Failed To Install Any Update From Web Only

Hi, got problem installing any updates from win update site.
If I download the updates and install manually, it works.

Running Win 2000 Sp4 with admin authority
Got error "80070005 :wuauclt handler: failed to spawn COM server" from
update log. Tried following links from this news group but no luck.

Please help! Any suggestions greatly appreciated.

Following is portion of the log file.

********
1236 878 Agent ** START ** Agent: Installing updates [CallerId =
MicrosoftUpdate]
1236 878 Agent *********
1236 878 Agent * Updates to install = 1
1236 878 Agent * Title = <NULL>
1236 878 Agent * UpdateId = {5C223736-DE7B-46DC-8630-CA7D2E1DEACA}.100
1236 878 Agent * Bundles 1 updates:
1236 878 Agent * {C748E49D-79E9-4642-B679-A7B4FE7FD60C}.100
1236 878 Agent WARNING: Failed to evaluate Installed rule, updateId =
{ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error = 0x80041017
1236 878 Handler Attempting to create remote handler process as *I
replaced*in session 0
1236 700 Report REPORT EVENT:
{3B8C19F6-3162-4F3F-A4F5-97C663CDD87A} 2005-08-15
00:50:16-0400 1 162 101 {5C223736-DE7B-46DC-8630-CA7D2E1DEACA} 100 0 MicrosoftUpdate Success Content Download Download succeeded.
2228 30c Misc =========== Logging initialized (build: 5.8.0.2469, tz:
-0400) ===========
2228 30c Misc = Process: C:\WINNT\system32\wuauclt.exe
2228 30c AUClnt FATAL: Error: 0x80070005. wuauclt handler: failed to spawn
COM server
1236 878 Handler FATAL: 0x80070005: ERROR: Remote update handler container
process created (PID: 2228), but exited before signaling event
1236 878 Agent * WARNING: Exit code = 0x80070005
1236 878 Agent *********
1236 878 Agent ** END ** Agent: Installing updates [CallerId =
MicrosoftUpdate]
1236 878 Agent *************
1236 878 Agent WARNING: WU client failed installing updates with error
0x80070005
2044 708 COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = MicrosoftUpdate]
2044 708 COMAPI - Install call failed
2044 708 COMAPI - Reboot required = No
2044 708 COMAPI - WARNING: Exit code = 0x80240FFF; Call error code =
0x80070005
2044 708 COMAPI ---------
2044 708 COMAPI -- END -- COMAPI: Install [ClientId = MicrosoftUpdate]
2044 708 COMAPI -------------
2044 428 COMAPI WARNING: Operation failed due to earlier error, hr=80070005

See:


http://support.microsoft.com/default...b;en-us;836926
Updates from the Windows Update Web site are not installed and an "Error
0x80070005: Access is denied" error message is logged to the Windows
Update.log file


This error message may occur if you have insufficient permissions to the
Windows Update registry keys. The WindowsUpdate.log file will also read
errors 0x80070005 and 0x80080005.
http://v5.windowsupdate.microsoft.co...cleid=13&ln=en

(Compliments of MVP TaurArian)
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP

Raymond wrote:
> Hi, got problem installing any updates from win update site.
> If I download the updates and install manually, it works.
>
> Running Win 2000 Sp4 with admin authority
> Got error "80070005 :wuauclt handler: failed to spawn COM server" from
> update log. Tried following links from this news group but no luck.
>
> Please help! Any suggestions greatly appreciated.
>
> Following is portion of the log file.
>
> ********
> 1236 878 Agent ** START ** Agent: Installing updates [CallerId =
> MicrosoftUpdate]
> 1236 878 Agent *********
> 1236 878 Agent * Updates to install = 1
> 1236 878 Agent * Title = <NULL>
> 1236 878 Agent * UpdateId = {5C223736-DE7B-46DC-8630-CA7D2E1DEACA}.100
> 1236 878 Agent * Bundles 1 updates:
> 1236 878 Agent * {C748E49D-79E9-4642-B679-A7B4FE7FD60C}.100
> 1236 878 Agent WARNING: Failed to evaluate Installed rule, updateId =
> {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error = 0x80041017
> 1236 878 Handler Attempting to create remote handler process as *I
> replaced*in session 0
> 1236 700 Report REPORT EVENT:
> {3B8C19F6-3162-4F3F-A4F5-97C663CDD87A} 2005-08-15
> 00:50:16-0400 1 162 101 {5C223736-DE7B-46DC-8630-CA7D2E1DEACA} 100 0
> MicrosoftUpdate Success Content Download Download succeeded. 2228 30c
> Misc =========== Logging initialized (build: 5.8.0.2469, tz: -0400)
> =========== 2228 30c Misc = Process: C:\WINNT\system32\wuauclt.exe
> 2228 30c AUClnt FATAL: Error: 0x80070005. wuauclt handler: failed to spawn
> COM server
> 1236 878 Handler FATAL: 0x80070005: ERROR: Remote update handler container
> process created (PID: 2228), but exited before signaling event
> 1236 878 Agent * WARNING: Exit code = 0x80070005
> 1236 878 Agent *********
> 1236 878 Agent ** END ** Agent: Installing updates [CallerId =
> MicrosoftUpdate]
> 1236 878 Agent *************
> 1236 878 Agent WARNING: WU client failed installing updates with error
> 0x80070005
> 2044 708 COMAPI >>-- RESUMED -- COMAPI: Install [ClientId =
> MicrosoftUpdate] 2044 708 COMAPI - Install call failed
> 2044 708 COMAPI - Reboot required = No
> 2044 708 COMAPI - WARNING: Exit code = 0x80240FFF; Call error code =
> 0x80070005
> 2044 708 COMAPI ---------
> 2044 708 COMAPI -- END -- COMAPI: Install [ClientId = MicrosoftUpdate]
> 2044 708 COMAPI -------------
> 2044 428 COMAPI WARNING: Operation failed due to earlier error,
> hr=80070005

Thanks for the respond PA.

Unfortunately, I have tried the links that you suggested before posting this
thread.
Method 3 and 4 from the top link and the bottom link seems doesn't apply to
win 2000. Do not have the "permission" option in regedit. Did tried
re-registering those dll mentioned. No luck.

Any more suggestion please?

Use regedt32 to change the permissions.

--
Nocturnal


"Raymond" <> wrote in message
news:A8C44F60-5E1B-4360-8954-...
> Thanks for the respond PA.
>
> Unfortunately, I have tried the links that you suggested before posting
> this
> thread.
> Method 3 and 4 from the top link and the bottom link seems doesn't apply
> to
> win 2000. Do not have the "permission" option in regedit. Did tried
> re-registering those dll mentioned. No luck.
>
> Any more suggestion please?
>

Thanks a lot Nocturnal, have permissions access now using regdt32.

Checked all permissions suggested from the link...seems ok. Admin and System
has Full Control and Read permissions.
Admin and System have Full Control and Allow for HKEY_CLASSES_ROOT
I even added Everyone the same (forgot from where I read this).

Still having the same error when installing.
Anymore suggestions?

Thanks

Thank you for your suggestion. The link points to numerous postings. Read
through quite a few of them and I should say the resolution suggestion by PA
earlier, http://support.microsoft.com/default...b;en-us;836926,
covered most of them.

Unfortunately, that doesn't work. Anymore suggestions?
Thanks!

"Raymond" <> wrote in message
news:E2A8C90F-35E5-4E26-B1E9-...
> Hi, got problem installing any updates from win update site.
> If I download the updates and install manually, it works.

By "install manually" I assume you mean via a different download?
What happens if you retry the same install that WU failed on?
E.g. you might be able to reproduce your symptom that way
and if so be able to apply the /verbose command line option on it.

The problem has always been that we don't have sufficient information
about the cause of the failure to really know what to suggest.
And so far, we haven't had anybody who has the problem willing to do
the necessary diagnosis to figure out what the real underlying problem
symptoms are so we can devise a more appropriate repair procedure.


>
> Running Win 2000 Sp4 with admin authority
> Got error "80070005 :wuauclt handler: failed to spawn COM server" from
> update log. Tried following links from this news group but no luck.

http://groups-beta.google.com/groups...t=0&scoring=d&

(Google Groups search for
"failed to spawn COM server" group:microsoft.*
- ordered by date to capture current thinking
)

Agreed. This is different from some of the other 0x80070005 cases
However, at least one user claims that changing permissions solves it:

http://groups-beta.google.com/group/...3d501a93606ea0

(in a thread from the second result page of the above search)


If you don't get anywhere trying to change permissions (e.g. the way that
others have done successfully) I would try adding /verbose to the
command line options of a manual install (as described above)
and see if that gives you any clearer picture of what's wrong.
Note: so far people who have tried this suggestion with me haven't had
much luck finding where the /verbose log is going. In that case I have
suggested that they do a file find (e.g. Win-F) for all files which were
changed on the day of the update and sort that result by Date Modified
(thus sorting the list by timestamp and allowing you to see files listed within
the minutes that the install was active.) Alternatively or in addition, I would
run FileMon filtering on SoftwareDistribution;Update;CatRoot to supplement
(and identify) any logs which the install produces. There is also a verbose
option for the download and install (if done by WU) documented in KB902093.

In order to get the best match for install log records with FileMon trace
entries it is very useful to use FileMon's Clock Time and Milleseconds
options. E.g. provided the FileMon filter includes writes to the install log
you will then see a timestamp down to the millesecond tied to the length
of an install log record. Then it is simply a matter of checking the length
of the records in that context to figure out what the more accurate timestamp
for that install record would be. This is particularly useful if you are doing
concurrent RegMon tracing with the same options set. E.g. then you can
match a context of the FileMon trace with a context of the RegMon trace.

Hopefully a /verbose log would have sufficient context but the FileMon
and RegMon idea is more general and may still be necessary if it turns
out that there is insufficient detail even in the /verbose log.


HTH

Robert Aldwinckle
---


>
> Please help! Any suggestions greatly appreciated.
>
> Following is portion of the log file.
>
> ********
> 1236 878 Agent ** START ** Agent: Installing updates [CallerId =
> MicrosoftUpdate]
> 1236 878 Agent *********
> 1236 878 Agent * Updates to install = 1
> 1236 878 Agent * Title = <NULL>
> 1236 878 Agent * UpdateId = {5C223736-DE7B-46DC-8630-CA7D2E1DEACA}.100
> 1236 878 Agent * Bundles 1 updates:
> 1236 878 Agent * {C748E49D-79E9-4642-B679-A7B4FE7FD60C}.100
> 1236 878 Agent WARNING: Failed to evaluate Installed rule, updateId =
> {ED300F67-421C-4C08-B3BA-F35C55F3B427}.100, error = 0x80041017
> 1236 878 Handler Attempting to create remote handler process as *I
> replaced*in session 0
> 1236 700 Report REPORT EVENT:
> {3B8C19F6-3162-4F3F-A4F5-97C663CDD87A} 2005-08-15
> 00:50:16-0400 1 162 101 {5C223736-DE7B-46DC-8630-CA7D2E1DEACA} 100 0 MicrosoftUpdate Success Content Download Download succeeded.
> 2228 30c Misc =========== Logging initialized (build: 5.8.0.2469, tz:
> -0400) ===========
> 2228 30c Misc = Process: C:\WINNT\system32\wuauclt.exe
> 2228 30c AUClnt FATAL: Error: 0x80070005. wuauclt handler: failed to spawn
> COM server
> 1236 878 Handler FATAL: 0x80070005: ERROR: Remote update handler container
> process created (PID: 2228), but exited before signaling event
> 1236 878 Agent * WARNING: Exit code = 0x80070005
> 1236 878 Agent *********
> 1236 878 Agent ** END ** Agent: Installing updates [CallerId =
> MicrosoftUpdate]
> 1236 878 Agent *************
> 1236 878 Agent WARNING: WU client failed installing updates with error
> 0x80070005
> 2044 708 COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = MicrosoftUpdate]
> 2044 708 COMAPI - Install call failed
> 2044 708 COMAPI - Reboot required = No
> 2044 708 COMAPI - WARNING: Exit code = 0x80240FFF; Call error code =
> 0x80070005
> 2044 708 COMAPI ---------
> 2044 708 COMAPI -- END -- COMAPI: Install [ClientId = MicrosoftUpdate]
> 2044 708 COMAPI -------------
> 2044 428 COMAPI WARNING: Operation failed due to earlier error, hr=80070005

Hi Robert, thanks for your effort trying to help.
By "manual install", I mean save the update from MS download instead of
using Windows Update, then apply it by double clicking on it.

I'm willing to try out the different log method that you suggested but my
knowledge won't allow me. Don't know how to use FileMon and RegMon, not even
the verbose command. After reading KB902093, I think I can trun on verbose
and will post the log details after running the test.

Cannot try from windows update on those that I have already installed since
they removed it from my recommanded update list, but will try on some fresh
ones.

Thanks again for your patience in dealing with me who don't know nothing!

Hi Robert,

Activated the "detailed log" as per KB902093.
Tried updating from WU and view the log file...it was huge!
The last few lines seems the same as before, indicating wuauclt handler:
failed to spawn COM server. The rest....don't understand.....
Following is the portion 1 sec before the error 80070005. Seems like a lot
of errors occured (if whenever EEhndlr means an error). Wonder if I can
border you to take a look....included the time this time which I deleted on
my first post to save some space. Thanks!!

Oops...too long....cut back starting from begining.

2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245847
(updateId = {90B3A471-9AA6-42F2-A7A2-6709AEF03298}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{B344E5BE-1325-4253-98A8-818A2830641A}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{B344E5BE-1325-4253-98A8-818A2830641A}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{B344E5BE-1325-4253-98A8-818A2830641A}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245848
(updateId = {B344E5BE-1325-4253-98A8-818A2830641A}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SYSTEM\WPA\TabletPC, value=Installed, data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 0, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SYSTEM\WPA\MediaCenter, value=Installed, data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 0, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegKeyExists
expression: Key=80000002, Subkey=Software\Microsoft\Active Setup\Installed
Components\{F5E89548-FAC4-40E0-AE9B-6F0334D443F7}
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegKeyExists evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 18 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{5A7091B7-3182-49B7-A33E-CFD7A75DC652}.12, result = 0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegKeyExists
expression: Key=80000002, Subkey=SOFTWARE\Microsoft\Active Setup\Installed
Components\{CC801824-56F4-4B9E-B7FF-14FB33EA9602}
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegKeyExists evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 18 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{5A7091B7-3182-49B7-A33E-CFD7A75DC652}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{5A7091B7-3182-49B7-A33E-CFD7A75DC652}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245849
(updateId = {5A7091B7-3182-49B7-A33E-CFD7A75DC652}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{E9A53564-4F00-4994-8ABE-A0F34FD39450}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{E9A53564-4F00-4994-8ABE-A0F34FD39450}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{E9A53564-4F00-4994-8ABE-A0F34FD39450}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245850
(updateId = {E9A53564-4F00-4994-8ABE-A0F34FD39450}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SYSTEM\WPA\TabletPC, value=Installed, data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 0, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SYSTEM\WPA\MediaCenter, value=Installed, data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 0, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegKeyExists
expression: Key=80000002, Subkey=Software\Microsoft\Active Setup\Installed
Components\{3351022E-A2D8-4B52-B84D-491279866457}
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegKeyExists evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 18 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{9BA1AA36-42D5-487C-BE8E-0AAD08B73A3E}.12, result = 0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegKeyExists
expression: Key=80000002, Subkey=SOFTWARE\Microsoft\Active Setup\Installed
Components\{3A6523A4-E724-4A80-B001-022F9B94965F}
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegKeyExists evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 18 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{9BA1AA36-42D5-487C-BE8E-0AAD08B73A3E}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{9BA1AA36-42D5-487C-BE8E-0AAD08B73A3E}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245851
(updateId = {9BA1AA36-42D5-487C-BE8E-0AAD08B73A3E}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{5FD7DE2D-EA22-41AE-BA8B-F0B035770FAC}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{5FD7DE2D-EA22-41AE-BA8B-F0B035770FAC}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{5FD7DE2D-EA22-41AE-BA8B-F0B035770FAC}.12, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245852
(updateId = {5FD7DE2D-EA22-41AE-BA8B-F0B035770FAC}.12) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegSzToVersion:
Subkey=Software\Microsoft\Internet Explorer, value=Version, version=5.0.3900.0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegSzToVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 24 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{65E7CA9F-324B-49FE-8713-D6FF2FEA5036}.101, result = 0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\Program Files\Outlook Express\MSOE.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\Outlook Express\MSOE.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\Program Files\Outlook Express\MSOE.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\INETCOMM.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\INETCOMM.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\INETCOMM.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{65E7CA9F-324B-49FE-8713-D6FF2FEA5036}.101, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{65E7CA9F-324B-49FE-8713-D6FF2FEA5036}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245906
(updateId = {65E7CA9F-324B-49FE-8713-D6FF2FEA5036}.101) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{762C5D95-00E5-4B50-8759-336D56FDB617}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{762C5D95-00E5-4B50-8759-336D56FDB617}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{762C5D95-00E5-4B50-8759-336D56FDB617}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245912
(updateId = {762C5D95-00E5-4B50-8759-336D56FDB617}.101) is "Installed"
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegSzToVersion:
Subkey=Software\Microsoft\Internet Explorer, value=Version, version=6.0.2900.0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegSzToVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 24 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegSzToVersion:
Subkey=Software\Microsoft\Internet Explorer, value=Version,
version=6.0.2800.1106
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegSzToVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 24 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SOFTWARE\Microsoft\Windows
NT\CurrentVersion\HotFix\KB887797-OE6SP1-20041112.131144, value=Installed,
data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 0, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: CompareRegSzToString:
Subkey=SOFTWARE\Microsoft\Windows\CurrentVersion\I nternet Settings,
value=MinorVersion, data=Q823353
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegSz evaluated to 1, return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 23 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{0A591D73-FE21-492A-94D8-75FA56FBBE27}.101, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\Program Files\Outlook Express\MSOE.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\Outlook Express\MSOE.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\Program Files\Outlook Express\MSOE.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\INETCOMM.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\INETCOMM.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\INETCOMM.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{0A591D73-FE21-492A-94D8-75FA56FBBE27}.101, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{0A591D73-FE21-492A-94D8-75FA56FBBE27}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245932
(updateId = {0A591D73-FE21-492A-94D8-75FA56FBBE27}.101) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{5FF7B228-9C77-4C3C-B60C-E1DDCE9BE22D}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{5FF7B228-9C77-4C3C-B60C-E1DDCE9BE22D}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{5FF7B228-9C77-4C3C-B60C-E1DDCE9BE22D}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 245938
(updateId = {5FF7B228-9C77-4C3C-B60C-E1DDCE9BE22D}.101) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{33C5653D-E1B0-43F7-A0E7-BA8D9098297E}.101, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: Evaluating RegDword:
Subkey=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB825119,
value=Installed, data=1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: RegDword evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of expression: 21 returned
hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{33C5653D-E1B0-43F7-A0E7-BA8D9098297E}.101, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{33C5653D-E1B0-43F7-A0E7-BA8D9098297E}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 246020
(updateId = {33C5653D-E1B0-43F7-A0E7-BA8D9098297E}.101) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{F1807923-5C56-42AE-BE72-AA78C6E8250C}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{F1807923-5C56-42AE-BE72-AA78C6E8250C}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{F1807923-5C56-42AE-BE72-AA78C6E8250C}.101, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 246039
(updateId = {F1807923-5C56-42AE-BE72-AA78C6E8250C}.101) is "Superseded"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{80F34919-1943-4C71-B7EF-FDBCB7438561}.100, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\UMPNPMGR.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\UMPNPMGR.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\UMPNPMGR.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{80F34919-1943-4C71-B7EF-FDBCB7438561}.100, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{80F34919-1943-4C71-B7EF-FDBCB7438561}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248798
(updateId = {80F34919-1943-4C71-B7EF-FDBCB7438561}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{335DC428-F38C-4DA2-B1BF-7D8B16934991}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{335DC428-F38C-4DA2-B1BF-7D8B16934991}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{335DC428-F38C-4DA2-B1BF-7D8B16934991}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248801
(updateId = {335DC428-F38C-4DA2-B1BF-7D8B16934991}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{F520E83B-36AF-4BF0-B3B5-53A36CCD8472}.100, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\tapisrv.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\tapisrv.dll, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\tapisrv.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\REMOTESP.TSP
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\REMOTESP.TSP, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\REMOTESP.TSP
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{F520E83B-36AF-4BF0-B3B5-53A36CCD8472}.100, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{F520E83B-36AF-4BF0-B3B5-53A36CCD8472}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248879
(updateId = {F520E83B-36AF-4BF0-B3B5-53A36CCD8472}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{295430EB-5D44-41BC-899B-932F9186798A}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{295430EB-5D44-41BC-899B-932F9186798A}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{295430EB-5D44-41BC-899B-932F9186798A}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248882
(updateId = {295430EB-5D44-41BC-899B-932F9186798A}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{ECE36A54-7D3A-4935-AD93-D85B77137D15}.100, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\rdpwd.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\drivers\rdpwd.sys, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\rdpwd.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{ECE36A54-7D3A-4935-AD93-D85B77137D15}.100, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{ECE36A54-7D3A-4935-AD93-D85B77137D15}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248964
(updateId = {ECE36A54-7D3A-4935-AD93-D85B77137D15}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{7AFF988B-7622-405E-88DE-5E2B8AECF168}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{7AFF988B-7622-405E-88DE-5E2B8AECF168}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{7AFF988B-7622-405E-88DE-5E2B8AECF168}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 248967
(updateId = {7AFF988B-7622-405E-88DE-5E2B8AECF168}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{982BEA34-357C-4BEE-80E1-9F325A99464C}.100, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\sp3res.dll, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\sp3res.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\kdcsvc.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\kdcsvc.dll, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\kdcsvc.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{982BEA34-357C-4BEE-80E1-9F325A99464C}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{982BEA34-357C-4BEE-80E1-9F325A99464C}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 249045
(updateId = {982BEA34-357C-4BEE-80E1-9F325A99464C}.100) is "Installable"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{1E64EA74-7D66-4E2B-A5D0-A04DCE164A75}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{1E64EA74-7D66-4E2B-A5D0-A04DCE164A75}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{1E64EA74-7D66-4E2B-A5D0-A04DCE164A75}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 249048
(updateId = {1E64EA74-7D66-4E2B-A5D0-A04DCE164A75}.100) is "Installable"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{271249A1-AD58-4798-8376-6580A8176783}.100, result = 1
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\spoolsv.exe
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\spoolsv.exe, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\spoolsv.exe
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\spoolss.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\spoolss.dll, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\spoolss.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\WIN32SPL.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\WIN32SPL.DLL, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\WIN32SPL.DLL
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\faxui.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileExists evaluated to 1, return
hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 8 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=\faxui.dll, comparison=4
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\faxui.dll
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 1,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{271249A1-AD58-4798-8376-6580A8176783}.100, result = 1
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{271249A1-AD58-4798-8376-6580A8176783}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 249126
(updateId = {271249A1-AD58-4798-8376-6580A8176783}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{1381E7AE-1C7C-401E-A6A8-539DF3612C0C}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{1381E7AE-1C7C-401E-A6A8-539DF3612C0C}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{1381E7AE-1C7C-401E-A6A8-539DF3612C0C}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 249129
(updateId = {1381E7AE-1C7C-401E-A6A8-539DF3612C0C}.100) is "Installed"
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installable rule, updateId =
{0E92D34B-B97B-471E-98D1-46722113113F}.100, result = 0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=drivers\afs2k.sys, comparison=3
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\afs2k.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=drivers\afs2k.sys, comparison=3
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\afs2k.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=drivers\afs2k.sys, comparison=3
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\afs2k.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion expression:
path=drivers\afs2k.sys, comparison=3
2005-08-16 10:35:56 1240 3a4 EEHndlr The full path of the filename is
C:\WINNT\system32\drivers\afs2k.sys
2005-08-16 10:35:56 1240 3a4 EEHndlr EE: FileVersion evaluated to 0,
return hr=0
2005-08-16 10:35:56 1240 3a4 EEHndlr Evaluation of Expression 10 returned hr=0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Installed rule, updateId =
{0E92D34B-B97B-471E-98D1-46722113113F}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Evaluated Superseded rule, updateId =
{0E92D34B-B97B-471E-98D1-46722113113F}.100, result = 0
2005-08-16 10:35:56 1240 3a4 Agent Final detection state for update 250965
(updateId = {0E92D34B-B97B-471E-98D1-46722113113F}.100) is "NotApplicable"
2005-08-16 10:35:56 1240 3a4 Agent prune update list before Install
2005-08-16 10:35:56 1240 3a4 Handler Attempting to create remote handler
process as HONDA6758\rchan in session 0
2005-08-16 10:35:58 1924 6fc Misc =========== Logging initialized (build:
5.8.0.2469, tz: -0400) ===========
2005-08-16 10:35:58 1924 6fc Misc = Process: C:\WINNT\system32\wuauclt.exe
2005-08-16 10:35:58 1924 6fc AUClnt FATAL: Error: 0x80070005. wuauclt
handler: failed to spawn COM server
2005-08-16 10:35:58 1240 3a4 Handler FATAL: 0x80070005: ERROR: Remote update
handler container process created (PID: 1924), but exited before signaling
event
2005-08-16 10:35:58 1240 3a4 Agent * WARNING: Exit code = 0x80070005
2005-08-16 10:35:58 1240 3a4 Agent *********
2005-08-16 10:35:58 1240 3a4 Agent ** END ** Agent: Installing updates
[CallerId = MicrosoftUpdate]
2005-08-16 10:35:58 1240 3a4 Agent *************
2005-08-16 10:35:58 1240 3a4 Agent WARNING: WU client failed installing
updates with error 0x80070005
2005-08-16 10:35:58 1348 84c COMAPI >>-- RESUMED -- COMAPI: Install
[ClientId = MicrosoftUpdate]
2005-08-16 10:35:58 1348 84c COMAPI - Install call failed
2005-08-16 10:35:58 1348 84c COMAPI - Reboot required = No
2005-08-16 10:35:58 1348 84c COMAPI - WARNING: Exit code = 0x80240FFF;
Call error code = 0x80070005
2005-08-16 10:35:58 1348 84c COMAPI ---------
2005-08-16 10:35:58 1348 84c COMAPI -- END -- COMAPI: Install [ClientId =
MicrosoftUpdate]
2005-08-16 10:35:58 1348 84c COMAPI -------------
2005-08-16 10:35:58 1240 3a4 Agent WU client calls back to install call
{2344CE33-E62E-4E32-8960-99F6A3BF87D3} with code Call failed and error
0x80070005
2005-08-16 10:35:58 1240 3a4 Agent WU client completed and deleted call
{2344CE33-E62E-4E32-8960-99F6A3BF87D3}
2005-08-16 10:35:59 1348 6d8 COMAPI WARNING: Operation failed due to earlier
error, hr=80070005
2005-08-16 10:35:59 1240 354 Agent ISusInternal API failed
CClientCallRecorder:isconnectCall with error 0x8024000c
2005-08-16 10:35:59 1348 6d8 COMAPI ISusInternal:isconnectCall failed,
hr=8024000C
2005-08-16 10:36:06 1240 68c Agent ISusInternal API failed

"Raymond" <> wrote in message
news:A6E97F4F-D64A-4241-AFFA-...
> Hi Robert,
>
> Activated the "detailed log" as per KB902093.
> Tried updating from WU and view the log file...it was huge!

Well, I think you could have reduced it by trying only one update at a time?
Normally you could have further reduced it by limiting the test to just a download
(e.g. using the prompts) but I don't think you are getting that far.

BTW keep 823353 for last as it has its own problems... <eg>
(e.g. see many other threads about OE6sp1 updates)


> The last few lines seems the same as before, indicating wuauclt handler:
> failed to spawn COM server.

Yes. Unfortunately verbose is doing nothing to clarify this portion:

<extract>
2005-08-16 10:35:56 1240 3a4 Handler Attempting to create remote handler process as HONDA6758\rchan in session 0
2005-08-16 10:35:58 1924 6fc Misc =========== Logging initialized (build: 5.8.0.2469, tz: -0400) ===========
2005-08-16 10:35:58 1924 6fc Misc = Process: C:\WINNT\system32\wuauclt.exe
2005-08-16 10:35:58 1924 6fc AUClnt FATAL: Error: 0x80070005. wuauclt handler: failed to spawn COM server
2005-08-16 10:35:58 1240 3a4 Handler FATAL: 0x80070005: ERROR: Remote update handler container process created (PID: 1924), but
exited before signaling event
</extract>


I think you are only going to be able to get a handle on this with RegMon.
It looks as if you may be able to get away with a fairly restrictive filter
(e.g. all entries for wuauclt.exe) so you probably don't need to run
a concurrent FileMon in order to find an appropriate context within
the RegMon trace, though I think it could make the analysis much easier.
Certainly the timestamps in these log records are going to be useless for
telling you when the error was first detected.


> The rest....don't understand.....

Well, I have some ideas but as I said I think you should try
limiting the test to a download *only* of one update *only*.
Trying to do too much at once just makes it harder to figure
out what isn't happening.


As for RegMon it's really pretty simple to use. Just download it
from SysInternals, install it and start it when you want to trace.
It always prompts you for an Include filter before starting.
As I said I think that wuauclt would be sufficient for this case.
If you want to use FileMon, same thing and the filter will be
WindowsUpdate.log Don't forget to check the Clock Time
and Milleseconds options on both. To capture their output
just select all records with a normal Windows keyboard
procedure such as Home, Shift-End,Ctrl-c (actually, I guess
if the selected line is already at the bottom that Shift-Home,
Ctrl-c would be more efficient <w>).


HTH

Robert
---