where does wuausrv keep it's 'rules'?

Windows Update fails with this error:
2006-06-16 09:17:21 440 828 Agent WARNING: Failed to evaluate Installed
rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
0x80041017

Where does it keep these rules? How might I go about deleting that rule?
Near as I can tell it's due to the script having syntax error when looking
through the registry.

It would appear this is the only thing (showing in the log anyway) that's
stopping the update process.

This is a w2ksp4 machine that in all other respects works fine. No viruses
found (grisoft), hijackthis gives it a clean bill, same with spybot. I've
also confirmed the access permissions on the various folders and registry
keys are correct. That and BITS is running just fine, and I've also deleted
the SoftwareDistribution directory and beat the crap out of COM+ configs
just for good measure. there's no firewall on this machine and I've tried
it on both a live static IP and behind a NAT firewall with no change in
results. It's not using a proxy (nor has it ever)

I've done everything short of sacrificing a god-damned goat in the parking
lot.

So let's look at this from another angle, where is the updater getting this
rule and what can I do to hack/patch the damned thing to skip it? As in,
'these are not the registry keys you're looking for, move along...'

Thanks,
-Bill Kearney

Here's a dump of the WindowsUpdate.log file when attempting to use the web
page and the [Custom] option:

2006-06-16 10:30:30 1984 944 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 10:30:30 1984 944 Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 10:30:30 1984 944 Misc = Module: D:\WINNT\system32\wuapi.dll
2006-06-16 10:30:30 1984 944 COMAPI ----------- COMAPI:
IUpdateServiceManager::AddService -----------
2006-06-16 10:30:30 1984 944 COMAPI - ServiceId =
{7971f918-a847-4430-9279-4a52d1efe18d}
2006-06-16 10:30:30 1984 944 COMAPI - AuthorizationCabPath =
D:\WINNT\SoftwareDistribution\AuthCabs\muauth.cab
2006-06-16 10:30:30 440 51c DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-06-16 10:30:30 1984 944 COMAPI - Added service, URL =
http://update.microsoft.com/microsoftupdate/
2006-06-16 10:30:30 1984 944 COMAPI ----------- COMAPI:
IUpdateServiceManager::RegisterServiceWithAU -----------
2006-06-16 10:30:30 1984 944 COMAPI - ServiceId =
{7971f918-a847-4430-9279-4a52d1efe18d}
2006-06-16 10:30:33 1984 944 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 10:30:33 1984 944 Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 10:30:33 1984 944 Misc = Module: D:\WINNT\system32\muweb.dll
2006-06-16 10:30:33 1984 944 Setup *********** Setup: Checking whether
self-update is required ***********
2006-06-16 10:30:33 1984 944 Setup * Inf file:
D:\WINNT\SoftwareDistribution\WebSetup\wusetup.inf
2006-06-16 10:30:33 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 10:30:33 1984 944 Setup * IsUpdateRequired = No
2006-06-16 10:30:34 1984 944 Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 10:30:34 1984 944 Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 10:30:34 1984 944 Misc = Module: D:\WINNT\system32\wuweb.dll
2006-06-16 10:30:34 1984 944 Setup *********** Setup: Checking whether
self-update is required ***********
2006-06-16 10:30:34 1984 944 Setup * Inf file:
D:\WINNT\SoftwareDistribution\WebSetup\wusetup.inf
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup Update NOT required for
D:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 10:30:34 1984 944 Setup * IsUpdateRequired = No
2006-06-16 10:30:47 1984 944 COMAPI -------------
2006-06-16 10:30:47 1984 944 COMAPI -- START -- COMAPI: Search [ClientId =
MicrosoftUpdate]
2006-06-16 10:30:47 1984 944 COMAPI ---------
2006-06-16 10:30:47 1984 944 COMAPI - Online = Yes; Ignore download
priority = No
2006-06-16 10:30:47 1984 944 COMAPI - Criteria = "IsInstalled=0 and
IsHidden=1"
2006-06-16 10:30:47 1984 944 COMAPI - ServiceID =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-06-16 10:30:47 1984 944 COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = MicrosoftUpdate]
2006-06-16 10:30:47 440 708 Agent *************
2006-06-16 10:30:47 440 708 Agent ** START ** Agent: Finding updates
[CallerId = MicrosoftUpdate]
2006-06-16 10:30:47 440 708 Agent *********
2006-06-16 10:31:11 440 708 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-06-16 10:31:11 440 708 PT + ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL =
https://update.microsoft.com/v6/Clie...ce/client.asmx
2006-06-16 10:31:15 440 708 Agent WARNING: Failed to evaluate Installed
rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
0x80041017
2006-06-16 10:32:05 440 708 PT WARNING: ECP: Failed to validate cab file
digest downloaded from
http://www.download.windowsupdate.co...20608f2a35.cab
with error 0x80090006
2006-06-16 10:32:05 440 708 PT WARNING: ECP: This roundtrip contained some
optimized updates which failed. New Update count = 7, Old Count = 30
2006-06-16 10:32:06 440 708 PT WARNING: Sync of Updates: 0x8024402f
2006-06-16 10:32:06 440 708 Agent * WARNING: Failed to synchronize, error
= 0x8024402F
2006-06-16 10:32:06 440 500 AU #############
2006-06-16 10:32:06 440 500 AU ## START ## AU: Search for updates
2006-06-16 10:32:06 440 500 AU #########
2006-06-16 10:32:06 440 500 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {7016054C-70AE-4175-8F7B-63C6BC78A155}]
2006-06-16 10:32:06 440 708 Agent * WARNING: Exit code = 0x8024402F
2006-06-16 10:32:06 440 708 Agent *********
2006-06-16 10:32:06 440 708 Agent ** END ** Agent: Finding updates
[CallerId = MicrosoftUpdate]
2006-06-16 10:32:06 440 708 Agent *************
2006-06-16 10:32:06 440 708 Agent WARNING: WU client failed Searching for
update with error 0x8024402f
2006-06-16 10:32:06 440 708 Agent *************
2006-06-16 10:32:06 440 708 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-06-16 10:32:06 440 708 Agent *********
2006-06-16 10:32:07 1984 7dc COMAPI >>-- RESUMED -- COMAPI: Search
[ClientId = MicrosoftUpdate]
2006-06-16 10:32:07 1984 7dc COMAPI - Updates found = 0
2006-06-16 10:32:07 1984 7dc COMAPI - WARNING: Exit code = 0x00000000,
Result code = 0x8024402F
2006-06-16 10:32:07 1984 7dc COMAPI ---------
2006-06-16 10:32:07 1984 7dc COMAPI -- END -- COMAPI: Search [ClientId =
MicrosoftUpdate]
2006-06-16 10:32:07 1984 7dc COMAPI -------------
2006-06-16 10:32:07 1984 944 COMAPI WARNING: Operation failed due to earlier
error, hr=8024402F
2006-06-16 10:32:07 1984 944 COMAPI FATAL: Unable to complete asynchronous
search. (hr=8024402F)
2006-06-16 10:32:07 440 708 Agent WARNING: Failed to evaluate Installed
rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
0x80041017
2006-06-16 10:32:11 440 708 Agent Update
{BDE8F1C3-65A1-4E50-8214-AC71CAA6FDB0}.102 has no local extended metadata.
Not returning it.
2006-06-16 10:32:11 440 708 Agent Update
{0E540C94-4E77-4D30-A783-1557FB990B27}.106 has no local extended metadata.
Not returning it.
2006-06-16 10:32:11 440 708 Agent Update
{8C7833FB-7645-4E00-A711-763C99C4E007}.100 has no local extended metadata.
Not returning it.
2006-06-16 10:32:11 440 708 Agent * Found 0 updates and 20 categories in
search
2006-06-16 10:32:11 440 708 Agent *********
2006-06-16 10:32:11 440 708 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-06-16 10:32:11 440 708 Agent *************
2006-06-16 10:32:11 440 708 AU >>## RESUMED ## AU: Search for updates
[CallId = {7016054C-70AE-4175-8F7B-63C6BC78A155}]
2006-06-16 10:32:11 440 708 AU # 0 updates detected
2006-06-16 10:32:11 440 708 AU #########
2006-06-16 10:32:11 440 708 AU ## END ## AU: Search for updates [CallId
= {7016054C-70AE-4175-8F7B-63C6BC78A155}]
2006-06-16 10:32:11 440 708 AU #############
2006-06-16 10:32:11 440 408 Report REPORT EVENT:
{AF426126-17D9-4934-B8E2-E0ADF09E2894} 2006-06-16 10:32:06-0400 1 148 101
{00000000-0000-0000-0000-000000000000} 0 8024402f MicrosoftUpdate Failure
Software Synchronization Error: Agent failed detecting with reason:
0x8024402f

> Windows Update fails with this error:
> 2006-06-16 09:17:21 440 828 Agent WARNING: Failed to evaluate Installed
> rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
> 0x80041017

Previously it threw the above error. On a hunch I went slogging through
MDAC. Lo and behold it was somehow crippled at MDAC 2.5 sp3. I got it
upgraded to 2.8 sp1 (w2k box) and it then insisted on throwing an 0x80072f8f
error. I rebooted and, of course, now I'm back to square one with a
0x8024402F error.

Besides the rule error, it looks like it's having some sort problem
validating the cabs. It's throwing an error 0x80090006; but this isn't an
XP box. How does one 'reset' or otherwise purge w2k certificates?

The log now reads:

2006-06-16 15:49:22 532 65c Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 15:49:22 532 65c Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 15:49:22 532 65c Misc = Module: D:\WINNT\system32\wuapi.dll
2006-06-16 15:49:22 532 65c COMAPI ----------- COMAPI:
IUpdateServiceManager::AddService -----------
2006-06-16 15:49:22 532 65c COMAPI - ServiceId =
{7971f918-a847-4430-9279-4a52d1efe18d}
2006-06-16 15:49:22 532 65c COMAPI - AuthorizationCabPath =
D:\WINNT\SoftwareDistribution\AuthCabs\muauth.cab
2006-06-16 15:49:22 1108 738 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-06-16 15:49:22 532 65c COMAPI - Added service, URL =
http://update.microsoft.com/microsoftupdate/
2006-06-16 15:49:22 532 65c COMAPI ----------- COMAPI:
IUpdateServiceManager::RegisterServiceWithAU -----------
2006-06-16 15:49:22 532 65c COMAPI - ServiceId =
{7971f918-a847-4430-9279-4a52d1efe18d}
2006-06-16 15:49:23 532 65c Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 15:49:23 532 65c Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 15:49:23 532 65c Misc = Module: D:\WINNT\system32\muweb.dll
2006-06-16 15:49:23 532 65c Setup *********** Setup: Checking whether
self-update is required ***********
2006-06-16 15:49:23 532 65c Setup * Inf file:
D:\WINNT\SoftwareDistribution\WebSetup\wusetup.inf
2006-06-16 15:49:23 532 65c Setup Update NOT required for
D:\WINNT\system32\wuweb.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 15:49:23 532 65c Setup * IsUpdateRequired = No
2006-06-16 15:49:24 532 65c Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2006-06-16 15:49:24 532 65c Misc = Process: d:\Program Files\Internet
Explorer\iexplore.exe
2006-06-16 15:49:24 532 65c Misc = Module: D:\WINNT\system32\wuweb.dll
2006-06-16 15:49:24 532 65c Setup *********** Setup: Checking whether
self-update is required ***********
2006-06-16 15:49:24 532 65c Setup * Inf file:
D:\WINNT\SoftwareDistribution\WebSetup\wusetup.inf
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\cdm.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\iuengine.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuapi.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuauclt.exe: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuauclt1.exe: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuaucpl.cpl: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuaueng.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wuaueng1.dll: target version = 5.8.0.2469, required
version = 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wucltui.dll: target version = 5.8.0.2469, required version
= 5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wups.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 15:49:24 532 65c Setup Update NOT required for
D:\WINNT\system32\wups2.dll: target version = 5.8.0.2469, required version =
5.8.0.2469
2006-06-16 15:49:24 532 65c Setup * IsUpdateRequired = No
2006-06-16 15:49:27 532 65c COMAPI -------------
2006-06-16 15:49:27 532 65c COMAPI -- START -- COMAPI: Search [ClientId =
MicrosoftUpdate]
2006-06-16 15:49:27 532 65c COMAPI ---------
2006-06-16 15:49:27 532 65c COMAPI - Online = Yes; Ignore download
priority = No
2006-06-16 15:49:27 532 65c COMAPI - Criteria = "IsInstalled=0 and
IsHidden=1"
2006-06-16 15:49:27 532 65c COMAPI - ServiceID =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-06-16 15:49:27 532 65c COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = MicrosoftUpdate]
2006-06-16 15:49:28 1108 774 Agent *************
2006-06-16 15:49:28 1108 774 Agent ** START ** Agent: Finding updates
[CallerId = MicrosoftUpdate]
2006-06-16 15:49:28 1108 774 Agent *********
2006-06-16 15:49:29 1108 774 PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2006-06-16 15:49:29 1108 774 PT + ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL =
https://update.microsoft.com/v6/Clie...ce/client.asmx
2006-06-16 15:49:31 1108 774 Agent WARNING: Failed to evaluate Installed
rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
0x80041017
2006-06-16 15:49:35 1108 774 PT WARNING: ECP: Failed to validate cab file
digest downloaded from
http://www.download.windowsupdate.co...a71a31ff59.cab
with error 0x80090006
2006-06-16 15:49:35 1108 774 PT WARNING: ECP: This roundtrip contained some
optimized updates which failed. New Update count = 28, Old Count = 30
2006-06-16 15:49:35 1108 774 PT WARNING: Sync of Updates: 0x8024402f
2006-06-16 15:49:35 1108 774 Agent * WARNING: Failed to synchronize, error
= 0x8024402F
2006-06-16 15:49:35 1108 458 AU #############
2006-06-16 15:49:35 1108 458 AU ## START ## AU: Search for updates
2006-06-16 15:49:35 1108 458 AU #########
2006-06-16 15:49:35 1108 458 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {485C73ED-5EAF-4FA7-91B4-5864CCC7D478}]
2006-06-16 15:49:35 1108 774 Agent * WARNING: Exit code = 0x8024402F
2006-06-16 15:49:35 1108 774 Agent *********
2006-06-16 15:49:35 1108 774 Agent ** END ** Agent: Finding updates
[CallerId = MicrosoftUpdate]
2006-06-16 15:49:35 1108 774 Agent *************
2006-06-16 15:49:35 1108 774 Agent WARNING: WU client failed Searching for
update with error 0x8024402f
2006-06-16 15:49:35 1108 774 Agent *************
2006-06-16 15:49:35 1108 774 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-06-16 15:49:35 1108 774 Agent *********
2006-06-16 15:49:36 532 808 COMAPI >>-- RESUMED -- COMAPI: Search
[ClientId = MicrosoftUpdate]
2006-06-16 15:49:36 532 808 COMAPI - Updates found = 0
2006-06-16 15:49:36 532 808 COMAPI - WARNING: Exit code = 0x00000000,
Result code = 0x8024402F
2006-06-16 15:49:36 532 808 COMAPI ---------
2006-06-16 15:49:36 532 808 COMAPI -- END -- COMAPI: Search [ClientId =
MicrosoftUpdate]
2006-06-16 15:49:36 532 808 COMAPI -------------
2006-06-16 15:49:36 532 65c COMAPI WARNING: Operation failed due to earlier
error, hr=8024402F
2006-06-16 15:49:36 532 65c COMAPI FATAL: Unable to complete asynchronous
search. (hr=8024402F)
2006-06-16 15:49:36 1108 774 Agent WARNING: Failed to evaluate Installed
rule, updateId = {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error =
0x80041017
2006-06-16 15:49:37 1108 774 Agent * Found 0 updates and 20 categories in
search
2006-06-16 15:49:37 1108 774 Agent *********
2006-06-16 15:49:37 1108 774 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-06-16 15:49:37 1108 774 Agent *************
2006-06-16 15:49:37 1108 774 AU >>## RESUMED ## AU: Search for updates
[CallId = {485C73ED-5EAF-4FA7-91B4-5864CCC7D478}]
2006-06-16 15:49:37 1108 774 AU # 0 updates detected
2006-06-16 15:49:37 1108 774 AU #########
2006-06-16 15:49:37 1108 774 AU ## END ## AU: Search for updates [CallId
= {485C73ED-5EAF-4FA7-91B4-5864CCC7D478}]
2006-06-16 15:49:37 1108 774 AU #############
2006-06-16 15:49:40 1108 774 Report REPORT EVENT:
{2439CBC0-73EE-4E49-BD67-CC5B9FB65EC3} 2006-06-16 15:49:35-0400 1 148 101
{00000000-0000-0000-0000-000000000000} 0 8024402f MicrosoftUpdate Failure
Software Synchronization Error: Agent failed detecting with reason:
0x8024402f