update error 80070002 - iv'e tried all recommended fixes

[sleepless]

hi,

i'm running win7 ult sp1 - i get update error 80070002

View attachment 335486

i have tried so far:

Reset_Reregister_Windows_Update_Components

Reset_Windows_Update_History

Windows6.1-KB947821-v33-x64

WindowsUpdateDiagnostic:

View attachment 335488

any help would be greatly appreciated, thanks.

 

[NoelDP]

Please follow the Windows Update Posting Instructions and post the requested data
If the file is too large (8MB compressed), remove the older CBSPersist cab files until the final file is below the limit - you can always post them separately after zipping them. (the forum doesn't allow the upload of bare CAB files, for a number of reasons)

 

[sleepless]

thanks for the reply,

here is the log: View attachment 335516
(i had to remove 4 CBSPersist cab files)


when trying to run sfc /scannow using elevated command prompt within windows, i get the message:

"windows resource protection could not perform the requested operation"
View attachment 335514

when opening the command prompt from windows7 boot cd, i get the message:

"there is a system repair pending which requires reboot to complete"

your help is appreciated.

 

[NoelDP]

Here's the errors from the CheckSUR log...

Checking Component Store
(f) CSI Corrupt Component Keyform 0x00000000 identity amd64_microsoft-windows-shell-internetexplorer_31bf3856ad364e35_6.1.7601.17514_none_e276f10f687c8de identity and keyform do not match; keyform is wrong.
(f) CSI C Mark Deployment Missing 0x00000000 c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df88a7d948b37d amd64_microsoft-windows-rastls.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0b2f5387422b4609 
(f) CSI C Mark Deployment Missing 0x00000000 c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7601.17514_51f6c2a6018a344 amd64_microsoft-windows-l..-startere.resources_31bf3856ad364e35_6.1.7600.16385_en-us_da79a19cb62ad143 
(f) CSI C Mark Deployment Missing 0x00000000 c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df488a7d94b37d amd64_microsoft-windows-d..nt-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e95b2b269173677c

I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

 

[sleepless]

there are 2 files:

config\components (51MB) or config\COMPONENTS (1KB text file)

 

[NoelDP]

I need the big one

 

[sleepless]

here it is:

https://www.dropbox.com/s/lgujunb6ovxjafh/components.zip?dl=0

 

[NoelDP]

I think I've managed to correct the errors...


I've uploaded a file - spsaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the file and select Extract All, and save to the default destination (which should be a folder on the desktop)

Create a new System Restore point

Open an Elevated Command Prompt, and run the following commands.

REN C:\Windows\System32\config\COMPONENTS COMPONENTS.OLD1
COPY %userprofile%\desktop\spsaa\COMPONENTS C:\Windows\System32\config

If you get an error with either command, STOP THERE - do not reboot! - post for instructions.

Assuming both commands go OK, reboot, and run another CheckSUR scan - post the new CheckSUR.log file.

 

[sleepless]

View attachment 335856

 

[NoelDP]

Ok... reboot to Safe mode and try the commands from there

 

[sleepless]

View attachment 335864

 

[NoelDP]

That's OK - carry on with the rest of the commands

 

[sleepless]

View attachment 335899

 

[NoelDP]

CheckSUR now shows only the following problems...

Checking Component Store
(f) CSI C Mark Deployment Missing 0x00000000 c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df488a7d948b37d amd64_microsoft-windows-rastls.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0b2f5387422b4609 
(f) CSI C Mark Deployment Missing 0x00000000 c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df488a7d948b37d amd64_microsoft-windows-d..nt-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e95b2b269173677c

I'll try and work out what to do about them, and get back to you.

 

[NoelDP]

From what I can see in your logs and the hive, it looks to me as if these are values which are present when in fact they shouldn't be.

I'll post a corrective later.

 

[sleepless]

any luck?

thanks.

 

[NoelDP]

Sorry about the delay - work constraints, etc (and you fell off my todo list! )


Open an Elevated Command Prompt, and run the following commands...

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS
REG DELETE HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-rastls.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0b2f5387422b4609 /v c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df488a7d948b37d
REG DELETE HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-d..nt-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e95b2b269173677c /v c!microsoft-w..anguagepack_31bf3856ad364e35_6.1.7600.16385_5df488a7d948b37d
REG UNLOAD HKLM\COMPONENTS

Close the window (assuming no errors - otherwise, post the output)
reboot, and run another CheckSUR scan and post the results.

 

[sleepless]

here's the log:
View attachment 336366

to be clear, i've had to remove three older and one newer CbsPersist files from the log (the newest is 10MB).

thanks again.

 

[NoelDP]

We're now down to one error - which makes a real mess in the CBS.log, as it appears over 2500 times here in one form or another...

2014-10-03 08:59:58, Error                 CSI    00000004 (F) STATUS_OBJECT_NAME_NOT_FOUND #408984# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_READ|DELETE|KEY_WOW64_64KEY), oa = @0x10ae5a0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[217]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft-windows-m..bc-sqlserver-driver_31bf3856ad364e35_none_c83d546037e10862\v!6.1.7600.16385"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17491264 (0x010ae540))[gle=0xd0000034]
2014-10-03 08:59:58, Error                 CSI    [EMAIL="00000005@2014/10/3:13:59:58.478"]00000005@2014/10/3:13:59:58.478[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
2014-10-03 09:00:05, Error                 CSI    00000006 (F) STATUS_OBJECT_NAME_NOT_FOUND #408983# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_READ|DELETE|KEY_WOW64_64KEY), oa = @0x10ae5a0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[217]"\Registry\Machine\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft-windows-m..bc-sqlserver-driver_31bf3856ad364e35_none_c83d546037e10862\v!6.1.7600.16385"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 17492328 (0x010ae968))[gle=0xd0000034]
2014-10-03 09:00:05, Error                 CSI    [EMAIL="00000007@2014/10/3:14:00:05.409"]00000007@2014/10/3:14:00:05.409[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]

I'll have to see what I can do about that now

 

[NoelDP]

Please open an Elevated COmmand Prompt and run the following commands

REG LOAD HKLM\COMPONENTS C:\Windows\System32\config\COMPONENTS
REG QUERY "HKLM\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.17592 (win7sp1_gdr.110408-1631)\ComponentFamilies\amd64_microsoft-windows-m..bc-sqlserver-driver_31bf3856ad364e35_none_c83d546037e10862" /S
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-m..bc-sqlserver-driver_31bf3856ad364e35_none_c83d546037e10862" /S

Post the results.