x64 driver blocked

NTDEV
1

Hi,

I am working away at debugging my x64 driver under Win7. I boot with F8 to disable driver signature checking. Have been doing this for some time now. I was debugging some crashes today, and all of a sudden I get a yellow bang with code 48 - CM_PROB_DRIVER_BLOCKED - “The software for this device has been blocked from starting because it is known to have problems with Windows”. And I can’t figure out how to bypass this. I tried system restore to the start of the day before I began debugging the driver, but no luck. I have never seen this error before.

Does anyone know what is causing this and how I can get the driver to load again?

Thanks!

2

Did Windows Update run recently?

What’s the name of the driver?

mm

3

Perhaps your driver is using a very commonly used named.

d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@earthlink.net
Sent: Tuesday, December 08, 2009 2:56 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] x64 driver blocked

Hi,

I am working away at debugging my x64 driver under Win7. I boot with F8 to disable driver signature checking. Have been doing this for some time now. I was debugging some crashes today, and all of a sudden I get a yellow bang with code 48 - CM_PROB_DRIVER_BLOCKED - “The software for this device has been blocked from starting because it is known to have problems with Windows”. And I can’t figure out how to bypass this. I tried system restore to the start of the day before I began debugging the driver, but no luck. I have never seen this error before.

Does anyone know what is causing this and how I can get the driver to load again?

Thanks!

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

As a matter of fact, there were Windows Updates installed today. I did another system restore to before that update, and my drivers installed correctly again. Just for fun, I checked windows update and installed critical updates (2) and my drivers are still installed.

I don’t have a common driver name (I am sure). There is a possibility that Microsoft will someday have a signed driver by this name, but I know for sure there is not one right now. And I have 2 different drivers that I swap between for my hardware, with different names, and they both exhibited the same behavior, so I really don’t think it is a name issue.

I am really uneasy not knowing what caused this, because it is sure to pop up again.

5

I don’t know much about this, but I do know that the ‘Windows Driver Protection List’ is processed when WU runs, and if a driver is found that somebody doesn’t like, it gets blocked. This may happen at other times; I really don’t know.

Did you change/set/create the appropriate PNP ID’s and other settings in your INFS? Working for the moment on the assumption that what I said above is correct and relevant, I assume that the same device matching rules apply as usual, so if you didn’t set something correctly in your INF, that might cause a collision.

This is just a guess on my part, but I guess specifically I wonder:

  1. Are there any similarities between the two INF’s?
  2. Surely there is some log for WU somewhere; I would look in it (and ideally post it).

Good luck,

mm

6

I forgot:

Perhaps there is a log/record somewhere on the windows update site or elsewhere that record what was updated/blocked?

mm

7

They are the same in that both drivers load on a class code - they are 2 different driver types for the same hardware. Here is a snippet from WindowsUpdate.log. Maybe this will be meaningful for someone, I didn’t see anything to explain the behavior. Also nothing interesting in setupapi log.

2009-12-01 03:12:10:699 300 81c Misc Microsoft signed: Yes
2009-12-01 03:12:10:761 300 81c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-01 03:12:10:777 300 81c Misc Microsoft signed: Yes
2009-12-01 03:12:10:777 300 81c PT +++++++++++ PT: Starting category scan +++++++++++
2009-12-01 03:12:10:777 300 81c PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2009-12-01 03:12:11:183 300 81c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-01 03:12:11:183 300 81c Misc Microsoft signed: Yes
2009-12-01 03:12:11:246 300 81c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-01 03:12:11:261 300 81c Misc Microsoft signed: Yes
2009-12-01 03:12:11:261 300 81c PT +++++++++++ PT: Synchronizing server updates +++++++++++
2009-12-01 03:12:11:261 300 81c PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2009-12-01 03:12:11:527 300 81c Agent Update {1736B4B6-F4F4-4D0A-A018-1AAEB3C2D17F}.100 is pruned out due to potential supersedence
2009-12-01 03:12:11:527 300 81c Agent Update {D19115F6-392F-4CE4-8FFE-B52F6B2FAD19}.100 is pruned out due to potential supersedence
2009-12-01 03:12:11:527 300 81c Agent Update {258B140A-791D-4A1B-A67D-2085E505E997}.100 is pruned out due to potential supersedence
2009-12-01 03:12:11:527 300 81c Agent * Added update {0B6ACAFD-AE63-4E77-B708-2B0BB3055601}.100 to search result
2009-12-01 03:12:11:527 300 81c Agent * Found 1 updates and 4 categories in search; evaluated appl. rules of 68 out of 75 deployed entities
2009-12-01 03:12:11:542 300 81c Agent *********
2009-12-01 03:12:11:542 300 81c Agent ** END ** Agent: Finding updates [CallerId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:542 300 81c Agent *************
2009-12-01 03:12:11:542 2360 580 COMAPI >>– RESUMED – COMAPI: Search [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:542 2360 580 COMAPI - Updates found = 1
2009-12-01 03:12:11:542 2360 580 COMAPI ---------
2009-12-01 03:12:11:542 2360 580 COMAPI – END – COMAPI: Search [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:542 2360 580 COMAPI -------------
2009-12-01 03:12:11:542 2360 124 COMAPI -------------
2009-12-01 03:12:11:542 2360 124 COMAPI – START – COMAPI: Download [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:542 2360 124 COMAPI ---------
2009-12-01 03:12:11:542 2360 124 COMAPI - Forced: No; Download priority: 3
2009-12-01 03:12:11:542 2360 124 COMAPI - Updates in request: 1
2009-12-01 03:12:11:542 2360 124 COMAPI - ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2009-12-01 03:12:11:542 2360 124 COMAPI <<– SUBMITTED – COMAPI: Download [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:558 300 81c DnldMgr *************
2009-12-01 03:12:11:558 300 81c DnldMgr ** START ** DnldMgr: Downloading updates [CallerId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:558 300 81c DnldMgr *********
2009-12-01 03:12:11:558 300 81c DnldMgr * Call ID = {56B0B90F-A4CC-4BCA-A98A-3B7BF166715E}
2009-12-01 03:12:11:558 300 81c DnldMgr * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 1, Proxy session id = -1, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2009-12-01 03:12:11:558 300 81c DnldMgr * Updates to download = 1
2009-12-01 03:12:11:558 300 81c Agent * Title = Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.71.362.0)
2009-12-01 03:12:11:558 300 81c Agent * UpdateId = {0B6ACAFD-AE63-4E77-B708-2B0BB3055601}.100
2009-12-01 03:12:11:558 300 81c Agent * Bundles 1 updates:
2009-12-01 03:12:11:558 300 81c Agent * {0358339E-54D9-4597-8637-08CD1FA3A216}.100
2009-12-01 03:12:11:589 300 81c DnldMgr *********** DnldMgr: New download job [UpdateId = {0358339E-54D9-4597-8637-08CD1FA3A216}.100] ***********
2009-12-01 03:12:11:667 300 81c DnldMgr * BITS job initialized, JobId = {D02778DB-9EDC-44EB-B972-605B76CBE627}
2009-12-01 03:12:11:667 300 81c DnldMgr BITS job {D02778DB-9EDC-44EB-B972-605B76CBE627} using proxy = proxy-jf.intel.com:911, bypass =
2009-12-01 03:12:11:808 300 81c DnldMgr * Downloading from http://download.windowsupdate.com/msdownload/update/software/defu/2009/12/mpam-d_05275e40d348abc56e169958c0aab3381d4e6552.exe to C:\Windows\SoftwareDistribution\Download\bc9e6d78ca7662a02359a22e8af3048a\05275e40d348abc56e169958c0aab3381d4e6552 (full file).
2009-12-01 03:12:11:871 300 81c Agent *********
2009-12-01 03:12:11:871 300 81c Agent ** END **Agent: Downloading updates [CallerId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:11:871 300 81c Agent *************
2009-12-01 03:12:13:339 300 2b4 DnldMgr BITS job {D02778DB-9EDC-44EB-B972-605B76CBE627} completed successfully
2009-12-01 03:12:13:386 300 2b4 Misc Validating signature for C:\Windows\SoftwareDistribution\Download\bc9e6d78ca7662a02359a22e8af3048a\05275e40d348abc56e169958c0aab3381d4e6552:
2009-12-01 03:12:13:402 300 2b4 Misc Microsoft signed: Yes
2009-12-01 03:12:13:402 300 2b4 DnldMgr Download job bytes total = 937872, bytes transferred = 937872
2009-12-01 03:12:13:402 300 2b4 DnldMgr DnldMgr: New download job [UpdateId = {0358339E-54D9-4597-8637-08CD1FA3A216}.100]
2009-12-01 03:12:13:417 300 2b4 DnldMgr * All files for update were already downloaded and are valid.
2009-12-01 03:12:13:417 2360 580 COMAPI >>– RESUMED – COMAPI: Download [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:13:417 2360 580 COMAPI - Download call complete (succeeded = 1, succeeded with errors = 0, failed = 0, unaccounted = 0)
2009-12-01 03:12:13:417 2360 580 COMAPI ---------
2009-12-01 03:12:13:417 2360 580 COMAPI – END – COMAPI: Download [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:13:417 2360 580 COMAPI -------------
2009-12-01 03:12:13:417 2360 1d8 COMAPI -------------
2009-12-01 03:12:13:417 2360 1d8 COMAPI – START – COMAPI: Install [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:13:417 2360 1d8 COMAPI ---------
2009-12-01 03:12:13:417 2360 1d8 COMAPI - Allow source prompts: Yes; Forced: No; Force quiet: Yes
2009-12-01 03:12:13:417 2360 1d8 COMAPI - Updates in request: 1
2009-12-01 03:12:13:417 2360 1d8 COMAPI - ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2009-12-01 03:12:13:417 300 ac8 Agent *************
2009-12-01 03:12:13:417 300 ac8 Agent ** START **Agent: Installing updates [CallerId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:13:417 300 ac8 Agent *********
2009-12-01 03:12:13:417 300 ac8 Agent * Updates to install = 1
2009-12-01 03:12:13:417 2360 1d8 COMAPI - Updates to install = 1
2009-12-01 03:12:13:417 2360 1d8 COMAPI <<– SUBMITTED – COMAPI: Install [ClientId = Microsoft Antimalware (BCF43643-A118-4432-AEDE-D861FCBCFCDE)]
2009-12-01 03:12:13:433 300 ac8 Agent * Title = Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.71.362.0)
2009-12-01 03:12:13:433 300 ac8 Agent * UpdateId = {0B6ACAFD-AE63-4E77-B708-2B0BB3055601}.100
2009-12-01 03:12:13:433 300 ac8 Agent * Bundles 1 updates:
2009-12-01 03:12:13:433 300 ac8 Agent * {0358339E-54D9-4597-8637-08CD1FA3A216}.100
2009-12-01 03:12:16:542 300 81c Report REPORT EVENT: {5E846DCB-9D07-4B4B-A557-22897C3E14EE} 2009-12-01 03:12:11:542-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 Microsoft Antimalware (BCF43643 Success Software Synchronization Windows Update Client successfully detected 1 updates.
2009-12-01 03:12:16:542 300 81c Report REPORT EVENT: {5DB8CD1B-7F87-437A-9217-F39739955C57} 2009-12-01 03:12:13:417-0800 1 162 101 {0B6ACAFD-AE63-4E77-B708-2B0BB3055601} 100 0 Microsoft Antimalware (BCF43643 Success Content Download Download succeeded.
2009-12-01 03:12:16:542 300 81c Report CWERReporter finishing event handling. (00000000)
2009-12-08 15:11:32:869 2208 8c0 Misc =========== Logging initialized (build: 7.3.7600.16385, tz: -0800) ===========
2009-12-08 15:11:32:870 2208 8c0 Misc = Process: C:\Windows\system32\DrvInst.exe
2009-12-08 15:11:32:870 2208 8c0 Misc = Module: C:\Windows\system32\wuapi.dll
2009-12-08 15:11:32:869 2208 8c0 COMAPI -------------
2009-12-08 15:11:32:870 2208 8c0 COMAPI – START – COMAPI: Search [ClientId = ChkWuDrv]
2009-12-08 15:11:32:870 2208 8c0 COMAPI ---------
2009-12-08 15:11:33:381 1020 a44 Misc =========== Logging initialized (build: 7.3.7600.16385, tz: -0800) ===========
2009-12-08 15:11:33:382 1020 a44 Misc = Process: C:\Windows\system32\svchost.exe
2009-12-08 15:11:33:382 1020 a44 Misc = Module: c:\windows\system32\wuaueng.dll
2009-12-08 15:11:33:381 1020 a44 Service *************
2009-12-08 15:11:33:382 1020 a44 Service ** START **Service: Service startup
2009-12-08 15:11:33:382 1020 a44 Service *********
2009-12-08 15:11:33:428 1020 a44 Agent * WU client version 7.3.7600.16385
2009-12-08 15:11:33:429 1020 a44 Agent * Base directory: C:\Windows\SoftwareDistribution
2009-12-08 15:11:33:430 1020 a44 Agent * Access type: No proxy
2009-12-08 15:11:33:511 1020 a44 Agent * Network state: Connected
2009-12-08 15:11:35:867 1020 3e4 Report CWERReporter::Init succeeded
2009-12-08 15:11:35:867 1020 3e4 Agent Agent: Initializing Windows Update Agent
2009-12-08 15:11:35:878 1020 3e4 Agent Agent: Initializing global settings cache
2009-12-08 15:11:35:878 1020 3e4 Agent * WSUS server:
2009-12-08 15:11:35:878 1020 3e4 Agent * WSUS status server:
2009-12-08 15:11:35:878 1020 3e4 Agent * Target group: (Unassigned Computers)
2009-12-08 15:11:35:878 1020 3e4 Agent * Windows Update access disabled: No
2009-12-08 15:11:35:950 1020 3e4 DnldMgr Download manager restoring 0 downloads
2009-12-08 15:11:36:537 2208 8c0 COMAPI <<– SUBMITTED – COMAPI: Search [ClientId = ChkWuDrv]
2009-12-08 15:11:37:813 1020 a44 Report Report: Initializing static reporting data
2009-12-08 15:11:37:814 1020 a44 Report * OS Version = 6.1.7600.0.0.65792
2009-12-08 15:11:37:814 1020 a44 Report * OS Product Type = 0x00000001
2009-12-08 15:11:37:872 1020 a44 Report * Computer Brand = INTEL_
2009-12-08 15:11:37:872 1020 a44 Report * Computer Model = DX38BT__
2009-12-08 15:11:37:927 1020 a44 Report * Bios Revision = BTX3810J.86A.1521.2008.0318.1426
2009-12-08 15:11:37:927 1020 a44 Report * Bios Name = Default System BIOS
2009-12-08 15:11:37:927 1020 a44 Report * Bios Release Date = 2008-03-18T00:00:00
2009-12-08 15:11:37:927 1020 a44 Report * Locale ID = 1033
2009-12-08 15:11:38:038 1020 984 Agent *************
2009-12-08 15:11:38:038 1020 984 Agent ** START **Agent: Finding updates [CallerId = ChkWuDrv]
2009-12-08 15:11:38:062 1020 984 Agent *********
2009-12-08 15:11:38:062 1020 984 Agent * Online = Yes; Ignore download priority = No
2009-12-08 15:11:38:062 1020 984 Agent * Criteria = “Type=‘Driver’ and DriverMatch=‘Best’ and DeviceInstance=‘PCI\VEN_1B73&DEV_1000&SUBSYS_10001D5C&REV_01\4&3194171C&0&00E0’ and DriverIsBetterThanInStore=1”
2009-12-08 15:11:38:062 1020 984 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
2009-12-08 15:11:38:062 1020 984 Agent * Search Scope = {Machine}
2009-12-08 15:11:41:276 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:11:41:318 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:11:41:892 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:11:41:895 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:11:41:898 1020 984 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2009-12-08 15:11:41:898 1020 984 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2009-12-08 15:11:47:040 1020 984 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 151 out of 316 deployed entities
2009-12-08 15:11:47:107 1020 984 Agent *********
2009-12-08 15:11:47:108 1020 984 Agent ** END **Agent: Finding updates [CallerId = ChkWuDrv]
2009-12-08 15:11:47:108 1020 984 Agent *************
2009-12-08 15:11:47:134 2208 a38 COMAPI >>– RESUMED – COMAPI: Search [ClientId = ChkWuDrv]
2009-12-08 15:11:47:134 2208 a38 COMAPI - Updates found = 0
2009-12-08 15:11:47:134 2208 a38 COMAPI ---------
2009-12-08 15:11:47:135 2208 a38 COMAPI – END – COMAPI: Search [ClientId = ChkWuDrv]
2009-12-08 15:11:47:135 2208 a38 COMAPI -------------
2009-12-08 15:11:48:740 1020 984 Report CWERReporter finishing event handling. (00000000)
2009-12-08 15:11:52:107 1020 984 Report REPORT EVENT: {2ACBAC9C-8A93-4F41-84FF-1889AC9F52C3} 2009-12-08 15:11:47:107-0800 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
2009-12-08 15:11:52:107 1020 984 Report CWERReporter finishing event handling. (00000000)
2009-12-08 15:12:19:377 1020 a44 AU ########### AU: Initializing Automatic Updates ###########
2009-12-08 15:12:19:377 1020 a44 AU AU setting next detection timeout to 2009-12-08 23:12:19
2009-12-08 15:12:19:377 1020 a44 AU AU setting next sqm report timeout to 2009-12-08 23:12:19
2009-12-08 15:12:19:377 1020 a44 AU # Approval type: Scheduled (User preference)
2009-12-08 15:12:19:377 1020 a44 AU # Scheduled install day/time: Every day at 3:00
2009-12-08 15:12:19:377 1020 a44 AU # Auto-install minor updates: Yes (User preference)
2009-12-08 15:12:19:377 1020 a44 AU # Will interact with non-admins (Non-admins are elevated (User preference))
2009-12-08 15:12:19:815 1020 a44 AU Initializing featured updates
2009-12-08 15:12:19:815 1020 a44 AU Found 0 cached featured updates
2009-12-08 15:12:19:831 1020 a44 AU Successfully wrote event for AU health state:0
2009-12-08 15:12:19:831 1020 a44 AU AU setting pending client directive to ‘Install Approval’
2009-12-08 15:12:19:893 1020 a44 AU Successfully wrote event for AU health state:0
2009-12-08 15:12:19:893 1020 a44 AU The system has been restored. Hence triggering AU detection through DetectNow API.
2009-12-08 15:12:19:893 1020 a44 AU Triggering AU detection through DetectNow API
2009-12-08 15:12:19:893 1020 a44 AU Triggering Online detection (non-interactive)
2009-12-08 15:12:19:893 1020 a44 AU AU finished delayed initialization
2009-12-08 15:12:19:893 1020 a44 AU #############
2009-12-08 15:12:19:893 1020 a44 AU ## START ## AU: Search for updates
2009-12-08 15:12:19:893 1020 a44 AU #########
2009-12-08 15:12:19:893 1020 a44 AU <<## SUBMITTED ## AU: Search for updates [CallId = {DE71123B-78A9-4C13-BD4B-5CDD27B98D26}]
2009-12-08 15:12:19:893 1020 a44 AU AU setting next sqm report timeout to 2009-12-09 23:12:19
2009-12-08 15:12:19:893 1020 984 Agent *************
2009-12-08 15:12:19:893 1020 984 Agent ** START **Agent: Finding updates [CallerId = AutomaticUpdates]
2009-12-08 15:12:19:893 1020 984 Agent *********
2009-12-08 15:12:19:893 1020 984 Agent * Online = Yes; Ignore download priority = No
2009-12-08 15:12:19:893 1020 984 Agent * Criteria = “IsInstalled=0 and DeploymentAction=‘Installation’ or IsPresent=1 and DeploymentAction=‘Uninstallation’ or IsInstalled=1 and DeploymentAction=‘Installation’ and RebootRequired=1 or IsInstalled=0 and DeploymentAction=‘Uninstallation’ and RebootRequired=1”
2009-12-08 15:12:19:893 1020 984 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2009-12-08 15:12:19:893 1020 984 Agent * Search Scope = {Machine}
2009-12-08 15:12:19:893 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:12:19:893 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:20:081 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:12:20:081 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:23:159 1020 984 Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://download.windowsupdate.com/v9/microsoftupdate/redir/muauth.cab
2009-12-08 15:12:23:159 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2009-12-08 15:12:23:159 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:23:331 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2009-12-08 15:12:23:346 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:23:346 1020 984 Setup Checking for agent SelfUpdate
2009-12-08 15:12:23:487 1020 984 Setup Client version: Core: 7.3.7600.16385 Aux: 7.3.7600.16385
2009-12-08 15:12:24:346 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:12:24:346 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:24:440 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2009-12-08 15:12:24:440 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:24:456 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2009-12-08 15:12:24:502 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:24:534 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2009-12-08 15:12:24:534 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:27:831 1020 984 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
2009-12-08 15:12:27:831 1020 984 Setup SelfUpdate check completed. SelfUpdate is NOT required.
2009-12-08 15:12:34:877 1020 a44 AU Launched new AU client for directive ‘Install Approval’, session id = 0x1
2009-12-08 15:12:35:049 3368 d2c Misc =========== Logging initialized (build: 7.3.7600.16385, tz: -0800) ===========
2009-12-08 15:12:35:049 3368 d2c Misc = Process: C:\Windows\system32\wuauclt.exe
2009-12-08 15:12:35:049 3368 d2c AUClnt Launched Client UI process
2009-12-08 15:12:35:081 3368 d2c Misc =========== Logging initialized (build: 7.3.7600.16385, tz: -0800) ===========
2009-12-08 15:12:35:081 3368 d2c Misc = Process: C:\Windows\system32\wuauclt.exe
2009-12-08 15:12:35:081 3368 d2c Misc = Module: C:\Windows\system32\wucltux.dll
2009-12-08 15:12:35:081 3368 d2c CltUI AU client got new directive = ‘Install Approval’, serviceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0
2009-12-08 15:12:39:034 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-08 15:12:39:065 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:39:237 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-08 15:12:39:237 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:40:127 1020 984 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2009-12-08 15:12:40:127 1020 984 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2009-12-08 15:12:42:440 1020 984 Driver Matched driver to device PCI\VEN_10DE&DEV_0421&SUBSYS_C7413842&REV_A1
2009-12-08 15:12:42:440 1020 984 Driver Status: 0x180200a, ProblemNumber: 00000000
2009-12-08 15:12:42:440 1020 984 Driver Matched driver to device USB\VID_04B3&PID_301B&REV_0100&MI_01
2009-12-08 15:12:42:440 1020 984 Driver Status: 0x180200a, ProblemNumber: 00000000
2009-12-08 15:12:43:424 1020 a44 AU Forced install timer expired for scheduled install
2009-12-08 15:12:43:424 1020 a44 AU UpdateDownloadProperties: 0 download(s) are still in progress.
2009-12-08 15:12:43:424 1020 a44 AU #############
2009-12-08 15:12:43:424 1020 a44 AU ## START ## AU: Install updates
2009-12-08 15:12:43:424 1020 a44 AU #########
2009-12-08 15:12:43:424 1020 a44 AU # Initiating scheduled install
2009-12-08 15:12:43:424 1020 a44 AU # Approved updates = 1
2009-12-08 15:12:43:471 1020 a44 AU <<## SUBMITTED ## AU: Install updates / installing updates [CallId = {AC273DD3-01DF-4190-9377-AECD60CC6342}]
2009-12-08 15:12:43:471 1020 d84 Agent *************
2009-12-08 15:12:43:471 1020 d84 Agent ** START **Agent: Installing updates [CallerId = AutomaticUpdates]
2009-12-08 15:12:43:471 1020 d84 Agent *********
2009-12-08 15:12:43:471 1020 d84 Agent * Updates to install = 1
2009-12-08 15:12:43:471 3368 d2c CltUI AU client got new directive = ‘Shutdown’, serviceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0
2009-12-08 15:12:43:518 1020 a44 AU AU received handle event
2009-12-08 15:12:43:612 1020 d84 Agent * Title = Cumulative Security Update for Internet Explorer 8 for Windows 7 for x64-based Systems (KB976325)
2009-12-08 15:12:43:612 1020 d84 Agent * UpdateId = {E6EBC631-1C08-426F-9594-7CE9C3019506}.103
2009-12-08 15:12:43:612 1020 d84 Agent * Bundles 1 updates:
2009-12-08 15:12:43:612 1020 d84 Agent * {1E1B5991-0BED-493C-ABD1-074916F3FFA6}.102
2009-12-08 15:12:51:941 1020 a44 Shutdwn user declined update at shutdown
2009-12-08 15:12:51:941 1020 a44 AU Found ongoing AU install at shutdown.
2009-12-08 15:12:51:957 1020 a44 Shutdwn InstallAtShutdown starts.
2009-12-08 15:12:52:035 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-08 15:12:52:035 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:52:222 1020 984 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2009-12-08 15:12:52:222 1020 984 Misc Microsoft signed: Yes
2009-12-08 15:12:52:222 1020 984 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2009-12-08 15:12:52:222 1020 984 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2009-12-08 15:12:52:519 1020 984 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/ftpk/2009/09/3127922_efd1b6e88dca0406420a85f24eb9497135f89f0a.cab for file 79G26I3KBAZCCoXyTrlJcTX4nwo= when file has not been previously added to the datastore
2009-12-08 15:12:53:144 1020 984 Agent * Added update {37F92ED8-5092-4E53-B995-69BDD2E1BB75}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent Update {B22FF8ED-582A-4380-9C6D-79FA20B29609}.101 is pruned out due to potential supersedence
2009-12-08 15:12:53:144 1020 984 Agent Update {87C66D63-B877-4A92-9DE9-FEF73A4BA530}.100 is pruned out due to potential supersedence
2009-12-08 15:12:53:144 1020 984 Agent * Added update {19320806-4280-48FC-8AC7-145B5895EA89}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {3248D728-8DA0-4F91-BF43-18DFA2B97044}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {614C3408-E80D-49DC-8F98-1F87C26C1F5D}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {0FD36D07-10F9-4A54-A090-286A3CF0B3F3}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {7EB58AEE-B7EF-4D8D-8AB8-2AB726665F58}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {59ABF204-F053-4D91-99C0-31981D7341BC}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {4B89A98F-79B2-4546-B9E9-33731BEA30C1}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {081CAB8E-FAF5-421B-BE7C-3E796837F1FF}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {26E5DDC8-5612-48B0-AAB1-47AC819095D5}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {8BDD72C0-1566-4399-9123-905898BA722D}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {33C1D18F-2C58-461D-B782-80EE0F70CCEA}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {16CE7C5E-19DB-4993-B3AB-60E4FF8E5996}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {04B7D017-3C6C-4677-A48E-958F7509A9B2}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {AE94673D-20D0-4F6C-9D7D-0017C412F271}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {7D25E0F6-7EA6-4EC8-9F02-0AAA88AD4949}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {37976360-39FA-4650-AECD-484990A10255}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {D85A2427-4ED9-4242-853C-594B3EE94A4F}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {25E69D9A-49A7-4ECA-BB57-5E69C3413BCE}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {9326166F-2541-4C08-BEF8-64D912D7A464}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {E733DDB0-3B68-4555-BF0A-70F8D4366C72}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {CC898252-E986-40DC-9A0D-80C36651B5C6}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {5336FE1C-0C9E-422C-A17C-8E5DCD25BC55}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {B6C88119-2EA3-49D1-97D6-A160E7A4FF4B}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {88229880-277B-4DFA-8CF5-A9576B88252E}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {75D1E974-7700-4C94-9A95-B181CAAF597F}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {6FA2D567-5BF3-4112-BB6D-C4E724D4E328}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {66D3840D-76FD-4315-9B7A-C768039EF167}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {95422A2C-8BEB-413A-A6C0-CB8DFC75E4BE}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {2373D7AB-4643-4806-8BF7-E2379AA3CB79}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {2AA71947-2364-403F-8A27-E917DEF5F29C}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {1396C631-405A-4BE0-9EDC-EDA6AE5F94CD}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {C24FAAB7-5ACE-45CA-BEDB-EEBAB9CAF2B4}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {45F142CA-3CA4-4CC0-A9FA-F5AB8E0CC0F0}.101 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {32C3134C-2923-413D-BE3B-F884E3A03A16}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent Update {7301F405-4F08-495E-BF7A-BD9703EAEFFD}.100 is pruned out due to potential supersedence
2009-12-08 15:12:53:144 1020 984 Agent * Added update {870866B2-C082-4DF6-8E15-B2E44D033FEB}.100 to search result
2009-12-08 15:12:53:144 1020 984 Agent * Added update {7A25C7EC-3798-4413-A493-57A259D18959}.100 to search result
2

8

FYI - I win the “Stupid Driver Writer Mistakes Award” for this one.

I forgot to update my .ini file for WinDbg, so when it pulled across the debug driver, it was the 32-bit driver, and windows smartly detected this was not a good match for a 64-bit system, and wouldn’t let it load.

9

FYI, I figured this out. Problem was that I forgot to update the .ini for WinDbg, so it was pulling a 32-bit driver for a 64-bit system. I win the “Dumb Driver Writer Mistakes Award” for today …

10

> I forgot to update my .ini file for WinDbg

Sorry, but where have you found an .ini file with WinDbg?

–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

11

I guess he is using something like

.kdfiles d:\Map_Files\mymap.ini

thanks,
–rc

On Fri, Dec 11, 2009 at 7:52 PM, Maxim S. Shatskih
wrote:
>> I forgot to update my .ini file for WinDbg
>
> Sorry, but where have you found an .ini file with WinDbg?
>
> –
> Maxim S. Shatskih
> Windows DDK MVP
> xxxxx@storagecraft.com
> http://www.storagecraft.com
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>