KB2937610 update fails

The error indicates a corrupt WINSXS store - but CheckSUR hasn't found anything.

Here's the detail of the error message.

Code:

  Stage (1): flags: 8 app: [microsoft.visualbasic.compatibility.data.resources, Version = 6.1.7601.18523, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture = [l:10{5}]"nl-nl", VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral]) comp: (null) man: @0x65d0e18
2014-10-07 11:58:40, Error                 CSI    000003c5@2014/10/7:09:58:40.875 (F) d:\win7sp1_gdr\base\wcp\componentstore\installmap.cpp(620): Error STATUS_SXS_COMPONENT_STORE_CORRUPT originated in function InstallMap::CRawInstallMap::GetComponentWinningVersion expression: (null)
[gle=0x80004005]
2014-10-07 11:58:54, Error                 CSI    000003c6 (F) STATUS_SXS_COMPONENT_STORE_CORRUPT #661253# from CCSDirectTransaction::OperateEnding at index 22 (0x0000000000000016) of 171 (0x00000000000000ab) operations, disposition 0[gle=0xd015001a]
2014-10-07 11:58:57, Error                 CSI    000003c7 (F) HRESULT_FROM_WIN32(14098) #650902# from Windows::ServicingAPI::CCSITransaction::ICSITransaction2_AddComponents(Flags = 4, a = @0x44d2850, mp = @0x44d3050, disp = 0)[gle=0x80073712]
2014-10-07 11:58:57, Info                  CBS    Failed to add one or more component [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]
2014-10-07 11:58:57, Error                 CBS    Failed to complete component closure [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]
2014-10-07 11:58:57, Info                  CSI    000003c8@2014/10/7:09:58:57.426 CSI Transaction @0x3a9e80 destroyed
2014-10-07 11:58:57, Info                  CBS    Perf: Resolve chain complete.

This appears to be the result of an Access Denied state when querying the registry for the status of part of the error message - such problems are often due to bitflips and can be almost undetectable (think of a one-bit error in a 40Megabyte file and how impossible it's going to be to find it)

I am prepared to have a look and see if I can find it - otherwise your best hope is likely to be a repair install...


I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

I found what I think is an error - in the right place...

Let's see if it makes any difference.


I've uploaded a file - nnhaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the file and select Extract All, and save to the default destination (which should be a folder on the desktop)

Create a new System Restore point

Open an Elevated Command Prompt, and run the following commands.

REN C:\Windows\System32\config\COMPONENTS COMPONENTS.OLD1
COPY %userprofile%\desktop\nnhaa\COMPONENTS C:\Windows\System32\config

If you get an error with either command, STOP THERE - do not reboot! - post for instructions.

Assuming both commands go OK, reboot, and then run a new Check for Updates, and post the results - if/when if fails, run another CheckSUR/SURT scan and post the new CBS folder (zipped)

Thank you for the good explanation.

Unfortunately, the update still fails. And SUR tries to install this update: KB947821, but the progress bar doesn't fill up.

So here's the new CBS.zip: https://www.dropbox.com/s/kemmn109zjzhk7j/CBS.zip?dl=0

P.S. Currently I am remotely running a MBAM scan on the system via TeamViewer and so far it's found 10 threats containing PUP.Optional.Wajam.A, PUP.Optional.MySearchDial.A, PUP.Optional.Snapdo.T and PUP.Optional.DealPly.A. * Edit: The scan is now finished and all 91 items were non-malware, but potentially unwanted items. *

Update: The KB947821 update succeeded, but _before_ restarting the original update with install problems didn't install yet.

CheckSUR - KB947821- can take a couple of hours to 'install'.
It is NOT an update - it's merely an attempt to correct the more common errors in updates. As such it doesn't install anything, but it does check tens of thousands of files and registry entries, and attempts to fix what it can - it then saves a log file of what it found.


You MUST reboot before anything can be expected to work, as there are possibly a large number of mods that the tool made, and many will require the reboot to 'settle in'.


'Non-malware' means different things to different people - to Malwarebytes, these items are definitely the sort of thing that should be uninstalled, as they potentially send personal data to unexpected places, and direct searches to highly modified search engines. I would delete/quarantine ALL such entries - at least until all other problems are eliminated.
It looks to me as if you may have been running the MBAM scan at the same time as CheckSUR? if that's the case then I am not in the least surprised that it took hours to complete.

Please post the new CheckSUR.log file and the C:\windows\windowsupdate.log file.

I think this is therelevant error-sequence.

Code:

2014-10-15 15:44:49:421 1200 1568 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP8974.tmp with dwProvFlags 0x00000080:
2014-10-15 15:44:49:437 1200 148c AU Forced install timer expired for scheduled install
2014-10-15 15:44:49:437 1200 148c AU UpdateDownloadProperties: 18 download(s) are still in progress.
2014-10-15 15:44:49:437 1200 148c AU UpdateDownloadProperties: download priority has changed from 1 to 2.
2014-10-15 15:44:49:437 1200 148c AU WARNING: Failed to change download properties of call, error = 0x80070057

I suspect that this may be due to corruption in the SoftwareDownload folder...

You will lose your Update history (but the updates will still be installed, and viewable in the Installed Updates listing).

Open an Elevated Command Prompt
Run the following commands

NET STOP WUAUSERV
REN C:\WINDOWS\SoftwareDistribution SDOLD
NET START WUAUSERV

reboot
then wait 10 minutes, and open Windows Updates, and run a Check for Updates.

Install only the oldest update found, and reboot once installed - post error code and KB number if it fails,
then go back to Windows updates and install the others.