The Conservative Cave

The Help Desk => Computer Related Discussions & Questions => Topic started by: EagleKeeper on April 13, 2013, 09:08:20 AM

Title: If you run Windows 7 you might be interested in this
Post by: EagleKeeper on April 13, 2013, 09:08:20 AM
http://support.microsoft.com/kb/2839011
Title: Re: If you run Windows 7 you might be interested in this
Post by: Chris_ on April 13, 2013, 10:14:52 AM
lol, nice
Title: Re: If you run Windows 7 you might be interested in this
Post by: thundley4 on April 13, 2013, 01:55:33 PM
I saw that the other day and already uninstalled the update.
Title: Re: If you run Windows 7 you might be interested in this
Post by: EagleKeeper on April 13, 2013, 02:07:50 PM
Yeah, I found it on my Mom's PC and got rid of it.
Title: Re: If you run Windows 7 you might be interested in this
Post by: J P Sousa on April 13, 2013, 03:19:30 PM
This was a little nerve racking.

When I tried to uninstall, it was stuck at, "preparing to configure windows, DO NOT turn off your computer" for 30 minutes.  :panic: 

I finally turned it off then back on and got the choice of how to start windows. I just let it take it's course and now it looks OK.  :whatever:

@#&%$& windows.   :hammer:  :hammer:  :hammer:
.
Title: Re: If you run Windows 7 you might be interested in this
Post by: thundley4 on April 13, 2013, 03:29:13 PM
This was a little nerve racking.

When I tried to uninstall, it was stuck at, "preparing to configure windows, DO NOT turn off your computer" for 30 minutes.  :panic: 

I finally turned it off then back on and got the choice of how to start windows. I just let it take it's course and now it looks OK.  :whatever:

@#&%$& windows.   :hammer:  :hammer:  :hammer:
.

Yep.  I had the same thing happen, but my wife's computer uninstalled and restarted without a hitch.
Title: Re: If you run Windows 7 you might be interested in this
Post by: EagleKeeper on April 13, 2013, 03:40:30 PM
This was a little nerve racking.

When I tried to uninstall, it was stuck at, "preparing to configure windows, DO NOT turn off your computer" for 30 minutes.  :panic: 

I finally turned it off then back on and got the choice of how to start windows. I just let it take it's course and now it looks OK.  :whatever:

@#&%$& windows.   :hammer:  :hammer:  :hammer:
.

You should look through your event viewer to see if there is any indication of what might have been giving it trouble. If nothing else it might spare you a problem in the future.

If you choose to do so and find something post it here and I'll see if I can turn up anything.
Title: Re: If you run Windows 7 you might be interested in this
Post by: J P Sousa on April 13, 2013, 04:38:18 PM
You should look through your event viewer to see if there is any indication of what might have been giving it trouble. If nothing else it might spare you a problem in the future.

If you choose to do so and find something post it here and I'll see if I can turn up anything.

There is a lot to look through but this seems to be about the time the trouble happened;

Log Name:      Application
Source:        VSS
Date:          4/13/2013 3:23:59 PM
Event ID:      12348
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      User-VAIO
Description:
Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{03acf86c-5be9-11e1-99d1-78843cfd6539}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.  Check security on the volume, and try the operation again.

Operation:
   Removing auto-release shadow copies
   Loading provider

Context:
   Execution Context: System Provider
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12348</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-04-13T19:23:59.000000000Z" />
    <EventRecordID>15199</EventRecordID>
    <Channel>Application</Channel>
    <Computer>User-VAIO</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\\?\Volume{03acf86c-5be9-11e1-99d1-78843cfd6539}\</Data>
    <Data>

Operation:
   Removing auto-release shadow copies
   Loading provider

Context:
   Execution Context: System Provider</Data>
    <Binary>2D20436F64653A2053505250524F564330303030323333312D2043616C6C3A2053505250524F564330303030323237332D205049443A202030303030303432382D205449443A202030303030363632382D20434D443A2020433A5C57696E646F77735C53797374656D33325C737663686F73742E657865202D6B2073777072762D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>




Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          4/13/2013 3:26:06 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:     
User:          SYSTEM
Computer:      User-VAIO
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -
 5 user registry handles leaked from \Registry\User\S-1-5-21-3130692141-3789891193-1470044760-1005:
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\Disallowed
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\My
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\CA

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-04-13T19:26:06.855316400Z" />
    <EventRecordID>15205</EventRecordID>
    <Correlation ActivityID="{02EFFC50-F800-0002-C395-0A813B36CE01}" />
    <Execution ProcessID="348" ThreadID="9928" />
    <Channel>Application</Channel>
    <Computer>User-VAIO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-3130692141-3789891193-1470044760-1005:
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\Disallowed
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\My
Process 640 (\Device\HarddiskVolume3\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3130692141-3789891193-1470044760-1005\Software\Microsoft\SystemCertificates\CA
</Data>
  </EventData>
</Event>




Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Virtualization Client" />
    <EventID Qualifiers="16384">3057</EventID>
    <Level>3</Level>
    <Task>6</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-04-13T20:00:36.000000000Z" />
    <EventRecordID>15230</EventRecordID>
    <Channel>Application</Channel>
    <Computer>User-VAIO</Computer>
    <Security />
  </System>
  <EventData>
    <Data>{tid=A08}
</Data>
    <Data>
    </Data>
    <Data>4.6.1.10263</Data>
    <Data>C:\Program Files (x86)\Microsoft Application Virtualization Client</Data>
    <Data>C:\ProgramData\Microsoft\Application Virtualization Client\</Data>
    <Data>USER-VAIO</Data>
    <Data>Windows 7 64-bit Service Pack 1.0 Build 7601</Data>
    <Data>
    </Data>
  </EventData>
</Event>
Title: Re: If you run Windows 7 you might be interested in this
Post by: J P Sousa on April 13, 2013, 04:42:38 PM
Also;

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          4/13/2013 3:26:36 PM
Event ID:      10010
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      User-VAIO
Description:
The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-04-13T19:26:36.000000000Z" />
    <EventRecordID>60836</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>User-VAIO</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">{995C996E-D918-4A8C-A302-45719A6F4EA7}</Data>
  </EventData>
</Event>
Title: Re: If you run Windows 7 you might be interested in this
Post by: EagleKeeper on April 13, 2013, 04:47:53 PM
Looking

Initially it looks you have a permissions problem that is preventing the shadow copy service from creating a restore point.

Give me a little time and I'll come back with more.
Title: Re: If you run Windows 7 you might be interested in this
Post by: EagleKeeper on April 13, 2013, 05:09:46 PM
J P Sousa

Check your forum messages.
Title: Re: If you run Windows 7 you might be interested in this
Post by: J P Sousa on April 13, 2013, 06:37:00 PM
J P Sousa

Check your forum messages.

Thanks, I think you solved my problem.
.