Windows Update repeatedly problem - Error 8007054F, 643, 8024200D

[jyck]

Hi all,

since some time ago I´ve been unable to proceed with any installation from Windows Update as I get always error not in the installation but when after reboot the changes are applied (Windows reverts changes) The errors that I get are the following errors: 8007054F, 643, 8024200D.

I´ve tried with Microsoft Fix tool and some other alternative from Microsoft Support site, like reset and re-activate Windows Update resources, but not success at all and always the same negative result.

Attached you can find the CBS.log file after running Microsoft Readiness Tool, sorry for the file size (~170MB) the error that is repeated more often is the 0x80070005, E_ACCESSDENIED.

Also I have another issue that prevents tools like Microsoft Lync to connect to the internet, windows network connection indicates that there is no internet (red cross when I click over the network icon in the toolbar) however I can navigate the Internet and connect to other computers in the local network. I don´t know if this is related, but can give you more details of what is happening.

I would like to ask you for support and help to fix this issue, I am a bit lost...

Thanks

 

[NoelDP]

The CBS.log alone doesn't tell us much...

Please follow the Windows Update Posting Instructions and post the requested data

If the file is too large (8MB compressed), remove the older CBSPersist cab files until the final file is below the limit - you can always post them separately after zipping them. (the forum doesn't allow the upload of bare CAB files, for a number of reasons)

Please also post the C:\Windows\windowsudpate.log file

 

[jyck]

Thank you very much for the reply NoelDP,

Sorry I didn't include the complete directory, I thought only the CBS.log was needed. I have followed the steps of the instructions page and attached the right files, CBS.zip and windowsupdate.log.

Thank you very much!

Javier

 

[NoelDP]

CheckSUR is clear.
The Windowsupdate.log is a bit of a mess
The SFC scan showed no problems.

There are some interesting errors in the background CBS data...

Please open an Elevated Command Prompt, and run the following commands...

REG QUERY HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{1c95126e-7eea-49a9-a3fe-a378b03ddb4d}
REG QUERY HKLM\SYSTEM\CurrentControlSet\services\eventlog\System\Microsoft-Windows-DNS-Client
 
.

Post the results


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[jyck]

thanks for your analysis, I have run the commands you mentioned and this is the result:

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{1c95126e-7eea-49a9-a3fe-a378b03ddb4d}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{1c95126e-7eea-49a9-a3fe-a378b03ddb4d}
    Enabled    REG_DWORD    0x1
    EnableLevel    REG_DWORD    0x0
    LoggerName    REG_SZ    EventLog-System
    MatchAnyKeyword    REG_QWORD    0x4000000000000000
    MatchAllKeyword    REG_QWORD    0x0
    EnableProperty    REG_DWORD    0x1
    Status    REG_DWORD    0x0


C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\eventlog\System\Microsoft-Windows-DNS-Client

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\Microsoft-Windows-DNS-Client
    ProviderGuid    REG_SZ    {1c95126e-7eea-49a9-a3fe-a378b03ddb4d}
    EventMessageFile    REG_EXPAND_SZ    %SystemRoot%\system32\dnsapi.dll

Thanks

 

[NoelDP]

That looks normal - I admit to being stumped here, so I'm going to have to ask around and see if anyone has any ideas.

 

[jyck]

Thanks NoelDP, I am a bit like you, tried so may things but I don´t get this to be sorted out...

 

[NoelDP]

This is the response I got from my guru...

This looks to be a service problem - in both senses of the word (system and COM).

Get him to run this: http://www.thewindowsclub.com/repair-fix-windows-updates-with-fix-wu-utility
and then from an ADMIN cmd (must be run as admin...), type in:


regsvr32 wucltux.dll
regsvr32 wuwebv.dll
regsvr32 wups2.dll



All should succeed, and if they don't, that needs investigating. [These are three important .dlls not included in the tool because they're for the most part too new. wups2.dll is particularly important on this machine].

 

[jyck]

Thanks NoelDP,

I have run the FixWu app and the regsvr32 commands but the problem is still there . I will run this afternoon again the sfc and readiness tool and I´ll provide the CBS folder maybe something was fixing and we have another issue...

 

[NoelDP]

OK - when you get back to it...

Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

 

[jyck]

Hi, I have attached the CBS folder and Windowsupdate.log after I tried the FixWU solution, and below is the output of Farbar Service Scanner tool:

Farbar Service Scanner Version: 17-01-2015
Ran by Administrador (administrator) on 25-02-2015 at 22:41:18
Running from "C:\Users\Administrador.CONTABILIDAD-PC\Downloads"
Microsoft Windows 7 Enterprise  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

Hope you are able to find something...

Thanks!