Getting a Load of Event 4107, CAPI2 in the Application Log
I have a huge number of these in the Application log -- any guidence on what they mean would be helpful.This is a relatively clean Windows 7 x64 system with Office 2007 and Visual Studio 2008.The online help just says:Results for: Microsoft Product: Windows Operating System; Version: 6.1.7600.16385; Event ID: 4107; Event Source: Microsoft-Windows-CAPI2; No results were found for your query. Please see Search Help for suggestions. Details:Log Name: ApplicationSource: Microsoft-Windows-CAPI2Date: 8/10/2009 10:14:39 PMEvent ID: 4107Task Category: NoneLevel: ErrorKeywords: ClassicUser: N/AComputer: NYW7-0010Description:Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid..Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" /> <EventID Qualifiers="0">4107</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2009-08-11T02:14:39.776932800Z" /> <EventRecordID>1330</EventRecordID> <Correlation /> <Execution ProcessID="1076" ThreadID="3156" /> <Channel>Application</Channel> <Computer>NYW7-0010</Computer> <Security /> </System> <EventData> <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data> <Data>The data is invalid.</Data> </EventData></Event>
August 20th, 2009 5:25am

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> Try downloading it and manually installing it.At the beginning of this year, I had run into a similar problem with Vista. I eventually determined it was rejecting a signed MS certificate, one whose certifying authority was again MS. So, the error descriptionwasn't quite consistent with the problem. Double-clicking the .cab and manually installing that certificate didn't help anything; I could really find nothing wrong with it. It just seemed that something else was going wrong when it was being referenced somehow. Ultimately, I discovered that Windows Media Player Network SharingService was the source of the event, and since I don't use that, I just disabled the service. Problem solved (for me).My story in the paragraph above probably doesn't pertain to your situation. I include it only as an example to prepare you for the indirect reasoning you might need to apply after downloading that .cab file. Good luck.Or maybe, just ignore it.
Free Windows Admin Tool Kit Click here and download it now
August 20th, 2009 10:20am

Saberman, it seems as if it is failing trying to update a 3rd party security certificate. I agree with derosnec's suggestion.Let usdisable the Windows Media Player Network Sharing Service to check the result. After doing some research, I found some information related this error message. Please refer to Automatic Root Certificates Update ConfigurationI hope the above information is useful for you. :)
August 21st, 2009 12:20pm

I agree that's what it seems to be.I just now dug up a sample log that my computers (plural) recorded. Here is one:Log Name: ApplicationSource: Microsoft-Windows-CAPI2Date: 12/26/2008 12:22:53 AMEvent ID: 11Task Category: NoneLevel: ErrorKeywords: ClassicUser: N/AComputer: derosnec-PCDescription:Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.I also followed the instructions from the Event Viewer link: Event Log Online HelpThenI found the .cab in Temp (or wherever, it's been a long time since it happened). There is nothing wrong with the folders' permissions. I examined the .cab and could findno problems with it either. Then I downloaded the .cab to the desktop and manually loaded it. And then spent a lot of time tinkering and studying it. That is how I found that MS was the certifying authority of that MS certificate. So it seems that MS is the 3rd party that MS is certifying.I decided that onlinehelp page was useless.It makes me want to scream.Here. I just went through the exercise again. I downloaded it, extracted the certificate, and examined it via right-click Properties. Too bad I cannot cut-and-paste its info here. I'll transcribe. On the Digital Signatures [Details]> General [View Certificate]page, it says:Certificate InformationThis certificate is not valid for the selected purpose.Issued to: Microsoft Certificate Trust List PublisherIssued by: Microsoft Certificate Trust List PCAValid from 4/11/2009 to 7/11/2010See the problem?
Free Windows Admin Tool Kit Click here and download it now
August 21st, 2009 4:32pm

Hi saberman,Does derosnec's suggestion fix this issue?:)Candice
August 28th, 2009 11:04am

getting this too in Win7/64 (7600) now...guess I'll just ignore it Log Name: Application Source: Microsoft-Windows-CAPI2 Date: 10/5/2009 10:32:07 PM Event ID: 4107 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. . Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" /> <EventID Qualifiers="0">4107</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2009-10-05T20:32:07.518867300Z" /> <EventRecordID>4519</EventRecordID> <Correlation /> <Execution ProcessID="960" ThreadID="5732" /> <Channel>Application</Channel> <Computer>******</Computer> <Security /> </System> <EventData> <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data> <Data>The data is invalid. </Data> </EventData> </Event>
Free Windows Admin Tool Kit Click here and download it now
October 6th, 2009 12:20am

I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues.
October 7th, 2009 6:15pm

I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues. I think I'll go with your approach. It fits into my work schedule rather well.
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2009 12:12am

Anything new on this topic ? I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying. regards DS
October 29th, 2009 12:34pm

I am no longer using the Windows 7 RC Ultimate 64 bit version. I am now using the "official" version of Windows 7 Home Premium.And after updating my printer and video drivers at Lexmark and Nvidia to the Windows 7 version I have had no more errors.
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2009 8:05pm

Anything new on this topic ?I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying.regardsDS Since this thread has already been marked as 'answered', you may have better results if you post this again as a new question.
October 30th, 2009 8:12pm

Hi saberman,Does derosnec's suggestion fix this issue?:)Candice Just one more bug to be ignored for the time being. Of course it does make troubleshooting other problems more difficult as you have to filter out the bogus events.Since the security check on the certificate is failing and it appears not to have any impact on the system's operation does that mean that certificate checking is just a cosmetic? That is, something that is done to make it appear it enhances security?
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2009 9:51pm

See my Side by Side error. It is almost identical. I deleted the .dll file and have to wait and see since the error only occurs at 12:33 am.
November 1st, 2009 3:40am

Since 2 days suddenly no more errors - no idea why....
Free Windows Admin Tool Kit Click here and download it now
November 2nd, 2009 12:20pm

I deleted the whole folder labeled 'Search Helper' that the 'http://schemas...' line was in and I haven't had any errors since. Since there weren't any updates it can't be something MS did.
November 2nd, 2009 1:03pm

Here's how I fixed mine http://www.petenetlive.com/KB/Article/0000304.htm
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 2:12pm

please follow this KB http://support.microsoft.com/kb/2328240 release on 26 august 2010
September 2nd, 2010 12:23pm

Didn't work for me on two different servers. I'm trying to install a MSP file. Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.Bradley
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2010 9:49pm

That did it. Thanks! Also, the other advice given here: http://msmvps.com/blogs/bradley/archive/2010/09/02/capi2-errors-driving-you-crazy.aspx
September 10th, 2010 4:31am

http://support.microsoft.com/kb/2328240 has info on this for those still in need
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2011 3:06am

http://support.microsoft.com/kb/2328240 http://support.microsoft.com/kb/2258121 http://support.microsoft.com/kb/329308 So, do you think AppData is the common denominator?
February 12th, 2011 4:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics