IE9 IE10 IE11 Update Error 9C59 & Kernel-EventTracing/Admin EventID 2

jim duprey

New member
Local time
5:58 PM
Messages
2
Location
Rhode Island, USA
IE9 IE10 IE11 Update Error 9C59 & Kernel-EventTracing/Admin EventID 2

Noel,

I believe you are on the right track when saying to marvinnash33 that the Error 9c59 problem is a missing WinSXS IE9 assembly.
http://www.sevenforums.com/windows-updates-activation/319195-cannot-update-ie10-11-code-9c59-2.html
I tried to uninstall IE9 and return to the default IE8 included with Windows 7. Cleaning out temp files lost the original IE9 Install folders, so I used a MS-FIXIT utility named MicrosoftFixit.ProgramInstallUninstall.MATSKB.Run.EXE

That MS-FIXIT fails on the IE9 uninstall with the SAME errors reported in the DISM Log and IE##_MAIN Log as found with the IE update/install failure.

***************
DISM.Log error
***************

2014-04-17 23:21:54, Info DISM DISM Package Manager: PID=4976 Error in operation: (null) (CBS HRESULT=0x800736b3) - CCbsConUIHandler::Error <-------BAM!!!!!! ERROR 0x800736b3 = "The referenced assembly is not installed on your system."
2014-04-17 23:21:54, Error DISM DISM Package Manager: PID=4976 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x800736b3)
2014-04-17 23:21:54, Error DISM DISM Package Manager: PID=4976 Failed processing package changes - CDISMPackageManager::ProcessChanges(hr:0x800736b3)
2014-04-17 23:21:54, Info DISM DISM Package Manager: PID=4976 Loaded servicing stack for online use only. - CDISMPackageManager::RefreshInstanceAndLock
2014-04-17 23:21:54, Error DISM DISM Package Manager: PID=4976 Failed while processing command add-package. - CPackageManagerCLIHandler::ExecuteCmdLine(hr:0x800736b3)

The DISM Package Manager chokes on ERROR 0x800736b3, then kicks it back as failed to TrustedInstaller which reports the following:

******************************
clipped from IE ##_Main.Log
******************************
01:40.761: INFO: Installing with the extracted package. C:\Windows\TEMP\IE11900.tmp\IE11-neutral.Extracted.cab
01:40.776: INFO: Launched package installation: C:\Windows\SysNative\dism.exe /online /add-package /packagepath:C:\Windows\TEMP\IE11900.tmp\IE11-neutral.Extracted.cab /quiet /norestart <--- TrustedInstaller just passed the CAB/Package processing to DISM via Command Line
02:24.145: INFO: Process exit code 0x000036B3 (14003) [The referenced assembly is not installed on your system. ] <---DISM just puked the extracted Package after one minute of processing: DISM ERROR 0x800736b3 and IE ##_Main 0x000036B3 (14003) both have the same description
02:24.301: ERROR: Neutral package installation failed (exit code = 0x000036b3 (14003)).
02:24.379: INFO: No reboot logic message NrApiInstallDone(7), lParam=0x00009c59 returned 0x00000000. <<-- TrustedInstaller (Windows Update) flubs the call for failure/exit code by reporting the message from the following line where NrApiInstallDone passes lParam=0x00009c59

It appears as if InPlace Upgrade is the Microsoft-endorsed, half-ass solution to the bogus 9c59 error when a REAL fix would be a MS-FIXIT that scans/fixes WinSXS IE Packages that DISM needs to properly finalize the Package install rather than passing a buried ERROR 0x800736b3 so TrustedInstaller reports the misleading 9c59.

I originally bought the Upgrade Installation DVD to go from WinXP to Windows 7 x32 SP1, then to Windows 7 x64 SP1. That Upgrade Installation DVD chokes on Windows 7 x64 SP1 when attempting an Inplace Upgrade, saying my current version already exceeds the (Inplace) Upgrade. Full re-install from scratch of Windows 7 and EVERYTHING ELSE is one-helluva-lotta work for the sake of a corrupt, missing, or BUGGED IE9 Package in WinSXS.

Even the Inplace is overboard for what this problem appears to be, but DAMNED if I can figure out how to put up an event trace session on the IE Install or the FIXIT IE9 Uninstall that finds out which WinSXS Package(s) the DISM needs to modify for finalize of the IE Browser change.

I'm also working on an EVENT ID 2 error where description is: Session "" failed to start with the following error: 0xC0000022
The upshot here seems to be a failed start on an event trace session named (null "") by User LOCAL SERVICE for the Process ID that Task Manager shows for Services BFE, DPS, and MpsSvc [Base Filtering Engine, Diagnostic Policy Service, and Windows Firewall]. I'm leaning toward thinking that one of the Startup Event Trace Sessions in Performance & Reliability is gets STATUS_ACCESS_DENIED 0xC0000022 because Trace Provider Service(s) logged on as User=LOCAL SERVICE are seeking to write Log files in C:\PerfLogs\Admin for Data Collector Set-> Startup Event Trace Session(s). LOCAL SERVICE isn't listed in Groups/Users having Security Permissions under Properties for Event Trace Session(s). Is that enough to make the Session fail?

***************************
Event ID 2 Error from Event Viewer
***************************
*System

- Provider
[ Name] Microsoft-Windows-Kernel-EventTracing
[ Guid] {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
EventID 2
Version 0
Level 2
Task 2
Opcode 12
Keywords 0x8000000000000010

- TimeCreated
[ SystemTime] 2014-04-20T01:15:13.053000000Z
EventRecordID 2523
Correlation

- Execution
[ ProcessID] 1892 <--Services BFE, DPS, and MpsSvc
[ ThreadID] 3440

Channel Microsoft-Windows-Kernel-EventTracing/Admin
Computer XI-PC

- Security
[ UserID] S-1-5-19 <-- this User is LOCAL SERVICE

- EventData
SessionName <-- null; Event Trace Session failed
FileName <-- null; Event Trace Session denied access to write the log file
ErrorCode 3221225506
LoggingMode 268443650


The IE 9/10/11 Install "9c59 failure " and the "EventID 2 Microsoft-Windows-Kernel-EventTracing/Admin" are long-standing bitch-n-flame topics in the Microsoft Forums. Would be a nice feather in the cap for this Forum to find a REAL solution. BTW, you and Black Viper are given credit in solving MANY errors/warnings/SFC/SUR that I've had on this rugged, old truck I have for a PC (Intel Quad 6600 on an EVGA 680 SLI mb, 250GB & 3TB WD-MyBook, NVIDIA Geforce 640, 6GB ram. Had 8GB ram.... you would not BELIEVE the CRAp introduced through BSOD's and disk data corruption from an intermitantly bad 2GB ram chip.
 

My Computer My Computer

At a glance

Windows 7 Home Premium 64bitIntel 6600 Quad 2.4Mhz [OC'd tp 3.0Ghz]6 gig total (4G Samsung, 2G PNY)NVIDIA GT640
Computer type
PC/Desktop
Computer Manufacturer/Model Number
XI (custom)
OS
Windows 7 Home Premium 64bit
CPU
Intel 6600 Quad 2.4Mhz [OC'd tp 3.0Ghz]
Motherboard
EVGA (NVIDIA) 680i SLI
Memory
6 gig total (4G Samsung, 2G PNY)
Graphics Card(s)
NVIDIA GT640
Monitor(s) Displays
Dual AOC 19" LCD
Screen Resolution
1920 x 1080
Hard Drives
SATA 232GB Western Digital
WDC_WD2500KS-00MJB0
PSU
650W
Keyboard
Logitech
Mouse
Logitech
Internet Speed
FIOS 25/50
Antivirus
AVG Free 2014
Browser
Chrome, IE9, FF, FF Nightly 64bit
Other Info
dual on-board NVIDIA 10-100MB/s ethernet [can bridge @ 1 Gb/s]
Let's have a look at your CBS folder and WU data.


Please follow the Windows Update Posting Instructions and post the requested data - also upload the C:\Windows\windowsupdate.log file
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Back
Top