Constant Download

[sl380]

Hi, every night when I turn off the computer, it does a download/update. It's been doing this every night for a couple of weeks. I have no clue what the update is! I look at the update history and nothing is logged. McAfee nor FixCleaner can find a bug. I did a system restore to a week before this started and it still does this.

HP Pavillion Entertainment PC, W7 IE 9.

 

[Tullynally]

Tullynally

I have the same problem!

Does anyone have a solution?

 

[sl380]

Glad to see I am not the Lone Ranger with this issue......

 

[MowGreen]

There are several methods to determine what's occurring with Windows Updates.
Here's 2 of them:

1) Open Windows Updates in Control Panel.
Click the Start orb > type up into the Search field.
Under Programs, click on Windows Update.

Click the Change settings link in the left frame.
Under Important updates, click the drop down window and set it to
" Download updates but let me choose whether to install them "
Click the OK button, agree to the UAC prompt.

When the updates have been downloaded the Windows Update icon should appear on the right hand side of the Taskbar. Click on it to see which updates are being offered.

2) The WindowsUpdate.log - How to read the Windowsupdate.log file

The most recent entries are at the bottom of the log. These entries will contain the updates KB number and name.
When updates fail to download or install their entries will contain the word FATAL and usually, a return code that is in an 8 digit format.
All of them start with 0x; the return code ( usually referred to as an error code ) follows that.
EX: 0x80070002

Either post the entries that show FATAL and contain a return code or attach the last 50 to 70 lines of the WindowsUpdate.log after doing a manual check for updates by clicking the Check for updates link in Windows Update

 

[sl380]

In Windows Updates, I did not see an "Orb", so went to step 2. There, I found one string with "Fatal" in it.
2011-04-21 05:47:50:597 3284 1030 COMAPI FATAL: Unable to complete asynchronous search. (hr=8024402C)
Looking at the log for today, I did find:
2011-05-26 00:15:01:460 348 1a34 Shutdwn InstallAtShutdown got install progress.
2011-05-26 00:15:07:872 6680 1624 Handler MSP Error List:
2011-05-26 00:15:07:872 6680 1624 Handler 1: 1406 2: 3: \Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version
2011-05-26 00:15:07:872 6680 1624 Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x8024200b, Source: No, Reboot: 0
2011-05-26 00:15:07:872 6680 1624 Handler : WARNING: First failure for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}, transaction error = 0x8024200b, MSI result = 0x80070643, MSI action = WriteRegistryValues
2011-05-26 00:15:07:888 348 1a34 Shutdwn InstallAtShutdown got install progress.
2011-05-26 00:15:07:888 348 1a34 AU >>## RESUMED ## AU: Installing update [UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}]
2011-05-26 00:15:07:888 348 1a34 AU # WARNING: Install failed, error = 0x80070643 / 0x0000057E
2011-05-26 00:15:07:888 348 1a34 Shutdwn InstallAtShutdown got install progress.
2011-05-26 00:15:07:903 6680 1624 Handler : WARNING: Operation failed at update 0, Exit code = 0x8024200B
2011-05-26 00:15:07:903 6680 1624 Handler :::::::::
2011-05-26 00:15:07:903 6680 1624 Handler :: END :: Handler: MSI Install
2011-05-26 00:15:07:903 6680 1624 Handler :::::::::::::
For yesterdays log I found:
2011-05-25 06:46:17:333 348 f0c AU #############
2011-05-25 06:46:17:333 348 f0c AU ## START ## AU: Search for updates
2011-05-25 06:46:17:333 348 f0c AU #########
2011-05-25 06:46:17:336 348 f0c AU <<## SUBMITTED ## AU: Search for updates [CallId = {18495E42-772B-4F51-B56A-C1C53D42D0AE}]
2011-05-25 06:46:30:529 348 f0c AU Forced install timer expired for scheduled install
2011-05-25 06:46:30:529 348 f0c AU UpdateDownloadProperties: 0 download(s) are still in progress.
2011-05-25 06:46:30:529 348 f0c AU Setting AU scheduled install time to 2011-05-26 08:00:00
2011-05-25 06:46:30:529 348 f0c AU Successfully wrote event for AU health state:0
2011-05-25 06:46:48:411 348 1128 Driver Matched driver to device PCI\VEN_10EC&DEV_8168&SUBSYS_30FC103C&REV_02
2011-05-25 06:46:48:427 348 1128 Driver Status: 0x180200a, ProblemNumber: 00000000
2011-05-25 06:46:48:427 348 1128 Driver Matched driver to device ACPI\HPQ0004
2011-05-25 06:46:48:427 348 1128 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-25 06:46:48:427 348 1128 Driver Matched driver to device ACPI\SYN0153
2011-05-25 06:46:48:427 348 1128 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-25 06:46:55:306 348 1128 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-25 06:46:55:306 348 1128 Misc Microsoft signed: Yes
2011-05-25 06:46:55:384 348 1128 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-25 06:46:55:400 348 1128 Misc Microsoft signed: Yes
And:
2011-05-25 01:13:33:345 5352 12f8 Handler MSP Error List:
2011-05-25 01:13:33:345 5352 12f8 Handler 1: 1406 2: 3: \Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version
2011-05-25 01:13:33:345 5352 12f8 Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x8024200b, Source: No, Reboot: 0
2011-05-25 01:13:33:345 5352 12f8 Handler : WARNING: First failure for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}, transaction error = 0x8024200b, MSI result = 0x80070643, MSI action = WriteRegistryValues
2011-05-25 01:13:33:345 336 12e8 Shutdwn InstallAtShutdown got install progress.
2011-05-25 01:13:33:345 336 12e8 AU >>## RESUMED ## AU: Installing update [UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}]
2011-05-25 01:13:33:345 336 12e8 AU # WARNING: Install failed, error = 0x80070643 / 0x0000057E
2011-05-25 01:13:33:345 336 12e8 Shutdwn InstallAtShutdown got install progress.
2011-05-25 01:13:33:345 5352 12f8 Handler : WARNING: Operation failed at update 0, Exit code = 0x8024200B
2011-05-25 01:13:33:345 5352 12f8 Handler :::::::::
2011-05-25 01:13:33:345 5352 12f8 Handler :: END :: Handler: MSI Install
2011-05-25 01:13:33:345 5352 12f8 Handler :::::::::::::
2011-05-25 01:13:33:423 336 18ac Report REPORT EVENT: {9FB8C062-32D4-4E23-AFC1-469F8346FE86} 2011-05-25 01:13:33:345-0500 1 198 101 {66154F8A-D074-4069-BB1D-6C7CCCFF9682} 100 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2535818).
2011-05-25 01:13:33:455 336 18ac Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2011-05-25 01:13:33:455 336 18ac Report WER Report sent: 7.5.7601.17514 0x80070643 66154F8A-D074-4069-BB1D-6C7CCCFF9682 Install 101 Unmanaged
2011-05-25 01:13:33:455 336 18ac Report CWERReporter finishing event handling. (00000000)
2011-05-25 01:13:33:470 336 18ac Agent *********
2011-05-25 01:13:33:470 336 18ac Agent ** END ** Agent: Installing updates [CallerId = AutomaticUpdates]
And for the day before that:

2011-05-24 05:25:19:579 336 1014 AU #############
2011-05-24 05:25:19:579 336 1014 AU ## START ## AU: Search for updates
2011-05-24 05:25:19:579 336 1014 AU #########
2011-05-24 05:25:19:579 336 1014 AU <<## SUBMITTED ## AU: Search for updates [CallId = {307C8A71-7707-445C-AA0C-78D0E043D398}]
2011-05-24 05:25:35:520 336 1014 AU Forced install timer expired for scheduled install
2011-05-24 05:25:35:520 336 1014 AU UpdateDownloadProperties: 0 download(s) are still in progress.
2011-05-24 05:25:35:520 336 1014 AU Setting AU scheduled install time to 2011-05-25 08:00:00
2011-05-24 05:25:35:520 336 1014 AU Successfully wrote event for AU health state:0
2011-05-24 05:25:40:917 336 1294 Driver Matched driver to device PCI\VEN_10EC&DEV_8168&SUBSYS_30FC103C&REV_02
2011-05-24 05:25:40:917 336 1294 Driver Status: 0x180200a, ProblemNumber: 00000000
2011-05-24 05:25:40:917 336 1294 Driver Matched driver to device ACPI\HPQ0004
2011-05-24 05:25:40:917 336 1294 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-24 05:25:40:917 336 1294 Driver Matched driver to device ACPI\SYN0153
2011-05-24 05:25:40:917 336 1294 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-24 05:25:43:320 336 1294 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-24 05:25:43:335 336 1294 Misc Microsoft signed: Yes
2011-05-24 05:25:43:382 336 1294 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-24 05:25:43:382 336 1294 Misc Microsoft signed: Yes
2011-05-24 05:25:43:398 336 1294 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2011-05-24 05:25:43:398 336 1294 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2011-05-24 05:25:43:741 336 1014 AU Piggybacking on an AU detection already in progress
2011-05-24 05:25:43:772 336 1294 Agent * Added update {9E476567-2B2C-4B32-988B-D8478CB37D9F}.100 to search result
2011-05-24 05:25:43:772 336 1294 Agent * Added update {597540F1-6F81-464A-B848-22D660FEF141}.101 to search result
2011-05-24 05:25:43:772 336 1294 Agent * Added update {21F8046E-39D5-4014-8DD7-0AF1C871CA32}.101 to search result
2011-05-24 05:25:43:772 336 1294 Agent * Found 3 updates and 16 categories in search; evaluated appl. rules of 312 out of 369 deployed entities
2011-05-24 05:25:43:928 336 1294 Agent *********
2011-05-24 05:25:43:928 336 1294 Agent ** END ** Agent: Finding updates [CallerId = ]
2011-05-24 05:25:43:928 336 1294 Agent *************
2011-05-24 05:25:43:944 336 1294 Agent *************
2011-05-24 05:25:43:944 336 1294 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2011-05-24 05:25:43:944 336 1294 Agent *********
2011-05-24 05:25:43:944 336 1294 Agent * Online = No; Ignore download priority = No
2011-05-24 05:25:43:944 336 1294 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-05-24 05:25:43:944 336 1294 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2011-05-24 05:25:43:944 336 1294 Agent * Search Scope = {Machine}
2011-05-24 05:25:43:944 3288 504 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = <NULL>]
2011-05-24 05:25:43:959 3288 504 COMAPI - Updates found = 3
2011-05-24 05:25:43:959 3288 504 COMAPI ---------
2011-05-24 05:25:43:959 3288 504 COMAPI -- END -- COMAPI: Search [ClientId = <NULL>]
2011-05-24 05:25:43:959 3288 504 COMAPI -------------
2011-05-24 05:25:54:630 336 1294 Driver Matched driver to device PCI\VEN_10EC&DEV_8168&SUBSYS_30FC103C&REV_02
2011-05-24 05:25:54:630 336 1294 Driver Status: 0x180200a, ProblemNumber: 00000000
2011-05-24 05:25:54:630 336 1294 Driver Matched driver to device ACPI\HPQ0004
2011-05-24 05:25:54:630 336 1294 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-24 05:25:54:630 336 1294 Driver Matched driver to device ACPI\SYN0153
2011-05-24 05:25:54:630 336 1294 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-24 05:26:49:526 336 1294 Agent * Added update {9E476567-2B2C-4B32-988B-D8478CB37D9F}.100 to search result
2011-05-24 05:26:49:526 336 1294 Agent * Added update {597540F1-6F81-464A-B848-22D660FEF141}.101 to search result
2011-05-24 05:26:49:526 336 1294 Agent Update {16158981-D915-4B50-B451-FD76232C3BB4}.100 is pruned out due to potential supersedence
2011-05-24 05:26:49:526 336 1294 Agent * Added update {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100 to search result
2011-05-24 05:26:49:526 336 1294 Agent * Added update {21F8046E-39D5-4014-8DD7-0AF1C871CA32}.101 to search result
2011-05-24 05:26:49:526 336 1294 Agent * Found 4 updates and 65 categories in search; evaluated appl. rules of 1065 out of 1834 deployed entities
2011-05-24 05:26:49:526 336 1294 Agent *********
2011-05-24 05:26:49:526 336 1294 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]

I noticed for 5-24 & 5-25, the dates of events are mixed together.
2011-05-24 05:51:33:012 336 1014 AU AU setting next sqm report timeout to 2011-05-25 10:51:33
2011-05-24 06:58:52:677 336 14b8 DnldMgr *********** DnldMgr: Regulation Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}] ***********
2011-05-24 06:58:52:677 336 14b8 DnldMgr * Regulation call complete. 0x00000000
2011-05-24 08:01:44:005 336 1014 AU #############
2011-05-25 01:13:33:345 5352 12f8 Handler MSP Error List:
2011-05-25 01:13:33:345 5352 12f8 Handler 1: 1406 2: 3: \Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version
2011-05-25 01:13:33:345 5352 12f8 Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x8024200b, Source: No, Reboot: 0
2011-05-25 01:13:33:345 5352 12f8 Handler : WARNING: First failure for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}, transaction error = 0x8024200b, MSI result = 0x80070643, MSI action = WriteRegistryValues
2011-05-25 01:13:33:345 336 12e8 Shutdwn InstallAtShutdown got install progress.
2011-05-25 01:13:33:345 336 12e8 AU >>## RESUMED ## AU: Installing update [UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}]
2011-05-25 01:13:33:345 336 12e8 AU # WARNING: Install failed, error = 0x80070643 / 0x0000057E
2011-05-25 01:13:33:345 336 12e8 Shutdwn InstallAtShutdown got install progress.
2011-05-25 01:13:33:345 5352 12f8 Handler : WARNING: Operation failed at update 0, Exit code = 0x8024200B
2011-05-25 01:13:33:345 5352 12f8 Handler :::::::::
2011-05-25 01:13:33:345 5352 12f8 Handler :: END :: Handler: MSI Install
2011-05-25 01:13:33:345 5352 12f8 Handler :::::::::::::
2011-05-25 01:13:33:423 336 18ac Report REPORT EVENT: {9FB8C062-32D4-4E23-AFC1-469F8346FE86} 2011-05-25 01:13:33:345-0500 1 198 101 {66154F8A-D074-4069-BB1D-6C7CCCFF9682} 100 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2535818).
2011-05-25 01:13:33:455 336 18ac Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2011-05-25 01:13:33:455 336 18ac Report WER Report sent: 7.5.7601.17514 0x80070643 66154F8A-D074-4069-BB1D-6C7CCCFF9682 Install 101 Unmanaged
2011-05-25 01:13:33:455 336 18ac Report CWERReporter finishing event handling. (00000000)
2011-05-25 01:13:33:470 336 18ac Agent *********
2011-05-25 01:13:33:470 336 18ac Agent ** END ** Agent: Installing updates [CallerId = AutomaticUpdates]
2011-05-24 08:02:04:663 336 a6c Agent *************
2011-05-24 08:02:04:673 336 1644 AU >>## RESUMED ## AU: Search for updates [CallId = {7BB742F1-B249-4C70-83C0-B5F7CFC0893A}]
2011-05-24 08:02:04:673 336 1644 AU # 4 updates detected
2011-05-24


I do see 1 critical update and 3 optional updates. I will manually do those and see what happens in the next couple of days.

I have no clue what all this means. The log starts on 4-21-2011. If I printed it all, it wuld take 75 pages, at least. Must be at least

 

[sl380]

This is what I got this morning. I also show an update will be done on shutdown again. It is for Powerpoint. I tried to manually do the update yesterday, without success.
2011-05-26 16:51:34:389 324 570 AU No featured updates notifications to show
2011-05-26 16:51:34:389 324 570 AU Successfully wrote event for AU health state:0
2011-05-26 16:51:34:389 324 570 AU Successfully wrote event for AU health state:0
2011-05-26 16:51:34:404 324 6a8 AU Getting featured update notifications. fIncludeDismissed = true
2011-05-26 16:51:34:404 324 6a8 AU No featured updates available.
2011-05-26 16:51:39:396 324 f3c Report CWERReporter finishing event handling. (00000000)
2011-05-27 00:06:21:227 324 128c AU AU received handle event
2011-05-27 00:06:21:227 324 128c AU AU setting pending client directive to 'Install Approval'
2011-05-27 00:06:31:809 324 128c Shutdwn user approved update at shutdown
2011-05-27 00:06:31:809 324 128c AU AU found 1 updates to install at shutdown.
2011-05-27 00:06:31:809 324 128c AU #############
2011-05-27 00:06:31:809 324 128c AU ## START ## AU: Install updates
2011-05-27 00:06:31:809 324 128c AU #########
2011-05-27 00:06:31:809 324 128c AU # Initiating install at shutdown
2011-05-27 00:06:31:809 324 128c AU # Approved updates = 1
2011-05-27 00:06:31:872 324 128c AU <<## SUBMITTED ## AU: Install updates / installing updates [CallId = {77497CD5-F633-456D-A149-BF7AFC926A82}]
2011-05-27 00:06:31:872 324 128c Shutdwn InstallAtShutdown starts.
2011-05-27 00:06:31:872 324 1220 Agent *************
2011-05-27 00:06:31:872 324 1220 Agent ** START ** Agent: Installing updates [CallerId = AutomaticUpdates]
2011-05-27 00:06:31:872 324 1220 Agent *********
2011-05-27 00:06:31:872 324 1220 Agent * Updates to install = 1
2011-05-27 00:06:31:918 324 1220 Agent * Title = Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
2011-05-27 00:06:31:918 324 1220 Agent * UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100
2011-05-27 00:06:31:918 324 1220 Agent * Bundles 1 updates:
2011-05-27 00:06:31:918 324 1220 Agent * {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100
2011-05-27 00:06:32:620 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:06:36:240 324 128c AU WARNING: Pending directive, 'Install Approval', is not applicable
2011-05-27 00:07:28:094 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:28:141 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:28:141 324 1220 DnldMgr Preparing update for install, updateId = {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100.
2011-05-27 00:07:28:141 2236 125c Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0500) ===========
2011-05-27 00:07:28:141 2236 125c Misc = Process: C:\Windows\system32\wuauclt.exe
2011-05-27 00:07:28:141 2236 125c Misc = Module: C:\Windows\system32\wuaueng.dll
2011-05-27 00:07:28:141 2236 125c Handler :::::::::::::
2011-05-27 00:07:28:141 2236 125c Handler :: START :: Handler: MSI Install
2011-05-27 00:07:28:141 2236 125c Handler :::::::::
2011-05-27 00:07:28:141 2236 125c Handler : Updates to install = 1
2011-05-27 00:07:28:157 2236 125c Handler Extracting MSP file stored in CAB powerpoint.cab
2011-05-27 00:07:28:609 2236 125c Handler MSP update {00000000-0000-0000-0000-000000000000}.0 using full-file patch
2011-05-27 00:07:28:609 2236 125c Handler : Batch installing 1 updates
2011-05-27 00:07:29:186 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:29:186 2236 125c Handler List of MSPs in transaction:
2011-05-27 00:07:29:186 2236 125c Handler C:\Windows\SoftwareDistribution\Download\f89a919897ea60c7bbf9e38cff8478e5\img\powerpoint.MSP
2011-05-27 00:07:29:186 2236 125c Handler MSP final command line: DISABLESRCPROMPT=1 LOCALCACHESRCRES=0 NOLOCALCACHEROLLBACK=1 REBOOT=REALLYSUPPRESS MSIRESTARTMANAGERCONTROL=Disable
2011-05-27 00:07:48:811 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:827 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:842 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:842 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:858 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:858 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:858 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:873 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:873 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:889 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:889 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:905 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:905 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:983 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:998 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:48:998 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:55:285 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:55:457 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:56:408 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:58:311 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:58:857 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:185 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:216 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:247 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:279 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:310 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:341 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:372 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:07:59:403 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:08:05:612 2236 125c Handler MSP Error List:
2011-05-27 00:08:05:612 2236 125c Handler 1: 1406 2: 3: \Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version
2011-05-27 00:08:05:612 2236 125c Handler : MSI transaction completed. MSI: 0x80070643, Handler: 0x8024200b, Source: No, Reboot: 0
2011-05-27 00:08:05:612 2236 125c Handler : WARNING: First failure for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}, transaction error = 0x8024200b, MSI result = 0x80070643, MSI action = WriteRegistryValues
2011-05-27 00:08:05:612 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:08:05:612 324 1334 AU >>## RESUMED ## AU: Installing update [UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}]
2011-05-27 00:08:05:612 324 1334 AU # WARNING: Install failed, error = 0x80070643 / 0x0000057E
2011-05-27 00:08:05:612 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:08:05:612 2236 125c Handler : WARNING: Operation failed at update 0, Exit code = 0x8024200B
2011-05-27 00:08:05:612 2236 125c Handler :::::::::
2011-05-27 00:08:05:612 2236 125c Handler :: END :: Handler: MSI Install
2011-05-27 00:08:05:612 2236 125c Handler :::::::::::::
2011-05-27 00:08:05:643 324 1220 Report REPORT EVENT: {37F54A5A-8FAA-40DB-A07F-F66219C0AA24} 2011-05-27 00:08:05:628-0500 1 198 101 {66154F8A-D074-4069-BB1D-6C7CCCFF9682} 100 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2535818).
2011-05-27 00:08:05:675 324 1220 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2011-05-27 00:08:05:675 324 1220 Report WER Report sent: 7.5.7601.17514 0x80070643 66154F8A-D074-4069-BB1D-6C7CCCFF9682 Install 101 Unmanaged
2011-05-27 00:08:05:675 324 1220 Report CWERReporter finishing event handling. (00000000)
2011-05-27 00:08:05:690 324 1220 Agent *********
2011-05-27 00:08:05:690 324 1220 Agent ** END ** Agent: Installing updates [CallerId = AutomaticUpdates]
2011-05-27 00:08:05:690 324 1220 Agent *************
2011-05-27 00:08:05:690 324 1334 AU Install call completed.
2011-05-27 00:08:05:690 324 1334 AU # WARNING: Install call completed, reboot required = No, error = 0x00000000
2011-05-27 00:08:05:690 324 1334 AU #########
2011-05-27 00:08:05:690 324 1334 AU ## END ## AU: Installing updates [CallId = {77497CD5-F633-456D-A149-BF7AFC926A82}]
2011-05-27 00:08:05:690 324 1334 AU #############
2011-05-27 00:08:05:690 324 1334 Shutdwn InstallAtShutdown got install progress.
2011-05-27 00:08:05:690 324 1334 AU Install complete for all calls, reboot NOT needed
2011-05-27 00:08:05:690 324 1334 AU Successfully wrote event for AU health state:0
2011-05-27 00:08:05:690 324 1334 AU AU initiates service shutdown
2011-05-27 00:08:05:690 324 1334 AU InstallAtShutdown completed.
2011-05-27 00:08:05:690 324 1334 AU Successfully wrote event for AU health state:0
2011-05-27 00:08:05:690 324 1334 AU Successfully wrote event for AU health state:0
2011-05-27 00:08:05:799 324 128c AU ########### AU: Uninitializing Automatic Updates ###########
2011-05-27 00:08:05:799 324 128c Report CWERReporter finishing event handling. (00000000)
2011-05-27 00:08:06:002 324 128c Service *********
2011-05-27 00:08:06:002 324 128c Service ** END ** Service: Service exit [Exit code = 0x240001]
2011-05-27 00:08:06:002 324 128c Service *************
2011-05-27 05:37:54:521 3336 384 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0500) ===========
2011-05-27 05:37:55:723 3336 384 Misc = Process: C:\Program Files (x86)\FixCleaner\FixCleaner.exe
2011-05-27 05:37:55:723 3336 384 Misc = Module: C:\Windows\SysWOW64\wuapi.dll
2011-05-27 05:37:54:428 3336 384 COMAPI -------------
2011-05-27 05:37:55:723 3336 384 COMAPI -- START -- COMAPI: Search [ClientId = <NULL>]
2011-05-27 05:37:55:723 3336 384 COMAPI ---------
2011-05-27 05:37:59:681 292 570 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0500) ===========
2011-05-27 05:37:59:681 292 570 Misc = Process: C:\Windows\system32\svchost.exe
2011-05-27 05:37:59:681 292 570 Misc = Module: c:\windows\system32\wuaueng.dll
2011-05-27 05:37:59:673 292 570 Service *************
2011-05-27 05:37:59:681 292 570 Service ** START ** Service: Service startup
2011-05-27 05:37:59:681 292 570 Service *********
2011-05-27 05:38:00:688 292 570 Agent * WU client version 7.5.7601.17514
2011-05-27 05:38:00:688 292 570 Agent * Base directory: C:\Windows\SoftwareDistribution
2011-05-27 05:38:00:689 292 570 Agent * Access type: No proxy
2011-05-27 05:38:00:758 292 570 Agent * Network state: Connected
2011-05-27 05:38:06:127 292 ba0 Report CWERReporter::Init succeeded
2011-05-27 05:38:06:127 292 ba0 Agent *********** Agent: Initializing Windows Update Agent ***********
2011-05-27 05:38:06:127 292 ba0 Agent *********** Agent: Initializing global settings cache ***********
2011-05-27 05:38:06:127 292 ba0 Agent * WSUS server: <NULL>
2011-05-27 05:38:06:127 292 ba0 Agent * WSUS status server: <NULL>
2011-05-27 05:38:06:127 292 ba0 Agent * Target group: (Unassigned Computers)
2011-05-27 05:38:06:128 292 ba0 Agent * Windows Update access disabled: No
2011-05-27 05:38:06:236 292 ba0 DnldMgr Download manager restoring 0 downloads
2011-05-27 05:38:06:380 292 ba0 DnldMgr Retrieved 1 persisted download jobs
2011-05-27 05:38:06:380 292 ba0 DnldMgr *********** DnldMgr: Restoring download [no. 0] ***********
2011-05-27 05:38:06:380 292 ba0 DnldMgr * BITS JobId = {1699EFA7-6057-4F39-BBD6-34D5B709A542}
2011-05-27 05:38:06:380 292 ba0 DnldMgr * ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2011-05-27 05:38:06:801 292 ba0 DnldMgr * UpdateId = {AA6A768C-13C6-42B7-AA60-113400C8EE67}.100
2011-05-27 05:38:07:269 292 ba0 DnldMgr * Restored download job.
2011-05-27 05:38:08:766 3336 384 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = <NULL>]
2011-05-27 05:38:15:568 292 570 Report *********** Report: Initializing static reporting data ***********
2011-05-27 05:38:15:568 292 570 Report * OS Version = 6.1.7601.1.0.66304
2011-05-27 05:38:15:568 292 570 Report * OS Product Type = 0x00000003
2011-05-27 05:38:15:584 292 570 Report * Computer Brand = Hewlett-Packard
2011-05-27 05:38:15:584 292 570 Report * Computer Model = HP Pavilion dv7 Notebook PC
2011-05-27 05:38:15:584 292 570 Report * Bios Revision = F.49
2011-05-27 05:38:15:599 292 570 Report * Bios Name = Default System BIOS
2011-05-27 05:38:15:599 292 570 Report * Bios Release Date = 2009-08-17T00:00:00
2011-05-27 05:38:15:599 292 570 Report * Locale ID = 1033
2011-05-27 05:38:16:738 292 1054 Agent *************
2011-05-27 05:38:16:738 292 1054 Agent ** START ** Agent: Finding updates [CallerId = ]
2011-05-27 05:38:16:738 292 1054 Agent *********
2011-05-27 05:38:16:738 292 1054 Agent * Online = Yes; Ignore download priority = No
2011-05-27 05:38:16:738 292 1054 Agent * Criteria = "IsInstalled = 0 AND IsHidden = 0"
2011-05-27 05:38:16:738 292 1054 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
2011-05-27 05:38:16:738 292 1054 Agent * Search Scope = {Machine}
2011-05-27 05:38:36:281 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:38:36:506 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:38:36:605 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:38:36:614 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:38:36:625 292 1054 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2011-05-27 05:38:36:625 292 1054 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2011-05-27 05:38:50:739 292 570 AU ########### AU: Initializing Automatic Updates ###########
2011-05-27 05:38:50:741 292 570 AU AU setting next detection timeout to 2011-05-27 10:38:50
2011-05-27 05:38:50:742 292 570 AU # Approval type: Pre-install notify (User preference)
2011-05-27 05:38:50:742 292 570 AU # Auto-install minor updates: No (User preference)
2011-05-27 05:38:50:742 292 570 AU # Will interact with non-admins (Non-admins are elevated (User preference))
2011-05-27 05:38:50:742 292 570 AU # Will display featured software notifications (User preference)
2011-05-27 05:38:51:090 292 570 AU Successfully wrote event for AU health state:0
2011-05-27 05:38:51:090 292 570 AU Initializing featured updates
2011-05-27 05:38:51:090 292 570 AU Found 0 cached featured updates
2011-05-27 05:38:51:090 292 570 AU Successfully wrote event for AU health state:0
2011-05-27 05:38:51:095 292 570 AU Successfully wrote event for AU health state:0
2011-05-27 05:38:51:095 292 570 AU AU finished delayed initialization
2011-05-27 05:38:51:095 292 570 AU #############
2011-05-27 05:38:51:095 292 570 AU ## START ## AU: Search for updates
2011-05-27 05:38:51:095 292 570 AU #########
2011-05-27 05:38:51:098 292 570 AU <<## SUBMITTED ## AU: Search for updates [CallId = {49319DA3-47AF-4EEE-85AF-55C7783B3315}]
2011-05-27 05:39:14:339 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:39:14:339 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:39:14:417 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:39:14:432 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:39:14:448 292 1054 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2011-05-27 05:39:14:448 292 1054 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2011-05-27 05:39:14:885 292 1054 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 310 out of 383 deployed entities
2011-05-27 05:39:14:978 292 1054 Agent *********
2011-05-27 05:39:14:978 292 1054 Agent ** END ** Agent: Finding updates [CallerId = ]
2011-05-27 05:39:14:978 292 1054 Agent *************
2011-05-27 05:39:14:978 292 1054 Agent *************
2011-05-27 05:39:14:978 292 1054 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2011-05-27 05:39:14:978 292 1054 Agent *********
2011-05-27 05:39:14:978 292 1054 Agent * Online = No; Ignore download priority = No
2011-05-27 05:39:14:978 292 1054 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-05-27 05:39:14:978 292 1054 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2011-05-27 05:39:14:978 292 1054 Agent * Search Scope = {Machine}
2011-05-27 05:39:15:119 3336 ee8 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = <NULL>]
2011-05-27 05:39:15:119 3336 ee8 COMAPI - Updates found = 0
2011-05-27 05:39:15:119 3336 ee8 COMAPI ---------
2011-05-27 05:39:15:119 3336 ee8 COMAPI -- END -- COMAPI: Search [ClientId = <NULL>]
2011-05-27 05:39:15:119 3336 ee8 COMAPI -------------
2011-05-27 05:39:23:948 292 1054 Driver Matched driver to device PCI\VEN_10EC&DEV_8168&SUBSYS_30FC103C&REV_02
2011-05-27 05:39:23:948 292 1054 Driver Status: 0x180200a, ProblemNumber: 00000000
2011-05-27 05:39:23:948 292 1054 Driver Matched driver to device ACPI\HPQ0004
2011-05-27 05:39:23:948 292 1054 Driver Status: 0x180000a, ProblemNumber: 00000000
2011-05-27 05:40:11:451 292 1054 Agent Update {16158981-D915-4B50-B451-FD76232C3BB4}.100 is pruned out due to potential supersedence
2011-05-27 05:40:11:451 292 1054 Agent * Added update {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100 to search result
2011-05-27 05:40:11:451 292 1054 Agent * Found 1 updates and 65 categories in search; evaluated appl. rules of 1066 out of 1851 deployed entities
2011-05-27 05:40:11:451 292 1054 Agent *********
2011-05-27 05:40:11:451 292 1054 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2011-05-27 05:40:11:451 292 1054 Agent *************
2011-05-27 05:40:11:466 292 122c AU >>## RESUMED ## AU: Search for updates [CallId = {49319DA3-47AF-4EEE-85AF-55C7783B3315}]
2011-05-27 05:40:11:466 292 122c AU # 1 updates detected
2011-05-27 05:40:11:466 292 122c AU #########
2011-05-27 05:40:11:466 292 122c AU ## END ## AU: Search for updates [CallId = {49319DA3-47AF-4EEE-85AF-55C7783B3315}]
2011-05-27 05:40:11:466 292 122c AU #############
2011-05-27 05:40:11:466 292 122c AU No featured updates notifications to show
2011-05-27 05:40:11:466 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:11:466 292 122c AU Auto-approving update for download, updateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2011-05-27 05:40:11:466 292 122c AU Auto-approved 1 update(s) for download (NOT for Ux)
2011-05-27 05:40:11:466 292 122c AU #############
2011-05-27 05:40:11:466 292 122c AU ## START ## AU: Download updates
2011-05-27 05:40:11:466 292 122c AU #########
2011-05-27 05:40:11:466 292 122c AU # Approved updates = 1
2011-05-27 05:40:11:466 292 122c AU AU initiated download, updateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100, callId = {17E99E90-D7B6-412C-9299-B0583C5B40AE}
2011-05-27 05:40:11:466 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:11:466 292 122c AU AU setting pending client directive to 'Download Progress'
2011-05-27 05:40:11:482 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:11:482 292 122c AU # Pending download calls = 1
2011-05-27 05:40:11:482 292 122c AU <<## SUBMITTED ## AU: Download updates
2011-05-27 05:40:11:482 292 1054 Report CWERReporter finishing event handling. (00000000)
2011-05-27 05:40:11:482 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:11:482 292 570 AU #############
2011-05-27 05:40:11:482 292 570 AU ## START ## AU: Search for updates
2011-05-27 05:40:11:482 292 570 AU #########
2011-05-27 05:40:11:482 292 570 AU <<## SUBMITTED ## AU: Search for updates [CallId = {94AAF2E0-9852-4D46-84FD-CC1F8BBFA800}]
2011-05-27 05:40:11:544 292 1054 Report REPORT EVENT: {468EB16E-8701-4B53-B394-072DDD4E1842} 2011-05-27 05:38:51:091-0500 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
2011-05-27 05:40:11:560 292 1054 Report CWERReporter finishing event handling. (00000000)
2011-05-27 05:40:11:560 292 1054 Report REPORT EVENT: {24DBEFCA-E604-4CBE-8779-8D862FBDE9F8} 2011-05-27 05:39:14:978-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 Success Software Synchronization Windows Update Client successfully detected 0 updates.
2011-05-27 05:40:11:560 292 1054 Report CWERReporter finishing event handling. (00000000)
2011-05-27 05:40:11:560 292 1054 DnldMgr *************
2011-05-27 05:40:11:560 292 1054 DnldMgr ** START ** DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
2011-05-27 05:40:11:560 292 1054 DnldMgr *********
2011-05-27 05:40:11:560 292 1054 DnldMgr * Call ID = {17E99E90-D7B6-412C-9299-B0583C5B40AE}
2011-05-27 05:40:11:560 292 1054 DnldMgr * Priority = 2, Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id = -1, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2011-05-27 05:40:11:560 292 1054 DnldMgr * Updates to download = 1
2011-05-27 05:40:11:560 292 1054 Agent * Title = Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
2011-05-27 05:40:11:560 292 1054 Agent * UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100
2011-05-27 05:40:11:560 292 1054 Agent * Bundles 1 updates:
2011-05-27 05:40:11:560 292 1054 Agent * {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100
2011-05-27 05:40:11:560 292 1054 DnldMgr *********** DnldMgr: Regulation Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}] ***********
2011-05-27 05:40:11:560 292 1054 DnldMgr Contacting regulation server for 1 updates.
2011-05-27 05:40:11:638 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab:
2011-05-27 05:40:11:653 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:11:653 292 1054 PT URL for regulation server found in server config.
2011-05-27 05:40:11:653 292 1054 DnldMgr Regulation server path: https://www.update.microsoft.com/v6/UpdateRegulationService/UpdateRegulation.asmx.
2011-05-27 05:40:14:352 292 1054 DnldMgr * Regulation call complete. 0x00000000
2011-05-27 05:40:14:352 292 1054 DnldMgr *********** DnldMgr: New download job [UpdateId = {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100] ***********
2011-05-27 05:40:14:383 292 1054 DnldMgr * Queueing update for download handler request generation.
2011-05-27 05:40:14:383 292 1054 DnldMgr Generating download request for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100
2011-05-27 05:40:16:692 292 1054 Handler MSP download: file powerpoint.cab already exists in sandbox directory (C:\Windows\SoftwareDistribution\Download\2a55dd73fc65c85fb8c29bb88aac7b3d)
2011-05-27 05:40:16:723 292 1054 DnldMgr *********** DnldMgr: New download job [UpdateId = {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}.100] ***********
2011-05-27 05:40:16:723 292 1054 DnldMgr * All files for update were already downloaded and are valid.
2011-05-27 05:40:16:755 292 1054 Agent *********
2011-05-27 05:40:16:755 292 122c AU >>## RESUMED ## AU: Download update [UpdateId = {66154F8A-D074-4069-BB1D-6C7CCCFF9682}, succeeded]
2011-05-27 05:40:16:755 292 1054 Agent ** END ** Agent: Downloading updates [CallerId = AutomaticUpdates]
2011-05-27 05:40:16:755 292 1054 Agent *************
2011-05-27 05:40:16:755 292 1054 Agent *************
2011-05-27 05:40:16:755 292 1054 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2011-05-27 05:40:16:755 292 1054 Agent *********
2011-05-27 05:40:16:755 292 1054 Agent * Online = Yes; Ignore download priority = No
2011-05-27 05:40:16:755 292 1054 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2011-05-27 05:40:16:755 292 1054 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2011-05-27 05:40:16:755 292 1054 Agent * Search Scope = {Machine}
2011-05-27 05:40:16:755 292 122c AU #########
2011-05-27 05:40:16:755 292 122c AU ## END ## AU: Download updates
2011-05-27 05:40:16:755 292 122c AU #############
2011-05-27 05:40:16:755 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:16:755 292 122c AU AU setting pending client directive to 'Install Approval'
2011-05-27 05:40:16:755 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:16:755 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:40:16:770 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:157 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:40:19:173 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:251 292 1054 Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://download.windowsupdate.com/v9/microsoftupdate/redir/muauth.cab
2011-05-27 05:40:19:251 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2011-05-27 05:40:19:266 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:297 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2011-05-27 05:40:19:297 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:297 292 1054 Setup Checking for agent SelfUpdate
2011-05-27 05:40:19:297 292 1054 Setup Client version: Core: 7.5.7601.17514 Aux: 7.5.7601.17514
2011-05-27 05:40:19:313 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:40:19:313 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:344 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2011-05-27 05:40:19:344 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:375 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-05-27 05:40:19:407 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:547 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2011-05-27 05:40:19:563 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:19:578 292 1054 Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
2011-05-27 05:40:19:578 292 1054 Setup SelfUpdate check completed. SelfUpdate is NOT required.
2011-05-27 05:40:20:077 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2011-05-27 05:40:20:124 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:20:140 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2011-05-27 05:40:20:155 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:20:171 292 1054 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2011-05-27 05:40:20:171 292 1054 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2011-05-27 05:40:26:473 292 570 AU Launched new AU client for directive 'Install Approval', session id = 0x1
2011-05-27 05:40:29:125 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2011-05-27 05:40:29:141 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:29:188 292 1054 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
2011-05-27 05:40:29:203 292 1054 Misc Microsoft signed: Yes
2011-05-27 05:40:29:219 292 1054 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2011-05-27 05:40:29:219 292 1054 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2011-05-27 05:40:29:781 292 1054 Agent Update {16158981-D915-4B50-B451-FD76232C3BB4}.100 is pruned out due to potential supersedence
2011-05-27 05:40:29:781 292 1054 Agent * Added update {66154F8A-D074-4069-BB1D-6C7CCCFF9682}.100 to search result
2011-05-27 05:40:29:781 292 1054 Agent * Found 1 updates and 65 categories in search; evaluated appl. rules of 1371 out of 1848 deployed entities
2011-05-27 05:40:29:781 292 1054 Agent *********
2011-05-27 05:40:29:781 292 1054 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2011-05-27 05:40:29:781 292 1054 Agent *************
2011-05-27 05:40:29:796 292 1054 Report CWERReporter finishing event handling. (00000000)
2011-05-27 05:40:29:796 292 1054 Report REPORT EVENT: {A75FC09E-7772-4E74-82BD-3E14717F0548} 2011-05-27 05:40:16:755-0500 1 189 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. To install the updates, an administrator should log on to this computer and Windows will prompt with further instructions: - Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
2011-05-27 05:40:29:796 292 1054 Report CWERReporter finishing event handling. (00000000)
2011-05-27 05:40:29:796 292 122c AU >>## RESUMED ## AU: Search for updates [CallId = {94AAF2E0-9852-4D46-84FD-CC1F8BBFA800}]
2011-05-27 05:40:29:796 292 122c AU # 1 updates detected
2011-05-27 05:40:29:796 292 122c AU #########
2011-05-27 05:40:29:796 292 122c AU ## END ## AU: Search for updates [CallId = {94AAF2E0-9852-4D46-84FD-CC1F8BBFA800}]
2011-05-27 05:40:29:796 292 122c AU #############
2011-05-27 05:40:29:796 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:29:796 292 122c AU #############
2011-05-27 05:40:29:796 292 122c AU ## START ## AU: Refresh featured updates info
2011-05-27 05:40:29:796 292 122c AU #########
2011-05-27 05:40:29:796 292 122c AU No featured updates available.
2011-05-27 05:40:29:796 292 122c AU #########
2011-05-27 05:40:29:796 292 122c AU ## END ## AU: Refresh featured updates info
2011-05-27 05:40:29:796 292 122c AU #############
2011-05-27 05:40:29:796 292 122c AU AU setting next detection timeout to 2011-05-28 04:37:29
2011-05-27 05:40:29:796 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:29:796 292 122c AU Successfully wrote event for AU health state:0
2011-05-27 05:40:34:788 292 1054 Report REPORT EVENT: {52FC18CA-4C24-4850-A168-4E823FC0A704} 2011-05-27 05:40:29:781-0500 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 1 updates.
2011-05-27 05:40:34:788 292 1054 Report CWERReporter finishing event handling. (00000000)

 

[MowGreen]

KB2535818 is failing to install because it is being prevented from writing to a registry key

2011-05-25 01:13:33:345 5352 12f8 Handler : WARNING: First failure for update {28BCEEE5-6CDB-45A5-A1A6-3DA607F653D1}, transaction error = 0x8024200b, MSI result = 0x80070643, MSI action = WriteRegistryValues

Specifically, this reg key
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version

When you state that you tried a manual attempt to install the update, did you download, save it, and then attempt to install it from the Microsoft Download Center or did you attempt to install the previously downloaded update offered by Microsoft Update ?

Please download and save the update from the MS Download Center -
Security Update for Microsoft Office PowerPoint 2007 (KB2535818)


Before you install it, disconnect the system from it's network/internet connection as the update has been downloaded and there is no need to be connected at this time.

Then configure Windows 7 to Clean boot so as to rule out any interference from 3rd party software ( specifically, Security software ) - How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

When the system has been restarted to the Clean boot state, install PowerPoint2007-KB2535818-fullfile-x86-glb.exe by right clicking it and choose 'Run as administrator'.
Agree to the UAC prompt.
Restart if prompted to. You should not need to restart since the system is now in the Clean boot state and no Office nor Power Point program is open.

Whether the update installs or not, undo the Clean boot configuration and restart to normal Windows mode.

Did that get KB2535818 installed ?

 

[RCWhite]

Hi, s1380.

I'll let Mow do the heavy lifting here, but I can answer this small distraction. ;<)

You said, "In Windows Updates, I did not see an "Orb", so went to step 2." The "Orb" goes by many names. It is simply the multi-colored disk at the very bottom left corner of the Win7 screen. It may also be called the Start button or the Windows button or the Win7 button - or even the Search button, because when we click it, the Search box is at the bottom of the Start menu that pops up.

Mow meant to type "up" into that box. Live Update will be the top item. Just press Enter to run it.

RC

In Windows Updates, I did not see an "Orb", so went to step 2.

 

[sl380]

RCWhite, O appreciate the input. However, what I read was :1) Open Windows Updates in Control Panel.
Click the Start orb > type up into the Search field.
Under Programs, click on Windows Update.
I understood this to mean there was an orb in the control panel window. I just did what you said. I got Apple software update, HP updates and Juno dialup under Programs. Then under Control Panel, I got update device drivers and a few other similer things. Then "up" related to documents and pictues.
Not one thing that says Live Update.

And FYI for both of you: This computer was originally Vista. When I bought it, it came with a free upgrade to W7. It was during the transition. to W7. And I have had several software issues with it since I returned it to HP for a cooling fan replacement. I had 3 different Favorites tabs. 2 were gone when I got it back. Whenever I move data to a flashdrive, DVD or CD, it always shows a desktop icon at the top of the list of data. I have to remove that every time, or the data goes straight to the desktop instead of the flashdeive or disc. HP has sent me a Vista disc, so I could start from the beginning. It was the wrong disc. So some of my long lasting issues, I think, may be rooted in Vista, and reinstalling W7 doesn't fix them.
Going to give the clean boot a try now. See what happens!

 

[sl380]

OK, folks, I did the Clean Boot, twice and nothing changed. If you are satisfied that it is the Powerpoint download it is doing every night, I'll just let it happen, even though it does not work.
I was most concerned that it was a bug that was downloading my computer info to a hacker, who was very good and masked it to look like a legitamite program.

 

[Carolyn]

Give these instructions a try:

You receive error code 0x80070643 or error code 0x643 when you use the Windows Update or Microsoft Update Web sites to install updates

 

[sl380]

I found a HOTFIX program. http://hotfixv4.microsoft.com/Micro....0000.6021.5000/free/313187_intl_i386_zip.exe

I downloaded into my documents file. Opened my documents and unzipped it. Unzip failed.

 

[MowGreen]

Sorry, sl380, what I should have posted re: opening Windows Update was

1) To open Windows Updates in Control Panel, click the Start orb, etc., etc.

Some folks don't even know how to do that. You do. Sorry about the confusion.

Now, as to the troublesome update, was PowerPoint 2007 installed by HP when the system was running Windows Vista either by itself or as a component of Office 2007 ?

We can check and compare Permissions of the below key to see which Permission is preventing the update's installation since all subkeys under it should inherit their Perms from it.

Open the registry editor ( I'm assuming you know how to do that. If not, click the Start orb > type regedit into the Search field. Under Programs, click on regedit.exe )


HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}


Right click on {F0291081-E87C-4E07-97DA-A0A03761E586} in the left frame and choose Permissions.

Then write down the Group or user names and the Permissions shown in the lower pane for each Group/user names listed, then post them into your reply.

 

[sl380]

SYSTEM, Administrators, Users all have read permission. Trusted Installer has Read and Full Control.

FYI, I have only one Powerpoint presentaion file. I did got to it, to see if it would run. File could not be found. I don't know if it because of this issue, or something lost when HP replaced the fan. I haven't accessed that PP for over a year and the fan was replaced last Sept, I think.

I know enough to be dangerous with a computer. Up until Vista, I can do pretty good. This new stuff even confuses my son, who has done 3 years of IT training 6 years ago.

 

[MowGreen]

SYSTEM, Administrators, Users all have read permission. Trusted Installer has Read and Full Control.
<snip>

Please go back to the registry key

HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}

Open the Permissions again and click the Advanced button towards the bottom right of the window.

For each Permission shown does Apply To show This key and subkeys ?
Now click the Owner tab.
Is the Current owner showing TrustedInstaller ?

 

[sl380]

Yes to all of that. Also when I try to open the one PP program I have, it shows an error: ppcore.dll is missing from your computer. That's when I tried the HotFix that did not work.

 

[MowGreen]

The Hotfix contains a much older Version of ppcore.dll than KB2535818 does.

Do you still have the copy of (KB2535818) Security Update for Microsoft Office PowerPoint 2007 that failed to install from the Clean boot state ? If you do we can extract the contents of it using 7Zip or a similar extractor and you can then run powerpoint.msp.

Other than that ... a Repair of PowerPoint is probably out of the question. The system is not behaving as it should since it came back from the replacement of the fan by HP. McAfee is installed. Programs such as FixCleaner, in my humble opinion, promise the impossible and usually cause way more issues than they promise to resolve, etc.,etc.

Your best option to get the system back working the way you want it to is save the PowerPoint file that you want saved to an external location, then format the Hard Drive and start off with installing Vista.

If the Vista DVD from HP installs McAfee, the first thing you want to do is to uninstall it from Programs and Features. Don't bother installing antivirus software until the system has been upgraded to Windows 7 SP1.

Don't even bother updating Vista. After it's installed, use the Windows 7 upgrade disk.

After Win7 has installed, skip updating it, download the full, standalone 32 bit (x86) Windows 7 Service Pack 1 ( windows6.1-KB976932-X86.exe ) and save it - Windows 7 and Windows Server 2008 R2 Service Pack 1 32bit (KB976932)

Create a folder on the root drive, which should be C:\, and name it SP, ServicePack, or PorkChop, whichever suits your fancy.
Move windows6.1-KB976932-X86.exe to the new folder, right click it, and choose 'Run as administrator'. Agree to the UAC prompt.


And, finally, you could contact Microsoft for no-charge support in getting the Security Update for PowerPoint installed. I'm not sure what the result of that would be but, as I mentioned, there's no-charge for the Support -

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support website:
Please Verify your Location


North American customers can also obtain instant access to unlimited no-charge email support or to unlimited individual chat support by visiting the following Microsoft website:
Help and Support

If you do contact MS, be sure to let them know about the below entry in the WindowsUpdate.log

2011-05-25 01:13:33:345 5352 12f8 Handler 1: 1406 2: 3: \Software\Classes\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\Version

 

[sl380]

I appreciate your help. I did try opening the update as a zip file without success.
I guess I better tell you the rest of the story and why formatting and starting from scratch is not an option. As I said befor, I had 3 Favorites files before I sent it in for the fan. All my financil links were in one, legal research was in another and everything else was in the third. After I got it back, I notice 2 of the 3 were missing. The desktop icon that shows on any data I transfer to disc or flashdrive started showing up. Many programs, live Windows Live Gallery, ran slow and erratic. The first time I ignored the desktop icon, I was putting pictures on a disc. As soon as I started the transfer, (writing on the disc), all the pictures started showing up on my desktop. I stopped the transfer, and spent about an hour deleting over 400 pictures from the desktop.
I contacted HP, and went through a guy in India, Wisconson, and finally a guy, a senior customer service rep in Canada. He sent me Vista, as I did not have it. That would not load. I called him back, and he said he guessed as to which Vista I had. The product key under the computer was worn off because HP put it right where you put your hands to grab the laptop off of a desk.
I finally wrote an executive at HP. :
"I appreciate your responding, through a third party, to my complaint dated 11-12-2010. My letter was forwarded to Morris, somewhere in Canada.
I apologize for the lenght of this letter in advance, however it is nessesary in order for you to fully understand the problem.
I quickly discovered he was customer support, not tech support. That aside, he was quite knowledgable, and through his help, I did get some issues resolved, but that only created new ones. Although I did not tell you the whole host of issues before, my computer has reached the point of unacceptable instability and HP needs to "own" this. Every time I turn it on, I cannot rely on it operating correctly.
I cannot stress enough that I did not have any issues with this notebook, other than the noisy fan, until HP replaced the fan. For example, when I got it back after the fan replacement, the speakers did not work. The icons were jumbled, as I described before. System Restore did fix many of those issues. Morris suggested I back everything up and re-intall Windows 7. Since this notebook was originally on a Vista platform, and it did not come with the recovery CD's, Morris sent me replacement Vista CD's. They were the incorrect ones and I could not use them. Since everything was backed up, I reinstalled Windows 7, with the discs sent to me right after I purchased it.
After that, it required 53 updates from Microsoft, which was expected. After installing those, more issues presented themselves. Live Messenger would not load, with a warning the file was corrupted. My McAfee program would download those updates, but would not install even after restarting, a normal process to finish many updates. They finally installed, however it took several restarts.
I removed 2 programs, one which was a Microsoft Critical Update, part of the 53. I also removed one of my programs I have not used in a year, and doing that resolved the Live Messenger issue.
But the problems continue. For example:
1) Web pages that have blank fill-in spaces, such as where you post messages on Facebook, Autofill dropdown menus, etc., are grey in the background, not white as they always have been. (Even as I write this on WordPad, the background is grey, not white. Let's see how it prints.)
2) While running a Virus Scan, the HP Support Assistant program starts running.
3) A few icons still are not correct. On the Taskbar, an icon which is clearly a shortcut to my Libraries, when I move the mouse over it, and the mini-popup stating which progtam it is, says Windows Explorer, not Libraries.
4) My Homepage is www.msn.com. It is personalized. However, I have to sign in every time. I have NEVER had to do this. It is not an msn problem, as my wife's computer, desktop computer and other notebook still automatically signs me in.
I could go on and on, but I hope you get the point. Morris did state there could be a hundred different reasons for this erratic behavour and I agree. It could be a corrupt file in the Vista, W7, hard drive, etc. Due to the placement of the Vista tag, with the product key, the numbers for the key are worn off, due to my usage of the computer, so a correct copy of the original Vista cannot be obtained by Morris. It was only after he sent me a copy he thought was the correct one that he then requested the key #.
Reinstalling W7 obviously did not return it to normal. Morris did state that it was possible that static electricity did somehow occur when the fan was installed and damaged the Motherboard.
Morris' final recommendations to me were:
1) Buy a new copy of Vista and intall it, then use the W7 upgrade HP supplied,
2) Contact the fee based support at Microsoft and/or HP for further help,
4) Unistall, test, and reinstall each of the 53 updates, one at a time, and see which one COULD be the problem,
3) Or take the computer to a local computer repair shop and pay them to see if they can fix it.
I cannot accept this. I have already spent about 40 hours installing, uninstalling, changing settings, talking on the phone to Support, Morris and all it does is get worse. Why should I have to pay to repair this notebook, when the issues/problems all started immediatly after the CPU fan was replaced by HP? Morris even said a person should reinstall an OS every 6-8 months. My wife's Sony, which I bought right after Vista was released, has NEVER had any problems and I have NEVER had to reinstall the OS!"

So as far as I can see, I am stuck with this. HP claims all they did was replace the fan and run a routine hardware test. When I bought this, my wife's computer got the BSOD, so I gave her the Sony and I bought the HP. It was a week before the release of W7. I had gone to a major retailer, however they had already upgraded every computer to W7, but could not sell them for a week. I found this at a retailer, with the certificate for the W7 upgrade.
I'll try the free support next week. I agree with you that some of the external programs like Fixcleaner can cause issues. I still think my issues are rooted in Vista. And as you can see, I have no problem reinstalling Vista, then W7.
It is still a Catch 22 though. HP caused the problem, but will not properly fix Windows. Microsoft, when I talked to them once, said it was up to HP to fix it, not MS.

 

[MowGreen]

Thanks for providing the background of what you've had to go through so far. It's really a shame that OEMs do not fulfill their part of the bargain with Microsoft, namely, providing the support for Windows and their hardware that they are supposed to provide. They get a discount on Windows Operating Systems from MS and their part of the bargain is that they are required to Support it for at least, the first year.
In fact, I'd call it a scam and will be recommending that folks not buy HP systems.

I'm not totally clear on how the Win 7 upgrade disk functions. Here's a tutorial that explains it better than I can -

How to Do a Clean Install with a Upgrade Windows 7 Version


With all that being said, as "Morris" stated, if HP did damage the motherboard then you might just be going around in circles.

 

[sl380]

Thanks for trying to help me with this. In the beginning, I didn't want to bore you with the history. One thing I do have is a 2 years warranty on htis one. I do have a history of letter writing to key people and getting what is due and right. Looks like I am going to have to do that. This was running fairly predictable for several months until this thing came up.
Can you answer one general question? How does things like ppcore.dll just go away? Most of the issues I figured out on my own and fixed. One of the benefits of being retired.
And what are the dangers of using third party "fixes" that claim they can restore ppcore.dll? There are several sites out there.

Take care and thanks again.