KB2732487 is unable to update - Error Code 800700B7

[NoelDP]

In your first boot after the 'break'....

The driver attempts to load , and fails - as expected

The App event

The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.

is followed by two related System events...
The Windows Modules Installer service terminated with the following error:
Cannot create a file when that file already exists.
and
The Windows Modules Installer service entered the stopped state.

It also immediately follows failure notifications for installation of KB2732487



On the second boot....
the first error in the System log is
The ScRegSetValueExW call failed for FailureActions with the following error:
Access is denied.
(twice)

It's then followed by a couple of DCOM errors - which may (may not) be related to running OE in 'no-add-ons' mode. If this is the case, then it may be 'by design' - i.e a bug that MS can't be botheredto fix, because it doesn't cause any problems.

The TrustedInstaller problem is not evident at all.

So we need to isolate the cause of the ScRegSetValueExW problem.

The number of forum threads dealing with the problem tends to indicate that it may originate with either AVG or Avast.

Since you have AVG installed, I suspect that your best option is to uninstall it completely - at least temporarily. (or have we done that already?)

The reboots already look markedly cleaner than before .

What I need now is another cold boot - i.e. a full shutdown (do NOT allow anything to install in the process if you get the option) followed by a normal power-on start.

again, post the logs - - I won't be able to review them until tomorrow at the earliest.

 

[ern815]

Hi Noel, here are the logs.

 

[NoelDP]

From my notes on these logs...

Syst log
Last service errors - 04:50.36 - WMI 
04:06 ScReg x2
04:04 ScReg
04:03 WMI
ScReg x2

only errors after that are WU ones.
 error 0x800700b7: Update for Windows 7 for x64-based Systems (KB2719857).
error 0x800f0826: Security Update for Windows 7 for x64-based Systems (KB2807986).
error 0x800f0826: Update for Windows 7 for x64-based Systems (KB2791765).
error 0x800f0826: Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB2809289).
error 0x800700b7: Update for Windows 7 for x64-based Systems (KB2732487).
last reboot 04:00:38
previous 03:51:009
03:48
03:05
Apps log
04:04.51 The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.
04:03:57 Fault bucket , type 0
Event Name: CbsPackageServicingFailure2
Response: Not available
Cab Id: 0
Problem signature:
P1: 6.1.7601.17592
P2: Package_1_for_KB2732487
P3: 6.1.2.0
P4: amd64
P5: unknown
P6: 800700b7
P7: DOQ
P8: Staged
P9: Installed
P10: WindowsUpdateAgent

The obvious thing is to have another look at the latest CBS.log files and see if I can work out where things are going wrong there.

Please upload the CBS folder again, and I'll see what I can find.

 

[ern815]

Here are the logs. Thanks Noel!

 

[NoelDP]

I think I've found the actual error sequence now....

2013-04-07 03:04:59, Info                  CBS    Doqe: Disabling Device installs
2013-04-07 03:04:59, Info                  CBS    Doqe: Locking driver updates, Count 3
2013-04-07 03:04:59, Info                  CSI    000001a1 Performing 1 operations; 1 are not lock/unlock and follow:
  LockComponentPath (10): flags: 0 comp: {l:16 b:7c53cda2f932ce016200000094156c16} pathid: {l:16 b:7c53cda2f932ce016300000094156c16} path: [l:172{86}]"\SystemRoot\WinSxS\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17889_none_d024215ad264fb95" pid: 1594 starttime: 130097484103356850 (0x01ce32f8f62711b2)
2013-04-07 03:05:00, Info                  CSI    000001a2 Performing 1 operations; 1 are not lock/unlock and follow:
  LockComponentPath (10): flags: 0 comp: {l:16 b:dcb4cfa2f932ce016400000094156c16} pathid: {l:16 b:dcb4cfa2f932ce016500000094156c16} path: [l:182{91}]"\SystemRoot\WinSxS\amd64_netrndis.inf_31bf3856ad364e35_6.1.7601.18076_none_25a9955f5c9b2f7b" pid: 1594 starttime: 130097484103356850 (0x01ce32f8f62711b2)
2013-04-07 03:05:00, Info                  CSI    000001a3 Performing 1 operations; 1 are not lock/unlock and follow:
  LockComponentPath (10): flags: 0 comp: {l:16 b:dcb4cfa2f932ce016600000094156c16} pathid: {l:16 b:dcb4cfa2f932ce016700000094156c16} path: [l:182{91}]"\SystemRoot\WinSxS\amd64_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_259febb55ca2345a" pid: 1594 starttime: 130097484103356850 (0x01ce32f8f62711b2)
2013-04-07 03:05:00, Info                  CBS    Doqe:   q-stage: Inf: bth.inf, Ranking: 2, Device-Install: 0, Key: 1, Identity: bth.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.17889, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2013-04-07 03:05:00, Info                  CBS    Doqe:   q-stage: Inf: netrndis.inf, Ranking: 2, Device-Install: 0, Key: 2, Identity: netrndis.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.18076, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2013-04-07 03:05:00, Info                  CBS    Doqe:   q-stage: Inf: netrndis.inf, Ranking: 2, Device-Install: 0, Key: 3, Identity: netrndis.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.17887, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2013-04-07 03:05:00, Info                  CBS    Perf: Doqe: Staging started.
2013-04-07 03:05:00, Info                  CBS    Doqe: [Forward] Staging driver updates, Count 3
2013-04-07 03:05:00, Info                  CBS            STAGE index: 0, phase: 1, result 183, inf: bth.inf
2013-04-07 03:05:00, Info                  CBS    DriverUpdateStageUpdates failed [HRESULT = 0x800700b7 - ERROR_ALREADY_EXISTS]
2013-04-07 03:05:00, Error                 CBS    Doqe: Failed staging driver updates [HRESULT = 0x800700b7 - ERROR_ALREADY_EXISTS]
2013-04-07 03:05:00, Info                  CBS    Perf: Doqe: Staging ended.
2013-04-07 03:05:00, Info                  CBS    SQM: Waiting up to 60000 ticks for pending uploads to complete.
2013-04-07 03:05:00, Info                  CBS    Shtd: progress thread terminating. [HRESULT = 0x00000000 - S_OK]
2013-04-07 03:05:00, Info                  CBS    Shtd: progress thread terminated normally
2013-04-07 03:05:00, Info                  CBS    Doqe: Unlocking driver updates, Count 3
2013-04-07 03:05:00, Info                  CBS    Shtd: Shutdown processing complete.

I'm going to have to see if I can find out what it all means

 

[ern815]

Hi Noel,

found out anything?

 

[NoelDP]

Omigawd - sorry about that!
I need to check a few things....

Please run the following commands, and post the results.

DIR C:\Windows\SoftwareDistribution\7c53cda2f932ce016300000094156c16
DIR C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016500000094156c16
DIR C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016700000094156c16
ICACLS C:\Windows\SoftwareDistribution\7c53cda2f932ce016300000094156c16
ICACLS C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016500000094156c16
ICACLS C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016700000094156c16

 

[ern815]

No prob!! Here you go:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\windows\system32>DIR C:\Windows\SoftwareDistribution\7c53cda2f932ce0163000000
94156c16
Volume in drive C is S3A5912D001
Volume Serial Number is 5461-260C
Directory of C:\Windows\SoftwareDistribution
File Not Found
C:\windows\system32>DIR C:\Windows\SoftwareDistribution\dcb4cfa2f932ce0165000000
94156c16
Volume in drive C is S3A5912D001
Volume Serial Number is 5461-260C
Directory of C:\Windows\SoftwareDistribution
File Not Found
C:\windows\system32>DIR C:\Windows\SoftwareDistribution\dcb4cfa2f932ce0167000000
94156c16
Volume in drive C is S3A5912D001
Volume Serial Number is 5461-260C
Directory of C:\Windows\SoftwareDistribution
File Not Found
C:\windows\system32>ICACLS C:\Windows\SoftwareDistribution\7c53cda2f932ce0163000
00094156c16
C:\Windows\SoftwareDistribution\7c53cda2f932ce016300000094156c16: The system can
not find the file specified.
Successfully processed 0 files; Failed processing 1 files
C:\windows\system32>ICACLS C:\Windows\SoftwareDistribution\dcb4cfa2f932ce0165000
00094156c16
C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016500000094156c16: The system can
not find the file specified.
Successfully processed 0 files; Failed processing 1 files
C:\windows\system32>ICACLS C:\Windows\SoftwareDistribution\dcb4cfa2f932ce0167000
00094156c16
C:\Windows\SoftwareDistribution\dcb4cfa2f932ce016700000094156c16: The system can
not find the file specified.
Successfully processed 0 files; Failed processing 1 files
C:\windows\system32>

 

[NoelDP]

I was obviously barking up the wrong tree, then

I don't really know where to go from here.

I'll ask Tom for some help.

 

[tom982]

Congrats on passing 7,000 posts Noel

Something which caught my eye:

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 18.0
2013-03-18 00:39

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2059
 No errors detected
(w)     Unable to open Event Log    0x000006BA    Application         OpenEventLog failed: 0x000006BA - The RPC server is unavailable.
.
(w)     Unable to open Event Log    0x000006BA    System        OpenEventLog  failed: 0x000006BA - The RPC server is unavailable.

Firstly it's come back, and secondly the RPC server error. The Windows Update service depends on the RPC service so it might have something to do with the problems here.

Hi ern185

Can you download the attached batch file, Log Collection.bat, and save it to your Desktop please. Right-click on Log Collection.bat and select Run as administrator. This will generate a file on your Desktop, tom982.zip, attach this to your next post please.

Tom

 

[ern815]

Thank you Noel and congratulations on your post counts.

Hi Tom, thanks for helping but where can I find the attached log collection.bat?

 

[tom982]

Thank you Noel and congratulations on your post counts.

Hi Tom, thanks for helping but where can I find the attached log collection.bat?

It might help if I actually upload the file this time

 

[ern815]

Got it, here it is!

 

[NoelDP]

Thanks for the congrats, folks - I missed it in the flurry this am...
Thanks also to Tom for spotting that the event log problem had come back.

 

[ern815]

Hi Tom and Noel,

Found anything that could cause the problem?

 

[tom982]

Hi ern815,

Sorry for the delay, it's been a very busy weekend.

Can you try running this FixIt in Aggressive Mode please: http://go.microsoft.com/?linkid=9665683

Tom

 

[NoelDP]

I can't see any errors in there - Tom may see something I haven't.

 

[tom982]

I can't see any errors in there - Tom may see something I haven't.

Nope, afraid not

 

[ern815]

I tried Tom's method and it didn't work.

Is there any plan B?

Thanks for helping out by the way. Appreciate the time and efforts you guys have done.

 

[ern815]

Bump.

Any alternatives guys?