Windows Update failures

Hi

Here's an update. J

Launched the Fixit program - ran OK and Windows Update page then showed Checked for Updates - Never; Updates Installed - None.

Check for Updates - found 14 Win7 updates plus Windows Defender update. Selected all 14 Win7 updates - downloaded all; claimed 10 pending/successful and 4 failed.

Performed System Restart - completed Stage 4 of 4 Assemble Service Pack. Login/system start then Install Service Pack. Stopped after a short time - "Installation not successful - ELEMENT_NOT_FOUND (0x80070490).

Check for Updates again - found 4 Win7 updates. Tried to install three (excluded SP1) - three failed (Error 8024200D)

Ran Standalone Installer (Hotfix KB947821) - log file shows zero errors(!)

View Update History - shows only Windows defender and Hotfix as successful; all others as failed.

View list of Installed Updates - shows 9 Win7 updates installed today?!

I have attached the latest log files in case these help give any clues to the underlying cause(s).

Q1: In your experience what is the most likely cause of the previous file corruption - hard-disk error or a software update anomaly?

Q2: Do you think any of this behaviour might be caused by anti-virus software conflicts?

Cheers - Nick

Hello,

I think that we are making progress, and I am not just saying that! Previously, the logs were an unearthly mess of seemingly unrelated errors.

Have a look at this log snippet:

Code:

2011-07-08 10:01:59:423  784 1164 Report REPORT EVENT: {89C0CB9C-7E6D-4514-BF3E-29FFB3FC4A2C} 2011-07-08 10:01:55:457+0100 1 198 101 {B0E36AD5-3D76-4E00-A79F-1A6ED610276C} 100 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Update for Windows 7 for x64-based Systems (KB2547666).
2011-07-08 10:01:59:424  784 1164 Report REPORT EVENT: {38C80D34-87F2-46E9-94A4-3FA3FB9432F7} 2011-07-08 10:01:55:469+0100 1 198 101 {C36057A6-A552-4A3C-B020-78FC6813E2A1} 103 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Cumulative Security Update for Internet Explorer 8 for Windows 7 for x64-based Systems (KB2530548).
2011-07-08 10:01:59:424  784 1164 Report REPORT EVENT: {9013C4E6-4FCB-4AF9-913C-1FF6708C1FF5} 2011-07-08 10:01:55:473+0100 1 182 101 {07D8D1ED-1E2A-4696-A20F-9EE6D983B0E6} 100 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Update for Windows 7 for x64-based Systems (KB2387530).
2011-07-08 10:01:59:424  784 1164 Report REPORT EVENT: {8112AE2B-1396-4580-89C9-973D9638D7FD} 2011-07-08 10:01:55:476+0100 1 182 101 {61BFE3EC-A1DC-4EAB-9481-0D8FD7319AE8} 100 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Update for Windows 7 for x64-based Systems (KB2552343).
2011-07-08 10:01:59:424  784 1164 Report REPORT EVENT: {CE293941-756C-4C37-B22D-12E61B6990A7} 2011-07-08 10:01:55:479+0100 1 182 101 {29E215AA-4E14-4FE6-985A-8C08ABA28E3C} 104 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows 7 for x64-based Systems (KB2525694).
2011-07-08 10:01:59:561  784 1164 Report REPORT EVENT: {425B3742-4781-48C4-9796-63F94690CC04} 2011-07-08 10:01:55:483+0100 1 182 101 {117C3AA7-411D-4296-B942-228E23516410} 101 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Update for Windows 7 for x64-based Systems (KB2534366).
2011-07-08 10:01:59:561  784 1164 Report REPORT EVENT: {320BA1D1-2A4E-416F-B3F0-578237C82ADA} 2011-07-08 10:01:55:486+0100 1 182 101 {06E8F8A2-4F3D-413E-A041-CFAF111A95AD} 101 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows 7 for x64-based Systems (KB2510531).
2011-07-08 10:01:59:561  784 1164 Report REPORT EVENT: {45EA3346-E0EF-4974-AD4C-593F133604FD} 2011-07-08 10:01:55:495+0100 1 182 101 {94D0E27C-2FF6-497C-B6E3-D044CDDB5D1A} 100 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Update for Windows 7 for x64-based Systems (KB2541014).
2011-07-08 10:01:59:561  784 1164 Report REPORT EVENT: {6CF1CD3E-8CDA-41E2-8140-6788B2BD6E95} 2011-07-08 10:01:55:499+0100 1 182 101 {5DA03162-868E-4567-80A2-D046B3FB1B09} 100 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Windows 7 Service Pack 1 for x64-based Systems (KB976932).
2011-07-08 10:01:59:561  784 1164 Report REPORT EVENT: {AF0C69A5-C5DC-4AF8-93E6-33B18CB4D3D8} 2011-07-08 10:01:55:503+0100 1 182 101 {14025D5D-B168-4D57-9567-30EAAC8B0B23} 102 80070490 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070490: Security Update for Windows 7 for x64-based Systems (KB2536275).

That looks to me like there is one more corrupt file/registry key. Just one, causing the rest to fail. Especially with that error code.

Now, the Update History confusion is to be expected after resetting in Aggressive Mode. To clean out everything, the history is deleted (because the history is much more than just a log file) All previous updates are still installed and protecting you, they just don't show in your History.

The System Update Readiness Tool can only correct some errors. Unfortunately, this is beyond the scope of that tool, and so you are now reling on me!

Q1: The corrupt files from your CheckSur.log are quite common, and are usually caused by some Windows Update confusion/mess up. Your continued problems are less common, and may be caused by a dodgy hard disk. I shall see if I can figure out whether this is likely from the log files, and then you can test it if necessary.

Q2: It could be, although it would be more common for an A/V to prevent Windows Update from updating files than actually corrupting system files.

As you rightly mentioned in your first post, some of your corrupt files originate from KB2443685, and interestingly, I have had more cases with files from that update becoming corrupt than any single other update.

My slight worry is that this may actually be a registry error. These are not impossible to fix, but they are harder to fix, and there are far fewer available scans (DON'T try a registry cleaner, they will not help, and often makes things worse - I am talking about purpose build Windows Update tools, eg ones I have written) and I can't fix it until I know exactly what is corrupt, whereas with files I can replace a file if I am suspicious.

Please run an sfc /scannow, by opening an Elevated Command Prompt: Elevated Command Prompt, typing sfc /scannow, pressing enter, and waiting about 15 minutes :)

Then please attempt to install this standalone update: http://www.microsoft.com/technet/security/bulletin/MS11-038.mspx

Only after doing both of those, please copy to Desktop, zip, and upload C:\Windows\Logs\CBS\CBS.log.

Thanks a lot!

Richard

Richard - again, thanks for continuing assistance.

Ran scan. Outcome: 100% verification complete. "Windows Resource Protection did not find any integrity violations"

Downloaded MS11-038 update. Outcome: "Security update KB2476490 is already installed on this computer"

Checked the cbs.log but it (and everything else in the CBS folder) had not been updated since this morning. Do I need to run SUR again?

Cheers - Nick

Those logs are not revealing themselves!

Please can you follow these instructions to the letter: How to enable verbose CBS logging - The Windows Servicing Guy - Site Home - TechNet Blogs

Can you please do me one more thing. Please attempt to install this update, and post yet another new CBS.log: Download Details - Microsoft Download Center - Security Update for Windows 7 for x64-based Systems (KB2536275)

I know this is dragging on a bit. The logs really aren't being very helpful! What installation media do you have on you? I am thinking about a Repair Install here. Normally, I do not use this route. I really am homing in on this issue, but I also have to think about your time, and it is getting to the point where we have fixed enough for a Repair Install to succeed. Normally I wouldn't, and I will continue to track this rogue down, but if you wish to...Repair Install

Richard

Richard - Thanks for the further advice.

I will follow your instructions when I get back to the PC on Monday.

Must admit that it seems a puzzling issue. I keep feeling reassured that the PC functionality itself is sound and I do not want to do anything that risks things going bad.

The update status shows contradictory information - the Update history shows most of them failing and yet the list of installed updates shows them as being there?!

Will update on Monday.

Cheers - Nick

Hell again, Nick!

Sorry for the delay. Don't worry about the Repair Install. I really don't like them either. The logs have revealed something! It looks to be an SP1 pre-requisite which is now failing, rather than SP1 itself. KB2506223 seems to be at fault. Can you please try to install this update manually: MS11-034: Vulnerabilities in Windows Kernel-Mode drivers could allow elevation of privilege: April 12, 2011

My fingers are very much crossed! If that doesn't work, it most likely means that a manifest or registry key/value is corrupt.

Richard

P.S. If those three updates don't reappear in Windows Update, assume them to be good. It would make sense. The logs for those three are now clean, and if it is only a non-global component corrupt, this could make a lot of sense. We really are making headway! Final hurdle!

Hell again, Nick!

Take it that was a typo!

Richard - thanks for latest advice/suggestions.

Tried to install KB2506223 (double-check Win7 x64 version) but received message "The update is not applicable to your computer".

Cheers - Nick

Hi Richard

Hope you are able and willing to get me through this last stage?!

My (inexpert) interpretation of the logs is that Package 3 for KB2506223 is missing. If I look in the /servicing/Packages folder I can see .cat and .mum files for Package 2 but nothing else (ie no Package 1 or Package 3 etc).

Please can you send me the Package 3 files for KB2506223 so that I can see if that fixes the problem.

Many thanks - Nick