Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

LogonUI.exe - Bad Image, sfc and safe mode not working


  • Please log in to reply
18 replies to this topic

#1 pewu

pewu

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 13 November 2016 - 08:51 PM

Hi,

 

I have a laptop running windows 7 that no longer can correctly boot. When I turn the computer on, the boot process  continues as normal until after the windows logo appears, when an error message pops up labeled LogonUI.exe - Bad Image.

 

I saw a previous thread about this here: http://www.bleepingcomputer.com/forums/t/532949/logonuiexe-bad-image-error/

and have gone through the fixes but nothing works.

 

My error message says:

C:\Windows\system32\certCredProvider.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support. 

 

After this, the welcome screen will appear, then go away and be replaced by a black screen with the pointer on it.

The computer also cannot boot to safe mode, as the screen will be blank again, this time with the safe mode text in each corner

 

Startup repair does not detect any problems

 

The issue started when I turned on my computer while I had a USB audio interface plugged in (M-Audio Mbox 2), which has given me problems before. However, I always could unplug the mbox and restart the laptop, and the computer would work as normal. However this time, it persisted, and nothing seems to fix it.

 

I have spent a bunch of time today researching this error and came across fixes mentioning using sfc /scannow to try and repair corrupted windows files. However, when I run sfc/scannow /offbootdir=e:\ /offwindir=e:\windows, it will give me a message saying that some corrupted files could not be fixed. 

 

When looking up this issue, I found posts saying to use dism, but I could not get any of their commands to work. 

 

Finally, I booted from a USB I created, and tried to run startup repair, the same commands, and perform a repair installation. None of these did anything different, while the repair installation would not work, asking me to remove the cd that the system was booted from. I even tried removing the USB after this, but nothing changed.

 

At this point I'm just wondering if I should try to recover data and factory reset the entire thing. I really desperately need to recover some files from the computer though, so resetting without recovery is not an option.


Edited by pewu, 13 November 2016 - 08:59 PM.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 14 November 2016 - 01:29 PM

DISM does not work in Window 7.

 

Open the Command Prompt.

 

When the Elevated Command Prompt opens copy and paste the command below, then press Enter.
 
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
 
This will place a new icon on the desktop titled CBS.  Double click on this icon to open 
the CBS log, copy and paste the log in your topic.
 
This log usually is very large, for this reason you should use a host website like Dropbox to post the log.  You can start a free 30 day trial.  Once you have loaded the log at Dropbox post a link to the website.
 
You did the Startup Repair, was this from the System Recovery Options?

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 14 November 2016 - 05:56 PM

Hi, I do not have access to my desktop or anything besides system repair (pressing f8 during boot -> cmd). I performed startup repair through this, and then again when I had booted from a USB. Neither one found problems.

 

I can probably use command prompt notepad and ie to do this though.

 

When I entered that command, I simply get a message saying that the system cannot find the file specified.

 

My windows is on my E drive (ssd), while I believe my D drive is my HDD. Do I need to specify which disk I am using?

 

Thanks for you help!


Edited by pewu, 14 November 2016 - 05:56 PM.


#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 15 November 2016 - 10:52 AM



Hi, I do not have access to my desktop or anything besides system repair (pressing f8 during boot -> cmd). I performed startup repair through this, and then again when I had booted from a USB. Neither one found problems.

 

I can probably use command prompt notepad and ie to do this though.

 

When I entered that command, I simply get a message saying that the system cannot find the file specified.

 

My windows is on my E drive (ssd), while I believe my D drive is my HDD. Do I need to specify which disk I am using?

 

Thanks for you help

This isn't very clear to me.  Did you create a shortcut for Command Prompt which is now on the desktop?  And does this shortcut not work when you click on it?


Edited by dc3, 15 November 2016 - 11:18 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 15 November 2016 - 11:58 AM

I don't have access to my desktop at all. I have to go through the system repair menu which gives the option of opening command prompt (along with startup repair, restore to previous etc. which I have used all of).

 

I believe there are commands to open notepad and internet explorer through the command prompt, but I am not very experienced with computers, so I could be wrong.


Edited by pewu, 15 November 2016 - 12:34 PM.


#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 16 November 2016 - 10:31 AM

What is the make and model of this computer?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#7 RolandJS

RolandJS

  • Members
  • 4,533 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:07:59 PM

Posted 16 November 2016 - 10:43 AM



...At this point I'm just wondering if I should try to recover data and factory reset the entire thing. I really desperately need to recover some files from the computer though, so resetting without recovery is not an option.

If/when you and dc3 agree it's time to backup your data folders and files, do you have a Puppy Linux usb boot along with ready to go [available] and trusted external media?   If you have a rough idea of how many GBs of data there are, you can calculate 110% [or more] for usb sticks or DVDs or external HDs.

[I believe Macrium Reflect or anything similar boot DVD can lead to a backup of your data onto external media.]


Edited by RolandJS, 16 November 2016 - 12:57 PM.

"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#8 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 16 November 2016 - 10:55 AM

@rolandjs

 

We are not near that point at this time.  There are still other avenues we can take.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#9 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 16 November 2016 - 01:26 PM

It's an iBuyPower laptop  (cz-17)



#10 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 16 November 2016 - 02:11 PM

 
 
Please run System File Checker
 
The sfc /scannow command scans all protected system files and replaces corrupted and incorrect versions with correct Microsoft versions.
 
Open the Command Prompt.  I'm not familiar with the options that are available for the Command Prompt on this computer.  Can you right click on the Command Prompt and select Run as administrator?  If you can, do so.  If you can't use the command below and see if it will run.
 
The Command Prompt should look similar to the image below.
 
command%20prompt%20w8_zpsxjmewau9.png
 
Copy and paste sfc /scannow in the command prompt, then press Enter to start the scan.  
 
If the scan finds no integrity  problems the scan will stop.  Type in exit, then press Enter to stop the scan.
 
If integrity issues are found in the scan please post the CBS log using the instructions below.
 
Click on the Start orb rsz_1rsz_1rsz_start_orb_zpshjewtibd.png then type cmd in the Search box. 
 
CMD will appear above the search box, right click on it and select Run as administrator.
 
When the Elevated Command Prompt opens copy and paste the command below, then press Enter.
 
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
 
This will place a new icon on the desktop titled CBS.  Double click on this icon to open 
the CBS log, copy and paste the log in your topic.
 
This log usually is very large, for this reason you should use a host website like Dropbox to post the log.  You can start a free 30 day trial.  Once you have loaded the log at Dropbox post a link to the website.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#11 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 16 November 2016 - 02:56 PM

I posted this in my original post, but I've already gone through this process. 

 

sfc is not working properly. When I run sfc /scannow, it says there is a system repair pending which require reboot to complete.

I can get it to run when I run sfc/scannow /offbootdir=e:\ /offwindir=e:\windows, but I then receive a message saying this:

 

Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log

 

I manually found the log file, but I cannot figure out how to upload it to the internet from my computer, as I cannot access anything besides command prompt.

I don't have git or anything like that installed on the laptop.

 

Is there any easy way to do this? I have the file open in notepad right now



#12 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 18 November 2016 - 04:27 PM

Hi,

 

Since I haven't gotten a response on how to upload the file without any access to internet browsers, I just took pictures of my screen.

 

Sorry, I know that this makes it extremely difficult to read, but this was the only thing I could think of.

 

http://imgur.com/a/cH9Ii

 

There is only the one page of logs, the pictures are in order from right to left of the logs.



#13 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 19 November 2016 - 11:07 AM

If you can't use your browser I would have to assume you are using different computer to post here.

 

If you copy the log and paste in a word document you can then move it to a flash drive.  You then can insert the flash drive in the computer you are posting here with and  copy the log from the disk and then paste it at Dropbox.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#14 pewu

pewu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 19 November 2016 - 01:21 PM

The log isn't that large, so here it is just in plain text.
 
2016-11-16 14:19:52, Info                  CBS    Starting TrustedInstaller initialization.
2016-11-16 14:19:52, Info                  CBS    Transactions disabled in registry, continuing without transaction support.
2016-11-16 14:19:52, Info                  CBS    Kernel transactions are disabled, continuing without transaction support.
2016-11-16 14:19:52, Info                  CBS    Loaded Servicing Stack v6.1.7601.17514 with Core: X:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17514_none_678566b7ddea04a5\cbscore.dll
2016-11-16 14:19:52, Info                  CSI    00000001@2016/11/16:22:19:52.492 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fefb51e94d @0x7fefb889839 @0x7fefb8534d3 @0xff82e97c @0xff82d799 @0xff82db2f)
2016-11-16 14:19:52, Info                  CSI    00000002@2016/11/16:22:19:52.523 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fefb51e94d @0x7fefb8d6806 @0x7fefb8a2a9c @0x7fefb8535a9 @0xff82e97c @0xff82d799)
2016-11-16 14:19:52, Info                  CSI    00000003@2016/11/16:22:19:52.523 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fefb51e94d @0x7fefb218728 @0x7fefb218856 @0xff82e474 @0xff82d7de @0xff82db2f)
2016-11-16 14:19:52, Info                  CBS    Failed to load SxsStore.dll [HRESULT = 0x8007007e - ERROR_MOD_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    Failed to initialize SxS. [HRESULT = 0x8007007e - ERROR_MOD_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    Ending TrustedInstaller initialization.
2016-11-16 14:19:52, Info                  CBS    Starting the TrustedInstaller main loop.
2016-11-16 14:19:52, Info                  CBS    TrustedInstaller service starts successfully.
2016-11-16 14:19:52, Info                  CBS    SQM: Initializing online with Windows opt-in: False
2016-11-16 14:19:52, Info                  CBS    SQM: Cleaning up report files older than 10 days.
2016-11-16 14:19:52, Info                  CBS    SQM: Requesting upload of all unsent reports.
2016-11-16 14:19:52, Info                  CBS    SQM: Failed to start upload with file pattern: X:\windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x8007007f - ERROR_PROC_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    SQM: Failed to start standard sample upload. [HRESULT = 0x8007007f - ERROR_PROC_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    SQM: Failed to start upload with file pattern: X:\windows\servicing\sqm\*_all.sqm, flags: 0x6 [HRESULT = 0x8007007f - ERROR_PROC_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    SQM: Failed to start always sample upload. [HRESULT = 0x8007007f - ERROR_PROC_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x8007007f - ERROR_PROC_NOT_FOUND]
2016-11-16 14:19:52, Info                  CBS    Setup in progress, aborting startup processing checks.
2016-11-16 14:19:52, Info                  CBS    Startup processing thread terminated normally
2016-11-16 14:19:52, Info                  CSI    00000004 CSI Store 3658864 (0x000000000037d470) initialized
2016-11-16 14:19:52, Info                  CSI    00000005 Transaction merge required, do-not-merge flag passed.
2016-11-16 14:30:01, Info                  CBS    Reboot mark refs incremented to: 1
2016-11-16 14:30:01, Info                  CBS    Scavenge: Starts
2016-11-16 14:30:01, Info                  CSI    00000006 Transaction merge required, do-not-merge flag passed.
2016-11-16 14:30:01, Info                  CSI    00000007@2016/11/16:22:30:01.720 CSI Transaction @0xaad500 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"
 
2016-11-16 14:30:01, Info                  CBS    Scavenge: Begin CSI Store
2016-11-16 14:30:01, Info                  CSI    00000008 Transaction merge required, do-not-merge flag passed.
2016-11-16 14:30:01, Info                  CBS    Scavenge: Could not scavenge with pending transaction, disposition: 0X5
2016-11-16 14:30:01, Info                  CSI    00000009@2016/11/16:22:30:01.720 CSI Transaction @0xaad500 destroyed
2016-11-16 14:30:01, Info                  CBS    Reboot mark refs: 0
2016-11-16 14:30:01, Info                  CBS    Idle processing thread terminated normally
2016-11-16 14:30:01, Info                  CBS    Ending the TrustedInstaller main loop.
2016-11-16 14:30:01, Info                  CBS    Starting TrustedInstaller finalization.
2016-11-16 14:30:01, Info                  CBS    Ending TrustedInstaller finalization.


#15 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:59 PM

Posted 19 November 2016 - 01:30 PM

Open the Advanced Boot Options and select Last Good Configuration, press Enter to run it.

 

If you have every booted into Safe Mode you will have chosen it from the advanced boot options.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users