My line of enquiry looks to be a dead end.
I have found this link which may be worth trying. Reinstall the dll:
http://www.ehow.com/how_6109933_stop-error-ntdll-dll.html
Hope this helps, Gerry Cornell
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello,
I have explorer.exe crashing when I try to open the Control Panel on Seven x64 and on some right clicking on files and on anything I search or try to open in the Start Menu.
I think the problem started after I created the Godmode folder through Windows 7 Manager from Yamisoft (I managed to get rid of Godmode anyway).
I can access all components of the Control Panel through the cpl files in Windows directory and none crashes but if I try to open the main Control Panel window explorer crashes.
I run ShellExView and disabled all Shell extension which are NOT from Microsoft and the problem persist.
The problem doesn't occur in Safe Boot mode.
I checked the Event Viewer and the explorer crashes have this info:
The description for Event ID 1000 from source Application Error cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
explorer.exe6.1.7600.164504aebab8dntdll.dll6.1.7600.165594ba9b802c000041d000000000004d301b3c01cbbf3adb80f4d8C:\Windows\explorer.exeC:\Windows\SYSTEM32\ntdll.dlla36102d9-2b31-11e0-94f8-001b24531bd0
********************************System
– Provider
[ Name] Application Error
– EventID 1000
[ Qualifiers] 0
Level 2
Task 100
Keywords 0×80000000000000
– TimeCreated
[ SystemTime] 2011-01-28T22:55:02.000000000Z
EventRecordID 326966
Channel Application
Computer MYPC
Security
- EventData
explorer.exe6.1.7600.164504aebab8dntdll.dll6.1.7600.165594ba9b802c000041d000000000004d301b3c01cbbf3adb80f4d8C:\Windows\explorer.exeC:\Windows\SYSTEM32\ntdll.dlla36102d9-2b31-11e0-94f8-001b24531bd0
I run sfc while in safe mode since it wouldn't start in normal mode and it says that it couldn't repair some files.
2011-01-31 09:32:39, Info CBS Starting TrustedInstaller initialization.
2011-01-31 09:32:39, Info CBS Loaded Servicing Stack v6.1.7601.17514 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17514_none_678566b7ddea04a5\cbscore.dll
2011-01-31 09:32:41, Info CSI 00000001@2011/1/31:08:32:41.135 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef1f5e94d @0x7fef31a9839 @0x7fef31734d3 @0xff5ce97c @0xff5cd799 @0xff5cdb2f)
2011-01-31 09:32:41, Info CSI 00000002@2011/1/31:08:32:41.245 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef1f5e94d @0x7fef31f6806 @0x7fef31c2a9c @0x7fef31735a9 @0xff5ce97c @0xff5cd799)
2011-01-31 09:32:41, Info CSI 00000003@2011/1/31:08:32:41.247 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef1f5e94d @0x7fef9d68728 @0x7fef9d68856 @0xff5ce474 @0xff5cd7de @0xff5cdb2f)
2011-01-31 09:32:41, Info CBS Ending TrustedInstaller initialization.
2011-01-31 09:32:41, Info CBS Starting the TrustedInstaller main loop.
2011-01-31 09:32:41, Info CBS TrustedInstaller service starts successfully.
2011-01-31 09:32:41, Info CBS SQM: Initializing online with Windows opt-in: False
2011-01-31 09:32:41, Info CBS SQM: Cleaning up report files older than 10 days.
2011-01-31 09:32:41, Info CBS SQM: Requesting upload of all unsent reports.
2011-01-31 09:32:41, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 09:32:41, Info CBS SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 09:32:41, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2011-01-31 09:32:41, Info CBS SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 09:32:41, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2011-01-31 09:32:41, Info CBS NonStart: Checking to ensure startup processing was not required.
2011-01-31 09:32:41, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0xbcf9f0
2011-01-31 09:32:41, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2011-01-31 09:32:41, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x248
2011-01-31 09:32:41, Info CSI 00000007@2011/1/31:08:32:41.327 CSI perf trace:
CSIPERF:TXCOMMIT;815
2011-01-31 09:32:41, Info CBS NonStart: Success, startup processing not required as expected.
2011-01-31 09:32:41, Info CBS Startup processing thread terminated normally
2011-01-31 09:32:41, Info CSI 00000008 CSI Store 3337712 (0x000000000032edf0) initialized
2011-01-31 09:32:41, Info CBS Session: 30130465_1825506437 initialized by client WindowsUpdateAgent.
2011-01-31 09:32:41, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2011-01-31 09:32:41, Info CBS Session: 30130465_1825536439 initialized by client WindowsUpdateAgent.
2011-01-31 09:32:54, Info CBS Session: 30130465_1952173682 initialized by client WindowsUpdateAgent.
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~x866.1.1.0, Parent: Microsoft-Media-Foundation-Package~31bf3856ad364e35~x866.1.7600.16385, Disposition = Detect, VersionComp: EQ, ServiceComp:
EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~x866.1.1.0, Parent: WinEmb-Media-Support~31bf3856ad364e35~x866.1.7600.16385, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ, BuildComp:
EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~x866.1.1.0, Parent: Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~x866.1.7600.16385, Disposition = Detect, VersionComp: EQ,
ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~x866.1.1.0, Parent: WinEmb-PremiumCodecs-WMV~31bf3856ad364e35~x866.1.7600.16385, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ,
BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, disposition state from detectParent: Absent
2011-01-31 09:32:54, Info CBS Appl: Evaluating package applicability for package Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, applicable state: Absent
2011-01-31 09:32:54, Info CBS EvaluateApplicability, package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, Package applicability: Absent.
2011-01-31 09:32:54, Info CBS Session: 30130465_1952653710 initialized by client WindowsUpdateAgent.
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, Parent: Microsoft-Media-Foundation-Package~31bf3856ad364e35~amd646.1.7600.16385, Disposition = Detect, VersionComp: EQ,
ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, related parent found: Microsoft-Media-Foundation-Package~31bf3856ad364e35~amd646.1.7601.17514, which is not real parent
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, parent found: Microsoft-Media-Foundation-Package~31bf3856ad364e35~amd646.1.7600.16385, state: Superseded
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, Parent: WinEmb-Media-Support~31bf3856ad364e35~amd646.1.7600.16385, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ,
BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, Parent: Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd646.1.7600.16385, Disposition = Detect, VersionComp:
EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, related parent found: Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd646.1.7601.17514, which is not real parent
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, parent found: Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd646.1.7600.16385, state: Superseded
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~amd646.1.1.0, Parent: WinEmb-PremiumCodecs-WMV~31bf3856ad364e35~amd646.1.7600.16385, Disposition = Detect, VersionComp: EQ, ServiceComp:
EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2011-01-31 09:32:54, Info CBS Appl: detectParent: package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, no parent found, go absent
2011-01-31 09:32:54, Info CBS Appl: detect Parent, Package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, disposition state from detectParent: Superseded
2011-01-31 09:32:54, Info CBS Appl: Evaluating package applicability for package Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, applicable state: Superseded
2011-01-31 09:32:54, Info CBS EvaluateApplicability, package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, Package applicability: Superseded.
2011-01-31 09:33:07, Info CBS Archived backup log: C:\Windows\Logs\CBS\CbsPersist_20110131083239.cab.
2011-01-31 09:33:55, Info CBS Session: 30130465_2563278636 initialized by client WindowsUpdateAgent.
2011-01-31 09:33:55, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2011-01-31 09:33:55, Info CBS Session: 30130465_2563308637 initialized by client WindowsUpdateAgent.
2011-01-31 09:34:04, Info CBS Session: 30130465_2654683864 initialized by client WindowsUpdateAgent.
2011-01-31 09:34:04, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, ApplicableState: 0, CurrentState:0
2011-01-31 09:34:04, Info CBS Session: 30130465_2654723866 initialized by client WindowsUpdateAgent.
2011-01-31 09:34:04, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 80, CurrentState:80
2011-01-31 09:34:05, Info CBS Session: 30130465_2668024627 initialized by client WindowsUpdateAgent.
2011-01-31 09:34:05, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, ApplicableState: 0, CurrentState:0
2011-01-31 09:34:05, Info CBS Session: 30130465_2668064629 initialized by client WindowsUpdateAgent.
2011-01-31 09:34:05, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 80, CurrentState:80
2011-01-31 09:48:43, Info CBS Reboot mark refs incremented to: 1
2011-01-31 09:48:43, Info CBS Scavenge: Starts
2011-01-31 09:48:43, Info CSI 00000009@2011/1/31:08:48:43.184 CSI Transaction @0x2f2660 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"
2011-01-31 09:48:43, Info CBS Scavenge: Begin CSI Store
2011-01-31 09:48:44, Info CSI 0000000a Performing 1 operations; 1 are not lock/unlock and follow:
Scavenge (8): flags: 00000017
2011-01-31 09:48:44, Info CSI 0000000b Store coherency cookie matches last scavenge cookie, skipping scavenge.
2011-01-31 09:48:44, Info CSI 0000000c ICSITransaction::Commit calling IStorePendingTransaction::Apply - coldpatching=FALSE applyflags=7
2011-01-31 09:48:44, Info CSI 0000000d Creating NT transaction (seq 2), objectname [6]"(null)"
2011-01-31 09:48:44, Info CSI 0000000e Created NT transaction (seq 2) result 0x00000000, handle @0x19c
2011-01-31 09:48:44, Info CSI 0000000f@2011/1/31:08:48:44.960 CSI perf trace:
CSIPERF:TXCOMMIT;36691
2011-01-31 09:48:44, Info CBS Scavenge: Completed, disposition: 0X1
2011-01-31 09:48:44, Info CSI 00000010@2011/1/31:08:48:44.961 CSI Transaction @0x2f2660 destroyed
2011-01-31 09:48:44, Info CBS Reboot mark refs: 0
2011-01-31 09:48:44, Info CBS Idle processing thread terminated normally
2011-01-31 09:48:44, Info CBS Ending the TrustedInstaller main loop.
2011-01-31 09:48:44, Info CBS Starting TrustedInstaller finalization.
2011-01-31 09:48:45, Info CBS Ending TrustedInstaller finalization.
2011-01-31 16:54:42, Info CBS Starting TrustedInstaller initialization.
2011-01-31 16:54:42, Info CBS Loaded Servicing Stack v6.1.7601.17514 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17514_none_678566b7ddea04a5\cbscore.dll
2011-01-31 16:54:51, Info CSI 00000001@2011/1/31:15:54:51.699 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef49be94d @0x7fef4e49839 @0x7fef4e134d3 @0x10000e97c @0x10000d799 @0x10000db2f)
2011-01-31 16:54:52, Info CSI 00000002@2011/1/31:15:54:52.425 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef49be94d @0x7fef4e96806 @0x7fef4e62a9c @0x7fef4e135a9 @0x10000e97c @0x10000d799)
2011-01-31 16:54:53, Info CSI 00000003@2011/1/31:15:54:53.221 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef49be94d @0x7fef40e8728 @0x7fef40e8856 @0x10000e474 @0x10000d7de @0x10000db2f)
2011-01-31 16:54:53, Info CBS Ending TrustedInstaller initialization.
2011-01-31 16:54:53, Info CBS Starting the TrustedInstaller main loop.
2011-01-31 16:54:53, Info CBS TrustedInstaller service starts successfully.
2011-01-31 16:54:53, Info CBS SQM: Initializing online with Windows opt-in: False
2011-01-31 16:54:53, Info CBS SQM: Cleaning up report files older than 10 days.
2011-01-31 16:54:53, Info CBS SQM: Requesting upload of all unsent reports.
2011-01-31 16:54:53, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 16:54:53, Info CBS SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 16:54:53, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2011-01-31 16:54:53, Info CBS SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 16:54:53, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2011-01-31 16:54:53, Info CBS NonStart: Checking to ensure startup processing was not required.
2011-01-31 16:54:54, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x112f9b0
2011-01-31 16:54:54, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2011-01-31 16:54:54, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x238
2011-01-31 16:54:56, Info CSI 00000007@2011/1/31:15:54:56.368 CSI perf trace:
CSIPERF:TXCOMMIT;2472
2011-01-31 16:54:56, Info CBS NonStart: Success, startup processing not required as expected.
2011-01-31 16:54:56, Info CBS Startup processing thread terminated normally
2011-01-31 16:54:57, Info CSI 00000008 CSI Store 3610864 (0x00000000003718f0) initialized
2011-01-31 16:54:57, Info CBS Session: 30130527_898285604 initialized by client lpksetup.
2011-01-31 16:55:08, Info CBS Session: 30130527_898285604 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2011-01-31 17:02:18, Info CBS Session: 30130528_1017002201 initialized by client WindowsUpdateAgent.
2011-01-31 17:02:18, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~x86~~6.1.1.0, ApplicableState: 0, CurrentState:0
2011-01-31 17:02:18, Info CBS Session: 30130528_1017042203 initialized by client WindowsUpdateAgent.
2011-01-31 17:02:18, Info CBS Read out cached package applicability for package: Package_for_KB2120976~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 80, CurrentState:80
2011-01-31 17:12:20, Info CBS Reboot mark refs incremented to: 1
2011-01-31 17:12:21, Info CBS Scavenge: Starts
2011-01-31 17:12:21, Info CSI 00000009@2011/1/31:16:12:21.746 CSI Transaction @0x1110850 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"
2011-01-31 17:12:21, Info CBS Scavenge: Begin CSI Store
2011-01-31 17:13:07, Info CSI 0000000a Performing 1 operations; 1 are not lock/unlock and follow:
Scavenge (8): flags: 00000017
2011-01-31 17:13:08, Info CSI 0000000b Store coherency cookie matches last scavenge cookie, skipping scavenge.
2011-01-31 17:13:19, Info CSI 0000000c ICSITransaction::Commit calling IStorePendingTransaction::Apply - coldpatching=FALSE applyflags=7
2011-01-31 17:13:21, Info CSI 0000000d Creating NT transaction (seq 2), objectname [6]"(null)"
2011-01-31 17:13:21, Info CSI 0000000e Created NT transaction (seq 2) result 0x00000000, handle @0x268
2011-01-31 17:13:21, Info CSI 0000000f@2011/1/31:16:13:21.509 CSI perf trace:
CSIPERF:TXCOMMIT;114980
2011-01-31 17:13:21, Info CBS Scavenge: Completed, disposition: 0X1
2011-01-31 17:13:21, Info CSI 00000010@2011/1/31:16:13:21.509 CSI Transaction @0x1110850 destroyed
2011-01-31 17:13:22, Info CBS Reboot mark refs: 0
2011-01-31 17:13:22, Info CBS Idle processing thread terminated normally
2011-01-31 17:13:22, Info CBS Ending the TrustedInstaller main loop.
2011-01-31 17:13:22, Info CBS Starting TrustedInstaller finalization.
2011-01-31 17:13:35, Info CBS Ending TrustedInstaller finalization.
2011-01-31 17:36:21, Info CBS Starting TrustedInstaller initialization.
2011-01-31 17:36:21, Info CBS Loaded Servicing Stack v6.1.7601.17514 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17514_none_678566b7ddea04a5\cbscore.dll
2011-01-31 17:36:24, Info CSI 00000001@2011/1/31:16:36:24.750 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeefae94d @0x7fef4a79839 @0x7fef4a434d3 @0xff23e97c @0xff23d799 @0xff23db2f)
2011-01-31 17:36:25, Info CSI 00000002@2011/1/31:16:36:25.104 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeefae94d @0x7fef4ac6806 @0x7fef4a92a9c @0x7fef4a435a9 @0xff23e97c @0xff23d799)
2011-01-31 17:36:25, Info CSI 00000003@2011/1/31:16:36:25.105 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeefae94d @0x7fef9448728 @0x7fef9448856 @0xff23e474 @0xff23d7de @0xff23db2f)
2011-01-31 17:36:25, Info CBS Ending TrustedInstaller initialization.
2011-01-31 17:36:25, Info CBS Starting the TrustedInstaller main loop.
2011-01-31 17:36:25, Info CBS TrustedInstaller service starts successfully.
2011-01-31 17:36:25, Info CBS SQM: Initializing online with Windows opt-in: False
2011-01-31 17:36:25, Info CBS SQM: Cleaning up report files older than 10 days.
2011-01-31 17:36:25, Info CBS SQM: Requesting upload of all unsent reports.
2011-01-31 17:36:25, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 17:36:25, Info CBS SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 17:36:25, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2011-01-31 17:36:25, Info CBS SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2011-01-31 17:36:25, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2011-01-31 17:36:25, Info CBS NonStart: Checking to ensure startup processing was not required.
2011-01-31 17:36:25, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x107fa30
2011-01-31 17:36:25, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2011-01-31 17:36:25, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x238
2011-01-31 17:36:25, Info CSI 00000007@2011/1/31:16:36:25.651 CSI perf trace:
CSIPERF:TXCOMMIT;34358
2011-01-31 17:36:25, Info CBS NonStart: Success, startup processing not required as expected.
2011-01-31 17:36:25, Info CBS Startup processing thread terminated normally
2011-01-31 17:36:25, Info CSI 00000008 CSI Store 2955504 (0x00000000002d18f0) initialized
2011-01-31 17:36:25, Info CBS Session: 30130533_12956583 initialized by client WindowsUpdateAgent.
2011-01-31 17:36:25, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2011-01-31 17:36:25, Info CBS Session: 30130533_13506615 initialized by client WindowsUpdateAgent.
2011-01-31 17:46:27, Info CBS Reboot mark refs incremented to: 1
2011-01-31 17:46:27, Info CBS Scavenge: Starts
2011-01-31 17:46:27, Info CSI 00000009@2011/1/31:16:46:27.533 CSI Transaction @0x2900b0 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"
2011-01-31 17:46:27, Info CBS Scavenge: Begin CSI Store
2011-01-31 17:46:29, Info CSI 0000000a Performing 1 operations; 1 are not lock/unlock and follow:
Scavenge (8): flags: 00000017
2011-01-31 17:46:29, Info CSI 0000000b Store coherency cookie matches last scavenge cookie, skipping scavenge.
2011-01-31 17:46:29, Info CSI 0000000c ICSITransaction::Commit calling IStorePendingTransaction::Apply - coldpatching=FALSE applyflags=7
2011-01-31 17:46:29, Info CSI 0000000d Creating NT transaction (seq 2), objectname [6]"(null)"
2011-01-31 17:46:29, Info CSI 0000000e Created NT transaction (seq 2) result 0x00000000, handle @0x274
2011-01-31 17:46:29, Info CSI 0000000f@2011/1/31:16:46:29.561 CSI perf trace:
CSIPERF:TXCOMMIT;51920
2011-01-31 17:46:29, Info CBS Scavenge: Completed, disposition: 0X1
2011-01-31 17:46:29, Info CSI 00000010@2011/1/31:16:46:29.561 CSI Transaction @0x2900b0 destroyed
2011-01-31 17:46:29, Info CBS Reboot mark refs: 0
2011-01-31 17:46:29, Info CBS Idle processing thread terminated normally
2011-01-31 17:46:29, Info CBS Ending the TrustedInstaller main loop.
2011-01-31 17:46:29, Info CBS Starting TrustedInstaller finalization.
2011-01-31 17:46:32, Info CBS Ending TrustedInstaller finalization.
Any help please?
Thank you :)
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
My line of enquiry looks to be a dead end.
I have found this link which may be worth trying. Reinstall the dll:
http://www.ehow.com/how_6109933_stop-error-ntdll-dll.html
Hope this helps, Gerry Cornell
HI Gerry thank you for the continuos help.
I tried uninstalling the dll as per your suggestion and I get a warning window with a white cross in a red circle that says:
The module ntdll.dll” was loaded but the entry-point
DllUnregisterServer was not found.
Make sure that “nt.dll" is a valid DLL or OCX file and than try again.
I also discovered another issue which might be related or not.
I always create restore points before mucking around and even if I get told that the restore point was successfully created when I go check there is actually none.
I think the error is Event ID 14
The shadow copies of volume C: were aborted because of an IO failure on volume C:.
| - | System |
|---|
| - | Provider | <br> | --- | --- | <br><br><br><br> | [ Name ] | volsnap | <br> | --- | --- | --- | --- | --- |
|---|
| - | EventID | 14 | <br> | --- | --- | --- | <br><br><br><br> | [ Qualifiers ] | 49158 | <br> | --- | --- | --- | --- | --- |
|---|
| Level | 2 | <br> | --- | --- | --- |
|---|
| Task | 0 | <br> | --- | --- | --- |
|---|
| Keywords | 0x80000000000000 | <br> | --- | --- | --- |
|---|
| - | TimeCreated | <br> | --- | --- | <br><br><br><br> | [ SystemTime ] | 2011-02-02T23:57:36.741657200Z | <br> | --- | --- | --- | --- | --- |
|---|
| EventRecordID | 2066805 | <br> | --- | --- | --- |
|---|
| Channel | System | <br> | --- | --- | --- |
|---|
| Computer | MYPC | <br> | --- | --- | --- |
|---|
| Security | <br> | --- | --- |
|---|
| - | EventData |
|---|
| \Device\HarddiskVolumeShadowCopy1 |
|---|
| C: |
|---|
| C: |
|---|
| 0000000003003000000000000E0006C00B000000850100C000000000000000000000000000000000 |
|---|
Dati binari:
In word
0000: 00000000 00300003 00000000 C006000E
0008: 0000000B C0000185 00000000 00000000
0010: 00000000 00000000
In byte
0000: 00 00 00 00 03 00 30 00 ......0.
0008: 00 00 00 00 0E 00 06 C0 .......À
0010: 0B 00 00 00 85 01 00 C0 ....…..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
EVENT ID 22
| - | System |
|---|
| - | Provider | <br> | --- | --- | <br><br><br><br> | [ Name ] | VSS | <br> | --- | --- | --- | --- | --- |
|---|
| - | EventID | 22 | <br> | --- | --- | --- | <br><br><br><br> | [ Qualifiers ] | 0 | <br> | --- | --- | --- | --- | --- |
|---|
| Level | 2 | <br> | --- | --- | --- |
|---|
| Task | 0 | <br> | --- | --- | --- |
|---|
| Keywords | 0x80000000000000 | <br> | --- | --- | --- |
|---|
| - | TimeCreated | <br> | --- | --- | <br><br><br><br> | [ SystemTime ] | 2011-02-02T01:19:14.000000000Z | <br> | --- | --- | --- | --- | --- |
|---|
| EventRecordID | 329185 | <br> | --- | --- | --- |
|---|
| Channel | Application | <br> | --- | --- | --- |
|---|
| Computer | MYPC | <br> | --- | --- | --- |
|---|
| Security | <br> | --- | --- |
|---|
| - | EventData |
|---|
| {0b5a2c52-3eb9-470a-96e2-6c6d4570e40f} |
|---|
| Coordinator |
|---|
| 0x80040154, Class not registered |
|---|
| 2D20436F64653A20565353415049435030303030303438352D2043616C6C3A20565353415049435030303030303437342D205049443A202030303030343930302D205449443A202030303030333838382D20434D443A202056737361646D696E20206C69737420736861646F7773746F72616765202020202D20557365723A204E616D653A204D5950435C522C205349443A532D312D352D32312D3333323634333737352D323232343936343735322D3232363532353130392D313030312020 |
|---|
Dati binari:
In word
0000: 6F43202D 203A6564 41535356 50434950
0008: 30303030 35383430 6143202D 203A6C6C
0010: 41535356 50434950 30303030 34373430
0018: 4950202D 20203A44 30303030 30303934
0020: 4954202D 20203A44 30303030 38383833
0028: 4D43202D 20203A44 61737356 6E696D64
0030: 696C2020 73207473 6F646168 6F747377
0038: 65676172 20202020 7355202D 203A7265
0040: 656D614E 594D203A 525C4350 4953202C
0048: 2D533A44 2D352D31 332D3132 34363233
0050: 35373733 3232322D 34363934 2D323537
0058: 35363232 30313532 30312D39 20203130
In byte
0000: 2D 20 43 6F 64 65 3A 20 - Code:
0008: 56 53 53 41 50 49 43 50 VSSAPICP
0010: 30 30 30 30 30 34 38 35 00000485
0018: 2D 20 43 61 6C 6C 3A 20 - Call:
0020: 56 53 53 41 50 49 43 50 VSSAPICP
0028: 30 30 30 30 30 34 37 34 00000474
0030: 2D 20 50 49 44 3A 20 20 - PID:
0038: 30 30 30 30 34 39 30 30 00004900
0040: 2D 20 54 49 44 3A 20 20 - TID:
0048: 30 30 30 30 33 38 38 38 00003888
0050: 2D 20 43 4D 44 3A 20 20 - CMD:
0058: 56 73 73 61 64 6D 69 6E Vssadmin
0060: 20 20 6C 69 73 74 20 73 list s
0068: 68 61 64 6F 77 73 74 6F hadowsto
0070: 72 61 67 65 20 20 20 20 rage
0078: 2D 20 55 73 65 72 3A 20 - User:
0080: 4E 61 6D 65 3A 20 4D 59 Name: MY
0088: 50 43 5C 52 2C 20 53 49 PC\R, SI
0090: 44 3A 53 2D 31 2D 35 2D D:S-1-5-
0098: 32 31 2D 33 33 32 36 34 21-33264
00a0: 33 37 37 35 2D 32 32 32 3775-222
00a8: 34 39 36 34 37 35 32 2D 4964752-
00b0: 32 32 36 35 32 35 31 30 22652510
00b8: 39 2D 31 30 30 31 20 20 9-1001
EVENT 12305:
The description for Event ID 12305 from source VSS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
DeviceIoControl(\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 00000000000001C8,0x0053c198,0000000000295000,0,0000000000293FF0,4096,[0])
Operation:
Processing PostFinalCommitSnapshots
Context:
Execution Context: System Provider
the message resource is present but the message is not found in the string/message table
| System |
|---|
| - | Provider | <br> | --- | --- | <br><br><br><br> | [ Name ] | VSS | <br> | --- | --- |
|---|
| - | EventID | 12305 | <br> | --- | --- | --- | <br><br><br><br> | [ Qualifiers ] | 0 | <br> | --- | --- |
|---|
| Level | 2 | <br> | --- | --- |
|---|
| Task | 0 | <br> | --- | --- |
|---|
| Keywords | 0x80000000000000 | <br> | --- | --- |
|---|
| - | TimeCreated | <br> | --- | --- | <br><br><br><br> | [ SystemTime ] | 2011-02-02T00:22:19.000000000Z | <br> | --- | --- |
|---|
| EventRecordID | 329138 | <br> | --- | --- |
|---|
| Channel | Application | <br> | --- | --- |
|---|
| Computer | MYPC | <br> | --- | --- |
|---|
| Security | <br> | --- |
|---|
| - | EventData |
|---|
| DeviceIoControl(\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 00000000000001C8,0x0053c198,0000000000295000,0,0000000000293FF0,4096,[0]) |
|---|
| Operation: Processing PostFinalCommitSnapshots Context: Execution Context: System Provider |
|---|
| 2D20436F64653A20494E434943484C4830303030303532312D2043616C6C3A2053505251534E504330303030303239352D205049443A202030303030303339322D205449443A202030303030353935322D20434D443A2020433A5C57696E646F77735C53797374656D33325C737663686F73742E657865202D6B2073777072762D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820 |
|---|
Dati binari:
In word
0000: 6F43202D 203A6564 49434E49 484C4843
0008: 30303030 31323530 6143202D 203A6C6C
0010: 51525053 43504E53 30303030 35393230
0018: 4950202D 20203A44 30303030 32393330
0020: 4954202D 20203A44 30303030 32353935
0028: 4D43202D 20203A44 575C3A43 6F646E69
0030: 535C7377 65747379 5C32336D 68637673
0038: 2E74736F 20657865 73206B2D 76727077
0040: 7355202D 203A7265 656D614E 544E203A
0048: 54554120 49524F48 535C5954 45545359
0050: 53202C4D 533A4449 352D312D 2038312D
In byte
0000: 2D 20 43 6F 64 65 3A 20 - Code:
0008: 49 4E 43 49 43 48 4C 48 INCICHLH
0010: 30 30 30 30 30 35 32 31 00000521
0018: 2D 20 43 61 6C 6C 3A 20 - Call:
0020: 53 50 52 51 53 4E 50 43 SPRQSNPC
0028: 30 30 30 30 30 32 39 35 00000295
0030: 2D 20 50 49 44 3A 20 20 - PID:
0038: 30 30 30 30 30 33 39 32 00000392
0040: 2D 20 54 49 44 3A 20 20 - TID:
0048: 30 30 30 30 35 39 35 32 00005952
0050: 2D 20 43 4D 44 3A 20 20 - CMD:
0058: 43 3A 5C 57 69 6E 64 6F C:\Windo
0060: 77 73 5C 53 79 73 74 65 ws\Syste
0068: 6D 33 32 5C 73 76 63 68 m32\svch
0070: 6F 73 74 2E 65 78 65 20 ost.exe
0078: 2D 6B 20 73 77 70 72 76 -k swprv
0080: 2D 20 55 73 65 72 3A 20 - User:
0088: 4E 61 6D 65 3A 20 4E 54 Name: NT
0090: 20 41 55 54 48 4F 52 49 AUTHORI
0098: 54 59 5C 53 59 53 54 45 TY\SYSTE
00a0: 4D 2C 20 53 49 44 3A 53 M, SID:S
00a8: 2D 31 2D 35 2D 31 38 20 -1-5-18
That's why I never want to look into the Event Viewer: is full of incomprehensible stuff that leads to more incomprehensible stuff :(
Anyway I use HD Sentinel and it gives me no warning on the disk apart from "There are 1 weak sectors found on the disk surface. They may be remapped any time in the later use of the disk." which has been there for a while.
Well I hope anyone has more suggestions.
Thank you
Hello Auggy thank you for yur help.
I hope I have done it right:
I have called the folder with the path of where the dump files where stored.
Let me know if you need more info.
Many thanks
The link worked great.
Here's a bit of the "Exception Analysis" from one of the dump files (they all show what appears to be the problem):
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
Unable to load image c:\program files (x86)\Stardock\Fences*DesktopDock64.dll*, Win32 error 0n2
*** WARNING: Unable to verify timestamp for DesktopDock64.dll*** ERROR: Module load completed but symbols could not be loaded for DesktopDock64.dllGetPageUrlData failed, server returned HTTP status 404
The problem appears to be the DesktopDock64.dll from the Stardock Fences program.
Similar problem reported in the following link:
http://forums.wincustomize.com/368417
Can you uninstall the Stardock Fences program and see if the problem resolves?
Hello Auggy,
Since I keep searching for a solution I had found Stardock programs as culprits too so I had already tried uninstalling Fences with no results.
I tried again and the problem persists unfortunately.
I also removed Nvidia drivers and reinstalled new ones with no luck.
I tried the clean boot too and the problem is in Windows since disabling all 3d party services had no results.
Safe mode doesn't have the problem though as I said.
I found a new error related to explorer.exe in the EV:
The description for Event ID 1026 from source .NET Runtime cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Application: Explorer.EXE
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 000000007758E936
the message resource is present but the message is not found in the string/message table
| - | System |
|---|
| - | Provider | <br> | --- | --- | <br><br><br><br> | [ Name ] | .NET Runtime | <br> | --- | --- |
|---|
| - | EventID | 1026 | <br> | --- | --- | --- | <br><br><br><br> | [ Qualifiers ] | 0 | <br> | --- | --- |
|---|
| Level | 2 | <br> | --- | --- |
|---|
| Task | 0 | <br> | --- | --- |
|---|
| Keywords | 0x80000000000000 | <br> | --- | --- |
|---|
| - | TimeCreated | <br> | --- | --- | <br><br><br><br> | [ SystemTime ] | 2011-02-03T03:16:03.000000000Z | <br> | --- | --- |
|---|
| EventRecordID | 329396 | <br> | --- | --- |
|---|
| Channel | Application | <br> | --- | --- |
|---|
| Computer | MYPC | <br> | --- | --- |
|---|
| Security | <br> | --- |
|---|
| - | EventData |
|---|
| Application: Explorer.EXE Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: exception code c0000005, exception address 000000007758E936 |
|---|
Another thing I really don't understand is why all events in my system carry the "The description for Event xxx cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer."
It appears like i have nothing installed: why is that?
Any further suggestion please?
Thank you
Can you provide the latest dump files, via Windows Live SkyDrive, since uninstalling Stardock Fences?