After windows 7 updates: No program will launch: error 0xc0000005

[User0001]

Hi guys,

Awesome site with very knowledgeable people. I hope you guys can help me. Thanks in advance.

Summary:

I bought a new custom build computer, built by NCIX. Installed Win 7 x64 ultimate SP1. Installed wireless manager and then tried to apply all the windows updates. There were 100+ updates. I installed them incrementally in batches of 10 or so. Sometimes I would run into an issues but then restore and try again with maybe 5 updates etc. Now I have run into a problem where I cannot install any more updates without breaking the system.

Problem:

Can't run any non-windows program. Ex. can't launch wireless manager, nvidia panel etc. Can run windows programs only, but not the IE browser or any browser.

Steps taken:

1. Ran SURT: It asked me to install hotfix KB947821. I did and it was successful. See LOG attached please.
2. Ran SFC scan and it was detected errors and fixed them. Ran again and all good -no errors. See CBS.zip.

Please see windows error codes attached. I get same error when running any non-windows program.

 

[NoelDP]

The c0000005 error is an Access Denied type error
CheckSUR found nothing amiss, and SFC managed to fix the only error it found - which appears to be unrelated to the problem you're experiencing.

I suspect that your problem is with the hard drive, or with permissions.

Have you installed any 'tweaking' programs of any kind?
Have you installed an AV (which one?)

What happens if you create a new User (with Admin privileges) and use that? does the problem persist?

Please open an Elevated Command Prompt, and run the following commands..

ICACLS "C:\Program Files"
ICACLS "C:\Program Files (x86)"
ICACLS C:\ProgramData

post the results.


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[User0001]

Thanks for the quick reply Noel!

The harddrive is a SSD Corsair 120GB. I only have the 1 installed for now.

No tweaking programs and no AV installed yet. This is a brand new machine with no user installed programs other than Nvidia driver and D-Link wireless driver.

I confirm that I am the administrator currently and was so from the start. Just to test, I did create a new user with admin and tried again but same issue

I would like to clarify the issue now just to be clear:

Issue:
I see a little "!" icon next to shut down button as per image "shutdown" attached. When I shut down my PC, it tries to install 2 updates. It seems okay and shuts down. Then I start the PC, and right before windows starts when the screen is still black and all you see is the windows logo in the middle, I see text right below the logo which states something similar to "applying update...43462/43462".

Then windows starts and it says Configuring windows updates. It progresses with percentages and then before hitting 100%, it stops and says configuration failed and then goes on to revert the changes. After that is done and windows finally loads, I get the infamous error message and cannot launch any programs. So I restore to the previous point. As soon as I restore, I do check for updates, and then the "!" icon appears again next to shut down.

I ran the commands. Please see below:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ICACLS "C:\Program Files"
C:\Program Files NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS "C:\Program Files (x86)"
C:\Program Files (x86) NT SERVICE\TrustedInstallerF)
NT SERVICE\TrustedInstallerCI)(IO)(F)
NT AUTHORITY\SYSTEMM)
NT AUTHORITY\SYSTEMOI)(CI)(IO)(F)
BUILTIN\AdministratorsM)
BUILTIN\AdministratorsOI)(CI)(IO)(F)
BUILTIN\UsersRX)
BUILTIN\UsersOI)(CI)(IO)(GR,GE)
CREATOR OWNEROI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\ProgramData
C:\ProgramData NT AUTHORITY\SYSTEMOI)(CI)(F)
BUILTIN\AdministratorsOI)(CI)(F)
CREATOR OWNEROI)(CI)(IO)(F)
BUILTIN\UsersOI)(CI)(RX)
BUILTIN\UsersCI)(WD,AD,WEA,WA)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>


Let me know if there is anything else you need.

 

[User0001]

Also, regarding permissions, I cannot open the CBS file even though I have admin privileges. When I try to open it in notepad I get the message "Access is denied".

Perhaps it helps to point to the issue?
Is there a way I can view this content?


Also, the PC is new so I would imagine a bad harddrive or RAM issue is unlikely? They have been working fine so far..

Any help?

 

[NoelDP]

The output from the commands is normal.

Please uninstall the D-Link wireless drivers and the NVidia drivers for the moment - it seems that they are getting in the way of the Updates.
Have you downloaded these from the manufacturer's sites, or are they the ones that came with the hardware? If the latter, see if there are more recent ones at the manufacturer's website.

I think you'll find that if you open Windows Update and select to install only the KB2888049 update, it will install OK.
This will leave us with just the one faulting update - KB2882822.
Please try this one again on its own, and see if that works - if not, please post the C:\Windows\windowsupdate.log file, and I'll see if I can puzzle out a reason for the failure.

 

[NoelDP]

Also, regarding permissions, I cannot open the CBS file even though I have admin privileges. When I try to open it in notepad I get the message "Access is denied".

Perhaps it helps to point to the issue?
Is there a way I can view this content?


Also, the PC is new so I would imagine a bad harddrive or RAM issue is unlikely? They have been working fine so far..

Any help?

the CBS.log file is permanently open - for additions by the SYSTEM and TrustedInstaller entities - the only way to really read it is to copy it to the desktop (or somewhere accessible) and read the copy.
The Access Denied error is perfectly normal there.


It may be worth having a look at the event logs - but I doubt it's a RAM issue, as we would, I expect, have seen more errors in the SFC scan.

SSD drives are a bit of a nightmare when it comes to troubleshooting - there is no decent utility to test the function other than the minimalist one that some manufacturer's provide, ad I don't place much faith even in those. - again, I would have expected more errors than the single one that SFC found if there were anything like a serious problem with the drive.

 

[User0001]

Thanks.

I will try as you suggested.

I think it worth noting that even without either of those updates my PC is already in an unstable state. Because even if I do nothing now and simply turn off my computer it will start installing updates from a prior time and come back with the same error.

 

[NoelDP]

<grr> lost my response due to a disconnect - again! <grrr>

I think you'd be best to start again from scratch.

Do a clean install of the OS.

Install ONLY the motherboard Chipset drivers and the Ethernet drivers - both downloaded from the manufacturer's website. (if you don't have Ethernet connection, then install the minimal drivers for the Wireless.

Open Windows Update, and do a Check for Updates. This will install the Windows Update Agent, and do a couple more things.
reboot again before installing anything from the list of updates.

Install the updates in this order - you can install all the ones in each section at the same time, together with anything that failed from earlier sections. After each section, run a new Check for Updates.

1) Security Updates for Windows 7
2) (other) Updates for Windows 7
3) Internet Explorer 9
4) .NET 3.5 updates
5) .NET 4.5 Updates
6) Platform Updates and driver updates (you can install the nVidia and DLink drivers at this point IF YOU HAVE TO)
7) Internet Explorer 10
8) Internet Explorer 11

It's very rare to ever need a System Restore during this process - you can expect to get a few failed installs as the order of install can change, and the applicability of an update may change in the process.
The only time to get concerned is if you get a reboot where you get a windows error message, or an update reverts - post back with details if that happens, before doing anything else.

 

[User0001]

Tried your suggestions from above and didn't help unfortunately so I think you may be right, I better start clean.

I'll follow your procedure and report back.
Thanks very much for your help.

 

[Slartybart]

Robin9 mentions KB 2859537 in this post: http://www.sevenforums.com/windows-updates-activation/301136-error-0xc0000005-after-windows-update.html#post2498172

SusanBradley was working with MS here: http://www.sevenforums.com/windows-updates-activation/301136-error-0xc0000005-after-windows-update.html#post2501207

I remember the case, but don't know the resoltuion.

If this is the same problem, see what Noel thinks about hiding that update (not sure if the same KB, you mention an update failing in post# 3). You could check the history to get teh exact KB that failed.

Noel's driving, I'm just an observer making comments.

Bill
.
edit: I missed a lot while I was typing - sheesh!

 

[NoelDP]

(I know the feeling! - it was a good idea, though!)

 

[User0001]

Same error. I tried to follow Noel's suggestion as best I can. Here is what I did:

1. Formatted harddisk
2. Installed Win 7 x64 ultimate
3. Connected network cable for internet. Windows couldn't find ethernet driver. Put in the ASUS CD and installed the Realtek Ethernet driver. Got connected to the internet.
4. Went to ASUS website and downloaded+installed latest chipset driver.
5. Clicked Windows update and check for updates. It said it needed to install something and would close and reopen, which it did. I assume this is the windows agent installation step.
6. After step 5, I restarted my PC.
7. Did check of up[dates and selected all 70 Security updates. Installed successful.
8. Upon restart, I get same error.

Ran SURT - and it installed same KB947821 update as last time. It was successful.
did sfc\scannow but CBS file too big at 58MB - see attached.

Please see other attached files.

 

[NoelDP]

Please compress the CBS.log file - it should come down to around 2MB with luck, and be uploadable them.

 

[User0001]

I should have realized that and done it right away, but I didn't and since then restored and tried incrementally updating the security updates in batches of 10 until I reproduced the error. I did that and narrowed it down to update KB2872339. After applying this update, I get same error as always in this thread.

I ran the SURT and it failed to install the patch. I ran scannow and it found no errors, but created a huge CBS file 74MB - attached compressed.

Any ideas?

 

[Slartybart]

Hi user0001,

I took a quick look at the CBS.log and it looks ok. There are a lot of pending renames in it and a lot of Windows Foundation (mostly languages) with: no parent found, go absent.

I'm not sure what that means, so I'll wait to hear what Noel says about the log.

I've attached the sfcdetails.txt file I parsed from your log.

I'm going back to being an observer.

Bill
.

 

[User0001]

Thanks Bill for the initial analysis.

 

[NoelDP]

There are a few errors present ...

 Line 44530: 2014-02-04 18:12:06, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]
 Line 78271: 2014-02-04 18:12:50, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800f0816 - CBS_E_DPX_JOB_STATE_SAVED]
 Line 85171: 2014-02-04 18:12:58, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800f0816 - CBS_E_DPX_JOB_STATE_SAVED]
 Line 187688: 2014-02-04 18:15:13, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]
 Line 221032: 2014-02-04 18:15:31, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]
 Line 221976: 2014-02-04 18:16:44, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800f0816 - CBS_E_DPX_JOB_STATE_SAVED]
 Line 287907: 2014-02-04 18:19:17, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]

The 0x800f0816 errors relate to the failing KB.

I think this may relate to this error (which isn't tagged as such )

2014-02-04 18:17:00, Info                  CBS    Failed to get session package state for package: Package_2_for_KB2872339~31bf3856ad364e35~amd64~~6.1.1.1 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]

However there are a large number of such 'errors' present, relating to other KB numbers with no apparent ill-effects.

Please run the following commands one at a time - if you get a 'not found' or no content response, please let us know.

REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-ntdll_31bf3856ad364e35_none_13be95395ddc6d7a 
REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\wow64_microsoft-windows-ntdll_31bf3856ad364e35_none_1e133f8b923d2f75

They relate to the errors reported in the KB article here... MS13-077: Vulnerability in Windows Service Control Manager could allow elevation of privilege: September 10, 2013

 

[User0001]

Thanks Noel for your continued support.

Here are the results of running the 2 commands:


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\SideBySide\Winners\amd64_microsoft-windows-ntdll_31bf3856ad364e35_non
e_13be95395ddc6d7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\
amd64_microsoft-windows-ntdll_31bf3856ad364e35_none_13be95395ddc6d7a
(Default) REG_SZ 6.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\
amd64_microsoft-windows-ntdll_31bf3856ad364e35_none_13be95395ddc6d7a\6.1
C:\Windows\system32>REG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\SideBySide\Winners\wow64_microsoft-windows-ntdll_31bf3856ad364e35_non
e_1e133f8b923d2f75
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\
wow64_microsoft-windows-ntdll_31bf3856ad364e35_none_1e133f8b923d2f75
(Default) REG_SZ 6.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\
wow64_microsoft-windows-ntdll_31bf3856ad364e35_none_1e133f8b923d2f75\6.1
C:\Windows\system32>

 

[NoelDP]

That looks OK to me - so we'll have to look elsewhere. I'm just not sure where

back later!

 

[User0001]

Alright!

I'm surprised installing Windows Updates is so difficult!

What do you think the repercussions are of just ignoring this particular update?