS Starting the TiWorker main loop.
2025-05-30 04:43:24, Info CBS TiWorker starts successfully.
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorker, level: 5, total lock:3
2025-05-30 04:43:24, Info CBS Universal Time is: 2025-05-30 02:43:24.601
2025-05-30 04:43:24, Info CBS Loaded Servicing Stack v10.0.14393.6700 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.6700_none_7edb674a220f1eb8\cbscore.dll
2025-05-30 04:43:24, Info CSI 00000001@2025/5/30:02:43:24.604 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fff516d6cc9 @0x7fff51a04fcf @0x7fff51a03a22 @0x7ff7c52a2d9d @0x7ff7c52a35e0 @0x7fff7474af03)2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsSessionManager, level: 11, total lock:14
2025-05-30 04:43:24, Info CBS Lock: New lock added: CSIInventoryCriticalSection, level: 64, total lock:15
2025-05-30 04:43:24, Info CBS Lock: New lock added: FlightPackageCacheCriticalSection, level: 128, total lock:16
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsCapabilityManager, level: 11, total lock:17
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorkerQueue, level: 60, total lock:18
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorkerQueue:m_WindowsUpdateExpressDownloadLock, level: 10, total lock:19
2025-05-30 04:43:24, Info CBS NonStart: Set pending store consistency check.
2025-05-30 04:43:24, Info CBS Session: 31183116_2638729365 initialized by client WinMgmt, external staging directory: (null), external registry directory: (null
2025-05-30 04:43:24, Info CBS Enumerating Foundation package: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.14393.0, this could be slow
2025-05-30 04:43:46, Info CSI 00000002@2025/5/30:02:43:46.612 PopulateComponentFamiliesKey - Begin
2025-05-30 04:43:53, Error CSI 00000003@2025/5/30:02:43:53.299 (F) onecore\base\lstring\lblob.cpp(2145): Error STATUS_ILLEGAL_CHARACTER originated in function RtlTranscodeLBlobs expression: __rv.UcsCharacter != (0xffffffff)[gle=0x80004005]
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20250519162246.cab to WER report.
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20250310092356.cab to WER report.
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20210423055707.cab to WER report.
2025-05-30 04:43:53, Info CBS Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2025-05-30 04:43:53, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Failed to get CSI system store [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS CSI store consistency check fails. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to load component store [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI Store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI Inventory [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get component state. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:44:12, Info CSI 00000004@2025/5/30:02:44:12.619 PopulateComponentFamiliesKey - Begin
2025-05-30 04:44:19, Error CSI 00000005@2025/5/30:02:44:19.726 (F) onecore\base\lstring\lblob.cpp(2145): Error STATUS_ILLEGAL_CHARACTER originated in function RtlTranscodeLBlobs expression: __rv.UcsCharacter != (0xffffffff)[gle=0x80004005]
When I looked through event manager, I have seen under CBS there are logs attached to it. Is there anyone has any idea why this is happening?
Normal TiWorker.exe always runs and checks if the Windows Update is running. But because its disabled it will just end the process and run after couple minutes again as same. But on the time around at 2025-05-30 04:40 multiple devices that have same windows version and build number had this crash.
FYI: on the system Windows Updates are disabled, the issue is cleaning up when I disable also Windows Modules Installer service.
Here are the logs:
TI: --- Initializing Trusted Installer ---
2025-05-30 04:43:24, Info CBS TI: Last boot time: 2024-12-16 11:25:21.120
2025-05-30 04:43:24, Info CBS Starting TrustedInstaller initialization.
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:5
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:6
2025-05-30 04:43:24, Info CBS Lock: New lock added: WinlogonNotifyLock, level: 8, total lock:7
2025-05-30 04:43:24, Info CBS Ending TrustedInstaller initialization.
2025-05-30 04:43:24, Info CBS Starting the TrustedInstaller main loop.
2025-05-30 04:43:24, Info CBS TrustedInstaller service starts successfully.
2025-05-30 04:43:24, Info CBS No startup processing required, TrustedInstaller service was not set as autostart
2025-05-30 04:43:24, Info CBS Startup processing thread terminated normally
2025-05-30 04:43:24, Info CBS TI: Startup Processing completes, release startup processing lock.
2025-05-30 04:43:24, Info CBS Starting TiWorker initialization.
2025-05-30 04:43:24, Info CBS Lock: New lock added: TiWorkerClassFactory, level: 30, total lock:2
2025-05-30 04:43:24, Info CBS Ending TiWorker initialization.
2025-05-30 04:43:24, Info CBS Starting the TiWorker main loop.
2025-05-30 04:43:24, Info CBS TiWorker starts successfully.
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorker, level: 5, total lock:3
2025-05-30 04:43:24, Info CBS Universal Time is: 2025-05-30 02:43:24.601
2025-05-30 04:43:24, Info CBS Loaded Servicing Stack v10.0.14393.6700 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.6700_none_7edb674a220f1eb8\cbscore.dll
2025-05-30 04:43:24, Info CSI 00000001@2025/5/30:02:43:24.604 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fff516d6cc9 @0x7fff51a04fcf @0x7fff51a03a22 @0x7ff7c52a2d9d @0x7ff7c52a35e0 @0x7fff7474af03)2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsSessionManager, level: 11, total lock:14
2025-05-30 04:43:24, Info CBS Lock: New lock added: CSIInventoryCriticalSection, level: 64, total lock:15
2025-05-30 04:43:24, Info CBS Lock: New lock added: FlightPackageCacheCriticalSection, level: 128, total lock:16
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsCapabilityManager, level: 11, total lock:17
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorkerQueue, level: 60, total lock:18
2025-05-30 04:43:24, Info CBS Lock: New lock added: CCbsWorkerQueue:m_WindowsUpdateExpressDownloadLock, level: 10, total lock:19
2025-05-30 04:43:24, Info CBS NonStart: Set pending store consistency check.
2025-05-30 04:43:24, Info CBS Session: 31183116_2638729365 initialized by client WinMgmt, external staging directory: (null), external registry directory: (null
2025-05-30 04:43:24, Info CBS Enumerating Foundation package: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.14393.0, this could be slow
2025-05-30 04:43:46, Info CSI 00000002@2025/5/30:02:43:46.612 PopulateComponentFamiliesKey - Begin
2025-05-30 04:43:53, Error CSI 00000003@2025/5/30:02:43:53.299 (F) onecore\base\lstring\lblob.cpp(2145): Error STATUS_ILLEGAL_CHARACTER originated in function RtlTranscodeLBlobs expression: __rv.UcsCharacter != (0xffffffff)[gle=0x80004005]
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20250519162246.cab to WER report.
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20250310092356.cab to WER report.
2025-05-30 04:43:53, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20210423055707.cab to WER report.
2025-05-30 04:43:53, Info CBS Could not get active session for current session file logging [HRESULT = 0x80004003 - E_POINTER]
2025-05-30 04:43:53, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2025-05-30 04:43:53, Info CBS Failed to get CSI system store [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS CSI store consistency check fails. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to load component store [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI Store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI store. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get CSI Inventory [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:43:53, Info CBS Failed to get component state. [HRESULT = 0x80070246 - ERROR_ILLEGAL_CHARACTER]
2025-05-30 04:44:12, Info CSI 00000004@2025/5/30:02:44:12.619 PopulateComponentFamiliesKey - Begin
2025-05-30 04:44:19, Error CSI 00000005@2025/5/30:02:44:19.726 (F) onecore\base\lstring\lblob.cpp(2145): Error STATUS_ILLEGAL_CHARACTER originated in function RtlTranscodeLBlobs expression: __rv.UcsCharacter != (0xffffffff)[gle=0x80004005]
