KB2937610 update fails

[NathanH]

Hi!

When installing update KB2937610 on a Windows 7 Home Premium x64 system the update fails and this error code appears: 80073712.

This problem occurs on a PC from an acquaintance.

I couldn't upload the CBS.zip file using this forum, so I uploaded it to MediaFire: http://goo.gl/GyHNQc

Thanks in advance.

 

[NoelDP]

The error indicates a corrupt WINSXS store - but CheckSUR hasn't found anything.

Here's the detail of the error message.

  Stage (1): flags: 8 app: [microsoft.visualbasic.compatibility.data.resources, Version = 6.1.7601.18523, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture = [l:10{5}]"nl-nl", VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral]) comp: (null) man: @0x65d0e18
2014-10-07 11:58:40, Error                 CSI    [EMAIL="000003c5@2014/10/7:09:58:40.875"]000003c5@2014/10/7:09:58:40.875[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\installmap.cpp(620): Error STATUS_SXS_COMPONENT_STORE_CORRUPT originated in function InstallMap::CRawInstallMap::GetComponentWinningVersion expression: (null)
[gle=0x80004005]
2014-10-07 11:58:54, Error                 CSI    000003c6 (F) STATUS_SXS_COMPONENT_STORE_CORRUPT #661253# from CCSDirectTransaction::OperateEnding at index 22 (0x0000000000000016) of 171 (0x00000000000000ab) operations, disposition 0[gle=0xd015001a]
2014-10-07 11:58:57, Error                 CSI    000003c7 (F) HRESULT_FROM_WIN32(14098) #650902# from Windows::ServicingAPI::CCSITransaction::ICSITransaction2_AddComponents(Flags = 4, a = @0x44d2850, mp = @0x44d3050, disp = 0)[gle=0x80073712]
2014-10-07 11:58:57, Info                  CBS    Failed to add one or more component [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]
2014-10-07 11:58:57, Error                 CBS    Failed to complete component closure [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]
2014-10-07 11:58:57, Info                  CSI    [EMAIL="000003c8@2014/10/7:09:58:57.426"]000003c8@2014/10/7:09:58:57.426[/EMAIL] CSI Transaction @0x3a9e80 destroyed
2014-10-07 11:58:57, Info                  CBS    Perf: Resolve chain complete.

This appears to be the result of an Access Denied state when querying the registry for the status of part of the error message - such problems are often due to bitflips and can be almost undetectable (think of a one-bit error in a 40Megabyte file and how impossible it's going to be to find it)

I am prepared to have a look and see if I can find it - otherwise your best hope is likely to be a repair install...


I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

 

[NathanH]

Thank you for your help.

Here is the file you requested: https://www.dropbox.com/s/4t5fw9jgnyl7klj/COMPONENTS.zip?dl=0

 

[NoelDP]

I found what I think is an error - in the right place...

Let's see if it makes any difference.


I've uploaded a file - nnhaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the file and select Extract All, and save to the default destination (which should be a folder on the desktop)

Create a new System Restore point

Open an Elevated Command Prompt, and run the following commands.

REN C:\Windows\System32\config\COMPONENTS COMPONENTS.OLD1
COPY %userprofile%\desktop\nnhaa\COMPONENTS C:\Windows\System32\config

If you get an error with either command, STOP THERE - do not reboot! - post for instructions.

Assuming both commands go OK, reboot, and then run a new Check for Updates, and post the results - if/when if fails, run another CheckSUR/SURT scan and post the new CBS folder (zipped)

 

[NathanH]

Thank you for the good explanation.

Unfortunately, the update still fails. And SUR tries to install this update: KB947821, but the progress bar doesn't fill up.

So here's the new CBS.zip: https://www.dropbox.com/s/kemmn109zjzhk7j/CBS.zip?dl=0

P.S. Currently I am remotely running a MBAM scan on the system via TeamViewer and so far it's found 10 threats containing PUP.Optional.Wajam.A, PUP.Optional.MySearchDial.A, PUP.Optional.Snapdo.T and PUP.Optional.DealPly.A. * Edit: The scan is now finished and all 91 items were non-malware, but potentially unwanted items. *

Update: The KB947821 update succeeded, but _before_ restarting the original update with install problems didn't install yet.

 

[NoelDP]

CheckSUR - KB947821- can take a couple of hours to 'install'.
It is NOT an update - it's merely an attempt to correct the more common errors in updates. As such it doesn't install anything, but it does check tens of thousands of files and registry entries, and attempts to fix what it can - it then saves a log file of what it found.


You MUST reboot before anything can be expected to work, as there are possibly a large number of mods that the tool made, and many will require the reboot to 'settle in'.


'Non-malware' means different things to different people - to Malwarebytes, these items are definitely the sort of thing that should be uninstalled, as they potentially send personal data to unexpected places, and direct searches to highly modified search engines. I would delete/quarantine ALL such entries - at least until all other problems are eliminated.
It looks to me as if you may have been running the MBAM scan at the same time as CheckSUR? if that's the case then I am not in the least surprised that it took hours to complete.

 

[NathanH]

KB947821 did finish.

I have rebooted the system, but it still didn't work.

MBAM didn't run at the same time and I made it quarantine all the threats.

 

[NoelDP]

Please post the new CheckSUR.log file and the C:\windows\windowsupdate.log file.

 

[NathanH]

Log files: https://www.dropbox.com/s/8neycsph2pohthc/Log files.zip?dl=0

 

[NoelDP]

I think this is therelevant error-sequence.

2014-10-15 15:44:49:421 1200 1568 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP8974.tmp with dwProvFlags 0x00000080:
2014-10-15 15:44:49:437 1200 148c AU Forced install timer expired for scheduled install
2014-10-15 15:44:49:437 1200 148c AU UpdateDownloadProperties: 18 download(s) are still in progress.
2014-10-15 15:44:49:437 1200 148c AU UpdateDownloadProperties: download priority has changed from 1 to 2.
2014-10-15 15:44:49:437 1200 148c AU WARNING: Failed to change download properties of call, error = 0x80070057

I suspect that this may be due to corruption in the SoftwareDownload folder...

You will lose your Update history (but the updates will still be installed, and viewable in the Installed Updates listing).

Open an Elevated Command Prompt
Run the following commands

NET STOP WUAUSERV
REN C:\WINDOWS\SoftwareDistribution SDOLD
NET START WUAUSERV

reboot
then wait 10 minutes, and open Windows Updates, and run a Check for Updates.

Install only the oldest update found, and reboot once installed - post error code and KB number if it fails,
then go back to Windows updates and install the others.

 

[NathanH]

It was the same update still.

And it failed again:

Error code: 80073712

Update: KB2937610

 

[NoelDP]

Hmm - please run another CheckSUR scan. That error is typically because of missing manifest files.
Post the new CBS folder and the C:\Windows\windowsupdate.log file

 

[NathanH]

Here are the new folder and logfile: https://www.dropbox.com/s/36uecxkas6e8ke7/CBS + WindowsUpdate.zip?dl=0 (The update failed again)

 

[NoelDP]

The CBS.log shows the following error...

2014-10-27 21:29:35, Error                 CSI    [EMAIL="000003c5@2014/10/27:20:29:35.637"]000003c5@2014/10/27:20:29:35.637[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\componentstore\installmap.cpp(620): Error STATUS_SXS_COMPONENT_STORE_CORRUPT originated in function InstallMap::CRawInstallMap::GetComponentWinningVersion expression: (null)
[gle=0x80004005]
2014-10-27 21:29:49, Error                 CSI    000003c6 (F) STATUS_SXS_COMPONENT_STORE_CORRUPT #661860# from CCSDirectTransaction::OperateEnding at index 22 (0x0000000000000016) of 171 (0x00000000000000ab) operations, disposition 0[gle=0xd015001a]
2014-10-27 21:29:51, Error                 CSI    000003c7 (F) HRESULT_FROM_WIN32(14098) #651511# from Windows::ServicingAPI::CCSITransaction::ICSITransaction2_AddComponents(Flags = 4, a = @0x43d5a70, mp = @0x43d6270, disp = 0)[gle=0x80073712]
2014-10-27 21:29:51, Info                  CBS    Failed to add one or more component [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]
2014-10-27 21:29:51, Error                 CBS    Failed to complete component closure [HRESULT = 0x80073712 - ERROR_SXS_COMPONENT_STORE_CORRUPT]

I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

 

[NathanH]

Here is the new COMPONENTS file: https://www.dropbox.com/s/qyi3j82r0dt6zp6/COMPONENTS 28-10-2014.zip?dl=0

 

[NoelDP]

Please open an Elevated Command Prompt


When command prompt is launched, type in the following command and press enter:

DISM /image:C:\ /cleanup-image /revertpendingactions

Then reboot your computer, booting into Windows normally. Run this FixIt in aggressive mode: You receive a "0x80070002" or "0x80070003" error code after you download an update from Windows Update, from Microsoft Update, or from Windows Server Update Services

then reboot again and run CheckSUR and SFC scans and post the logs - do NOT attempt to install updates yet.


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[NathanH]

I get this error:

Fout: 87

Gebruik de optie /Image of /WinDir niet wanneer u de optie /Online gebruikt om e
en actief besturingssysteem op te geven.
Voor meer informatie raadpleegt u de Help door DISM.exe /Online /? uit te voeren
.

Het DISM-logboekbestand is te vinden op C:\Windows\Logs\DISM\dism.log

dism.log: https://www.dropbox.com/s/3is4ic0jdyz5ky4/dism.log?dl=0

 

[NoelDP]

OK - we'll have to try running it from the Repair Environment then...

reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt

When command prompt is launched, type in the following command and press enter:

DISM /image:C:\ /cleanup-image /revertpendingactions

Then reboot your computer, booting into Windows normally. Run this FixIt in aggressive mode: You receive a "0x80070002" or "0x80070003" error code after you download an update from Windows Update, from Microsoft Update, or from Windows Server Update Services

then reboot again and run CheckSUR and SFC scans and post the logs - do NOT attempt to install updates yet.

 

[NathanH]

My acquaintance executed the command, but got this error:

Opgestart via F8 en bij "Opties voor Systeemherstel" gekozen voor <opdrachtprompt>. Standaard komt nu zichtbaar: X:\Windows\system32>
Breng ik hierachter de opdracht in, dan wordt de volgende tekst zichtbaar: fout 1639 Er ontbreekt een vereiste serviceopdracht op de opdrachrregel. Voor meer info raadpleegt u de Help door disk.exe /Image=<pad_naar_office-installatiekopie> /? uit te voeren, waarbij <pad_naar_offline-installatiekopie> het volledige pad naar een offline-installatiekopie van Windows is.
Het DISM -logbiekbestand is te vinden op X:\Windows\Logs\DISM\DISM.log

Error:1639
The command-line is missing a required servicing command 
For more information, refer to help by running DSIM.exe/Image=<Path_to_Offline_Image>

 

[NathanH]

Do you have any idea what causes this error?