Problem installing Windows Updates

[mrdreamers]

my windows 7 ultimate 64bit update have been working find for the longest time now all of the sudden i get these errors which i provided in the pics attached can anyone help?
ive went to microsoft and tried the "Microsoft FixIt" software but that didn't work im not sure what else to do any help would greatly be appreciated TY

 

[Slartybart]

Did you follow the instructions on the dialog box and click "Try again"?

Please provide additional information
See: http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html

 

[mrdreamers]

I believe I did everything in the post but its not letting me attach the cbs.zip file i get a error when i upload it is there another way perhapes?

 

[NoelDP]

Please follow the Windows Update Posting Instructions and post the requested data

If the file is too large (8MB compressed), remove the older CBSPersist cab files until the final file is below the limit - you can always post them separately after zipping them. (the forum doesn't allow the upload of bare CAB files, for a number of reasons)

Please also post your C:\Windows\windowsupdate.log file

 

[mrdreamers]

here is what you asked for i did remove the cab files and it worked
what should be my next step?

 

[NoelDP]

CheckSUR shows the following problems...

Summary:
Seconds executed: 421
 No errors detected
(w) Unable to open Event Log 0x000006B5 Application  OpenEventLog failed: 0x000006B5 - The interface is unknown.
.
(w) Unable to open Event Log 0x000006B5 System  OpenEventLog failed: 0x000006B5 - The interface is unknown.

windowsupdate.log shows...

2015-01-04 08:35:06:480 1216 6a4 Report REPORT EVENT: {555979F6-E92C-4924-B3D1-5C40065D8DE8} 2015-01-04 08:34:33:222-0600 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎Sunday, ‎January ‎04, ‎2015 at 8:34 AM:  - Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2978128) - Update for Microsoft Silverlight (KB2977218) - Security Update for Microsoft .NET Framework 4.5 and 4.5.1 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2894854) - Update for Skype for Windows desktop 6.11 (KB2876229) - Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2972216) - Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2979578) - Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2972107)
2015-01-04 08:35:06:480 1216 6a4 Report REPORT EVENT: {FE0D10F5-A2B7-4733-9881-7182EF4B9CEB} 2015-01-04 08:34:33:987-0600 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
2015-01-04 08:35:06:535 1216 6a4 Misc WARNING: Assert config failed, error = 800706B5
2015-01-04 08:35:06:535 1216 6a4 Report WARNING: Unable to assert evt log config: 0x800706B5

SFC apparently fixed the 3 problems it found...

 Line 15353: 2015-01-03 18:36:35, Info                  CSI    0000033b [SR] Repairing 3 components
 Line 15354: 2015-01-03 18:36:35, Info                  CSI    0000033c [SR] Beginning Verify and Repair transaction
 Line 15357: 2015-01-03 18:36:35, Info                  CSI    0000033e [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"uxtheme.dll" from store
 Line 15360: 2015-01-03 18:36:35, Info                  CSI    00000340 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"themeui.dll" from store
 Line 15363: 2015-01-03 18:36:35, Info                  CSI    00000342 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:32{16}]"themeservice.dll" from store
 Line 15374: 2015-01-03 18:36:35, Info                  CSI    00000344 [SR] Repair complete

The SFC problems are often associated with installing non-compliant Windows Theme Packs.


The root problem appears to be something to do with the Event Log system.
I'll have to do some research and see what I can find.

 

[mrdreamers]

sounds good ty soo much and yes i do theme my windows 7 and use universal theme patcher

 

[NoelDP]

Please open an Elevated Command Prompt, and run the following command...


ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup


post the results.


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[mrdreamers]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Johnny>ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup
C:\Windows\System32\LogFiles\WMI\RTBackup BUILTIN\AdministratorsF)
Johnny-PC\JohnnyOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Johnny>

 

[NoelDP]

Ah - that explains a few things!

SYSTEM should have full permission, recursed. back later with a registry fix.

 

[NoelDP]

Open an Elevated Command Prompt, and run the following commandc:

ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup /grant "NT AUTHORITY\SYSTEM":(OI)(CI)(F)
ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup
.

Post the results, then reboot

Then try running the CheckSUR tool again - post the new CheckSUR.log file

 

[mrdreamers]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Johnny>ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup /grant "NT AUTH
ORITY\SYSTEM"OI)(CI)(F)
processed file: C:\Windows\System32\LogFiles\WMI\RTBackup
Successfully processed 1 files; Failed processing 0 files

C:\Users\Johnny>ICACLS C:\Windows\System32\LogFiles\WMI\RTBackup
C:\Windows\System32\LogFiles\WMI\RTBackup BUILTIN\AdministratorsF)
NT AUTHORITY\SYSTEMOI)(CI)(F)
Johnny-PC\JohnnyOI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Johnny>

 

[mrdreamers]

heres the cbs and checksur.

 

[NoelDP]

Great - CheckSUR completed properly this time.
With any luck you shouldn't have problems with WU now.

 

[mrdreamers]

still getting the exact same error
do you think its this in the pic?
do i need all of these microsoft visuals??

in any case im assuming there is no fix?
the only thing i can think of is reformat

 

[mrdreamers]

Great - CheckSUR completed properly this time.
With any luck you shouldn't have problems with WU now.

could it be permissions?
how can i give full control?

 

[NoelDP]

Sorry - you fell off the radar!
The list of Visual C++ entries is a little longer than normal - but not surprisingly so. You have 4 different versions and their installed. It all depends on what other software installed them as to whether you need them, but they won't be doing any harm.

Hmm - I seem to have missed something in the CBS log data...

2015-01-05 23:19:30, Info                  CSI    00000347 Created NT transaction (seq 2) result 0x00000000, handle @0xef0
2015-01-05 23:19:30, Error                 CSI    00000348 (F) STATUS_CANNOT_DELETE #6938255# from RtlRunPrimitiveOperationsFromCallbacksAgainstSil(...)[gle=0xd0000121]
2015-01-05 23:19:30, Info                  CSI    00000349 [SR] Unable to complete Verify and Repair transaction because some of the files that need to be repaired are in use. A reboot is required to complete this operation.

Please run another SFC /SCANNOW and post the new log - we'll see if the error is still present.

 

[mrdreamers]

Update!!

UPDATE: i started off with 3 code errors 2, 64C, and 643 i fixed 2 of them i only have error code 2 left
btw had to shrink size of one of the cbs file because it was too big to upload (FYI).

 

[NoelDP]

That error doesn't appear in the CBS.log - but this one does ( a number of times..)

2015-01-29 11:53:58, Info                  CBS    Session: 6236_6532775 initialized by client SPP.
2015-01-29 11:54:49, Info                  CBS    Failed to peek next token (status=0xc0000161) [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to get next Token [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Wrong XML DECL [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Invalid xml format [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Manifest parsing error at line: 1, context: 
 [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to parse the manifest from the buffer. [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Error                 CBS    Failed to parse package manifest: [URL="file://\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\windows\Servicing\Packages\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.mum"]\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\windows\Servicing\Packages\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.mum[/URL] [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Mark store corruption flag because of package: Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492. [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to initialize package: Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492, from path: [URL="file://\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\windows\Servicing\Packages\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.mum"]\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\windows\Servicing\Packages\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.mum[/URL], existing package: 1 [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to resolve package [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to populate children. [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to initialize internal package [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Info                  CBS    Failed to create package. [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]
2015-01-29 11:54:49, Error                 CBS    Failed to internally open package. [HRESULT = 0x800f0900 - CBS_E_XML_PARSER_FAILURE]

Looks to me as if we need to use CheckSUR again and see if it finds anything (although I suspect that the error here is actually from the installer)
Please run it, and post the new CheckSUR log.

 

[mrdreamers]

new cbs

heres a new checksur log
i ran windows update once before collecting checksur, code 2 error still there(FYI)