Solved Windows Update failing with Error codes: 8007371B, 800736B3, 80070246

[tom982]

No problem - done
J

I can't see any attachment?

 

[shiphen]

It promised me it had done it too! Oh well - try this one.

J

 

[tom982]

It promised me it had done it too! Oh well - try this one.

J

Much better! Thanks.

Third time lucky! Here's your file: https://dl.dropbox.com/u/16537616/shiphen components v3.zip

Can I have another SURT log afterwards please? Because your SURT log is so big now, it'll be much easier for you to open this file:

C:\Windows\Logs\CBS\CheckSUR.log

And copy and paste the contents into your post, rather than zipping it up twice and attaching it

Tom

 

[shiphen]

CheckSUR.log contains the following:



=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 16.0
2012-10-17 16:47

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store
(f) CSI Corrupt Identity 0xC0000161 (not UTF8) amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033 Bad identity
(fix) CSI Corrupt Identity CSI Registry Item Repaired amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033

Summary:
Seconds executed: 164
Found 1 errors
Fixed 1 errors
CSI Corrupt Identity Total count: 1
Fixed: CSI Corrupt Identity. Total count: 1

 

[tom982]

Hmm, looks like we might have it this time! Apparently it's fixed it, but could you run the SURT and post the same log as before please? I just want to make sure it's reporting no problems before I send you on your way.

Tom

 

[shiphen]

Done

J

 

[tom982]

Finally Looks like we've ironed out all of the creases.

How is your computer performing now? Are the updates installing?

Tom

 

[shiphen]

All good so far.

I just installed about 8 items and then it wanted me to reboot, which I then did.
Looks good so far.

Out of interest - what did you actually do? Was that my actual Windows Registry that you were editing or what? Do you have any idea what went wrong or why it did so?

Either way thanks you very much indeed.
Cheers

J

 

[tom982]

Hi J,

Glad to hear it!

Yes, I was editing one of your registry hives directly. The file you uploaded for me was your COMPONENTS hive which contains all of the information about Windows Updates - don't worry, it doesn't contain any personal information. I think it's easier if I explain your problem with an example. This is one of the lines in your CheckSUR log:

amd64_microsoft-windows-authentication-authui_31bf385¶ad364e35_6.1.7601.17514ßnone_6a1982860c°76c38

I have highlighted the corruptions from your registry. These are what's known as a bitflip, where the binary sequence for that character becomes corrupt leading to one digit flipping to another (0 to 1 or vice versa).

Let's take this character: ¶. It should be a 6 - just something I know, not something you can work out.
When we look at it's binary sequence, we can see it's this:

10110110

And here's a 6's binary:

00110110

As you can see, the first bit has changed from a 1 to a 0, changing the character completely. The components hive is like a big address book for Windows Updates and this corruption has changed the referenced location of one of the files - so when Windows tries to look for it, it will be looking in the wrong place. Depending on the corruption, it might report the file missing all together, or it may detect that the registry key is corrupt. All of those symbols were just one, two or in one case, three bits different from what they should have been. So I loaded your registry hive and worked my way through that whole list and renamed the keys manually Fortunately, there aren't many things that can cause bit flips as it has to be a fault with something that has direct access to the binary - failing hard disk/hard disk controller, very low level drivers etc. etc.

I think the first test to do is a chkdsk: Check Disk - chkdsk - Vista Forums

Tom

 

[shiphen]

Hi

As you can see in this thread
( http://www.sevenforums.com/system-s...i-am-still-infected-win32-small-ca-virus.html ) I got a subsequent message saying "I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus".

So I am now sweating blood wondering if I have got a serious infetion. For a while I got regular help by user Jacee, but she seems to have abondoned helping me. Windows asked me to do an update which I tried but I now am back to the same/v similar error messages talking about Code 8007371B and 800736B3. And it keeps saying that I have 7 important things to update - and then it says it succeeded with 4 updates, failed with 3 updates and then when it reboots it still says that there are 7 updates important missing.

Do I need to format my disk and start again. If so do I need to do so to all 3 of my computers (Work, Home and Laptop) and even if I do that what the heck should I about my data? How can I make sure that it's clean??

H-E-L-P!

J

 

[tom982]

Hi shiphen,

Could you run the System Update Readiness Tool for me please? Then upload your CheckSUR.persist.log

Tom

 

[shiphen]

A window called "Windows Update Standalone Installer" gets stuck running "Searching for updates on this computer".

Clue: Please note that TrustedInstaller.exe is running at c. 25% continuously and I have noticed that when this happens that Microsoft Security Essentials fails to update its virus definitions.

 

[tom982]

Could you run the SURT please and post its log?

C:\Windows\Logs\CBS\CheckSUR.persist.log

Also, what error codes are you facing?

Tom

 

[Tirillo]

Update

Hi Tom,

I'm facing the same issue.
Would you mind to explain how to fix the issue.
Obviously modifying the component file is dangerous, however I would really appreciate if you can suggest how I can fix it on my own.

The error I see is
CSI Corrupt Identity 0xC0000161 (not UTF8) microsoft-w..anguagepack_31bf3856ad364e35_7.6.7600.256_¼1351de0ef72b75c Bad identity

Obviously the issue is ¼ char.

The persist file contains
(f) CSI Corrupt Identity 0xC0000161 (not UTF8) microsoft-w..anguagepack_31bf3856ad364e35_7.6.7600.256_¼1351de0ef72b75c Bad identity

a couple of questions:
1. is deletion of the string enough? Or do I need to replace it with something else?
2. Where should I modify it, in the file? I can't find any registry entry HKLM\Components\DerivedData\Components where all those stuffs are supposed to be.
3. My Component file is continously locked. I can't neither modify nor open it with notepad.

Many thanks,
Marco

 

[NoelDP]

Please start a NEW thread of your own, and follow the Windows Update Posting Instructions and post all the requested data there

 

[tom982]

Hi Tom,

I'm facing the same issue.
Would you mind to explain how to fix the issue.
Obviously modifying the component file is dangerous, however I would really appreciate if you can suggest how I can fix it on my own.

The error I see is
CSI Corrupt Identity 0xC0000161 (not UTF8) microsoft-w..anguagepack_31bf3856ad364e35_7.6.7600.256_¼1351de0ef72b75c Bad identity

Obviously the issue is ¼ char.

The persist file contains
(f) CSI Corrupt Identity 0xC0000161 (not UTF8) microsoft-w..anguagepack_31bf3856ad364e35_7.6.7600.256_¼1351de0ef72b75c Bad identity

a couple of questions:
1. is deletion of the string enough? Or do I need to replace it with something else?
2. Where should I modify it, in the file? I can't find any registry entry HKLM\Components\DerivedData\Components where all those stuffs are supposed to be.
3. My Component file is continously locked. I can't neither modify nor open it with notepad.

Many thanks,
Marco

Hi Marco,

If you could start a new thread of your own, then I would be more than happy to help you. Make sure you upload a copy of your components hive and I can talk you through the fix

Tom