KB2732487 is unable to update - Error Code 800700B7

[NoelDP]

RPC Server unavailable messages are (almost) always lies
If the RPC Server is truly unavailable, then the OS can't start - you can still run Windows without most other services, but shutting that down is a guaranteed windows-breaker.

The obvious question is - what does it really mean?
Guessing, I'd say that it's a disconnect somewhere in the registry, but I have no idea where to start looking.


Let's see if something simple is the problem..

run the following commands, and post the results.

SC QPRIVS RPCSS
SC QC RPCSS

 

[ern815]

Let's go

Here are the reports.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\windows\system32>SC QPRIVS RPCSS
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: RPCSS
PRIVILEGES : SeChangeNotifyPrivilege
: SeCreateGlobalPrivilege
: SeImpersonatePrivilege
C:\windows\system32>SC QC RPCSS
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RPCSS
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\windows\system32\svchost.exe -k rpcss
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : Remote Procedure Call (RPC)
DEPENDENCIES : RpcEptMapper
: DcomLaunch
SERVICE_START_NAME : NT AUTHORITY\NetworkService
C:\windows\system32>

 

[NoelDP]

I thought that might be too much to hope for! It looks normal.


The problem is that almost every other service has RPCSS as a source, so it that starts playing up, then the system exhibits strange behaviour.

I've never tried tracing errors with it - so I don't really have anywhere to start.

Lets see what the Event logs have to say now/again....

Please upload the following files

C:\Windows\System32\winevt\logs\System.evtx
C:\Windows\System32\winevt\logs\Application.evtx
C:\Windows\System32\winevt\logs\Microsoft-Windows-User Profile Service%4Operational.evtx
C:\Windows\System32\winevt\logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx

I'll see if I can make any sense out of them (no promises!)

 

[ern815]

Hi Noel,

Sorry, I was away on a holiday trip for 2 weeks and was unable to be online. I have uploaded the files you have requested. It is all encrypted into a zip file. Have a look

 

[NoelDP]

Some interesting results....

The driver \Driver\WUDFRd failed to load for the device USB\VID_05AC&PID_12A0&MI_00\0.
The ScRegSetValueExW call failed for FailureActions with the following error: Access is denied.
The volume S3A5912D001 (C was not defragmented because an error was encountered: An attempt was made to load a program with an incorrect format. (0x8007000B)

BitComet is installed - and causing registry leaks.
I would recommend uninstalling it, at least for the moment.

The diagnostics show problems with the graphics and Realtek network drivers. - please check that you have current drivers installed.

 

[ern815]

Hi Noel,

Sorry was busy with work that I had to put my computer problem on hold.

Anyway, I did as you told me and uninstalled bitcomet and tried to update the drivers

 

[NoelDP]

That error code 'invalid format' is an odd one.
It usually means something like trying to run a program intended for an Apple on a windows machine.
Perhaps you should run a CHKDSK, and a full malware scan (again?)

 

[ern815]

Hi Noel,

I checked and there's no malware from the AVG scan.

Here is the latest report from the chkdsk scan. (wininit report)

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 24/6/2013 11:47:19 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: ern815-PC
Description:

Checking file system on C:
The type of the file system is NTFS.
Volume label is S3A5912D001.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
Cleaning up instance tags for file 0x2a22f.
496128 file records processed.
File verification completed.
3703 large file records processed.
0 bad file records processed.
0 EA records processed.
76 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
581896 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
496128 file SDs/SIDs processed.
Cleaning up 2409 unused index entries from index $SII of file 0x9.
Cleaning up 2409 unused index entries from index $SDH of file 0x9.
Cleaning up 2409 unused security descriptors.
Security descriptor verification completed.
42885 data files processed.
CHKDSK is verifying Usn Journal...
34988032 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
496112 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
63609132 free clusters processed.
Free space verification is complete.
Windows has made corrections to the file system.
612237311 KB total disk space.
356922576 KB in 342436 files.
258112 KB in 42886 indexes.
12 KB in bad sectors.
620083 KB in use by the system.
65536 KB occupied by the log file.
254436528 KB available on disk.
4096 bytes in each allocation unit.
153059327 total allocation units on disk.
63609132 allocation units available on disk.
Internal Info:
00 92 07 00 36 e1 05 00 5f 0a 0b 00 00 00 00 00 ....6..._.......
f2 ae 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 ....L...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-06-24T15:47:19.000000000Z" />
<EventRecordID>8462</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>ern815-PC</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is S3A5912D001.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
Cleaning up instance tags for file 0x2a22f.
496128 file records processed.
File verification completed.
3703 large file records processed.
0 bad file records processed.
0 EA records processed.
76 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
581896 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
496128 file SDs/SIDs processed.
Cleaning up 2409 unused index entries from index $SII of file 0x9.
Cleaning up 2409 unused index entries from index $SDH of file 0x9.
Cleaning up 2409 unused security descriptors.
Security descriptor verification completed.
42885 data files processed.
CHKDSK is verifying Usn Journal...
34988032 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
496112 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
63609132 free clusters processed.
Free space verification is complete.
Windows has made corrections to the file system.
612237311 KB total disk space.
356922576 KB in 342436 files.
258112 KB in 42886 indexes.
12 KB in bad sectors.
620083 KB in use by the system.
65536 KB occupied by the log file.
254436528 KB available on disk.
4096 bytes in each allocation unit.
153059327 total allocation units on disk.
63609132 allocation units available on disk.
Internal Info:
00 92 07 00 36 e1 05 00 5f 0a 0b 00 00 00 00 00 ....6..._.......
f2 ae 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 ....L...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

 

[NoelDP]

You have three bad sectors showing - this could be the early signs of disk failure.


Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Delete everything it finds

 

[ern815]

I have downloaded and delete everything as instructed.

 

[NoelDP]

OK - now run another SFC /SCANNOW and post the new CBS.log file.

 

[ern815]

Here is the CBS log. Thanks Noel!

 

[NoelDP]

As far as I can see, there's no problem with the report.

What error do you get (if any) if you simply run a Check for Updates?

 

[ern815]

There's nothing wrong with check with updates. But when I tried to install the update again, it has the same error code as before.

 

[NoelDP]

It seems the only reliable cure for this problem (at least that I've found) is a repair install of the OS - most instances appear to be caused by problems with the Windows Update Agent, but those whould show up in the CHeckSUR report, I think.

I really can only recommend a repair install at this point.

 

[ern815]

Lets do install repair then

How should I go about it?

 

[NoelDP]

Download the SP1 Refresh for your language and edition from the links on these pages...

Heidoc - Microsoft DR Download links

The links are for downloads from the Digital River servers run for MS, so are about as safe as you can get

Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk Image Burner, or (better still) your favourite burning application at the slowest speed possible.

Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image' option from your app - or you'll end up with a useless coaster

Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start the repair from there - you must start the repair from within a normal Windows boot.

Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html
- and they should help you get through it (it's not as difficult as it looks!)


Good luck with it!