Windows 7 Update Failure

[Slapshot]

Several attempts to install Windows 7 updates KB2894854, KB2972216 and KB2889914 have all failed with error codes 641 and 6B7. I have also received errors 0X80070641 (Windows Installer Service could not be accessed), 0X80070057, and 0X80240009 (Installer encountered error) during my troubleshooting efforts. Also, Adobe Reader updates have failed (error 1601), Adobe Flash Player updates have failed (error 1601), Western Digital updates have failed and HP printer updates have failed. The MrFixit troubleshooting indicated it could not access Windows Installer Service. I have verified WIS is installed and running. I have also run the most recent version of AdwareCleaner, and scanned with MBAM Pro. Also ran Scannow and SURT. I am guessing I have some corrupted or missing files in the WIS.
CBS file is attached.

 

[NoelDP]

Interesting...
SFC only found this problem...

 Line 65526: 2014-09-21 21:44:39, Info                  CSI    000002b9 [SR] Repairing 1 components
 Line 65527: 2014-09-21 21:44:39, Info                  CSI    000002ba [SR] Beginning Verify and Repair transaction
 Line 65528: 2014-09-21 21:44:39, Info                  CSI    000002bb [SR] Cannot repair member file [l:32{16}]"DVDMaker.exe.mui" of Microsoft-Windows-OpticalMediaDisc-Wizard.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 65529: 2014-09-21 21:44:39, Info                  CSI    000002bc [SR] Cannot repair member file [l:32{16}]"DVDMaker.exe.mui" of Microsoft-Windows-OpticalMediaDisc-Wizard.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 65530: 2014-09-21 21:44:39, Info                  CSI    000002bd [SR] This component was referenced by [l:206{103}]"Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.OpticalMediaDisc"
 Line 65531: 2014-09-21 21:44:39, Info                  CSI    000002be [SR] Could not reproject corrupted file [ml:520{260},l:72{36}]"\??\C:\Program Files\DVD Maker\en-US"\[l:32{16}]"DVDMaker.exe.mui"; source file in store is also corrupted
 Line 65536: 2014-09-21 21:44:39, Info                  CSI    000002c0 [SR] Repair complete

but CheckSUR found two missing files...

Checking Component Store
(f) CSI Payload File Missing 0x00000000 DVDMaker.exe.mui amd64_microsoft-windows-o..sc-wizard.resources_31bf3856ad364e35_6.1.7600.16385_en-us_102a16b698e56faf 
(f) CSI Payload File Missing 0x00000000 bitsadmin.exe x86_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7600.16385_none_4ce7e7256dbfa16f

Strangely I can find none of the usual data associated with a CheckSUR scan in the CBS log

I'll post a fix for both files later, and we'll see what happens.

 

[NoelDP]

While I think of it...


Please open an Elevated (Administrator) Command Prompt window and use the following commands....

net start msiserver
sc qc msiserver
sc queryex msiserver
sc qprivs msiserver
sc qsidtype msiserver
sc sdshow msiserver
ICACLS C:\Windows\system32\msiexec.exe


Copy and paste the output to your reply

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[Slapshot]

Not sure if I did this correctly. Is this what you are looking for?


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>net start msiserver
The requested service has already been started.
More help is available by typing NET HELPMSG 2182.

C:\Windows\system32>sc qc msiserver
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: msiserver
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\msiexec /V
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Installer
DEPENDENCIES : rpcss
SERVICE_START_NAME : LocalSystem
C:\Windows\system32>sc queryex msiserver
SERVICE_NAME: msiserver
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 776
FLAGS :
C:\Windows\system32>sc qprivs msiserver
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: msiserver
PRIVILEGES : SeTcbPrivilege
: SeCreatePagefilePrivilege
: SeLockMemoryPrivilege
: SeIncreaseBasePriorityPrivilege
: SeCreatePermanentPrivilege
: SeAuditPrivilege
: SeSecurityPrivilege
: SeChangeNotifyPrivilege
: SeProfileSingleProcessPrivilege
: SeImpersonatePrivilege
: SeCreateGlobalPrivilege
: SeAssignPrimaryTokenPrivilege
: SeRestorePrivilege
: SeIncreaseQuotaPrivilege
: SeShutdownPrivilege
: SeTakeOwnershipPrivilege
: SeLoadDriverPrivilege
C:\Windows\system32>sc qsidtype msiserver
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: msiserver
SERVICE_SID_TYPE: UNRESTRICTED
C:\Windows\system32>sc sdshow msiserver
DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
C:\Windows\system32>ICACLS C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe NT SERVICE\TrustedInstallerF)
BUILTIN\AdministratorsRX)
NT AUTHORITY\SYSTEMRX)
BUILTIN\UsersRX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>
C:\Windows\system32>
C:\Windows\system32>
C:\Windows\system32>

 

[NoelDP]

That all looks normal.


I've uploaded a file - sstaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\sstaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\sstaa
or
DIR E:\sstaa



The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...



XCOPY <drive>:\sstaa <drive>:\windows\winsxs /y /i /s /v /h



(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )



run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

 

[Slapshot]

New CBS.log

 

[Slapshot]

Noel, FYI, a new Windows update (KB2998527) became available for installation today. I selected that one only and it downloaded and installed properly. The previous updates, either singularly or as a group, still fail. In addition, the HP and Adobe updates still fail also.

 

[NoelDP]

The CBS log is a mass of this error-type

 Line 51845: 2014-09-21 14:26:22, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]

The SFC scan shows that it repaired one error, at least...

 Line 72854: 2014-09-23 10:59:20, Info                  CSI    000002b6 [SR] Repairing 1 components
 Line 72855: 2014-09-23 10:59:20, Info                  CSI    000002b7 [SR] Beginning Verify and Repair transaction
 Line 72856: 2014-09-23 10:59:20, Info                  CSI    000002b8 [SR] Repairing corrupted file [ml:520{260},l:72{36}]"\??\C:\Program Files\DVD Maker\en-US"\[l:32{16}]"DVDMaker.exe.mui" from store
 Line 72865: 2014-09-23 10:59:20, Info                  CSI    000002ba [SR] Repair complete

Please post the C:\Windows\windowsupdate.log file

 

[Slapshot]

Windows update log attached.

 

[NoelDP]

The log shows the following two errors...

2014-09-26 15:27:54:078  760 1178 Agent WARNING: Failed to evaluate Installed rule, updateId = {818701AF-1182-45C2-BD1E-17068AD171D6}.104, hr = 80242013
 
 
 Line 12001: 2014-09-25 10:10:08:305  760 1804 Report REPORT EVENT: {727A4253-744E-4E94-A341-A80F8D5FDA65} 2014-09-25 10:09:49:707-0500 1 182 101 {CC0FD76B-48C7-43CD-98A0-59DB19879391} 202 80070643 AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 4.5 and 4.5.1 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2894854).

643 errors in non-native .NET updates such as this are often best dealt with by completely removing the .NET installation and reinstalling it.
See the article here... .NET Framework Cleanup Tool User's Guide - Aaron Stebner's WebLog - Site Home - MSDN Blogs

 

[Slapshot]

OK, here are the steps I have tried from the Framework Cleanup Guide link you provided.
1. In Control Panel, Programs, Install/Uninstall/Repair right click to repair failed because it "could not access Windows Installer Service" (WIS).
2. Tried the .NET Framework Repair Tool from Microsoft, it reregistered WIS, but could not complete repairs and collected logs including cbs.log and windows update log, and forwarded them to Microsoft.
3. Back to Control Panel, Programs, Install/Uninstall/Repair, and right click to uninstall .NET Framework 4.5.1, but it failed as "Could not access WIS."
4. Downloaded and ran the .NET Framework Cleanup Tool, after one failure, it did sucessfully uninstall
.NET Framework 4.5.1.
5. Attempted to download and reinstall .NET Framework 4.5.1 from Microsoft, but that failed as "WIS could not be accessed."

I see that WIS 5.0 (the current version for Windows 7) is not available for downloading from Microsoft. Not sure how to fix the problem with WIS other than using a restore point or rescue disk.
The logs from the Cleanup Utility and the failed effort to reinstall .NET Framework 4.5.1 are attached.

 

[NoelDP]

See this KB article, which should help... "The Windows Installer Service Could Not Be Accessed" error when you try to install a program in Windows 7 or Windows Vista

 

[Slapshot]

I tried all three steps in the link you provided regarding Windows Installer Service with no luck. The updates still failed to install with the WIS error. After much frustration, I decided to restore the computer with a System Image (for whatever reason no restore points before the errors began would work. I had to use a system image that was 9 months old, so there was much updating to do including 64 Windows updates. All non-Windows updates installed properly, then I tried the Windows updates. The first effort with all 64 updates (I know, never install that many at one time) failed and the computer crashed. It would not boot up, it kept rebooting just after the "Starting Windows" logo.
I had to use a recovery disk along with the System Image to get it back up, and began the updating process again. The first block of WUD's went well which included Security UD's for W7, Silver Light, IE9 U/D, security U/D's for .NET Framework 3.5.1, and Windows Defender ( 31 total). The next block of 15 went well and were updates for W7. None of the updates for .Net Framework 4.5.1 will install, nor will any update for security for Office 2007. IE 11 appeared to install, but on start up crashed the machine, and I had to use the system image again. I have never been able to get IE 10 to install, so I am running IE9. Luckily I had made a new image on 10/4 which includes the 46 Windows updates that do install and all of other software updates, so I did not have to go back 9 months. I get an error of 641 or 6B7 now for the remaining failed Windows updates, and I got a 0x080070005 when trying to open the Windows Update TroubleShooting tool. The WIS issue appears to be corrected,
as I get no WIS errors on non-Windows updates. There are a total of 18 Windows updates that will not install. I have tried to installed the failed updates in blocks and singularly. The IE 11 is not a big deal, as I have begun to use FireFox instead of IE. I am out of town for the next week, so I will be away from the computer.

 

[Slapshot]

The issue with Windows Installer Service appears to be resolved as all non-Windows updates install normally and there are no WIS error messages. However, there are still 18 Windows updates that will not install giving a 6b7 error message.
I did run the SubInAcl tool recommended by Microsoft and then ran the Windows Update Readiness Tool and SFC again.
The WURT indicates it fixed several problems but there was one it could not fix and gives a 0x80070005 error. The current CBS folder is attached.
Also, I ran Malware Bytes AntiMalware and it located and deleted a PUP, InstallBrain.a (HKLM\software\
wow64\node\InstallIQ).

 

[NoelDP]

CheckSUR shows the following problems..

Checking Component Store
(f) CSI Payload File Missing 0x00000000 DVDMaker.exe.mui amd64_microsoft-windows-o..sc-wizard.resources_31bf3856ad364e35_6.1.7600.16385_en-us_102a16b698e56faf 
(f) CSI Payload File Missing 0x00000000 bitsadmin.exe x86_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7600.16385_none_4ce7e7256dbfa16f

while SFC shows only one...

30903: 2014-10-11 01:37:19, Info                  CSI    000002b1 [SR] Repairing 1 components
 Line 30904: 2014-10-11 01:37:19, Info                  CSI    000002b2 [SR] Beginning Verify and Repair transaction
 Line 30905: 2014-10-11 01:37:19, Info                  CSI    000002b3 [SR] Cannot repair member file [l:32{16}]"DVDMaker.exe.mui" of Microsoft-Windows-OpticalMediaDisc-Wizard.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 30906: 2014-10-11 01:37:19, Info                  CSI    000002b4 [SR] Cannot repair member file [l:32{16}]"DVDMaker.exe.mui" of Microsoft-Windows-OpticalMediaDisc-Wizard.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 30907: 2014-10-11 01:37:19, Info                  CSI    000002b5 [SR] This component was referenced by [l:206{103}]"Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.OpticalMediaDisc"
 Line 30908: 2014-10-11 01:37:19, Info                  CSI    000002b6 [SR] Could not reproject corrupted file [ml:520{260},l:72{36}]"\??\C:\Program Files\DVD Maker\en-US"\[l:32{16}]"DVDMaker.exe.mui"; source file in store is also corrupted
 Line 30913: 2014-10-11 01:37:19, Info                  CSI    000002b8 [SR] Repair complete
 Line

I'll post a fix in the morning.

 

[NoelDP]

I've uploaded a file - sstab.zip - to my OneDrive at Noel's OneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\sstab
hit the enter key - if you get a 'Not Found' error try
DIR D:\sstab
or
DIR E:\sstab



The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...



XCOPY <drive>:\sstab <drive>:\windows\winsxs /y /i /s /v /h



(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )



run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

 

[Slapshot]

Here is the new CBS log:

 

[NoelDP]

Yay! We have a clean SFC at last.
Now try doing a new Check for Updates - see what happens is you attempt to install ONLY the oldest update found.

If it fails, post the KBnumber of the update, and the error code received.

 

[Slapshot]

After the system image restore there were originally 18 updates that would not install. Today, another 16 updates became available and most of the new updates installed properly. I still have 20 updates that will not install. They fall into 3 groups:

IE11, no error code, appears to install, but on restart the system crashes and will only restore from a system image not a restore point. I have pretty much dismissed this update.

.NET Framework 4.5.1 updates all give an error code of 641
KB2894854, KB2898869, KB2901126, KB2931368, KB2972107, KB 2972216, and KB2979578

Office 2007 updates all give an error code of 6b7
KB2817330, KB2878233, KB2880507, KB2880508, KB2881069, KB2883031, KB2596857, KB2817565, KB2883032, KB2863811, KB2880505, KB2899475

I have tried all of these updates one at a time, oldest first. I forgot to mention, these were all recommended updates.
There were 2 optional updates, one of which installed properly. The second, KB2670838, Platform for Windows 7 x64 appeared to install, but on restart gave the following error: WindowsCodecs.dll either not designated to run or it contains an error. The optional update that installed was KB2830477.

Edit: after rereading your last post, I neglected to follow the ONLY request and tried them all.
Sorry about that. The oldest 2, according to publish dates (2/11/14) were KB2898869 and KB2901126 which both failed as stated above.

 

[NoelDP]

Hmm - please post the C:\Windows\windowsupdate.log file, and th CBS.log - I'll take another look and see if I get a clue.