Windows 7 Home Premium 32bit SP1 Update is failing, error 0x800f0900

waleslie · 02 Feb 2014

Wow. I'm getting nowhere on this.

I unchecked the Read-Only box. Hit Ignore All. It took several minutes.
I rebooted twice. (Why?)
Then I reordered my drives in BIOS and booted to Windows XP safe mode command prompt.
XCOPY command told me "Access Denied. Unable to create directory E:\windows\winsxs"
I rebooted into normal WindowsXP and tried to copy there. No go.
The directory showed as read-only again. So I unchecked it again.
Still wouldn't copy. Every time I look at the winsxs directory, the read-only is still checked.
The Access Denied error seems to apply to everything in there, so unchecking read-only then clicking Ignore All ultimately isn't doing anything.

Do I need to do something with the permissions under the security tab in the properties dialog box for that folder?

NoelDP · 02 Feb 2014

The blob is present on all folders as they cannot be tagged as read-only - only files can be so tagged, so it reappearing is quite normal.

The problem is permissions - your XP admin has no permissions for that folder.
you would have to take ownership in XP, then when back in Win 7, take ownership back to Administrators, and then set to TrustedInstaller.

waleslie · 02 Feb 2014

This is remarkably frustrating. I boot into Windows XP and log in as Administrator. I turn off simple file sharing to allow me to access the Security tab on individual files and folders. I right click on winsxs and change the owner to Administrator. Under permissions I check Full Control.
Then I right click on winsxs and turn off Read-Only. I get the access denied error again.

NoelDP · 02 Feb 2014

You didn't recurse the permissions -
put a tick in the 'change owner on subfolders and files' option as well.
You shouldn't need the read-only changes then.

Simply copy the files across.

waleslie · 03 Feb 2014

Okay. The files have copied. While the ownership change to Administrators was propagating to the subfolders and files, the full control permissions were not.

You mentioned we would have to re-set the ownership and permissions back in Windows 7. The winsxs directory and it's files are showing "S-1-5-21-842925246-1343024091-839522115-500" as the owner.

I re-ran sfc /scannow and attached the latest CBS.log (zipped). On a positive note, the file is down to 10 MB from 21 MB. :)

I have also re-attached the latest CheckSUR logs.

What next?

NoelDP · 04 Feb 2014

Some of the replacements seemed to work - but a few didn't.

Here's the failure list (edited from the CBS log)

Code:

 Line 50027: 2014-02-03 14:27:14, Info                  CSI    00000201 [SR] Repairing 22 (0x00000016) components
 Line 50031: 2014-02-03 14:27:14, Info                  CSI    00000204 [SR] Cannot repair member file [l:20{10}]"WUDFRd.sys" of Microsoft-Windows-DriverFrameworks-UserMode, Version = 6.1.7600.17013, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 50034: 2014-02-03 14:27:14, Info                  CSI    00000206 [SR] Cannot repair member file [l:32{16}]"ie4uinit.exe.mui" of Microsoft-Windows-IE-Setup-Support.Resources, Version = 9.4.8112.16421, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 50037: 2014-02-03 14:27:20, Info                  CSI    00000208 [SR] Cannot repair member file [l:20{10}]"srrstr.dll" of Microsoft-Windows-SystemRestore-PropertyPage, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 50040: 2014-02-03 14:27:20, Info                  CSI    0000020a [SR] Cannot repair member file [l:22{11}]"rdpcore.dll" of Microsoft-Windows-TerminalServices-Collaboration-Core, Version = 6.1.7600.16963, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 50044: 2014-02-03 14:27:20, Info                  CSI    0000020c [SR] Cannot repair member file [l:14{7}]"vbc.exe" of NetFx-VB_Compiler, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 50047: 2014-02-03 14:27:20, Info                  CSI    0000020e [SR] Cannot repair member file [l:20{10}]"volume.inf" of volume.inf, Version = 6.1.7600.17122, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch

I think I see what's happened - I got the wrong version for a couple of them

and missed a couple completely

I'll post another fix later, and then we can do a general reset on ownership and permissions after the SFC is error-free

waleslie · 04 Feb 2014

Sounds good. Thank you.

NoelDP · 07 Feb 2014

Let's see if we have better luck with these....

I've uploaded a file - wleac.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\wleac
hit the enter key - if you get a 'Not Found' error try
DIR D:\wleac
or
DIR E:\wleac

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\wleac <drive>:\windows\winsxs /y /i /s /v /h

(e.g.XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link
Also run a new MGADiag report, and post the result.

waleslie · 08 Feb 2014

Okay. I copied those files into Winsxs. It actually let me do it right in Windows 7 without any errors (that's okay, right?).

I re-ran sfc /scannow and CheckSUR. CheckSUR log seems to look better, but CBS log is still huge. The logs are attached.

I lookup up MGADiag, downloaded and ran it. There doesn't seem to be a log file. Here are the copy and paste results:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-3PW7C-FG4GJ-J26XW
Windows Product Key Hash: prkPdG1o6YMiDM7/8vybqPkrezI=
Windows Product ID: 00359-030-3478913-85378
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {BF3E4ED1-EF42-4B6B-A868-5AE98D3659EB}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7600.win7_gdr.130318-1532
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 114 Blocked VLK 2
Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Internet\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{BF3E4ED1-EF42-4B6B-A868-5AE98D3659EB}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-J26XW</PKey><PID>00359-030-3478913-85378</PID><PIDType>5</PIDType><SID>S-1-5-21-2317232960-1394852237-3170914288</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EP45-UD3P</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>FD</Version><SMBIOSVersion major="2" minor="4"/><Date>20091123000000.000000+000</Date></BIOS><HWID>73BB3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57867</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00170-030-347891-01-1033-7600.0000-3372009
Installation ID: 021881517700633034476415421965897902280384093883773864
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: J26XW
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/7/2014 9:14:00 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:1:2013 12:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: PAAAAAQAAgABAAEAAwACAAAAAgABAAEA6GHAq3EVW2Cj9aoOCIXCjybvPF3wF43vwo8qz8HjBpoo/0bK

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC GBT GBTUACPI
FACP GBT GBTUACPI
HPET GBT GBTUACPI
MCFG GBT GBTUACPI
TAMG GBT GBT B0
SSDT PmRef CpuPm

NoelDP · 08 Feb 2014

I finally found the missing volume.inf file! :)
I've uploaded it in the file wlead.zip - please replace the copy in the winsxs folder.

That should take care of the CBS problems - now we need to reset the permissions.
Please run the following commands, and post the results, so I can check the current status, and see what I need to do to get things back to where they should be.

ICACLS C:\Windows
ICACLS C:\Windows\winsxs
ICACLS C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_15cad1ba5d3abbe6
ICACLS C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_ac2fa38af371acee

Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Once we've got that sorted, we can get to work on the registry problems shown up by CheckSUR.