missing the catdb file in catroot2

Hi,
I am working on win 08 server x64 bit.
All of windows updates are failling to install. I get event id's 257 and
491. I have followed the white paper "System Catalog Database Integrity" from
technet. I recreated the CATROOT2 folder, but after starting "cryptsvc"
service and try to download and install updates again, the catdb was not
created and the updates are still failling.
How can I make/force the server to rebuilled the catdb file?

Is the machine updating via Windows (Automatic) Update or WSUS, �מיר עדות ?

Is this a sudden, new problem or an ongoing one?

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by contacting your local
Microsoft subsidiary. There is no-charge for support calls that are
associated with security updates.

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net

�מיר עדות wrote:
> I am working on win 08 server x64 bit.
> All of windows updates are failling to install. I get event id's 257 and
> 491. I have followed the white paper "System Catalog Database Integrity"
> from technet. I recreated the CATROOT2 folder, but after starting
> "cryptsvc"
> service and try to download and install updates again, the catdb was not
> created and the updates are still failling.
> How can I make/force the server to rebuilled the catdb file?

The machine is updating via WSUS, but I also tried to get the updates from
Windows updates with success, but when I try to install them I got the same
thing (event id's 491,257). I even downloaded singel updates and tried to
install them manually without any luck...
This is a new problem (last two weeks).

Thanks
Amir,

"PA Bear [MS MVP]" wrote:

> Is the machine updating via Windows (Automatic) Update or WSUS, �מיר עדות ?
>
> Is this a sudden, new problem or an ongoing one?
>
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> Support for Windows Update:
> http://support.microsoft.com/gp/wusupport
>
> For home users, no-charge support is available by contacting your local
> Microsoft subsidiary. There is no-charge for support calls that are
> associated with security updates.
>
> For more information about how to contact your local Microsoft subsidiary
> for security update support issues, visit the International Support Web
> site: http://support.microsoft.com/common/international.aspx
>
> For enterprise customers, support for security updates is available through
> your usual support contacts.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin; DTS-L.net
>
> �מיר עדות wrote:
> > I am working on win 08 server x64 bit.
> > All of windows updates are failling to install. I get event id's 257 and
> > 491. I have followed the white paper "System Catalog Database Integrity"
> > from technet. I recreated the CATROOT2 folder, but after starting
> > "cryptsvc"
> > service and try to download and install updates again, the catdb was not
> > created and the updates are still failling.
> > How can I make/force the server to rebuilled the catdb file?
>
>

Repost:
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527

....and/or run a /thorough/ check for hijackware, including posting your
hijackthis log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjunction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

�מיר עדות wrote:
> The machine is updating via WSUS, but I also tried to get the updates from
> Windows updates with success, but when I try to install them I got the
> same
> thing (event id's 491,257). I even downloaded singel updates and tried to
> install them manually without any luck...
> This is a new problem (last two weeks).
>
> "PA Bear [MS MVP]" wrote:
>> Is the machine updating via Windows (Automatic) Update or WSUS, �מיר עדות
>> ?
>>
>> Is this a sudden, new problem or an ongoing one?
>>
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> Support for Windows Update:
>> http://support.microsoft.com/gp/wusupport
>>
>> For home users, no-charge support is available by contacting your local
>> Microsoft subsidiary. There is no-charge for support calls that are
>> associated with security updates.
>>
>> For more information about how to contact your local Microsoft subsidiary
>> for security update support issues, visit the International Support Web
>> site: http://support.microsoft.com/common/international.aspx
>>
>> For enterprise customers, support for security updates is available
>> through
>> your usual support contacts.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin; DTS-L.net
>>
>> �מיר עדות wrote:
>>> I am working on win 08 server x64 bit.
>>> All of windows updates are failling to install. I get event id's 257 and
>>> 491. I have followed the white paper "System Catalog Database Integrity"
>>> from technet. I recreated the CATROOT2 folder, but after starting
>>> "cryptsvc"
>>> service and try to download and install updates again, the catdb was not
>>> created and the updates are still failling.
>>> How can I make/force the server to rebuilled the catdb file?

I resolved the problem by installing the new agent of winupdate
"WindowsUpdateAgent30-x64.exe".
After restart the catdb file was created and finally I can install the
updates...


"PA Bear [MS MVP]" wrote:

> Repost:
> > Start a free Windows Update support incident request:
> > https://support.microsoft.com/oas/de...spx?gprid=6527
>
> ....and/or run a /thorough/ check for hijackware, including posting your
> hijackthis log to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
> conjunction with some other utilities). HijackThis will NOT fix anything on
> its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
>
> �מיר עדות wrote:
> > The machine is updating via WSUS, but I also tried to get the updates from
> > Windows updates with success, but when I try to install them I got the
> > same
> > thing (event id's 491,257). I even downloaded singel updates and tried to
> > install them manually without any luck...
> > This is a new problem (last two weeks).
> >
> > "PA Bear [MS MVP]" wrote:
> >> Is the machine updating via Windows (Automatic) Update or WSUS, �מיר עדות
> >> ?
> >>
> >> Is this a sudden, new problem or an ongoing one?
> >>
> >> Start a free Windows Update support incident request:
> >> https://support.microsoft.com/oas/de...spx?gprid=6527
> >>
> >> Support for Windows Update:
> >> http://support.microsoft.com/gp/wusupport
> >>
> >> For home users, no-charge support is available by contacting your local
> >> Microsoft subsidiary. There is no-charge for support calls that are
> >> associated with security updates.
> >>
> >> For more information about how to contact your local Microsoft subsidiary
> >> for security update support issues, visit the International Support Web
> >> site: http://support.microsoft.com/common/international.aspx
> >>
> >> For enterprise customers, support for security updates is available
> >> through
> >> your usual support contacts.
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-Windows (IE, OE, Security, Shell/User)
> >> AumHa VSOP & Admin; DTS-L.net
> >>
> >> �מיר עדות wrote:
> >>> I am working on win 08 server x64 bit.
> >>> All of windows updates are failling to install. I get event id's 257 and
> >>> 491. I have followed the white paper "System Catalog Database Integrity"
> >>> from technet. I recreated the CATROOT2 folder, but after starting
> >>> "cryptsvc"
> >>> service and try to download and install updates again, the catdb was not
> >>> created and the updates are still failling.
> >>> How can I make/force the server to rebuilled the catdb file?
>
>

Thanks for your feedback. If Automatic Updates had been enabled, the newest
version of WUAgent.exe would have been installed automatically and silently.
See
http://blogs.technet.com/mu/archive/...ws-update.aspx
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

�מיר עדות wrote:
> I resolved the problem by installing the new agent of winupdate
> "WindowsUpdateAgent30-x64.exe".
> After restart the catdb file was created and finally I can install the
> updates...
>
> "PA Bear [MS MVP]" wrote:
>> Repost:
>>> Start a free Windows Update support incident request:
>>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> ....and/or run a /thorough/ check for hijackware, including posting your
>> hijackthis log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_R...:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
>> (in conjunction with some other utilities). HijackThis will NOT fix
>> anything on its own, but it will help you to both identify and remove any
>> hijackware/spyware with assistance from an expert. **Post your log to
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or another appropriate forum for
>> review by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>>
>> �מיר עדות wrote:
>>> The machine is updating via WSUS, but I also tried to get the updates
>>> from
>>> Windows updates with success, but when I try to install them I got the
>>> same
>>> thing (event id's 491,257). I even downloaded singel updates and tried
>>> to
>>> install them manually without any luck...
>>> This is a new problem (last two weeks).
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>> Is the machine updating via Windows (Automatic) Update or WSUS?
>>>>
>>>> Is this a sudden, new problem or an ongoing one?
>>>>
>>>> Start a free Windows Update support incident request:
>>>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>>>
>>>> Support for Windows Update:
>>>> http://support.microsoft.com/gp/wusupport
>>>>
>>>> For home users, no-charge support is available by contacting your local
>>>> Microsoft subsidiary. There is no-charge for support calls that are
>>>> associated with security updates.
>>>>
>>>> For more information about how to contact your local Microsoft
>>>> subsidiary
>>>> for security update support issues, visit the International Support Web
>>>> site: http://support.microsoft.com/common/international.aspx
>>>>
>>>> For enterprise customers, support for security updates is available
>>>> through
>>>> your usual support contacts.
>>>> --
>>>> �מיר עדות wrote:
>>>>> I am working on win 08 server x64 bit.
>>>>> All of windows updates are failling to install. I get event id's 257
>>>>> and
>>>>> 491. I have followed the white paper "System Catalog Database
>>>>> Integrity"
>>>>> from technet. I recreated the CATROOT2 folder, but after starting
>>>>> "cryptsvc"
>>>>> service and try to download and install updates again, the catdb was
>>>>> not
>>>>> created and the updates are still failling.
>>>>> How can I make/force the server to rebuilled the catdb file?