[SOLVED] Windows Server 2016 - Invalid _Bound Error

[ssit3891]

Hello,
I'm running into issues completing recent Windows updates on my Server Standard 2016 virtual machine. Amongst the troubleshooting steps, I've tried running the following command: DISM /Online /Cleanup-Image /RestoreHealth /Source:E:\Sources\install.wim

That returns the following:
Deployment Image Servicing and Management tool
Version: 10.0.14393.4169

Image Version: 10.0.14393.4169

[==========================100.0%==========================]
Error: 1734

The array bounds are invalid.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

C:\Windows\system32>

The CBS Log file has some interesting entries but I haven't been able to find a solution:
2024-05-17 14:50:58, Error CBS Session: 31107234_4109248994 failed to perform store corruption detect and repair operation. [HRESULT = 0x800706c6 - RPC_S_INVALID_BOUND]

Attached is the compressed CBS folder. Any help would be greatly appreciated!

 

[Maxstar]

Hi and welcome to Sysnative,

Follow these instructions to remove an update.

• Open the Start menu of Windows and type the command CMD
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
• When command prompt opens, copy and paste the following command into it, then press enter.

wusa /uninstall /KB:4556813

• Let me know if it says it was successful or you get the message: The update KB4556813 is not installed on this computer.

 

[ssit3891]

Thanks for your response and time!
I tried the command and got the "The update KB4556813 is not installed on this computer." message.

 

[Maxstar]

Hi,

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

• Open the startmenu and type the command cmd.
• After you find the Command Prompt, right click on it and select Run as Administrator.
• Copy and paste the following into the Command Prompt and press enter.

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

Right-click on the file FRST64.exe and choose Run as administrator.

• Copy and paste the following (code) into the Search box and click the Search Registry button.

KB4556813

• When the scan is complete, a message will display that SearchReg.txt is saved in the same folder FRST was started from.
• Post the logfile SearchReg.txt as attachment in your next reply.

 

[ssit3891]

Attached is the generated SearchReg.txt file.

 

[Maxstar]

[HKEY_LOCAL_MACHINE\i2Kn0Uu4Gw\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_aagwrapper_31bf3856ad364e35_0.0.0.0_none_ff1100dd89295bad]

Hi,

Can you please explain the highlighted hive/key, is this a copy of the SOFTWARE hive under HKLM?

 

[ssit3891]

Hello,
You are correct, that does appear to be a copy of the SOFTWARE hive.

 

[Maxstar]

Hi,

Do you know why that copy of the SOFTWARE hive was loaded? Maybe a backup toolkit or other third party tools which are running?

 

[ssit3891]

I do not know why that was loaded. It is possible for it to have been done by a backup solution. I'm going to check a couple of other servers to see if they show the same.

 

[Maxstar]

Thanks, this is the first time I've seen such a hive/key which is partially duplicated with a random name?

 

[ssit3891]

It does appear to be the only server showing this behavior.
At least partially, the hive/keys appear to stay in sync. A key specifies a LastRunDateTime, and they both say the same day and time.

 

[Maxstar]

Okay, please follow the instructions below.

Step 1. Download

Acelogix RegBak (Portable) to create a backup of the registry.

• Extract RegBak.zip and right-click regbak64.exe and select "Run as administrator".
• Click on the button New backup and choose the location where you want to save the backup.
• Optional: enter a description for this backup.
• Now click on the option "Click here to view details".
• Ensure the option Select hives not loaded by Windows is checked, to be sure the following items are included in the backup.
  
  
• Click Ok to save these settings and press Start to create the backup.
• When completed you will see the message: Finished succesfully.

Step 2. Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

Step 3. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[ssit3891]

Thank you, I will try this at the end of the day.

I am assuming the Farbar Recovery Tool will prompt me for this fixlist.txt file at some point or it will look for it on its own?

 

[Maxstar]

I am assuming the Farbar Recovery Tool will prompt me for this fixlist.txt file at some point or it will look for it on its own?Yes, when FRST is saved in the same location as Fixlist

FRST will automatically detect a fixlist.txt file in the same location of the executable FRST64.exe.

 

[ssit3891]

Thank you, I will keep you updated. Have a great Friday!

 

[ssit3891]

Hello,
I was able to follow the instructions above. Attached is the Fixlog.txt file. The DISM /online /cleanup-image /RestoreHealth command completed successfully.
Should I try installing the Windows updates I was having issues with now or are there additional steps I should take before?

 

[Maxstar]

Hi,

Yes, please attempt to update. If it fails attach a new copy of the CBS logs.

 

[ssit3891]

I'll give it a try and keep you updated.

 

[ssit3891]

Hello,
Unfortunately, I'm still having the same issue as I originally had. Please see the attached screenshot. I should have mentioned this issue originally but I hadn't taken a screenshot before and was running into DISM issues.

The server will get stuck here for hours. When I get to this point, I have had to resort to restoring from the latest backup. The backup that has been restored is from before running the update, KB5037763, manually and rebooting for it to complete as the server got stuck on the screenshot. After restoring from that backup this command still runs fine: DISM /online /cleanup-image /RestoreHealth

Attached is also the latest CBS folder.

Again, any help is greatly appreciated!

 

[Maxstar]

Hi,

How many ram is assigned to this server, and how many free space is available?