Windows 10: Errors reported in the DISM and CBS logs - The specified buffer contains ill-formed data.

Hello -


My journey began with disk read errors.

An image restore of my system was done.
- (While waiting for a new drive.)

Everything was fine, except my Hello PIN access no longer worked.

Attempts to reset didn't work.

- (I didn't expect this was from the bad drive issue.)


Error messages encountered are described below

1. Duplicate ownership of directory.
   • This one was fixed using Repair-WindowsImage -Online -RestoreHealth
2. The specified buffer contains ill-formed data.
   • Still looking for insights from this group.
     • Failed finalizing changes ...
     • Failed to restore health ...

Several threads recommended (CMD.exe as admin) sfc /scannow


CBS.log output ...

2018-07-26 22:46:11, Info CSI 00004dfc Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\es-ES in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1, arch x86, culture [l:5]'es-ES', nonSxS, pkt {l:8 b:31bf3856ad364e35}
2018-07-26 22:46:11, Info CSI 00004e04 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\cs-CZ in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1, arch x86, culture [l:5]'cs-CZ', nonSxS, pkt {l:8 b:31bf3856ad364e35}
2018-07-26 22:46:11, Info CSI 00004e07 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\sv-SE in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1, arch x86, culture [l:5]'sv-SE', nonSxS, pkt {l:8 b:31bf3856ad364e35}
2018-07-26 22:46:24, Info CSI 00004f37 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\spp\tokens\pkeyconfig in component Microsoft-Windows-Security-SPP-Component-SKU-csvlk-pack-License, version 10.0.17134.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}
2018-07-26 22:46:27, Info CSI 00004f62 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\winsxs\InstallTemp in component Microsoft-Windows-Sxs, version 10.0.17134.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}

__________________

Others had suggested using PowerShell (as admin) Repair-WindowsImage

• **Note: this fixed the Duplicate ownership error messages, but left others.

Console output ...

PS C:\WINDOWS\system32> Repair-WindowsImage -Online -ScanHealth
Repair-WindowsImage : The specified buffer contains ill-formed data.
At line:1 char:1
+ Repair-WindowsImage -Online -ScanHealth
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: ) [Repair-WindowsImage], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand

PS C:\WINDOWS\system32> Repair-WindowsImage -Online -RestoreHealth
Repair-WindowsImage : The specified buffer contains ill-formed data.
At line:1 char:1
+ Repair-WindowsImage -Online -RestoreHealth
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: ) [Repair-WindowsImage], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand

PS C:\WINDOWS\system32>

dism.log output ...

2018-07-28 15:37:59, Info DISM DISM Package Manager: PID=5528 TID=16808 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize
2018-07-28 15:40:01, Info DISM DISM Package Manager: PID=5528 TID=16084 Error in operation: (null) (CBS HRESULT=0x8007025d) - CCbsConUIHandler::Error
2018-07-28 15:40:01, Error DISM DISM Package Manager: PID=5528 TID=16808 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x8007025d)
2018-07-28 15:40:01, Error DISM DISM Package Manager: PID=5528 TID=16808 Failed processing package changes with session option CbsSessionOptionRepairStoreCorruption - CDISMPackageManager::RestoreHealth(hr:0x8007025d)
2018-07-28 15:40:01, Error DISM API: PID=2696 TID=13676 Failed to restore health - CRestoreImageHealthCommandObject::InternalExecute(hr:0x8007025d)
2018-07-28 15:40:01, Error DISM API: PID=2696 TID=13676 InternalExecute failed - CBaseCommandObject::Execute(hr:0x8007025d)
2018-07-28 15:40:01, Error DISM API: PID=2696 TID=2728 CRestoreImageHealthCommandObject internal execution failed - DismRestoreImageHealthInternal(hr:0x8007025d)
2018-07-28 15:40:01, Info DISM API: PID=2696 TID=2728 Exit DismRestoreImageHealthInternal - DismRestoreImageHealthInternal


CBS log output ....

2018-07-28 15:23:47, Error CSI 00000007 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316769# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile(h = 624 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_microsoft-windows-a..anagement-migration_31bf3856ad364e35_10.0.17134.1_none_5918137ef467b6b3\AppManMigrationPlugin.dll'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0xb3e227b250, data = {l:0 b:}, byteoffset = 0, key = (null))
2018-07-28 15:23:47, Error CSI 00000008@2018/7/28:19:23:47.03 (F) onecore\base\wcp\sil\ntsystem.cpp(3533): Error c0000242 [Error,Facility=(system),Code=578 (0x0242)] originated in function Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile expression: (null)
2018-07-28 15:23:47, Info CBS Not able to add current session file to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:23:47, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:23:47, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:23:47, Info CBS Not able to add poqexec.log to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:23:47, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:23:48, Error CSI 00000009 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316768# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0 ml:1229496 b:}, Offset = 0, Disposition = 0)[gle=0xd0000242]
2018-07-28 15:23:48, Error CSI 0000000a (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #261# from CCSDirect::EnumStoreCorruptions(...)[gle=0xd0000242]
2018-07-28 15:23:48, Error CSI 0000000b (F) HRESULT_FROM_WIN32(605) #260# from Windows::COM::CStorePendingStoreRepairTxn_IStorePendingStoreRepairTransaction:etect(Flags = 4, cancelEvt = 290 (''), disp = 0)[gle=0x8007025d]
2018-07-28 15:23:48, Error CBS Rept: Failed to call CSI detect. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]
2018-07-28 15:23:48, Error CBS Session: 30680744_625414050 failed to perform store corruption detect and repair operation. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]
2018-07-28 15:40:00, Error CSI 00000007 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316769# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile(h = 610 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_microsoft-windows-a..anagement-migration_31bf3856ad364e35_10.0.17134.1_none_5918137ef467b6b3\AppManMigrationPlugin.dll'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x163a97afa0, data = {l:0 b:}, byteoffset = 0, key = (null))
2018-07-28 15:40:00, Error CSI 00000008@2018/7/28:19:40:00.103 (F) onecore\base\wcp\sil\ntsystem.cpp(3533): Error c0000242 [Error,Facility=(system),Code=578 (0x0242)] originated in function Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile expression: (null)
2018-07-28 15:40:00, Info CBS Not able to add current session file to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:40:00, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:40:00, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:40:00, Info CBS Not able to add poqexec.log to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:40:00, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2018-07-28 15:40:01, Error CSI 00000009 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316768# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0 ml:1229496 b:}, Offset = 0, Disposition = 0)[gle=0xd0000242]
2018-07-28 15:40:01, Error CSI 0000000a (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #261# from CCSDirect::EnumStoreCorruptions(...)[gle=0xd0000242]
2018-07-28 15:40:01, Error CSI 0000000b (F) HRESULT_FROM_WIN32(605) #260# from Windows::COM::CStorePendingStoreRepairTxn_IStorePendingStoreRepairTransaction:etect(Flags = 4, cancelEvt = 3e0 (''), disp = 0)[gle=0x8007025d]
2018-07-28 15:40:01, Error CBS Rept: Failed to call CSI detect. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]
2018-07-28 15:40:01, Error CBS Session: 30680746_2114606256 failed to perform store corruption detect and repair operation. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]

:)

 

SFC stops at 22% and cannot complete ,DISM returns "The specified buffer contains ill-formed data."

Original title: .SFC/DISM failures

System is running fine; updates are coming in regularly. Chkdsk has been run successfully. Yet...

SFC stops at 22% and cannot complete.

DISM returns "The specified buffer contains ill-formed data."

Even after a 1511 ISO is mounted (via Windows Explorer, to the F drive), DISM reports that it cannot find it.

Any point in pursuing this?

No Event Viewer errors but for one repetitively at boot: "WIA stopped once."

That is likely caused by a scanner driver that cannot be updated.

 

Sfc/dism


SFC stops at 22% and cannot complete.
DISM returns "The specified buffer contains ill-formed data."


RESOLVED via a Windows 10 refresh second attempt that succeeded after the first would not allow files to be retained.
After again creating an ISO file, the second install resulted in retained files and no SFC errors.
SFC stops at 22% and cannot complete.
DISM returns "The specified buffer contains ill-formed data."SFC errors.

 

Windows 10 settings, and task manager wont open.

hi I have tried the fix listed here and this is what I get. Notice the line The specified buffer contains ill-formed data. please advise

Microsoft Windows [Version 10.0.14393]

(c) 2016 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Scanhealth

Deployment Image Servicing and Management tool

Version: 10.0.14393.0

Image Version: 10.0.14393.0

[================== 32.0% ]

Error: 605

The specified buffer contains ill-formed data.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Restorehealth

Deployment Image Servicing and Management tool

Version: 10.0.14393.0

Image Version: 10.0.14393.0

[================== 32.0% ]

Error: 605

The specified buffer contains ill-formed data.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Restorehealth

Deployment Image Servicing and Management tool

Version: 10.0.14393.0

Image Version: 10.0.14393.0

[=========== 20.1% ]