Solved Win 7 Home Prem X64 Update:KB2676521,KB2813170,80004002

[tom982]

Hi malon,


It's normal for the history to be reset after performing that fix - an unfortunate side effect really. Try this, but don't be alarmed if some of the files can't be found.


Command Prompt


Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   
   regsvr32 wuapi.dll
   regsvr32 wuaueng.dll
   regsvr32 wuaueng1.dll
   regsvr32 wucltui.dll
   regsvr32 wups.dll
   regsvr32 wups2.dll
   regsvr32 wuweb.dll
   
   
   
4. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
5. Paste (Ctrl+V) it into your next post please.

Tom

 

[malon015]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>regsvr32 wuapi.dll

C:\Windows\system32>regsvr32 wuaueng.dll

C:\Windows\system32>regsvr32 wuaueng1.dll

C:\Windows\system32>regsvr32 wucltui.dll

C:\Windows\system32>regsvr32 wups.dll

C:\Windows\system32>regsvr32 wups2.dll

C:\Windows\system32>regsvr32 wuweb.dll

C:\Windows\system32>


The third, fourth and last regsvr commands failed to laod.

 

[tom982]

And how is Windows Update behaving now?

Please download Farbar Service Scanner and run it on the computer with the issue.

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

Tom

 

[malon015]

tom982, here you go:

Farbar Service Scanner Version: 28-08-2013
Ran by Tom (administrator) on 03-09-2013 at 18:36:40
Running from "C:\Users\Tom\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

[tom982]

Hi malon,

Any change with Windows Update?


Try this:


SFC Scan

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   
   sfc /scannow
   
   
   Wait for this to finish before you continue
   
   
   copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
   
   
   
   
4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Tom

 

[malon015]

Failed to start:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Windows Resource Protection could not start the repair service.

C:\Windows\system32>

 

[tom982]

Can you post your CBS log anyway please?

I would also like you to run ESET Services Repair:


http://kb.eset.com/library/ESET/KB Team Only/Malware/ServicesRepair.exe



Tom

 

[malon015]

Here is a zipped CBS log

 

[malon015]

Thought id show you a few screenshots after booting up my PC this morning. It appears as if the two updates have installed the last two days.

 

[tom982]

Hi malon,


Hmm, those repeating updates again! Right, one last try:


Command Prompt


Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   
   fsutil resource setautoreset true %systemdrive%\
   
   attrib -r -s -h %SystemRoot%\System32\Config\TxR\*
   del %SystemRoot%\System32\Config\TxR\*
   
   attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*
   del %SystemRoot%\System32\SMI\Store\Machine\*.tm*
   del %SystemRoot%\System32\SMI\Store\Machine\*.blf
   del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms
   
   
   
4. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
5. Paste (Ctrl+V) it into your next post please.

Tom

 

[malon015]

Here you go.


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>fsutil resource setautoreset true %systemdrive%\
The operation completed successfully.

C:\Windows\system32>attrib -r -s -h %SystemRoot%\System32\Config\TxR\*

C:\Windows\system32>del %SystemRoot%\System32\Config\TxR\*
C:\Windows\System32\Config\TxR\*, Are you sure (Y/N)? y
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.1.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.2.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.3.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.4.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.5.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.6.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContaine
r00000000000000000001.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContaine
r00000000000000000002.regtrans-ms
The process cannot access the file because it is being used by another process.

C:\Windows\system32>attrib -r -s -h %SystemRoot%\System32\Config\TxR\*

C:\Windows\system32>del %SystemRoot%\System32\Config\TxR\*
C:\Windows\System32\Config\TxR\*, Are you sure (Y/N)? y
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.1.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.2.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.3.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.4.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.5.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.6.regt
rans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContaine
r00000000000000000001.regtrans-ms
The process cannot access the file because it is being used by another process.
C:\Windows\System32\Config\TxR\{016888cd-6c6f-11de-8d1d-001e0bcde3ec}.TMContaine
r00000000000000000002.regtrans-ms
The process cannot access the file because it is being used by another process.

C:\Windows\system32>attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*

C:\Windows\system32>del %SystemRoot%\System32\SMI\Store\Machine\*.tm*

C:\Windows\system32>del %SystemRoot%\System32\SMI\Store\Machine\*.blf
Could Not Find C:\Windows\System32\SMI\Store\Machine\*.blf

C:\Windows\system32>del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms
Could Not Find C:\Windows\System32\SMI\Store\Machine\*.regtrans-ms

C:\Windows\system32>

 

[tom982]

Hi malon,

Any luck with Windows Update?


Tom

 

[malon015]

no luck, but some part of the last sequesnce of steps you had me do seemed to fail.

 

[malon015]

Here is a zipped Windows Update Log.

 

[malon015]

Hey tom982 or Noel,
Any thoguths on my latest postings?

 

[NoelDP]

I'm no expert on WU.logs
the thing that strikes me there is the number of errors similar to these...

2013-09-05 13:49:39:500  972 1500 Agent WARNING: Failed to evaluate Installed rule, updateId = {72289E8B-60C3-4DC9-9EFD-4B221A4C1263}.200, hr = 80004002
2013-09-05 13:49:39:502  972 1500 Agent WARNING: Failed to evaluate Installable rule, updateId = {72289E8B-60C3-4DC9-9EFD-4B221A4C1263}.200, hr = 80004002

That looks to me as if a whole registry key is missing - but Tom is much better at this than I am!

 

[tom982]

That looks to me as if a whole registry key is missing - but Tom is much better at this than I am!

Saying things like that makes me actually have to live up to them now I'm not far off hitting my head on my desk over this, so if you have a suspicion about a solution feel free to give it a go. One way or another, we'll fix this!

How long has this problem been going on for? The Windows Update Agent was updated from 7.5.7601.17514 to 7.6.7600.256 on the 5th May 2013, so something may have gone wrong then, though everything looks perfectly normal in your CBS log.

2013-05-05 05:11:07, Info                  CBS    Appl: Selfupdate, Component: amd64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_0.0.0.0_none_bef6e8a66398b19c (7.6.7600.256), elevation:32, lower version revision holder: 7.5.7601.17514
2013-05-05 05:11:07, Info                  CBS    Applicability(ComponentAnalyzerEvaluateSelfUpdate): Component: amd64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7600.256_none_66110e7f0b087d75, elevate: 32, applicable(true/false): 1
2013-05-05 05:11:07, Info                  CBS    Appl: SelfUpdate detect, component: amd64_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7600.256_none_66110e7f0b087d75, elevation: 32, applicable: 1
2013-05-05 05:11:07, Info                  CBS    Appl: Evaluating applicability block(non detectUpdate part), disposition is: Staged, applicability: Applicable, result applicability state: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: Package: WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256, Update: ActiveX, Applicable: Applicable, Disposition: Installed
2013-05-05 05:11:07, Info                  CBS    External EvaluateApplicability, package: WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256, package applicable State: Installed, highest update applicable state: Installed, resulting applicable state:Installed
2013-05-05 05:11:07, Info                  CBS    Session: 30296440_3690385583 initialized by client WindowsUpdateAgent.
2013-05-05 05:11:07, Info                  CBS    Appl: detect Parent, Package: WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256, Parent: Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.0.6000.16386, Disposition = Detect, VersionComp: EQ, ServiceComp: GE, BuildComp: GE, DistributionComp: GE, RevisionComp: GE, Exist: present
2013-05-05 05:11:07, Info                  CBS    Appl: detectParent: package: WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256, parent found: Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385, state: Superseded
2013-05-05 05:11:07, Info                  CBS    Appl: detectParent: package: WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256, parent found: Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514, state: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: detect Parent, Package: WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256, disposition state from detectParent: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: Evaluating package applicability for package WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256, applicable state: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: Evaluating package applicability for package WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~~7.6.7600.256, applicable state: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: detect Parent, Package: WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256, Parent: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386, Disposition = Detect, VersionComp: EQ, ServiceComp: GE, BuildComp: GE, DistributionComp: GE, RevisionComp: GE, Exist: present
2013-05-05 05:11:07, Info                  CBS    Appl: detectParent: package: WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256, parent found: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7600.16385, state: Superseded
2013-05-05 05:11:07, Info                  CBS    Appl: detectParent: package: WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256, parent found: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, state: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: detect Parent, Package: WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256, disposition state from detectParent: Installed
2013-05-05 05:11:07, Info                  CBS    Appl: Evaluating package applicability for package WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256, applicable state: Installed

Export registry as hive

1. Click on the Start
   
   button and in the search box, type regedit
2. When you see regedit on the list, right-click on it and select Run as administrator
3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
   
   
4. Once selected, click File > Export....
5. Change the Save as type: to Registry Hive Files (*.*)
6. Name this file CBS (with no file extension) and save it to your Desktop.

Zip up this file and attach it to your next post please. If it is too big, which it probably will be, then upload it to SendSpace and send me the link please

Tom

 

[malon015]

That seems to be about when i remember the problem starting. Keep in mind, the laptop runs fine otherwise and most of the time, Win Updates occurred and i wouldnt even realize it. Anyway.....

 

[tom982]

Hi malon,

I think I'm onto something here Two of the packages associated with the Windows Update Client were marked as being partially installed, when they are fully installed:

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the attached file, SFCFix.txt, and save this to your Desktop. Ensure that this file is named SFCFix.txt - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.txt.
5. Drag the file SFCFix.txt onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

 

[malon015]

SFCFix by niemuro failed. See screenprint.
Not sure what you mean by CODE/CODE?