1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows Vista Latest Vista Updates Won't Install (error codes: 8007371C and 800703F9)

Discussion in 'Legacy Windows' started by oserdavid, 2010/10/17.

  1. 2010/10/17
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Running Windows Vista Business SP2 - fully updated until now. Good antivirus and anti malware programs fully up to date (ESET Smart Security, Malwarebytes (paid)).

    I've tried everything but the latest updates won't install.
    I've run the MS Fixit tool, normally, then aggressively.
    I've tried to install the recent recommended 'Readyness' tool (this hotfix won't install either).
    I've run chkdsk /f - no issues found.
    I've run sfc /scannnow - it finds errors it cannot fix - but I suspect this owes something to the fact that I should have slipstreamed SP2 into my i386 folder (if I recall correctly from Win 98 problems waybackwhen) - but I cannot do that because I cannot now find the Windows Repair disk that came with my computer a few years back (the full Windows Vista disk was never supplied, though I've got the key to my OS via Belarc Advisor).
    I've tried installing from a 'clean boot' (you cannot install from Safe Mode). No luck.
    I've tried downloading the updates individually, I've tried downloading them manually.
    I thought I may have found the solution when I discovered that under Computer, Services, the Windows Installation Service was stopped. So I set it to automatic and restarted it. Nothing.

    In the meantime I've decided to hide the updates, since that stops the useless nagging from Windows and also from my antivirus.

    Because my computer is otherwise working perfectly (almost - apart from HP all-in-one printer/scanner stuff - which I've found a workaround for) I'd be reluctant to do a clean reinstall of the OS - even if I could find the disk.

    Any gurus out there got any other bright ideas that I haven't tried? :mad:
     
  2. 2010/10/17
    markmadras

    markmadras Banned

    Joined:
    2010/08/23
    Messages:
    1,529
    Likes Received:
    105
    I found this guide in another forum which may be worth a try. Let us know how you get on.



     
    oserdavid likes this.

  3. to hide this advert.

  4. 2010/10/17
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
  5. 2010/10/17
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thanks markmadras - there was not an "Automatic Updates" service and Background Intelligent Transfer Service was already running. But I did turn it from Automatic (Delayed) to Automatic and then restarted it. At the same time, I (re)found the Windows Installer Service, which was stopped, although on Automatic (delayed), so I restarted that. Renamed the recommended folder to .old. Didn't work I'm afraid. This time I got an immediate negative response to all the updates trying to update, rather than the original 'some installed, some failed, now please restart - upon which the successful ones do not 'configure' correctly' so ultimately all fail. I paraphrase, but you get my drift.

    Thanks Arie - that would be great, but as I have found a number of times, the System Update Readiness Tool also fails to install!!

    Thank you both once again for your efforts.
     
  6. 2010/10/17
    markmadras

    markmadras Banned

    Joined:
    2010/08/23
    Messages:
    1,529
    Likes Received:
    105
    oserdavid likes this.
  7. 2010/10/17
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    No, it is not. That's not a Vista Service.
     
    Arie,
    #6
  8. 2010/10/17
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    oserdavid,

    Please post the last 50-70 lines from the WindowsUpdate.log here.

    Type %windir%\WindowsUpdate.log in Vista's Start Search box & press Enter
     
    Arie,
    #7
    oserdavid likes this.
  9. 2010/10/17
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Ummm... You asked for it Arie.

    Scratch that - I think I should give you the last 70 lines after a failed update attempt ... in a moment, sorry!!
     
    Last edited: 2010/10/17
  10. 2010/10/17
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Sorry about that false start. Here I tried updating again, was told 3 of the udates took but 5 failed, please restart. Restarted...Configuring Updates, do not shut down... Shutting down... RESTARTS ... Configuring Updates Stage 1 of 3 -0% (Never moves off 0%) Configuring Updates Stage 3 of 3 - 0% (did I miss 2 of 3?) Never moves off 0%.... Configuring Updates... Welcome.

    Turns out that none of the updates took - all failed.

    Here's the WindowsUpdate log (last 70 lines):

    2010-10-17 19:46:59:289 1284 121c Service *************
    2010-10-17 19:53:22:846 1304 d94 Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0100) ===========
    2010-10-17 19:53:22:956 1304 d94 Misc = Process: C:\Windows\system32\svchost.exe
    2010-10-17 19:53:23:076 1304 d94 Misc = Module: c:\windows\system32\wuaueng.dll
    2010-10-17 19:53:22:846 1304 d94 Service *************
    2010-10-17 19:53:25:001 1304 d94 Service ** START ** Service: Service startup
    2010-10-17 19:53:27:006 1304 d94 Service *********
    2010-10-17 19:53:45:436 1304 d94 Agent * WU client version 7.4.7600.226
    2010-10-17 19:53:45:871 1304 d94 Agent * Base directory: C:\Windows\SoftwareDistribution
    2010-10-17 19:53:46:001 1304 d94 Agent * Access type: No proxy
    2010-10-17 19:53:46:216 1304 d94 Agent * Network state: Connected
    2010-10-17 19:54:47:852 1304 d94 Report CWERReporter::Init succeeded
    2010-10-17 19:54:47:852 1304 d94 Agent *********** Agent: Initializing Windows Update Agent ***********
    2010-10-17 19:54:47:853 1304 d94 Agent *********** Agent: Initializing global settings cache ***********
    2010-10-17 19:54:47:853 1304 d94 Agent * WSUS server: <NULL>
    2010-10-17 19:54:47:853 1304 d94 Agent * WSUS status server: <NULL>
    2010-10-17 19:54:47:853 1304 d94 Agent * Target group: (Unassigned Computers)
    2010-10-17 19:54:47:853 1304 d94 Agent * Windows Update access disabled: No
    2010-10-17 19:54:47:909 1304 d94 DnldMgr Download manager restoring 0 downloads
    2010-10-17 19:54:48:031 1304 d94 Agent Attempt 0 to obtain post-reboot results.
    2010-10-17 19:54:48:214 1304 d94 Handler Post-reboot status for package Package_for_KB2296011~31bf3856ad364e35~x86~~6.0.1.3: 0x800703f9.
    2010-10-17 19:54:48:214 1304 d94 Handler WARNING: Got extended error: "POQ Operation MountSchemaHive "
    2010-10-17 19:54:48:434 1304 d94 Handler Post-reboot status for package Package_for_KB2281679~31bf3856ad364e35~x86~~6.0.1.0: 0x800703f9.
    2010-10-17 19:54:48:434 1304 d94 Handler WARNING: Got extended error: "POQ Operation MountSchemaHive "
    2010-10-17 19:54:48:528 1304 d94 Handler Post-reboot status for package Package_for_KB981957~31bf3856ad364e35~x86~~6.0.1.1: 0x800703f9.
    2010-10-17 19:54:48:528 1304 d94 Handler WARNING: Got extended error: "POQ Operation MountSchemaHive "
    2010-10-17 19:54:49:562 1304 d94 Report *********** Report: Initializing static reporting data ***********
    2010-10-17 19:54:49:563 1304 d94 Report * OS Version = 6.0.6002.2.0.65792
    2010-10-17 19:54:49:563 1304 d94 Report * OS Product Type = 0x00000006
    2010-10-17 19:54:49:723 1304 d94 Report * Computer Brand = TOSHIBA
    2010-10-17 19:54:49:723 1304 d94 Report * Computer Model = Satellite Pro P200
    2010-10-17 19:54:49:730 1304 d94 Report * Bios Revision = V2.50
    2010-10-17 19:54:49:730 1304 d94 Report * Bios Name = Ver 1.00PARTTBL
    2010-10-17 19:54:49:730 1304 d94 Report * Bios Release Date = 2008-06-11T00:00:00
    2010-10-17 19:54:49:730 1304 d94 Report * Locale ID = 2057
    2010-10-17 19:54:50:816 1304 d94 AU ########### AU: Initializing Automatic Updates ###########
    2010-10-17 19:54:50:901 1304 d94 AU # Approval type: Pre-install notify (User preference)
    2010-10-17 19:54:50:901 1304 d94 AU # Auto-install minor updates: No (User preference)
    2010-10-17 19:54:50:901 1304 d94 AU # Will interact with non-admins (Non-admins are elevated (User preference))
    2010-10-17 19:54:51:842 1304 d94 AU Initializing featured updates
    2010-10-17 19:54:51:842 1304 d94 AU Found 0 cached featured updates
    2010-10-17 19:54:51:844 1304 d94 AU Obtained Post reboot hr from Agent:800703f9
    2010-10-17 19:54:51:844 1304 d94 AU WARNING: Post-reboot install failure, error = 0x800703F9
    2010-10-17 19:54:51:844 1304 d94 AU AU setting pending client directive to 'Forced Reboot'
    2010-10-17 19:54:51:875 1304 d94 AU Triggering Offline detection (non-interactive)
    2010-10-17 19:54:51:894 1304 d94 AU AU finished delayed initialization
    2010-10-17 19:54:51:895 1304 d94 AU #############
    2010-10-17 19:54:51:895 1304 d94 AU ## START ## AU: Search for updates
    2010-10-17 19:54:51:895 1304 d94 AU #########
    2010-10-17 19:54:52:151 1304 d94 AU <<## SUBMITTED ## AU: Search for updates [CallId = {5DF8C5D5-08A9-405E-8BB4-DFE75600C894}]
    2010-10-17 19:54:54:384 1304 1198 Agent *************
    2010-10-17 19:54:54:384 1304 1198 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-10-17 19:54:54:384 1304 1198 Agent *********
    2010-10-17 19:54:54:384 1304 1198 Agent * Online = No; Ignore download priority = No
    2010-10-17 19:54:54:384 1304 1198 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1 "
    2010-10-17 19:54:54:384 1304 1198 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
    2010-10-17 19:54:54:384 1304 1198 Agent * Search Scope = {Machine}
    2010-10-17 19:55:06:998 1304 d94 AU Launched new AU client for directive 'Forced Reboot', session id = 0x1
    2010-10-17 19:55:09:718 4676 1488 Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0100) ===========
    2010-10-17 19:55:09:718 4676 1488 Misc = Process: C:\Windows\system32\wuauclt.exe
    2010-10-17 19:55:09:713 4676 1488 AUClnt Launched Client UI process
    2010-10-17 19:55:10:335 4676 1488 Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0100) ===========
    2010-10-17 19:55:10:335 4676 1488 Misc = Process: C:\Windows\system32\wuauclt.exe
    2010-10-17 19:55:10:336 4676 1488 Misc = Module: C:\Windows\system32\wucltux.dll
    2010-10-17 19:55:10:335 4676 1488 CltUI AU client got new directive = 'Forced Reboot', serviceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0
    2010-10-17 19:55:10:395 1304 980 AU Triggering AU detection through DetectNow API
    2010-10-17 19:55:10:395 1304 980 AU Will do the detection after current detection completes
    2010-10-17 19:55:15:326 1304 980 AU No featured updates notifications to show
    2010-10-17 19:55:15:338 4676 1488 CltUI AU client got new directive = 'Shutdown', serviceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0
    2010-10-17 19:55:15:395 1304 d94 AU AU received handle event

    Go figure... (that's me -not the log!)
    Best
    David
     
  11. 2010/10/17
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    I'd start by resetting Windows Update:


    1. Click Start, and in the Search box on the start menu, type CMD, then press Ctrl+Shift+Enter (this will get you an elevation prompt for an Administrator command prompt)
    2. At the command prompt, type net stop wuauserv, then press Enter
    3. Type rmdir /s %windir%\softwaredistribution\DataStore, then press Enter. Type Y to acknowledge the command.
    4. Run Regedit (Start > Run, type regedit and press Enter)
    5. Go to HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WindowsUpdate. Right-click on WindowsUpdate in the tree and choose Delete (confirm deletion). Close Regedit.
    6. At the command prompt, type net start wuauserv, press Enter and close the command prompt.
    7. Download & Install the latest Windows Update Agent*
    8. Force a Windows Update detection and see if that works.

    *) If you receive a message stating the Update Agent is already installed follow these extra steps:

    1. in the Start Search box type run and click the run at the top of the Start menu.
    2. Navigate to where you saved WindowsUpdateAgent30-x86.exe & click it one time
    3. Click on the Open button
    4. On the Open line, go to the end of the command. After the last quotation mark type the following /wuforce
    5. Click OK and the Update Agent should install

    After you've done this, if you are still having problems, post again some 50 lines from the WindowsUpdate.log
     
    oserdavid likes this.
  12. 2010/10/17
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thank you so much for your efforts Arie - but it didn't work. Instructions 1-7 progressed without a hitch. I forced Windows Update detection (turning on Automatic Updates, as the Windows Update dialog box requested). Maybe I should have restarted the computer after instruction 6 or 7?

    Of the 8 updates I selected (I didn't need the one that promised a choice of browser! I've used Firefox for years...) 3 claimed to have been successfully installed, and 5 failed. But on restart, it appears that none were 'configured' correctly, so, in the end - as before - all failed.

    Here, for what it is worth, are the last 70 lines of the WindowsUpdate log:

    2010-10-18 00:37:07:761 1304 e3c AU No featured updates notifications to show
    2010-10-18 00:37:07:764 1304 e3c AU UpdateDownloadProperties: 0 download(s) are still in progress.
    2010-10-18 00:37:07:765 1304 e3c AU Piggybacking on an AU detection already in progress
    2010-10-18 00:37:07:766 1304 e3c AU AU setting pending client directive to 'Reboot Pending'
    2010-10-18 00:37:07:768 1304 e3c AU Changing existing AU client directive from 'Progress Ux' to 'Reboot Pending', session id = 0x1
    2010-10-18 00:37:07:780 5768 119c CltUI AU client got new directive = 'Reboot Pending', serviceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, return = 0
    2010-10-18 00:37:13:702 3956 147c Misc WARNING: SUS Client is rebooting system.
    2010-10-18 00:37:14:368 1304 13c4 AU AU received handle event
    2010-10-18 00:37:22:769 1304 13c4 AU WARNING: AU found no suitable session to launch client in
    2010-10-18 00:37:23:321 1304 13c4 Shutdwn user declined update at shutdown
    2010-10-18 00:37:23:322 1304 13c4 AU AU initiates service shutdown
    2010-10-18 00:37:23:323 1304 13c4 AU ########### AU: Uninitializing Automatic Updates ###########
    2010-10-18 00:37:31:612 1304 e74 Agent * WARNING: Exit code = 0x8024000B
    2010-10-18 00:37:31:612 1304 e74 Agent *********
    2010-10-18 00:37:31:612 1304 e74 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-10-18 00:37:31:612 1304 e74 Agent *************
    2010-10-18 00:37:31:612 1304 e74 Agent WARNING: WU client failed Searching for update with error 0x8024000b
    2010-10-18 00:37:31:626 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:627 1304 13c4 Report REPORT EVENT: {B951C3C1-D682-4A8B-A28F-98B2DF71F88E} 2010-10-18 00:29:11:696+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011)
    2010-10-18 00:37:31:627 1304 13c4 Report REPORT EVENT: {DFF186F8-2F10-4C01-8730-C4801057E6CE} 2010-10-18 00:29:11:757+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Microsoft Browser Choice Screen Update for EEA Users of Windows Vista (KB976002)
    2010-10-18 00:37:31:627 1304 13c4 Report REPORT EVENT: {BF24B227-B6DA-45FF-8DE8-5FB9C50689CC} 2010-10-18 00:29:14:358+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Microsoft Browser Choice Screen Update for EEA Users of Windows Vista (KB976002) - Security Update for Windows Vista (KB2281679)
    2010-10-18 00:37:31:627 1304 13c4 Report REPORT EVENT: {1E1A133E-8826-47B1-9F11-3F05372BAAE0} 2010-10-18 00:29:16:405+0100 1 185 101 {53C2EAA9-0B55-4780-9A4B-DCE4EB9821BA} 102 0 AutomaticUpdates Success Content Install Hide update: user hid one update.
    2010-10-18 00:37:31:628 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:629 1304 13c4 Report REPORT EVENT: {E47D27D0-71BE-45DF-9546-1AD8A1C6D86C} 2010-10-18 00:29:17:972+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Microsoft Browser Choice Screen Update for EEA Users of Windows Vista (KB976002) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957)
    2010-10-18 00:37:31:629 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:629 1304 13c4 Report REPORT EVENT: {FEC13A50-F770-4411-9A11-01E366B23639} 2010-10-18 00:29:24:651+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Microsoft Browser Choice Screen Update for EEA Users of Windows Vista (KB976002) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957) - Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131)
    2010-10-18 00:37:31:629 1304 13c4 Report REPORT EVENT: {75EE6315-96F6-4664-A8CA-8FFD7B5CF873} 2010-10-18 00:29:26:653+0100 1 185 101 {A321B86A-8DC7-4620-A15A-D9B134E92D63} 105 0 AutomaticUpdates Success Content Install Hide update: user hid one update.
    2010-10-18 00:37:31:629 1304 13c4 Report REPORT EVENT: {ADEF532E-4568-4EBD-8C53-144C4D39D131} 2010-10-18 00:29:28:248+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957) - Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131) - Security Update for Windows Vista (KB979687)
    2010-10-18 00:37:31:630 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:630 1304 13c4 Report REPORT EVENT: {7D7F5311-0294-4DCE-B577-AE39D6335B89} 2010-10-18 00:29:31:065+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957) - Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131) - Security Update for Windows Vista (KB979687) - Security Update for Windows Vista (KB2207566)
    2010-10-18 00:37:31:630 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:630 1304 13c4 Report REPORT EVENT: {F3D530D5-ACCD-4A12-AE5A-5D737FC8ABAB} 2010-10-18 00:29:59:543+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957) - Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131) - Security Update for Windows Vista (KB979687) - Security Update for Windows Vista (KB2207566) - Update for Windows Vista (KB2345886)
    2010-10-18 00:37:31:630 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:630 1304 13c4 Report REPORT EVENT: {71A461F9-D417-436C-9EEA-45D1BB9DCC2B} 2010-10-18 00:30:24:670+0100 1 188 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on ‎18 ‎October ‎2010 at 03:00: - Security Update for Windows Vista (KB2296011) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957) - Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131) - Security Update for Windows Vista (KB979687) - Security Update for Windows Vista (KB2207566) - Update for Windows Vista (KB2345886) - Security Update for Windows Vista (KB2378111)
    2010-10-18 00:37:31:631 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:631 1304 13c4 Report REPORT EVENT: {4F915A30-D49C-401C-917F-3A83C3D23A13} 2010-10-18 00:32:20:083+0100 1 182 101 {60C305B7-99A3-48B1-988F-B5FEC1122D20} 103 8007371c AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x8007371c: Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131).
    2010-10-18 00:37:31:645 1304 13c4 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-10-18 00:37:31:645 1304 13c4 Report WER Report sent: 7.4.7600.226 0x8007371c 60C305B7-99A3-48B1-988F-B5FEC1122D20 Install 101 Unmanaged
    2010-10-18 00:37:31:645 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:646 1304 13c4 Report REPORT EVENT: {948C0D32-871F-4A12-95EB-E721289E43D1} 2010-10-18 00:33:21:824+0100 1 182 101 {16631ACC-E50B-4964-9D4B-F768055270F7} 103 8007371c AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x8007371c: Security Update for Windows Vista (KB979687).
    2010-10-18 00:37:31:710 1304 13c4 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-10-18 00:37:31:710 1304 13c4 Report WER Report sent: 7.4.7600.226 0x8007371c 16631ACC-E50B-4964-9D4B-F768055270F7 Install 101 Unmanaged
    2010-10-18 00:37:31:710 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:710 1304 13c4 Report REPORT EVENT: {098B072B-DFE5-4FBA-8F3D-09D3BF67E99A} 2010-10-18 00:34:17:748+0100 1 182 101 {8AA105FA-5D49-45CF-8999-0B179CE42DE1} 101 8007371c AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x8007371c: Security Update for Windows Vista (KB2207566).
    2010-10-18 00:37:31:720 1304 13c4 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-10-18 00:37:31:720 1304 13c4 Report WER Report sent: 7.4.7600.226 0x8007371c 8AA105FA-5D49-45CF-8999-0B179CE42DE1 Install 101 Unmanaged
    2010-10-18 00:37:31:720 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:720 1304 13c4 Report REPORT EVENT: {28155A58-0FEC-4ECE-96D3-804CDD068B7F} 2010-10-18 00:35:45:911+0100 1 182 101 {BEC4CDFE-9F15-4EF2-8317-95C6DE018424} 101 8007371c AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x8007371c: Update for Windows Vista (KB2345886).
    2010-10-18 00:37:31:742 1304 13c4 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-10-18 00:37:31:742 1304 13c4 Report WER Report sent: 7.4.7600.226 0x8007371c BEC4CDFE-9F15-4EF2-8317-95C6DE018424 Install 101 Unmanaged
    2010-10-18 00:37:31:742 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:742 1304 13c4 Report REPORT EVENT: {C20E1BAE-643C-4996-817E-4B06F4BEEC67} 2010-10-18 00:37:05:727+0100 1 182 101 {B321FBFF-272A-4FAB-AE38-8D88C2FA7C7B} 104 8007371c AutomaticUpdates Failure Content Install Installation Failure: Windows failed to install the following update with error 0x8007371c: Security Update for Windows Vista (KB2378111).
    2010-10-18 00:37:31:743 1304 13c4 Report REPORT EVENT: {572FE1B0-9FAA-4A58-BB63-28F39315EF9A} 2010-10-18 00:37:06:014+0100 1 193 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Restart Required: To complete the installation of the following updates, the computer must be restarted. Until this computer has been restarted, Windows cannot search for or download new updates: - Security Update for Windows Vista (KB2296011) - Security Update for Windows Vista (KB2281679) - Security Update for Windows Vista (KB981957)
    2010-10-18 00:37:31:762 1304 13c4 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2010-10-18 00:37:31:762 1304 13c4 Report WER Report sent: 7.4.7600.226 0x8007371c B321FBFF-272A-4FAB-AE38-8D88C2FA7C7B Install 101 Unmanaged
    2010-10-18 00:37:31:763 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:763 1304 13c4 Report CWERReporter finishing event handling. (00000000)
    2010-10-18 00:37:31:860 1304 13c4 Service *********
    2010-10-18 00:37:31:860 1304 13c4 Service ** END ** Service: Service exit [Exit code = 0x240001]
    2010-10-18 00:37:31:860 1304 13c4 Service *************
    2010-10-18 00:43:34:710 1284 151c Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0100) ===========
    2010-10-18 00:43:34:810 1284 151c Misc = Process: C:\Windows\system32\svchost.exe
    2010-10-18 00:43:35:061 1284 151c Misc = Module: c:\windows\system32\wuaueng.dll
    2010-10-18 00:43:34:710 1284 151c Service *************
    2010-10-18 00:43:37:446 1284 151c Service ** START ** Service: Service startup
    2010-10-18 00:43:37:704 1284 151c Service *********
    2010-10-18 00:43:39:381 1284 151c Agent * WU client version 7.4.7600.226
    2010-10-18 00:43:39:439 1284 151c Agent * Base directory: C:\Windows\SoftwareDistribution
    2010-10-18 00:43:40:163 1284 151c Agent * Access type: No proxy
    2010-10-18 00:43:40:281 1284 151c Agent * Network state: Connected
    :confused:
     
  13. 2010/10/18
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    OK, this doesn't look too good.

    Before we really kill this thing, let's look for Malware:

    Read this post, then post the requested log(s) in the Malware and Virus Removal forum.
     
    oserdavid likes this.
  14. 2010/10/18
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thanks very much Arie. I have done as you requested, though the tool produced one very very long log in Attach.txt

    Regards
    David
     
  15. 2010/10/20
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thanks Arie - I did so, received confirmation of infection, downloaded some stuff, performed a few actions, and have now been given the all-clear.

    Unfortunately, I still cannot update my Vista Business SP2 with the latest updates. Could we have been barking up the wrong tree all along?
     
  16. 2010/10/20
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    No. Your system was infected. Now that's out of the way, post a new selection from the WindowsUpdate.log
     
  17. 2010/10/20
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thanks Arie...

    2010-10-20 08:04:34:251 1296 1058 Agent *************
    2010-10-20 08:04:34:251 1296 1058 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-10-20 08:04:34:251 1296 1058 Agent *********
    2010-10-20 08:04:34:251 1296 1058 Agent * Online = No; Ignore download priority = No
    2010-10-20 08:04:34:251 1296 1058 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1 "
    2010-10-20 08:04:34:251 1296 1058 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
    2010-10-20 08:04:34:251 1296 1058 Agent * Search Scope = {Machine}
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {A321B86A-8DC7-4620-A15A-D9B134E92D63}.105 to search result
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {53C2EAA9-0B55-4780-9A4B-DCE4EB9821BA}.102 to search result
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {16631ACC-E50B-4964-9D4B-F768055270F7}.103 to search result
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {C0A1EE10-DB85-4B04-BEAF-37F4FFC67A4A}.101 to search result
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {BEC4CDFE-9F15-4EF2-8317-95C6DE018424}.101 to search result
    2010-10-20 08:05:04:820 1296 1058 Agent * Added update {60C305B7-99A3-48B1-988F-B5FEC1122D20}.103 to search result
    2010-10-20 08:05:04:821 1296 1058 Agent * Added update {8AA105FA-5D49-45CF-8999-0B179CE42DE1}.101 to search result
    2010-10-20 08:05:04:821 1296 1058 Agent * Added update {B321FBFF-272A-4FAB-AE38-8D88C2FA7C7B}.104 to search result
    2010-10-20 08:05:04:821 1296 1058 Agent * Added update {687BC876-8226-4C27-89FF-1030E090542D}.103 to search result
    2010-10-20 08:05:04:821 1296 1058 Agent * Added update {3A9FB991-CFE4-46DE-B87B-FA533B3325B1}.102 to search result
    2010-10-20 08:05:04:821 1296 1058 Agent * Found 10 updates and 17 categories in search; evaluated appl. rules of 499 out of 908 deployed entities
    2010-10-20 08:05:04:934 1296 1058 Agent *********
    2010-10-20 08:05:04:934 1296 1058 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-10-20 08:05:04:934 1296 1058 Agent *************
    2010-10-20 08:05:04:944 1296 17d0 AU >>## RESUMED ## AU: Search for updates [CallId = {DBD71E51-3FAA-4FB8-BD06-21786E52583C}]
    2010-10-20 08:05:04:944 1296 17d0 AU # 10 updates detected
    2010-10-20 08:05:04:945 1296 17d0 AU #########
    2010-10-20 08:05:04:945 1296 17d0 AU ## END ## AU: Search for updates [CallId = {DBD71E51-3FAA-4FB8-BD06-21786E52583C}]
    2010-10-20 08:05:04:945 1296 17d0 AU #############
    2010-10-20 08:05:04:945 1296 17d0 AU No featured updates notifications to show
    2010-10-20 08:05:04:946 1296 17d0 AU Setting AU scheduled install time to 2010-10-21 02:00:00
    2010-10-20 09:01:25:672 1296 c8c Shutdwn user declined update at shutdown
    2010-10-20 09:01:25:673 1296 c8c AU AU initiates service shutdown
    2010-10-20 09:01:25:673 1296 c8c AU ########### AU: Uninitializing Automatic Updates ###########
    2010-10-20 09:01:26:532 1296 c8c Report CWERReporter finishing event handling. (00000000)
    2010-10-20 09:01:26:684 1296 c8c Service *********
    2010-10-20 09:01:26:684 1296 c8c Service ** END ** Service: Service exit [Exit code = 0x240001]
    2010-10-20 09:01:26:684 1296 c8c Service *************
    2010-10-20 09:07:37:408 1292 16c0 Misc =========== Logging initialized (build: 7.4.7600.226, tz: +0100) ===========
    2010-10-20 09:07:37:496 1292 16c0 Misc = Process: C:\Windows\system32\svchost.exe
    2010-10-20 09:07:37:609 1292 16c0 Misc = Module: c:\windows\system32\wuaueng.dll
    2010-10-20 09:07:37:408 1292 16c0 Service *************
    2010-10-20 09:07:38:013 1292 16c0 Service ** START ** Service: Service startup
    2010-10-20 09:07:38:181 1292 16c0 Service *********
    2010-10-20 09:07:38:987 1292 16c0 Agent * WU client version 7.4.7600.226
    2010-10-20 09:07:39:215 1292 16c0 Agent * Base directory: C:\Windows\SoftwareDistribution
    2010-10-20 09:07:39:438 1292 16c0 Agent * Access type: No proxy
    2010-10-20 09:07:39:828 1292 16c0 Agent * Network state: Connected
    2010-10-20 09:08:27:312 1292 16c0 Report CWERReporter::Init succeeded
    2010-10-20 09:08:27:312 1292 16c0 Agent *********** Agent: Initializing Windows Update Agent ***********
    2010-10-20 09:08:27:312 1292 16c0 Agent *********** Agent: Initializing global settings cache ***********
    2010-10-20 09:08:27:313 1292 16c0 Agent * WSUS server: <NULL>
    2010-10-20 09:08:27:313 1292 16c0 Agent * WSUS status server: <NULL>
    2010-10-20 09:08:27:313 1292 16c0 Agent * Target group: (Unassigned Computers)
    2010-10-20 09:08:27:313 1292 16c0 Agent * Windows Update access disabled: No
    2010-10-20 09:08:27:354 1292 16c0 DnldMgr Download manager restoring 0 downloads
    2010-10-20 09:08:27:367 1292 16c0 AU ########### AU: Initializing Automatic Updates ###########
    2010-10-20 09:08:27:369 1292 16c0 AU # Approval type: Scheduled (User preference)
    2010-10-20 09:08:27:369 1292 16c0 AU # Scheduled install day/time: Every day at 3:00
    2010-10-20 09:08:27:369 1292 16c0 AU # Auto-install minor updates: Yes (User preference)
    2010-10-20 09:08:27:369 1292 16c0 AU # Will interact with non-admins (Non-admins are elevated (User preference))
    2010-10-20 09:08:27:630 1292 16c0 AU Setting AU scheduled install time to 2010-10-21 02:00:00
    2010-10-20 09:08:27:630 1292 16c0 AU Initializing featured updates
    2010-10-20 09:08:27:630 1292 16c0 AU Found 0 cached featured updates
    2010-10-20 09:08:27:645 1292 16c0 AU AU finished delayed initialization
    2010-10-20 09:08:28:396 1292 16c0 Report *********** Report: Initializing static reporting data ***********
    2010-10-20 09:08:28:396 1292 16c0 Report * OS Version = 6.0.6002.2.0.65792
    2010-10-20 09:08:28:396 1292 16c0 Report * OS Product Type = 0x00000006
    2010-10-20 09:08:28:524 1292 16c0 Report * Computer Brand = TOSHIBA
    2010-10-20 09:08:28:524 1292 16c0 Report * Computer Model = Satellite Pro P200
    2010-10-20 09:08:28:529 1292 16c0 Report * Bios Revision = V2.50
    2010-10-20 09:08:28:529 1292 16c0 Report * Bios Name = Ver 1.00PARTTBL
    2010-10-20 09:08:28:529 1292 16c0 Report * Bios Release Date = 2008-06-11T00:00:00
    2010-10-20 09:08:28:529 1292 16c0 Report * Locale ID = 2057
    2010-10-20 09:08:33:635 1292 11bc Report CWERReporter finishing event handling. (00000000)
     
  18. 2010/10/20
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
  19. 2010/10/20
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    Thanks Arie - I tried it without much hope as it hadn't helped before (see my first post). As I predicted - it did not help. After running it, I ran Windows Update, tried to install, 3 'took' 5 didn't 'take - and it asked for a restart. I knew that the restart would cause the result of none of the 8 installing - as happened frequently before. Rather foolishly I then ran the Fixit tool again in 'aggressive mode' without having restarted first!! (I'd run it in aggressive mode last time round before I contacted Windows BBS, without any evident harm, though without any evident success either. I belive that some of your earlier advice just replicated what 'aggressive mode' does anyway). As a result of this error on my part my machine went into a loop where it started and then attempted to install 'stage 3' then shut down and then restarted and attempted to... etc, etc, etc. So I went into Safe Mode Boot - but it did exactly the same. Likewise 'Last known good'. Finally, I ran (from F8) System Repair - which failed, but allowed me to restore to an earlier time. I have now restored the system to the state it was in after all Broni's advice had been followed.

    I'm now going to leave it for a couple of weeks because I shall be away from my computer for that period. With your permission I'll start up this thread again on my return.

    In the meantime - many thanks, once again, for your sterling efforts.

    I have to say though that the only thing that is really worrying me is that Malwarebytes reports that it has IP Blocked a potentially dangerous website (different each time) on each restart, and certainly when I am not running any browser... So there may still be malware involved somehow.

    best
    David
     
  20. 2010/10/20
    markmadras

    markmadras Banned

    Joined:
    2010/08/23
    Messages:
    1,529
    Likes Received:
    105
    And why would that happen when only known internet sites, like your AV update check or IE should be making a connection. I would say you still have an infection.

    Malwarebytes is good but I used it and it found nothing, then i tried Microsoft Security Essentials and it found a couple of Trojan viruses.

    It's available from here and is completely free for life.

    http://www.microsoft.com/security_essentials/support.aspx?mkt=en-us

    I could be wrong but no harm will be done using this and it could find the problem.
     
    oserdavid likes this.
  21. 2010/10/20
    oserdavid

    oserdavid Inactive Thread Starter

    Joined:
    2005/08/16
    Messages:
    216
    Likes Received:
    0
    My post thanking you v much seems to have disappeared. So thank you very much. I would add though that HP printing software may be scanning for an update, anything Google (eg Picassa) may be doing so, likewise, who knows what Skype is up to, and then I have Firetrust's Mailwasher Pro (highly recommended spam filtering tool), which may be checking for an update - as well as checking for mail on startup and then at regular intervals, plus I back up on line with Carbonite. I'm pretty sure it is none of these - but there is plenty of traffic in and out all the time...
    Best
    David
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.