Solved Windows 7 Update error 800706BA

[ptrthgr8]

Hi there. I've been dealing with a Win7 update issue for a few days now. Here's what happened...

On 4 November I attempted to install a new nvidia driver (344.60) for my GTX 970. It caused issues. I ended up needing to do a few reinstalls of older drivers and a couple of restores before I was finally able to get the new driver (344.60) up and running. Everything was fine as far as I could tell, until I checked my Windows updates and I noticed that the updates were no longer current - everything had been current up to the nvidia driver issues I encountered, but after all of the various driver reinstalls and system restores nothing was updated since 16 October. The update history now shows a ton of failed installation attempts from 17 October through today (8 November). I assumed there were some wonky registry entries after all of those driver installs and restores, so I ran the registry cleaner in CCleaner (v4.19.4867) and then to make sure I didn't have some weird virus or malware issues I ran complete scans with Malwarebytes (2.0.3.1025) and Trend Micro Internet Security 2015 - no issues were found.

There are 5 updates I'm trying to install. See updatelist.png

I've tried installing all 5 at the same time and also tried installing each individually, but they all error out and give me error code 800706BA. See update1.png.

I followed the instructions and ran SURT (KB947821). It appears to have installed successfully. See updatehistory5.png.

I ran sfc /scannow 4 times (twice in safemode) and it hangs at "Verification 100% complete." I let it hang at that point for an hour and nothing happened.

I've attached the zipped CBS log..

My machine appears to be running fine otherwise, but at this point I'm at a complete loss as to how to resolve this issue. Any help will be greatly appreciated.

Thanks!

~ Greg ~

 

[NoelDP]

Here's the beginning of a VERY long error chain...

2014-11-08 02:45:54, Info                  CBS    Appl: Evaluating package applicability for package Package_74_for_KB2923545~31bf3856ad364e35~amd64~~6.1.1.1, applicable state: Absent
2014-11-08 02:45:54, Info                  CBS    Plan: Skipping package since its start state and target state are both absent for package: Package_74_for_KB2923545~31bf3856ad364e35~amd64~~6.1.1.1, current: Absent, pending: Default, start: Absent, applicable: Absent, targeted: Absent, limit: Staged
2014-11-08 02:45:54, Info                  CBS    Perf: Resolve chain started.
2014-11-08 02:45:54, Info                  CSI    [EMAIL="0000000f@2014/11/8:08:45:54.431"]0000000f@2014/11/8:08:45:54.431[/EMAIL] CSI Transaction @0x12032b0 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [79]"TI1.30407472_1732183834:2/Package_for_KB2923545~31bf3856ad364e35~amd64~~6.1.1.1"
2014-11-08 02:45:54, Info                  CBS    Failed call to CryptCATAdminAddCatalog. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:45:54, Info                  CBS    Failed to install catalog file [URL="file://\\?\C:\Windows\SoftwareDistribution\Download\f494723c873b677476f3e1aa8354fabd\update.cat"]\\?\C:\Windows\SoftwareDistribution\Download\f494723c873b677476f3e1aa8354fabd\update.cat[/URL] for package [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:45:54, Info                  CBS    Failed to install catalog for package: Package_for_KB2923545~31bf3856ad364e35~amd64~~6.1.1.1 [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:45:54, Info                  CBS    Failed to stage package manifest. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:45:54, Info                  CBS    Failed to add package. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]

... and the end...

2014-11-08 02:49:15, Info                  CBS    Failed to stage package manifest. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:49:15, Info                  CBS    Failed to add package. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:49:15, Info                  CBS    Failed to persist package: Package_2_for_KB2994023~31bf3856ad364e35~amd64~~6.1.1.1. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:49:15, Info                  CBS    Failed to update states and store all resolved packages. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:49:15, Info                  CSI    [EMAIL="00000328@2014/11/8:08:49:15.677"]00000328@2014/11/8:08:49:15.677[/EMAIL] CSI Transaction @0x17310b0 destroyed
2014-11-08 02:49:15, Info                  CBS    Perf: Resolve chain complete.
2014-11-08 02:49:15, Info                  CBS    Failed to resolve execution chain. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]
2014-11-08 02:49:15, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800706ba - RPC_S_SERVER_UNAVAILABLE]

Your SFC scans appear to have fallen off into the CBSPersist files - please post the last 2 or 3 of them.

 

[ptrthgr8]

Hi, Noel.

Thanks for the quick reply. I may not have let SFC run long enough... I was letting it hang at the 100% complete status for nearly an hour. After I posted here I let it run again, but then I went to bed; it ran overnight and when I got to my machine this morning the output showed that it had completed, found some corrupt files, but was unable to fix some of them, etc. I've attached the new CBS log in case that has more info.

You're right - there were a few CBS persist logs (5 files total, about 58MB worth), but they all look to be from before the last scan completed. (See cbspersistlist.png) Please let me know if you still need these even though the scan completed. (I actually ran sfc again while I was drafting this and it completed again pretty quickly this time, though still unable to fix some of the corrupted files.)

Thanks again, Noel.

~ Greg ~

 

[NoelDP]

Here's the SFC results from this scan...

2014-11-08 11:41:01, Info                  CSI    00000341 [SR] Repairing 1 components
2014-11-08 11:41:01, Info                  CSI    00000342 [SR] Beginning Verify and Repair transaction
2014-11-08 11:41:01, Info                  CSI    00000343 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.17964_none_c575f33221b24ff7\nlasvc.dll do not match actual file [l:20{10}]"nlasvc.dll" :
  Found: {l:32 b:a0/ddLuB4SvUslo+iuyw+nf6AHXUVN0dbcF5Ct8fKqg=} Expected: {l:32 b:4j8ySRNVSiPNBD3SfUMFr2L0jAVhoPx7eBHlW3Sxvnk=}
2014-11-08 11:41:01, Info                  CSI    00000344 [SR] Cannot repair member file [l:20{10}]"nlasvc.dll" of Microsoft-Windows-NlaSvc, Version = 6.1.7601.17964, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-11-08 11:41:01, Info                  CSI    00000345 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.17964_none_c575f33221b24ff7\nlasvc.dll do not match actual file [l:20{10}]"nlasvc.dll" :
  Found: {l:32 b:a0/ddLuB4SvUslo+iuyw+nf6AHXUVN0dbcF5Ct8fKqg=} Expected: {l:32 b:4j8ySRNVSiPNBD3SfUMFr2L0jAVhoPx7eBHlW3Sxvnk=}
2014-11-08 11:41:01, Info                  CSI    00000346 [SR] Cannot repair member file [l:20{10}]"nlasvc.dll" of Microsoft-Windows-NlaSvc, Version = 6.1.7601.17964, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-11-08 11:41:01, Info                  CSI    00000347 [SR] This component was referenced by [l:156{78}]"Package_4_for_KB2750841~31bf3856ad364e35~amd64~~6.1.1.3.2750841-21_neutral_GDR"
2014-11-08 11:41:01, Info                  CSI    00000348 Hashes for file member \??\C:\Windows\System32\nlasvc.dll do not match actual file [l:20{10}]"nlasvc.dll" :
  Found: {l:32 b:a0/ddLuB4SvUslo+iuyw+nf6AHXUVN0dbcF5Ct8fKqg=} Expected: {l:32 b:4j8ySRNVSiPNBD3SfUMFr2L0jAVhoPx7eBHlW3Sxvnk=}
2014-11-08 11:41:01, Info                  CSI    00000349 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.17964_none_c575f33221b24ff7\nlasvc.dll do not match actual file [l:20{10}]"nlasvc.dll" :
  Found: {l:32 b:a0/ddLuB4SvUslo+iuyw+nf6AHXUVN0dbcF5Ct8fKqg=} Expected: {l:32 b:4j8ySRNVSiPNBD3SfUMFr2L0jAVhoPx7eBHlW3Sxvnk=}
2014-11-08 11:41:01, Info                  CSI    0000034a [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"nlasvc.dll"; source file in store is also corrupted
2014-11-08 11:41:01, Info                  CSI    0000034b Repair results created:
POQ 143 starts:
 
POQ 143 ends.
2014-11-08 11:41:01, Info                  CSI    0000034c [SR] Repair complete

I'll post a fix a little later.

 

[NoelDP]

I've uploaded a file - pt8aa.zip - to my OneDrive at Noel'sOneDrive

Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract

Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced BootMenu, at the top of which should be the option'Repair my Computer'

Pick that

You'll have to log in with your username and password.



Pick the option to use a Command Prompt
At the prompt type

DIR C:\pt8aa

hit the enter key- if you get a 'Not Found' error try

DIR D:\pt8aa

or

DIR E:\pt8aa

The drive letterin use when you find the folder will need to be substituted (for<drive>)into the following command...

XCOPY <drive>:\hznaa <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPYP:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time) and when the prompt returns, type

EXIT

and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt

then reboot and upload the new CBS.log file to your reply

 

[ptrthgr8]

Thanks, Noel.

I just ran through the instructions. The xcopy step resulted in 4 files being copied over. When I ran scannow again it still found some corrupted files that couldn't be repaired. The new CBS log is attached.

Thanks again!

~ Greg ~

 

[NoelDP]

According to the SFC results, the file system should be fine now - it found and fixed one error - and nothing else was found..

Please post the CheckSUR.log file

 

[ptrthgr8]

Hi, Noel.

I don't see a CheckSUR.log file in the CheckSUR directory. I've attached screenshots of the directory for your reference.

I also attempted to run the updates again this morning and it errored out again - but with a different error number this time. Screenshot attached.

Thanks!

~ Greg ~

 

[NoelDP]

The CheckSUR log is in the C:\Windows\Logs\CBS folder - or should be!

 

[ptrthgr8]

Hmm... I swear I looked there, but I don't recall seeing it. But it *was* very early in the morning and I'm trying to get over a case of Space Ebola that my wife gave to me, so I wouldn't be surprised if I overlooked it. I'm at work at the moment and will check when I get back home later today.

Thanks, Noel.

 

[ptrthgr8]

The CheckSUR log is in the C:\Windows\Logs\CBS folder - or should be!

It's not there. See attachments. And I confirmed that I've got the folder options selected to show hidden files, drives, etc.

 

[NoelDP]

OK - try running the CheckSUR tool again and see if it completes properly.
Usually, the only time no CheckSUR.log file is created is because the 'install' crashes before it gets a change to do anything.

 

[ptrthgr8]

I hadn't actually run the CheckSUR tool before... I wasn't instructed to do so. I guess that's why the log wasn't where it should have been.

I went here and downloaded the Win7 x64 version of the tool:

[FONT=&quot]Download System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [October 2014] from Official Microsoft Download Center[/FONT]

The tool ran for almost 15 mins on the dot before completing. I then checked the Logs folder and found two new CheckSUR logs. Since one is a persist log I'm guessing that's not a good sign. Both are attached.

~ Greg ~

 

[NoelDP]

Ah - you obviously didn't read the instructions properly, then ... but then for some reason I never directed you at the WU Posting instructions....
(Dunno why you had a CheckSUR directory if you'd never run CheckSUR before!)

CheckSUR is clear - Try Windows Update, installing ONLY the oldest update found.
If it installs OK, try the rest.
If not, post the C:\Windows\windowsupdate.log file

 

[ptrthgr8]

Of the 5 updates listed, I ran KB2923545 first - it's date was 25 Feb 2014. One update was from June and the other 3 are from October.

I ran the update and it immediately showed 11% of 5.1MB downloading, but then it hung there for 15 mins before failing again with the newer error message (per post #8). Screen shots and update log attached.

Thanks again, Noel!

 

[NoelDP]

here's the error sequence from the attempt...

2014-11-11 09:48:18:249 1292 2c94 Handler FATAL: CBS called Error with 0x80070426, 
2014-11-11 09:48:18:249 1292 31e4 Handler FATAL: UH: 0x80070426: Async stage operation failed in CUHCbsHandler::StageCbsPackage
2014-11-11 09:48:18:249 1292 31e4 Handler FATAL: Request generation for CBS update complete with hr=0x80070426 and pfResetSandbox=0 
2014-11-11 09:48:18:249 1292 31e4 Handler FATAL: Error source is 106.
2014-11-11 09:48:18:249 1292 31e4 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80070426.
2014-11-11 09:48:18:249 1292 31e4 DnldMgr Error 0x80070426 occurred while downloading update; notifying dependent calls.
2014-11-11 09:48:18:468 1292 31e4 Agent *********
2014-11-11 09:48:18:468 1292 31e4 Agent **  END  **  Agent: Downloading updates [CallerId = AutomaticUpdatesWuApp]

This implies that there's a service not properly configured...

Please downloadthe Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Right-click onthe saved file and select 'Run as Administrator', and tick all the options,then click on the Scan button - copy and paste the report to your response.

 

[ptrthgr8]

Here's the output:

Farbar Service Scanner Version: 21-07-2014
Ran by Greg (administrator) on 11-11-2014 at 11:12:07
Running from "C:\Users\Greg\Desktop\Update Issue"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is OK.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============
cryptsvc Service is not running. Checking service configuration:
The start type of cryptsvc service is OK.
The ImagePath of cryptsvc service is OK.
The ServiceDll of cryptsvc: "%SystemRoot%\system32\cryptsvc.dll".


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys
[2014-07-09 21:32] - [2014-05-30 00:45] - 0497152 ____A (Microsoft Corporation) FA886682CFC5D36718D3E436AACF10B9

C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2014-06-10 21:34] - [2014-04-04 20:47] - 1903552 ____A (Microsoft Corporation) 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2014-08-01 10:00] - [2014-05-14 10:23] - 2477536 ____A (Microsoft Corporation) 61FF576450CCC80564B850BC3FB6713A

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll
[2014-10-16 04:56] - [2014-07-06 20:06] - 0187904 ____A (Microsoft Corporation) 19D511CC455C19DE1ADF60E6C39C85B6

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

[NoelDP]

That seems to be basically OK, apart from these errors...

Action Center:
 ============
 
 Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.
 
 
 Windows Update:
 ============
 cryptsvc Service is not running. Checking service configuration:
 The start type of cryptsvc service is OK.
 The ImagePath of cryptsvc service is OK.
 The ServiceDll of cryptsvc: "%SystemRoot%\system32\cryptsvc.dll".

I need to work out how best to approach these - back tomorrow.

 

[ptrthgr8]

Roger that. Thanks, Noel.

 

[ptrthgr8]

Some new info. I got to my machine this afternoon and I noticed that 9 new updates (7 for Office, 1 for .Net, and 1 Malicious Software removal tool) had been installed successfully and now there are 12 other updates published yesterday that are waiting to be installed. It looks like the update process errored out again, though.

The same 5 updates that were causing issues are still on the list of pending updates, so I deselected them from the list and tried to install only the 12 new updates - but it still fails to complete with the same error code (80070426).

I've attached screenshots of the update screen, update history, and the latest update log in case that provides any new info.

Thanks!