Many but not all updates failing on Windows 64-bit

[jaycarter]

If I run Windows Update pretty much all installs fail. If I run them manually and individually some updates will succeed. Windows 7 SP1 fails either way - typically with either a transactional conflict or a "used a name reserved for something else" error message. I've run SURT several times and have followed the posting instructions.

Adding CBS log and screen shots here. Any help would be appreciated. Thanks.

Jay

View attachment 261004

View attachment 261005

View attachment 261006

View attachment 261007

View attachment 261008

 

[NoelDP]

There are some rare errors in the CBS log - and no SFC results. I had to dig into the archived logs to find the following summary report...

 Line 3787: 2013-03-22 16:34:39, Info                  CSI    0000030e [SR] Repairing 1 components
 Line 3788: 2013-03-22 16:34:39, Info                  CSI    0000030f [SR] Beginning Verify and Repair transaction
 Line 3791: 2013-03-22 16:34:39, Info                  CSI    00000311 [SR] Repairing corrupted file [ml:520{260},l:56{28}]"\??\C:\Windows\Help\mui\0409"\[l:22{11}]"diskmgt.CHM" from store
 Line 3803: 2013-03-22 16:34:39, Info                  CSI    00000314 [SR] Repair complete

Both SFC and Checksur appear to have been run on 22/3, rather than today.


Some of the errors in the report make me think of a common error that is seen in MGADiag reports - so please post one.

Please follow this tutorial and post an MGADiag report - then we can see what the problem is.

http://www.sevenforums.com/windows-updates-activation/234159-windows-genuine-activation-issue-posting-instructions.html

Ignore errors produced when clicking on the Copy button - they simply mean that the tool could not create the backup files for some reason. The data is still copied to the clipboard for pasting to your response.

Please also download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Run it, and tick all the options, then click on the Scan button - copy and paste the report to your response.

 

[jaycarter]

MGA DIAG and FSS

Here's the MGADIAG Report: (FarBar SS report below)

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-J8D7P-XQJJ2-GPDD4
Windows Product Key Hash: xgsndMkYdJsYmUng0qIJ/thx+HI=
Windows Product ID: 00371-868-0000007-85386
Windows Product ID Type: 1
Windows License Type: KMS Client
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {5E6AE124-2DA1-4418-9B9E-06EF2BF36CFB}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7600.win7_gdr.130104-1435
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
Microsoft Office Project Professional 2007 - 100 Genuine
Microsoft Office Visio Professional 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5E6AE124-2DA1-4418-9B9E-06EF2BF36CFB}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-GPDD4</PKey><PID>00371-868-0000007-85386</PID><PIDType>1</PIDType><SID>S-1-5-21-3320756259-3743660422-1847431878</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP EliteBook 8540w</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68CVD Ver. F.0F</Version><SMBIOSVersion major="2" minor="6"/><Date>20110309000000.000000+000</Date></BIOS><HWID>A1B83607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>6BB1EB3B78E9586</Val><Hash>8KEDcjzmdPLP2XE/zxWFpNVJbrI=</Hash><Pid>89409-707-0593812-65635</Pid><PidType>14</PidType></Product><Product GUID="{90120000-003B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Project Professional 2007</Name><Ver>12</Ver><Val>576CAF65EA90D86</Val><Hash>NMOE11dQRqb2vFwuybF5XyN6nZY=</Hash><Pid>89403-707-0088496-63320</Pid><PidType>14</PidType></Product><Product GUID="{90120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007</Name><Ver>12</Ver><Val>576CAF65EA90D86</Val><Hash>NMOE11dQRqb2vFwuybF5XyN6nZY=</Hash><Pid>89405-707-0088496-63654</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="3A" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="53" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Activation ID: b92e9980-b9d5-4821-9c94-140f632f6312
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00170-868-000000-03-1033-7600.0000-0392010
Installation ID: 014386628796485891581771934844191400139516820950658853
Partial Product Key: GPDD4
License Status: Licensed
Volume activation expiration: 259140 minute(s) (179 day(s))
Remaining Windows rearm count: 1
Trusted time: 3/25/2013 2:06:13 PM

Key Management Service client information
    Client Machine ID (CMID): 1d1b318b-a268-46cb-a85f-19112eef1f19
    KMS machine name from DNS: winskms01.usac.mmm.com:1688
    KMS machine extended PID: 55041-00206-152-000431-03-1033-7601.0000-2342012
    Activation interval: 120 minutes
    Renewal interval: 10080 minutes
    KMS host caching is enabled

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:13:2013 01:29
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OgAAAAEABAABAAEAAAADAAAABAABAAEACrYOBKaoBL4i/Jq9+PDYT1yBLOLUAYk9yMcgIOJz3Ad2Vg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			HPQOEM		1521    
  FACP			HPQOEM		1521    
  HPET			HPQOEM		1521    
  MCFG			HPQOEM		1521    
  TCPA			HPQOEM		1521    
  SSDT			HPQOEM		SataAhci
  SSDT			HPQOEM		SataAhci
  SLIC			HPQOEM		SLIC-MPC
  SSDT			HPQOEM		SataAhci
  SSDT			HPQOEM		SataAhci
  SSDT			HPQOEM		SataAhci
  SSDT			HPQOEM		SataAhci
  ASF!			HPQOEM		1521

Here's the Farbar Scanner Report:

Farbar Service Scanner Version: 03-03-2013
Ran by US334174 (administrator) on 25-03-2013 at 14:09:45
Running from "C:\Users\US334174\Desktop"
Windows 7 Professional  (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is set to Demand. The default start type is Auto.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.


Firewall Disabled Policy: 
==================
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=DWORD:1


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Disabled. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-03-04 14:09] - [2013-01-04 00:41] - 1893224 ____A (Microsoft Corporation) 5CFB7AB8F9524D1A1E14369DE63B83CC

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

[jaycarter]

Should I rerun the SFC and Checksur so there is a current copy?

Thanks for your help!

Jay

 

[NoelDP]

No - we're OK for the moment.

I think the easiest solution - if it works! - will be to attempt to install Service Pack 1 - it will also give us more data

Please download SP1 from http://download.microsoft.com/downl...AB78-7FB0D4461357/windows6.1-KB976932-X64.exe
Save it to your hard drive , then right-click on it and select Run as Administrator
Then follow the instructions.

 

[jaycarter]

I will give it a shot, but that is one of the things that consistently fails. It's downloading now - good think I'm at work and have a healthy T1

 

[jaycarter]

SP1 failed - hopefully with lots of new info...

So I ran the SP1 update and it failed with the same error as before


View attachment 261126

View attachment 261127

Is there anything I need to do to gather more information?

Thanks,

Jay

 

[NoelDP]

Please post the entire CBS folder (compressed) - I'll take a look when I have time (may not be until tomorrow)

 

[jaycarter]

New CBS Log

I had to split one of the persist files out to be under the size limit.

View attachment 261160

View attachment 261161

Thanks,

Jay

 

[NoelDP]

Try this - recommended by an MS techie for a similar problem....

I suggest you try to perform the following steps to delete the .blf files and the .regtrans-ms files from the %Windir%\System32\SMI\Store\Machine folder.

1. Click Start, type cmd in the Start Search box, right-click cmd.exe in the Programs list, click Run as administrator, and then click Continue.
2. At the command prompt, type the following commands. Press ENTER after each command.
cd /d %SystemRoot%\System32\SMI\Store\Machine
attrib -s -h *
del *.blf
del *.regtrans-ms
3. Restart the computer.

 

[jaycarter]

Both of the deletes fail because the file is being used by another process. I'll try maybe booting into safe mode and doing the delete.

Here's a screenshot of the delete attempt.

View attachment 261336

Thanks,

Jay

 

[NoelDP]

Interesting - it ran through without a problem when I tested it.

 

[jaycarter]

Actually I did a reboot and tried again and it went through without a problem. What should I do to test whether it helped? I'm hoping it did since something was clearly holding the files...

Thanks,

Jay

 

[NoelDP]

Try the SP1 install again (reboot again first to allow the system to update anything it needs to)

 

[jaycarter]

{sigh} Still no good. Tricky little bugger

Same message:
View attachment 261460

Seems like there should be something somewhere on the ERROR_TRANSACTIONAL_CONFLICT(0x80071a90) - I think it briefly says some like it "tried to use a name reserved for something else" - poor paraphrase, but that disappears before I can capture it.

Thanks for your continued help.

Jay

 

[NoelDP]

The big problem is that I suspect that if I were to recommend a repair install, you'd run into the same error
I'll do some more hunting later - I'm occupied, currently.

 

[jaycarter]

No problem - thanks Noel. My company is now going to order me a new laptop that should be here in a couple of weeks. If there doesn't seem to be a path forward, I can just wait for that. If you do think of something, it would be great because of the performance issues.

Thanks,

Jay

 

[NoelDP]

The obvious thing is a Recovery back to factory settings (a flatten and rebuild, in effect) - but that will consume a fair amount of time as you reinstall the apps and back up/restore data.