C
charlesboyo
Hello all.
Running Windows 8 (version 6.3, build 9600) and I after a restart earlier in the year, I was unable to login any more. Attempts to login result in a "we have to restart the system" message or "group policy client service failed the login. remote procedure call failed". It appear to me at the time that one or more system services might be failing to start and a review of the Windows event logs confirmed that the WMI service crashes and restarts continuously.
Starting in safe mode worked though. But then even safe mode login failed with a message about being unable to being unavailable to process winlogon events. Following are Winlogon event ID 6000 and 6003 messages in the Application log:
The winlogon notification subscriber <Sens> was unavailable to handle a notification event.
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a critical notification event.
Further more, I have the following messages relating to winmgmt:
Event ID 1000
Faulting application name: svchost.exe_Winmgmt, version: 6.3.9600.17415, time stamp: 0x54504177
Faulting module name: ntdll.dll, version: 6.3.9600.18696, time stamp: 0x59153753
Exception code: 0xc0000409
Fault offset: 0x00000000000872f7
Faulting process id: 0xe30
Faulting application start time: 0x01d3b40c167bf823
Faulting application path: C:\WINDOWS\system32\svchost.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 557b109e-1fff-11e8-bee2-74867a589db3
Faulting package full name:
Faulting package-relative application ID:
Event ID 1001
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: svchost.exe_Winmgmt
P2: 6.3.9600.17415
P3: 54504177
P4: ntdll.dll
P5: 6.3.9600.18696
P6: 59153753
P7: 00000000000872f7
P8: c0000409
P9: 0000000000000001
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Winm_d97733c55c6692c09d38e7c9ff652b167eb12fb_469a58f3_0fe460c9
Analysis symbol:
Rechecking for solution: 0
Report Id: 557b109e-1fff-11e8-bee2-74867a589db3
Report Status: 4100
Hashed bucket:
Then I executed "sfc /scannow" and it reported some corrupted files which it was unable to repair:
2018-03-05 00:49:47, Info CSI 0000093e Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 0000093f [SR] Cannot repair member file [l:40{20}]"AppxAllUserStore.dll" of Microsoft-Windows-AppX-AllUserStore, Version = 6.3.9600.18231, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000940 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 b
bovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}
2018-03-05 00:49:47, Info CSI 00000941 [SR] Cannot repair member file [l:20{10}]"mangal.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000942 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000943 [SR] Cannot repair member file [l:22{11}]"mangalb.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000944 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 b
D6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}
2018-03-05 00:49:47, Info CSI 00000945 [SR] Cannot repair member file [l:24{12}]"ncobjapi.dll" of Microsoft-Windows-WMI-Core, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000946 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:ea5qb6wTBLGzgfVcUdTSkeZElp4hq8cFWEbApT1kqXo=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2018-03-05 00:49:47, Info CSI 00000947 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000948 Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000949 [SR] Cannot repair member file [l:22{11}]"livessp.dll" of Windows-ID-Connected-Account-Provider-WLIDSsp, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094a Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 bbovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}
2018-03-05 00:49:47, Info CSI 0000094b [SR] Cannot repair member file [l:20{10}]"mangal.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094c [SR] This component was referenced by [l:342{171}]"Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.Microsoft-Windows-Client-Features-Package-AutoMerged-windows-Deployment"
2018-03-05 00:49:47, Info CSI 0000094d Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 0000094e [SR] Cannot repair member file [l:22{11}]"mangalb.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094f [SR] This component was referenced by [l:342{171}]"Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.Microsoft-Windows-Client-Features-Package-AutoMerged-windows-Deployment"
2018-03-05 00:49:47, Info CSI 00000950 Hashes for file member \??\C:\WINDOWS\fonts\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 bbovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}
2018-03-05 00:49:47, Info CSI 00000951 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 bbovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}
2018-03-05 00:49:47, Info CSI 00000952 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\WINDOWS\fonts"\[l:20{10}]"mangal.ttf"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000953 Hashes for file member \??\C:\WINDOWS\fonts\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000954 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000955 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\WINDOWS\fonts"\[l:22{11}]"mangalb.ttf"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000956 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 bD6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}
2018-03-05 00:49:47, Info CSI 00000957 [SR] Cannot repair member file [l:24{12}]"ncobjapi.dll" of Microsoft-Windows-WMI-Core, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000958 [SR] This component was referenced by [l:164{82}]"Package_746_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-1952_neutral_GDR"
2018-03-05 00:49:47, Info CSI 00000959 Hashes for file member \??\C:\WINDOWS\System32\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 bD6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}
2018-03-05 00:49:47, Info CSI 0000095a Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 bD6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}
2018-03-05 00:49:47, Info CSI 0000095b [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:24{12}]"ncobjapi.dll"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 0000095c Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 0000095d [SR] Cannot repair member file [l:22{11}]"livessp.dll" of Windows-ID-Connected-Account-Provider-WLIDSsp, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000095e [SR] This component was referenced by [l:164{82}]"Package_970_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-2836_neutral_GDR"
2018-03-05 00:49:47, Info CSI 0000095f Hashes for file member \??\C:\WINDOWS\System32\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000960 Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000961 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:22{11}]"livessp.dll"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000962 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000963 [SR] Cannot repair member file [l:40{20}]"AppxAllUserStore.dll" of Microsoft-Windows-AppX-AllUserStore, Version = 6.3.9600.18231, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000964 [SR] This component was referenced by [l:154{77}]"Package_3_for_KB3138602~31bf3856ad364e35~amd64~~6.3.2.2.3138602-3_neutral_GDR"
2018-03-05 00:49:47, Info CSI 00000965 Hashes for file member \??\C:\WINDOWS\System32\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000966 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000967 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:40{20}]"AppxAllUserStore.dll"; source file in store is also corrupted
2018-03-05 00:49:48, Info CSI 00000968 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:ea5qb6wTBLGzgfVcUdTSkeZElp4hq8cFWEbApT1kqXo=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2018-03-05 00:49:48, Info CSI 00000969 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:48, Info CSI 0000096a [SR] This component was referenced by [l:166{83}]"Package_2709_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-6825_neutral_GDR"
Please advice me on the way forward from here.
Charles
Continue reading...
Running Windows 8 (version 6.3, build 9600) and I after a restart earlier in the year, I was unable to login any more. Attempts to login result in a "we have to restart the system" message or "group policy client service failed the login. remote procedure call failed". It appear to me at the time that one or more system services might be failing to start and a review of the Windows event logs confirmed that the WMI service crashes and restarts continuously.
Starting in safe mode worked though. But then even safe mode login failed with a message about being unable to being unavailable to process winlogon events. Following are Winlogon event ID 6000 and 6003 messages in the Application log:
The winlogon notification subscriber <Sens> was unavailable to handle a notification event.
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a critical notification event.
Further more, I have the following messages relating to winmgmt:
Event ID 1000
Faulting application name: svchost.exe_Winmgmt, version: 6.3.9600.17415, time stamp: 0x54504177
Faulting module name: ntdll.dll, version: 6.3.9600.18696, time stamp: 0x59153753
Exception code: 0xc0000409
Fault offset: 0x00000000000872f7
Faulting process id: 0xe30
Faulting application start time: 0x01d3b40c167bf823
Faulting application path: C:\WINDOWS\system32\svchost.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 557b109e-1fff-11e8-bee2-74867a589db3
Faulting package full name:
Faulting package-relative application ID:
Event ID 1001
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: svchost.exe_Winmgmt
P2: 6.3.9600.17415
P3: 54504177
P4: ntdll.dll
P5: 6.3.9600.18696
P6: 59153753
P7: 00000000000872f7
P8: c0000409
P9: 0000000000000001
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_Winm_d97733c55c6692c09d38e7c9ff652b167eb12fb_469a58f3_0fe460c9
Analysis symbol:
Rechecking for solution: 0
Report Id: 557b109e-1fff-11e8-bee2-74867a589db3
Report Status: 4100
Hashed bucket:
Then I executed "sfc /scannow" and it reported some corrupted files which it was unable to repair:
2018-03-05 00:49:47, Info CSI 0000093e Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 0000093f [SR] Cannot repair member file [l:40{20}]"AppxAllUserStore.dll" of Microsoft-Windows-AppX-AllUserStore, Version = 6.3.9600.18231, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000940 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 b
bovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}2018-03-05 00:49:47, Info CSI 00000941 [SR] Cannot repair member file [l:20{10}]"mangal.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000942 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000943 [SR] Cannot repair member file [l:22{11}]"mangalb.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000944 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 b
D6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}2018-03-05 00:49:47, Info CSI 00000945 [SR] Cannot repair member file [l:24{12}]"ncobjapi.dll" of Microsoft-Windows-WMI-Core, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000946 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:ea5qb6wTBLGzgfVcUdTSkeZElp4hq8cFWEbApT1kqXo=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2018-03-05 00:49:47, Info CSI 00000947 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000948 Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000949 [SR] Cannot repair member file [l:22{11}]"livessp.dll" of Windows-ID-Connected-Account-Provider-WLIDSsp, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094a Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 b
bovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}2018-03-05 00:49:47, Info CSI 0000094b [SR] Cannot repair member file [l:20{10}]"mangal.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094c [SR] This component was referenced by [l:342{171}]"Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.Microsoft-Windows-Client-Features-Package-AutoMerged-windows-Deployment"
2018-03-05 00:49:47, Info CSI 0000094d Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 0000094e [SR] Cannot repair member file [l:22{11}]"mangalb.ttf" of Microsoft-Windows-Font-TrueType-Mangal, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000094f [SR] This component was referenced by [l:342{171}]"Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~6.3.9600.16384.Microsoft-Windows-Client-Features-Package-AutoMerged-windows-Deployment"
2018-03-05 00:49:47, Info CSI 00000950 Hashes for file member \??\C:\WINDOWS\fonts\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 b
bovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}2018-03-05 00:49:47, Info CSI 00000951 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangal.ttf do not match actual file [l:20{10}]"mangal.ttf" :
Found: {l:32 b:ZTnQTnVINyKDtaELGeX4YuFUrsksNXM5oS0d2zliXbQ=} Expected: {l:32 b
bovwAPVOHIPnwogRnaVcvx6BQGHpo7yFWi5RWL3T+E=}2018-03-05 00:49:47, Info CSI 00000952 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\WINDOWS\fonts"\[l:20{10}]"mangal.ttf"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000953 Hashes for file member \??\C:\WINDOWS\fonts\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000954 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-mangal_31bf3856ad364e35_6.3.9600.16384_none_a4f46128aa617967\mangalb.ttf do not match actual file [l:22{11}]"mangalb.ttf" :
Found: {l:32 b:6RPoTRyAG4EMQSmuJv6ACpPxUKzi+HffI+X/VZ+VI8A=} Expected: {l:32 b:Z+RmGwQd1f/8FBfRN9ETizoUX+e35nEfYvHJvTuuGRU=}
2018-03-05 00:49:47, Info CSI 00000955 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\WINDOWS\fonts"\[l:22{11}]"mangalb.ttf"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000956 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 b
D6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}2018-03-05 00:49:47, Info CSI 00000957 [SR] Cannot repair member file [l:24{12}]"ncobjapi.dll" of Microsoft-Windows-WMI-Core, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000958 [SR] This component was referenced by [l:164{82}]"Package_746_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-1952_neutral_GDR"
2018-03-05 00:49:47, Info CSI 00000959 Hashes for file member \??\C:\WINDOWS\System32\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 b
D6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}2018-03-05 00:49:47, Info CSI 0000095a Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.3.9600.17415_none_aa5efdfbf35612ef\ncobjapi.dll do not match actual file [l:24{12}]"ncobjapi.dll" :
Found: {l:32 b
D6PnZ3u2lbnGd+WuuZpTuqews5BpaXDSCmvg1JWzek=} Expected: {l:32 b:lcn7jeXbX1/ANYri4+1KJFPD7XnRBOeVnze1sl7wGBg=}2018-03-05 00:49:47, Info CSI 0000095b [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:24{12}]"ncobjapi.dll"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 0000095c Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 0000095d [SR] Cannot repair member file [l:22{11}]"livessp.dll" of Windows-ID-Connected-Account-Provider-WLIDSsp, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 0000095e [SR] This component was referenced by [l:164{82}]"Package_970_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-2836_neutral_GDR"
2018-03-05 00:49:47, Info CSI 0000095f Hashes for file member \??\C:\WINDOWS\System32\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000960 Hashes for file member \SystemRoot\WinSxS\amd64_windows-id-connecte..nt-provider-wlidssp_31bf3856ad364e35_6.3.9600.17415_none_951e1b318b223c85\livessp.dll do not match actual file [l:22{11}]"livessp.dll" :
Found: {l:32 b:RIHDH5ObkPHh41AG0//Pqs/eHhhuU+9ub3ANSFk6fxc=} Expected: {l:32 b:uudF+2o4qiUxl+JI/ac0rIn732KbUI2bchdmMToYhSY=}
2018-03-05 00:49:47, Info CSI 00000961 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:22{11}]"livessp.dll"; source file in store is also corrupted
2018-03-05 00:49:47, Info CSI 00000962 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000963 [SR] Cannot repair member file [l:40{20}]"AppxAllUserStore.dll" of Microsoft-Windows-AppX-AllUserStore, Version = 6.3.9600.18231, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:47, Info CSI 00000964 [SR] This component was referenced by [l:154{77}]"Package_3_for_KB3138602~31bf3856ad364e35~amd64~~6.3.2.2.3138602-3_neutral_GDR"
2018-03-05 00:49:47, Info CSI 00000965 Hashes for file member \??\C:\WINDOWS\System32\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000966 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-appx-alluserstore_31bf3856ad364e35_6.3.9600.18231_none_14c7a909cbc58560\AppxAllUserStore.dll do not match actual file [l:40{20}]"AppxAllUserStore.dll" :
Found: {l:32 b:FjD0vdXKxjrOnXWR6HoRZVlGIFlStwU/q7df9laEdsI=} Expected: {l:32 b:wjbOncvjnhDOi8zygE0LnxTvXxWcgNw0yFlhfmAtVTY=}
2018-03-05 00:49:47, Info CSI 00000967 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\WINDOWS\System32"\[l:40{20}]"AppxAllUserStore.dll"; source file in store is also corrupted
2018-03-05 00:49:48, Info CSI 00000968 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:ea5qb6wTBLGzgfVcUdTSkeZElp4hq8cFWEbApT1kqXo=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2018-03-05 00:49:48, Info CSI 00000969 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-05 00:49:48, Info CSI 0000096a [SR] This component was referenced by [l:166{83}]"Package_2709_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-6825_neutral_GDR"
Please advice me on the way forward from here.
Charles
Continue reading...