Solved Windows update error code 2 on installing security update .NETF 4.52

[nimanouri]

Hi everybody

I get windows update error code 2 on installing Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2978128)
I have also some other errors installing Internet Explorer 11.

I have used "sfc /scannow" command but it didn't find any integrity violations. the CBS log is attached.

I have also used SUR and the log file can be found attached to this post.

Any help is appreciated.

 

[NoelDP]

Not as bad as I thought from the file size of the CheckSUR log...

Summary:
Seconds executed: 626
 Found 40 errors
  CSI Manifest All Zeros Total count: 40
Unavailable repair files:
 winsxs\manifests\amd64_microsoft-windows-ie-ieshims_31bf3856ad364e35_10.2.9200.20916_none_ae6c710c2475d6dd.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-ieshims_31bf3856ad364e35_10.2.9200.16798_none_c5578c400ab73d40.manifest
 winsxs\manifests\amd64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_10.2.9200.20916_none_ab08cdc647ee4ac0.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-extcompat_31bf3856ad364e35_10.2.9200.20916_none_a38eed1960d6da24.manifest
 winsxs\manifests\amd64_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_10.2.9200.16798_none_32ad7426474825c0.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_10.2.9200.16798_none_455c9a9ecd397534.manifest
 winsxs\manifests\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_10.2.9200.16798_none_66663569022097ee.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-extcompat_31bf3856ad364e35_10.2.9200.16798_none_ba7a084d47184087.manifest
 winsxs\manifests\amd64_microsoft-windows-js-debuggeride_31bf3856ad364e35_10.2.9200.16798_none_b8c293a66f3311dc.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_10.2.9200.20916_none_ae82eb7016c1044d.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-lowreg_31bf3856ad364e35_10.2.9200.20916_none_0f2b73186e1db6ad.manifest
 winsxs\manifests\amd64_microsoft-windows-scripting-jscript_31bf3856ad364e35_10.2.9200.20916_none_e9bf29ad81612b17.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_10.2.9200.16798_none_a5b33267944d950c.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_10.2.9200.20916_none_82715ae744395a3d.manifest
 winsxs\manifests\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16798_none_7fb34fc812514c53.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-sysprep_31bf3856ad364e35_10.2.9200.16798_none_995c761b2a7ac0a0.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16798_none_910d6ee692a7b589.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_10.2.9200.16798_none_c56e06a3fd026ab0.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-lowreg_31bf3856ad364e35_10.2.9200.16798_none_26168e4c545f1d10.manifest
 winsxs\manifests\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16798_none_1680b8a41e440241.manifest
 winsxs\manifests\amd64_microsoft-windows-js-debuggeride_31bf3856ad364e35_10.2.9200.20916_none_a1d7787288f1ab79.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_10.2.9200.16798_none_439b116ecef783db.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_10.2.9200.20916_none_8ec81733ae0c2ea9.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-versioninfo_31bf3856ad364e35_10.2.9200.20916_none_6605203fbf36f2d9.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_10.2.9200.20916_none_2e717f6ae6f80ed1.manifest
 winsxs\manifests\amd64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_10.2.9200.16798_none_c1f3e8fa2e2fb123.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-pdm-configuration_31bf3856ad364e35_10.2.9200.20916_none_b72e2fb5a0a8f7b3.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-vgx_31bf3856ad364e35_10.2.9200.16798_none_6b016db5593931ef.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_10.2.9200.20916_none_2caff63ae8b61d78.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-pdm-configuration_31bf3856ad364e35_10.2.9200.16798_none_ce194ae986ea5e16.manifest
 winsxs\manifests\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20916_none_ff959d7038029bde.manifest
 winsxs\manifests\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20916_none_68c834942c0fe5f0.manifest
 winsxs\manifests\amd64_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_10.2.9200.20916_none_1bc258f26106bf5d.manifest
 winsxs\manifests\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_10.2.9200.20916_none_4f7b1a351bdf318b.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-versioninfo_31bf3856ad364e35_10.2.9200.16798_none_7cf03b73a578593c.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-ieproxy_31bf3856ad364e35_10.2.9200.20916_none_f70e2575d4cd706f.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-ieproxy_31bf3856ad364e35_10.2.9200.16798_none_0df940a9bb0ed6d2.manifest
 winsxs\manifests\amd64_microsoft-windows-scripting-jscript_31bf3856ad364e35_10.2.9200.16798_none_00aa44e167a2917a.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.20916_none_7a2253b2ac664f26.manifest
 winsxs\manifests\amd64_microsoft-windows-ie-vgx_31bf3856ad364e35_10.2.9200.20916_none_5416528172f7cb8c.manifest
(w) Unable to open Event Log 0x000006B5 Application  OpenEventLog failed: 0x000006B5 - The interface is unknown.
.
(w) Unable to open Event Log 0x000006B5 System  OpenEventLog failed: 0x000006B5 - The interface is unknown.
.

... however, the kicker is in the last two lines.
Failure to open Event logs can be a simple fix - if we're lucky - or it can be very difficult.

I'll post a fix for the manifest problems later - then we can work on the Event log problems.

 

[nimanouri]

Many thanks and I really appreciate your time.

 

[NoelDP]

I've uploaded a file - nniaa.zip - to my OneDrive at Noel's OneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\nniaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\nniaa
or
DIR E:\nniaa



The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...



XCOPY <drive>:\nniaa <drive>:\windows\winsxs /y /i /s /v /h



(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )



run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

 

[nimanouri]

Dear Noel
Hi

Sorry for the late reply.
Please find attached the cbs.log

I am w8ing for you help me correct the EventLog problems.

Regards

 

[NoelDP]

SFC is now clear - which may well help with the Event logs.

Now please run CheckSUR again, and post the new CheckSUR log

 

[nimanouri]

Dear Noel
Hi

Seems the same files are having the problem again.
I don't know why.

Thanks again for your time and help
Regards

 

[NoelDP]

Hmmm - my fault...
(Sorry!)

I've uploaded a file - nniab.zip - to my OneDrive at Noel's OneDrive
Please download and save it.
Right-click on the downloaded file, and select Extract all…
Extract to the default location - which will create a new folder nniab in the same place.
Open this folder - there should be two folders inside it (Manifests, and Packages)

Copy the content of the Packages folder to the folder
C:\Windows\Temp\CheckSur\Servicing\Packages

And the content of the manifests folder (.manifest files) into this folder:

C:\Windows\Temp\CheckSur\Winsxs\Manifests

Now run the CheckSUR tool again (it may take a while)

Post the new CheckSUR.log file, and the CheckSUR.persist.log file.

 

[nimanouri]

Dear Noel
Thanks a lot for your help and time.
But I didn't find any packages folder in the nniab.zip

I will do as you said and will send you the results.
Regards

 

[nimanouri]

Dear Noel
Hi again

please find attached the Check SUR files.
The problem is solved.
However still the Event log service is not running.

Regards

 

[NoelDP]

Good - apart from the event log errors, CheckSUR is happy now.

Let's see if this fixed those errors...
Reboot to Safe Mode
Navigate to
C:\Windows\System32\LogFiles\WMI
(you'll have to enable access to the folder)

In there should be the RtBackup folder - rename it to RtBackup.old

reboot, and WAIT 15 minutes - then run the following commands...

NET START WECSVC
NET START WERSVC
NET START EVENTLOG
SC QUERYEX WERSVC
SC QUERYEX WECSVC
SC QUERYEX EVENTLOG

Post the results.

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[nimanouri]

Dear Noel
Hi

Sry for the late reply. I was on a work trip.
I have tried what you said to rename RtBackup folder.
But I get the message "Access is denied"
So I realized that the permissions of that folder is setup incorrectly.
As I have changed the security option to the default values, it gets OK.

Many Thanks and Regards.

 

[NoelDP]

Great!
Good luck.