Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Security update KB4019263 deployment issue

25 Oct 2017   #1
toky76

64 bit
 
 
Security update KB4019263 deployment issue

Greetings to all Windows Updates lovers,

we are facing issues with deployment of one important Microsoft security patch kb4019263 (windows6.1-kb4019263-x64_d64d8b6f91434754fdd2a552d8732c95a6e64f30.msu) from https://support.microsoft.com/en-us/...date-kb4019263
We solved the sfc /scannow issues however the deployment of the patch stops after reboot and a roll-back is initiated due to a failure.
Here are the logs of the current state of the server: https://www.dropbox.com/sh/diq0i5tzj...iJSg1BR1a?dl=0
There are 2 folders with logs of current state and the other from the state where we tried almost all possible recommendations starting from Clean Boot of the System, resetting Windows Updates components, through Servicing stack update (KB3177467) and Readyness Tool up to SafeMode replacing the above mentioned file however the installer of the patch replaces it back to older version with original permissions.
The main part is about the file C:\Windows\System32\Crypt32.dll and a strange error HR=0x800700ea.

Thank you in advance for any feedback!!!


My System SpecsSystem Spec
.
25 Oct 2017   #2
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi Toky76,

from the SURT report

Checking Package Manifests and Catalogs (w) CBS Catalog Expired 0x800B0101 servicing\Packages\Package_5_for_KB2722913~31bf3856ad364e35~amd64~~6.1.1.0.cat

Basically your getting a permissions problem.

try the fix from this artical.

Can I uninstall hotfixes signed with an expired certificate - Microsoft Community


Roy
My System SpecsSystem Spec
25 Oct 2017   #3
toky76

64 bit
 
 

Hi Roy,
thanks for quick reply but may I ask you what do you mean exactly from provided article?
To remove it from registry, uninstall the expired package and try to install kb4019263?
Thanks!
My System SpecsSystem Spec
.

25 Oct 2017   #4
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi Toky76,
pretty sure the fix was

Try installing KB2749655 (Expired Certificate fix), then applying MS12-054/KB2705219-V2 and MS12-055/KB2731847-V2.



The KB referenced by SURT was one of MS dodgy patches.




Roy
My System SpecsSystem Spec
28 Oct 2017   #5
toky76

64 bit
 
 

Hi,

so I have tried to deploy the patches as recommended but no luck.
KB2731847 failed to deploy cause actually it has been replaced by 2761266 (MS12-075)
What strange it is that CheckSURlog does not show any errors.
So I decided to do the last move that I can do tonight and that was In-Place Upgrade Install (Repair Install) where I have to re-activate the license but no change related to the patch.


If you can help me to solve the issue that has been gaining my attention for a long time I would be very thankful.
Regards,
Peter


Attached Files
File Type: log CheckSUR.log (488 Bytes, 3 views)
My System SpecsSystem Spec
28 Oct 2017   #6
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi toky76,

There are errors in the CBS log.

The main is that it cant find the URL for the certificates chain.

another to try, (doubt if the fixit links will work)
https://support.microsoft.com/en-us/...n-log-in-windo

As for the SURT warning thats standard for a virtual machine.


Roy
My System SpecsSystem Spec
29 Oct 2017   #7
toky76

64 bit
 
 

Hi torchwood,

I agree that SURT error is normal for virtual machines but I am curious about the same error that is in CBS:

2017-10-29 10:36:30, Info CSI 0000005d Begin executing advanced installer phase 38 (0x00000026) index 56 (0x0000000000000038) (sequence 95)
Old component: [ml:308{154},l:306{153}]"Microsoft-Windows-System-Events, Culture=neutral, Version=6.1.7600.16385, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=x86, versionScope=NonSxS"
New component: [ml:308{154},l:306{153}]"Microsoft-Windows-System-Events, Culture=neutral, Version=6.1.7601.23796, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=x86, versionScope=NonSxS"
Install mode: install
Installer ID: {3bb9fd2b-351e-4b9c-b1fc-ed0758805998}
Installer name: [6]"Events"
2017-10-29 10:36:30, Error CSI 00000001 (F) Logged @2017/10/29:09:36:30.315 : [ml:272{136},l:270{135}]"events installer: online=1, install=1, component=x86_Microsoft-Windows-System-Events_31bf3856ad364e35_6.1.7601.23796_neutral_release__."
[gle=0x80004005]
2017-10-29 10:36:30, Error CSI 00000002 (F) Logged @2017/10/29:09:36:30.736 : [ml:166{83},l:164{82}]"WmiCmiPlugin reghelp.cpp(27): InstrumentationManifestAssert failed. HR=0x800700ea."
[gle=0x80004005]
2017-10-29 10:36:30, Error CSI 00000003 (F) Logged @2017/10/29:09:36:30.736 : [ml:166{83},l:164{82}]"WmiCmiPlugin eventloghandler.cpp(192): ProcessEventsInstall failed. HR=0x800700ea."
[gle=0x80004005]
2017-10-29 10:36:30, Error CSI 00000004 (F) Logged @2017/10/29:09:36:30.736 : [ml:170{85},l:168{84}]"WmiCmiPlugin eventloghandler.cpp(212): EventLogHandlerInstall failed. HR=0x800700ea."
[gle=0x80004005]
2017-10-29 10:36:30, Error CSI 00000005@2017/10/29:09:36:30.736 (F) CMIADAPTER: Inner Error Message from AI HRESULT = HRESULT_FROM_WIN32(234)
[
[25]"More data is available.

I also tried to delete the content of CryptnetUrlCache folders but no luck.

Thank you so far for your support!
Regards,
Peter
My System SpecsSystem Spec
29 Oct 2017   #8
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

My System SpecsSystem Spec
29 Oct 2017   #9
toky76

64 bit
 
 

Hey,
so I backed up the registry, removed the one with Microsoft-Windows-Kernel-WDI (2ff3e6b7-cb90-4700-9621-443f389734ed) from WINEVT\Publishers, rebooted the server and tried to deploy that damned patch but not luck.
Looking into the CBS log the error seems to be the same and again the same file
It looks to me that the TrustedInstaller does not have proper rights to process what it needs...
My System SpecsSystem Spec
31 Oct 2017   #10
toky76

64 bit
 
 

Hi,

so the result is that I have reverted back the virtual machine using snapshot and installed KB2749655, KB2705219 and KB2731847 again. The sfc /scannow and CheckSUR logs dont show any error however CBS log still poinst to c:\windows\System32\Crypt32.dll.
I have tried to replace it manually in Safe mode as well as remove it from the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\ but no luck either.
Maybe a good loud question from my mind is which version should I try to replace it? With the original from DVD, newer version (tried but no success) or if any at all cause the critical patch always replace it with Version=6.1.7601.18277 and is trying to install Version=6.1.7601.23769
In-Place Upgrade did solve this issue partially however other issues came up including OS activation etc.
My System SpecsSystem Spec
Reply

 Security update KB4019263 deployment issue




Thread Tools




Similar help and support threads
Thread Forum
May 9, 2017 KB4019263 (Security-only update) Windows 7 SP1
Source: https://support.microsoft.com/en-us/help/4019263 Direct download links for KB4019263 from Microsoft Update Catalog: :ar: Download KB4019263 MSU for Windows 7 32-bit (x86) - 19.2 MB :ar: Download KB4019263 MSU for Windows 7 64-bit (x64) - 30.6 MB
News
Security update issue
Belarc reported: I am unable to follow this to obtain the fixes. Everything I try just explain what the updates are about. Can someone please unscramble this for me so I can implement the updates. Thanks. P.S. Microsoft Update is up to date. It does not resolve this issue.
Windows Updates & Activation
MDT 2010 linked deployment share issue
I have MDT 2010 setup and am in the process of setting up a 2nd share, I created the share with no issues, and created the "link" without issues as weel. I am now trying to get the linked share to replicate, and am getting an error that the "everything" profile is not valid, when it does exist on...
Installation & Setup
Microsoft Deployment Toolkit 2010 Update 1 - Now in Bet
More...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:13.
Twitter Facebook Google+