Windows 10: The specified buffer contains ill-formed data

I tried to install "Security Update for Windows KB5003173", But I keep getting ErrorCode 2147943005 ErrorString The specified buffer contains ill-formed data. CommandLine "C:\WINDOWS\system32\wusa.exe" .\windows10.0-kb5003173-x64_4e3b4345ad6e3bf44183d6f25879a0c5ca1b7ef9.msu /log:kb.evtx How could I resolve this?

:)

 

SFC stops at 22% and cannot complete ,DISM returns "The specified buffer contains ill-formed data."

Original title: .SFC/DISM failures

System is running fine; updates are coming in regularly. Chkdsk has been run successfully. Yet...

SFC stops at 22% and cannot complete.

DISM returns "The specified buffer contains ill-formed data."

Even after a 1511 ISO is mounted (via Windows Explorer, to the F drive), DISM reports that it cannot find it.

Any point in pursuing this?

No Event Viewer errors but for one repetitively at boot: "WIA stopped once."

That is likely caused by a scanner driver that cannot be updated.

 

Errors reported in the DISM and CBS logs - The specified buffer contains ill-formed data.

Hello -

My journey began with disk read errors.

An image restore of my system was done.

- (While waiting for a new drive.)

Everything was fine, except my Hello PIN access no longer worked.

Attempts to reset didn't work.

- (I didn't expect this was from the bad drive issue.)

Error messages encountered are described below

1. Duplicate ownership of directory.
   • This one was fixed using Repair-WindowsImage -Online -RestoreHealth
2. The specified buffer contains ill-formed data.
   • Still looking for insights from this group.
     • Failed finalizing changes ...
     • Failed to restore health ...

Several threads recommended (CMD.exe as admin) sfc /scannow

CBS.log output ...

2018-07-26 22:46:11, Info CSI 00004dfc Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\es-ES in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1,
arch x86, culture [l:5]'es-ES', nonSxS, pkt {l:8 b:31bf3856ad364e35}

2018-07-26 22:46:11, Info CSI 00004e04 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\cs-CZ in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1,
arch x86, culture [l:5]'cs-CZ', nonSxS, pkt {l:8 b:31bf3856ad364e35}

2018-07-26 22:46:11, Info CSI 00004e07 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\sv-SE in component Microsoft-Windows-Cdosys.Resources, version 10.0.17134.1,
arch x86, culture [l:5]'sv-SE', nonSxS, pkt {l:8 b:31bf3856ad364e35}

2018-07-26 22:46:24, Info CSI 00004f37 Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\SysWOW64\spp\tokens\pkeyconfig in component Microsoft-Windows-Security-SPP-Component-SKU-csvlk-pack-License,
version 10.0.17134.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}

2018-07-26 22:46:27, Info CSI 00004f62
Error: Overlap: Duplicate ownership for directory \??\C:\WINDOWS\winsxs\InstallTemp in component Microsoft-Windows-Sxs, version 10.0.17134.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}

__________________

Others had suggested using PowerShell (as admin) Repair-WindowsImage

• **Note: this fixed the Duplicate ownership error messages, but left others.

Console output ...

PS C:\WINDOWS\system32> Repair-WindowsImage -Online -ScanHealth

Repair-WindowsImage : The specified buffer contains ill-formed data.

At line:1 char:1

+ Repair-WindowsImage -Online -ScanHealth

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : NotSpecified: ) [Repair-WindowsImage], COMException

+ FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand

PS C:\WINDOWS\system32> Repair-WindowsImage -Online -RestoreHealth

Repair-WindowsImage : The specified buffer contains ill-formed data.

At line:1 char:1

+ Repair-WindowsImage -Online -RestoreHealth

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : NotSpecified: ) [Repair-WindowsImage], COMException

+ FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand

PS C:\WINDOWS\system32>

dism.log output ...

2018-07-28 15:37:59, Info DISM DISM Package Manager: PID=5528 TID=16808 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize

2018-07-28 15:40:01, Info DISM DISM Package Manager: PID=5528 TID=16084 Error in operation: (null) (CBS HRESULT=0x8007025d) - CCbsConUIHandler::Error

2018-07-28 15:40:01, Error DISM DISM Package Manager: PID=5528 TID=16808 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x8007025d)

2018-07-28 15:40:01, Error DISM DISM Package Manager: PID=5528 TID=16808 Failed processing package changes with session option CbsSessionOptionRepairStoreCorruption - CDISMPackageManager::RestoreHealth(hr:0x8007025d)

2018-07-28 15:40:01, Error DISM API: PID=2696 TID=13676 Failed to restore health - CRestoreImageHealthCommandObject::InternalExecute(hr:0x8007025d)

2018-07-28 15:40:01, Error DISM API: PID=2696 TID=13676 InternalExecute failed - CBaseCommandObject::Execute(hr:0x8007025d)

2018-07-28 15:40:01, Error DISM API: PID=2696 TID=2728 CRestoreImageHealthCommandObject internal execution failed - DismRestoreImageHealthInternal(hr:0x8007025d)

2018-07-28 15:40:01, Info DISM API: PID=2696 TID=2728 Exit DismRestoreImageHealthInternal - DismRestoreImageHealthInternal

CBS log output ....

2018-07-28 15:23:47, Error CSI 00000007 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316769# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile(h
= 624 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_microsoft-windows-a..anagement-migration_31bf3856ad364e35_10.0.17134.1_none_5918137ef467b6b3\AppManMigrationPlugin.dll'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0xb3e227b250, data = {l:0 b:}, byteoffset
= 0, key = (null))

2018-07-28 15:23:47, Error CSI 00000008@2018/7/28:19:23:47.03 (F) onecore\base\wcp\sil\ntsystem.cpp(3533): Error c0000242 [Error,Facility=(system),Code=578 (0x0242)] originated in function
Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile expression: (null)

2018-07-28 15:23:47, Info CBS Not able to add current session file to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:23:47, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:23:47, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:23:47, Info CBS Not able to add poqexec.log to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:23:47, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:23:48, Error CSI 00000009 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316768# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0
ml:1229496 b:}, Offset = 0, Disposition = 0)[gle=0xd0000242]

2018-07-28 15:23:48, Error CSI 0000000a (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #261# from CCSDirect::EnumStoreCorruptions(...)[gle=0xd0000242]

2018-07-28 15:23:48, Error CSI 0000000b (F) HRESULT_FROM_WIN32(605) #260# from Windows::COM::CStorePendingStoreRepairTxn_IStorePendingStoreRepairTransaction:etect(Flags = 4, cancelEvt
= 290 (''), disp = 0)[gle=0x8007025d]

2018-07-28 15:23:48, Error CBS Rept: Failed to call CSI detect. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]

2018-07-28 15:23:48, Error CBS Session: 30680744_625414050 failed to perform store corruption detect and repair operation. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]

2018-07-28 15:40:00, Error CSI 00000007 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316769# from Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile(h
= 610 ('\Device\HarddiskVolume6\Windows\WinSxS\amd64_microsoft-windows-a..anagement-migration_31bf3856ad364e35_10.0.17134.1_none_5918137ef467b6b3\AppManMigrationPlugin.dll'), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x163a97afa0, data = {l:0 b:}, byteoffset
= 0, key = (null))

2018-07-28 15:40:00, Error CSI 00000008@2018/7/28:19:40:00.103 (F) onecore\base\wcp\sil\ntsystem.cpp(3533): Error c0000242 [Error,Facility=(system),Code=578 (0x0242)] originated in function
Windows::Rtl::SystemImplementation:irectFileSystemProvider::SysReadFile expression: (null)

2018-07-28 15:40:00, Info CBS Not able to add current session file to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:40:00, Info CBS Not able to add pending.xml to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:40:00, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:40:00, Info CBS Not able to add poqexec.log to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:40:00, Info CBS Not able to add SCM.EVM to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

2018-07-28 15:40:01, Error CSI 00000009 (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #1316768# from Windows::Rtl::SystemImplementation::CFile::ReadFile(Flags = 3, Buffer = {l:0
ml:1229496 b:}, Offset = 0, Disposition = 0)[gle=0xd0000242]

2018-07-28 15:40:01, Error CSI 0000000a (F) c0000242 [Error,Facility=(system),Code=578 (0x0242)] #261# from CCSDirect::EnumStoreCorruptions(...)[gle=0xd0000242]

2018-07-28 15:40:01, Error CSI 0000000b (F) HRESULT_FROM_WIN32(605) #260# from Windows::COM::CStorePendingStoreRepairTxn_IStorePendingStoreRepairTransaction:etect(Flags = 4, cancelEvt
= 3e0 (''), disp = 0)[gle=0x8007025d]

2018-07-28 15:40:01, Error CBS Rept: Failed to call CSI detect. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]

2018-07-28 15:40:01, Error CBS Session: 30680746_2114606256 failed to perform store corruption detect and repair operation. [HRESULT = 0x8007025d - ERROR_BAD_COMPRESSION_BUFFER]

 

sfc /scannow will not complete- stops at 73%

I ran both dism.exe and it give me this message. The specified buffer contains ill-formed data.

I ran the sfc/ scannow again and it did not take care of the issue. How can I find the specified

buffer file that contains the ill-formed data and fix the issue?

Thank you

Bob