[SOLVED] Found some Chinese text in a Problem Report, should I be concerned?

James_369

Honorable
Sep 4, 2016
40
3
10,535
The program that produced this error was the Windows Module Installer Worker.

Problem Event Name: WindowsServicingFailureInfo
OsVersion: 10.0.19041.1737:1
Message: 0x800F0984 0x800F0984 Matching binary: VmsProxy.sys missing for component: amd64_microsoft-hyper-v-d..s-vmswitch-netsetup_31bf3856ad364e35_10.0.19041.1766_none_f8f78fb610a633fa
Callsite: 楆敬›瑳牯汥祡畯⹴灣⡰㘱㘹
‭潃灭湯湥却潴敲㨺剃睡瑓牯䱥祡畯㩴䠺摹慲整楆敬獕湩䙧牯慷摲湁剤癥牥敳敄瑬獡
OS Version: 10.0.19044.2.0.0.768.101
Locale ID: 4105

This occurred on this month's Patch Tuesday (the 14th) and while I haven't detected any problems this whole week, I am a little concerned if this is some sort of 'you've been compromised' message.
 
Solution
It's likely this is your problem (should be timestamped 35:20 or so)

Basically, something dropped a byte and this shifted the unicode (or whatever Windows uses) data. This ends up mapping to Chinese characters. And while Google Translate isn't the best, I'm pretty sure "Destroying the soup, but knocking on it" isn't code for "give us 10,000 BTC or your data is gone"

EDIT: A cursory glance at the text using a UTF-16 decoder (which is what Windows uses), it spits out this:
Code:
\u6f43\u706d\u6e6f\u6e65\u5374\u6f74\u6572\u3a3a\u5243\u7761\u7453\u726f\u4c65\u7961\u756f\u3a74\u483a\u6479\u6172\u6574\u6946\u656c\u7355\u6e69\u4667\u726f\u6177\u6472\u6e41\u5264\u7665\u7265\u6573\u6544\u746c\u7361
If you split it...
It's likely this is your problem (should be timestamped 35:20 or so)

Basically, something dropped a byte and this shifted the unicode (or whatever Windows uses) data. This ends up mapping to Chinese characters. And while Google Translate isn't the best, I'm pretty sure "Destroying the soup, but knocking on it" isn't code for "give us 10,000 BTC or your data is gone"

EDIT: A cursory glance at the text using a UTF-16 decoder (which is what Windows uses), it spits out this:
Code:
\u6f43\u706d\u6e6f\u6e65\u5374\u6f74\u6572\u3a3a\u5243\u7761\u7453\u726f\u4c65\u7961\u756f\u3a74\u483a\u6479\u6172\u6574\u6946\u656c\u7355\u6e69\u4667\u726f\u6177\u6472\u6e41\u5264\u7665\u7265\u6573\u6544\u746c\u7361
If you split it up in to two digit groupings, a lot of that is within alphanumeric characters in an ASCII table.
 
Last edited:
Solution

James_369

Honorable
Sep 4, 2016
40
3
10,535
It's likely this is your problem (should be timestamped 35:20 or so)

Basically, something dropped a byte and this shifted the unicode (or whatever Windows uses) data. This ends up mapping to Chinese characters. And while Google Translate isn't the best, I'm pretty sure "Destroying the soup, but knocking on it" isn't code for "give us 10,000 BTC or your data is gone"
Ah, I see... So nothing big to worry about?
 
Ah, I see... So nothing big to worry about?
I don't think so.

Also managed to decode the text using the UTF-16 code and did a byte swap on the values, this is what the message actually says
File: storelayout.cpp(1696)
ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas

The actual problem is the thing generating the log didn't 0 pad the 8-bit ASCII, resulting in UTF-16 that conveniently maps to Chinese.
 
  • Like
Reactions: James_369