WGA Validation Tool (KB892130) and makemeadmin

I like others here have had trouble with the updated WGA Validation Tool
(KB892130).

I was unable to use Windows Update because the updated control would not
install, despite other tools saying my Windows is genuine.

Today I realised that my problem at least was caused by using the
makemeadmin tool:

http://go.microsoft.com/fwlink/?LinkId=58445

I run as a user without admin privilege, according to the LUA principle.
To run Windows Update I use makemeadmin.

My installation had been failing with this in the Windows Update log:

2006-03-06 12:23:06 1772 6b8 Handler FATAL:
0x80070005: ERROR: Remote update handler container process created (PID:
4476), but exited before signaling event
2006-03-06 12:23:07 1772 6b8 Agent * WARNING:
Exit code = 0x80070005
2006-03-06 12:23:07 1772 6b8 Agent *********
2006-03-06 12:23:07 1772 6b8 Agent ** END **
Agent: Installing updates [CallerId = WindowsUpdate]
2006-03-06 12:23:07 1772 6b8 Agent *************
2006-03-06 12:23:07 1772 6b8 Agent WARNING: WU
client failed installing updates with error 0x80070005
2006-03-06 12:23:07 2840 1018 COMAPI >>-- RESUMED --
COMAPI: Install [ClientId = WindowsUpdate]
2006-03-06 12:23:07 2840 1018 COMAPI - Install call
failed
2006-03-06 12:23:07 2840 1018 COMAPI - Reboot
required = No
2006-03-06 12:23:07 2840 1018 COMAPI - WARNING:
Exit code = 0x80240FFF; Call error code = 0x80070005

But today I noticed for the first time the preceding log line, which
said "Attempting to create remote handler process as mydomain\myuser in
session 0" and I realised the possible cause of my problem.

When I made my user a member of administrators for the duration of
Windows Update, the control installed successfully.

This is not a criticism of LUA, which I think a good idea. I post my
experience here just in case it helps others.

Regards
--
Dave English Senior Software & Systems Engineer
Internet Platform Development, Thus plc

Hello Dave and all who are affected by this:
I too am affected by this problem, XP pro current everything. I have tried
every suggestion that has been presented, there are alot of good people
concerned about this. On March first 2006 I checked for updates as normnal
and I note that my system was trouble free before hand, I proceeded with the
download of four optional updates and rebooted after the first which was
KB892130 everything seemed fine and then I proceeded with the remaining three
updates. The next day I checked for updates again and this is when I noticed
the problem that others are also experiencing. There I did the installion
again and I followed every day since. There is however something amiss here I
noticed that there is a small black icon briefly appearing on the taskbar
during boot it never appeared before these updates. Then while I was
searching in the add and remove panel I noticed that ALL, WINDOWS XP and the
40 plus updates are nowhere to be found. They are not there anywhere but
everything works as intended, except for as mentioned. I have checked my sons
computer XP home no icon and no listing in the add and remove programs
either, same problem with KB892103. I then called some of my neighbors and of
7 extra home editions they to are experiencing the same as my sons comp. 2
other XP pro versions also have the brief icon. We all have different
internet providers, different security packages and 0 error events showing. I
hope that there is help on the horizion.
Thanks in advance to all!

"Dave English" wrote:

> I like others here have had trouble with the updated WGA Validation Tool
> (KB892130).
>
> I was unable to use Windows Update because the updated control would not
> install, despite other tools saying my Windows is genuine.
>
> Today I realised that my problem at least was caused by using the
> makemeadmin tool:
>
> http://go.microsoft.com/fwlink/?LinkId=58445
>
> I run as a user without admin privilege, according to the LUA principle.
> To run Windows Update I use makemeadmin.
>
> My installation had been failing with this in the Windows Update log:
>
> 2006-03-06 12:23:06 1772 6b8 Handler FATAL:
> 0x80070005: ERROR: Remote update handler container process created (PID:
> 4476), but exited before signaling event
> 2006-03-06 12:23:07 1772 6b8 Agent * WARNING:
> Exit code = 0x80070005
> 2006-03-06 12:23:07 1772 6b8 Agent *********
> 2006-03-06 12:23:07 1772 6b8 Agent ** END **
> Agent: Installing updates [CallerId = WindowsUpdate]
> 2006-03-06 12:23:07 1772 6b8 Agent *************
> 2006-03-06 12:23:07 1772 6b8 Agent WARNING: WU
> client failed installing updates with error 0x80070005
> 2006-03-06 12:23:07 2840 1018 COMAPI >>-- RESUMED --
> COMAPI: Install [ClientId = WindowsUpdate]
> 2006-03-06 12:23:07 2840 1018 COMAPI - Install call
> failed
> 2006-03-06 12:23:07 2840 1018 COMAPI - Reboot
> required = No
> 2006-03-06 12:23:07 2840 1018 COMAPI - WARNING:
> Exit code = 0x80240FFF; Call error code = 0x80070005
>
> But today I noticed for the first time the preceding log line, which
> said "Attempting to create remote handler process as mydomain\myuser in
> session 0" and I realised the possible cause of my problem.
>
> When I made my user a member of administrators for the duration of
> Windows Update, the control installed successfully.
>
> This is not a criticism of LUA, which I think a good idea. I post my
> experience here just in case it helps others.
>
> Regards
> --
> Dave English Senior Software & Systems Engineer
> Internet Platform Development, Thus plc
>

In message <B19CEBAA-62CF-457A-92EB->, OXFORD
<> writes
>Hello Dave and all who are affected by this:
>I too am affected by this problem, XP pro current everything. I have tried
>every suggestion that has been presented
....
>I
>hope that there is help on the horizion.
>Thanks in advance to all!

I am not an expert in this, other here will know more. I had posted
here just to relate my own specific finding.

I can easily believe that when a change like this is made then it will
shake out a bunch of users, not all with the exactly the same problem.

It seems to me that the key advice at the moment is:

In message <>, "Carey Frisch
[MVP]" <> writes

>Subject: Re: Windows Genuine Advantage (KB892130) Failed in Windows Update
>Date: Mon, 6 Mar 2006 10:31:34 -0600
....
>Newsgroups: microsoft.public.windowsupdate
....
>The WGA diagnostic tool has been updated to correct a problem
>seen by some users. Please download and execute it from:
>
>http://go.microsoft.com/fwlink/?linkid=52012
>
>After running the tool, please return to Windows Update and try it again.
>
>--
>Carey Frisch
>Microsoft MVP
>Windows - Shell/User

Regards
--
Dave English Senior Software & Systems Engineer
Internet Platform Development, Thus plc

Dave,
Thank you for posting this information !

--
Maurice N
MVP Windows - Shell / User
-----


Dave English wrote:
> I like others here have had trouble with the updated WGA Validation
> Tool (KB892130).
>
> I was unable to use Windows Update because the updated control would
> not install, despite other tools saying my Windows is genuine.
>
> Today I realised that my problem at least was caused by using the
> makemeadmin tool:
>
> http://go.microsoft.com/fwlink/?LinkId=58445
>
> I run as a user without admin privilege, according to the LUA
> principle. To run Windows Update I use makemeadmin.
>
> My installation had been failing with this in the Windows Update log:
>
> 2006-03-06 12:23:06 1772 6b8 Handler FATAL:
> 0x80070005: ERROR: Remote update handler container process created
> (PID: 4476), but exited before signaling event
> 2006-03-06 12:23:07 1772 6b8 Agent * WARNING:
> Exit code = 0x80070005
> 2006-03-06 12:23:07 1772 6b8 Agent *********
> 2006-03-06 12:23:07 1772 6b8 Agent ** END **
> Agent: Installing updates [CallerId = WindowsUpdate]
> 2006-03-06 12:23:07 1772 6b8 Agent *************
> 2006-03-06 12:23:07 1772 6b8 Agent WARNING: WU
> client failed installing updates with error 0x80070005
> 2006-03-06 12:23:07 2840 1018 COMAPI >>-- RESUMED
> -- COMAPI: Install [ClientId = WindowsUpdate]
> 2006-03-06 12:23:07 2840 1018 COMAPI - Install
> call failed
> 2006-03-06 12:23:07 2840 1018 COMAPI - Reboot
> required = No
> 2006-03-06 12:23:07 2840 1018 COMAPI - WARNING:
> Exit code = 0x80240FFF; Call error code = 0x80070005
>
> But today I noticed for the first time the preceding log line, which
> said "Attempting to create remote handler process as mydomain\myuser
> in session 0" and I realised the possible cause of my problem.
>
> When I made my user a member of administrators for the duration of
> Windows Update, the control installed successfully.
>
> This is not a criticism of LUA, which I think a good idea. I post my
> experience here just in case it helps others.
>
> Regards

Oxford,

First, a general observation & don't take it personal. Use a little bit of paragraph breaks (some white space) in your posts. Makes it easier to read & more likely people will respond.

When using Add-Remove Programs, I'd suggest you make sure you have "Show Updates" box checked. It shows just below the title bar.

My system shows "Windows Genuine Advantage Validation Tool" with a date 03/01/2006 & this shows nearly at the end of list under Windows XP Software Updates. That's where you'd expect to see yours, as well.

Make sure to "View Installation History" by starting Windows Update, but then look at left-hand-side frame, to select/click on the option "Review your update history".
See if your particular update is already listed as "succeeded". A green check in the status column indicates success

HTH
--
Maurice N
MVP Windows - Shell / User
-----


OXFORD wrote:
> Hello Dave and all who are affected by this:
> I too am affected by this problem, XP pro current everything. I have
> tried every suggestion that has been presented, there are alot of
> good people concerned about this. On March first 2006 I checked for
> updates as normnal and I note that my system was trouble free before
> hand, I proceeded with the download of four optional updates and
> rebooted after the first which was KB892130 everything seemed fine
> and then I proceeded with the remaining three updates. The next day I
> checked for updates again and this is when I noticed the problem that
> others are also experiencing. There I did the installion again and I
> followed every day since. There is however something amiss here I
> noticed that there is a small black icon briefly appearing on the
> taskbar during boot it never appeared before these updates. Then
> while I was searching in the add and remove panel I noticed that ALL,
> WINDOWS XP and the 40 plus updates are nowhere to be found. They are
> not there anywhere but everything works as intended, except for as
> mentioned. I have checked my sons computer XP home no icon and no
> listing in the add and remove programs either, same problem with
> KB892103. I then called some of my neighbors and of 7 extra home
> editions they to are experiencing the same as my sons comp. 2 other
> XP pro versions also have the brief icon. We all have different
> internet providers, different security packages and 0 error events
> showing. I hope that there is help on the horizion. Thanks in advance
> to all!
>

In message <>, Maurice N ~ MVP
<> writes
>Dave,
>Thank you for posting this information !

You are welcome. I would hope that Aaron will not mind my quoting his
subsequent private response to me: "Windows Update and Microsoft Update
don't work in a "runas" context - the desktop must be running as admin"

Regards
--
Dave English Senior Software & Systems Engineer
Internet Platform Development, Thus plc

I would amend the statement to say "logged in user/account must have administrator *rights*".

Best to you,
--
Maurice N
MVP Windows - Shell / User
-----

Dave English wrote:
> In message <>, Maurice N ~ MVP
> <> writes
>> Dave,
>> Thank you for posting this information !
>
> You are welcome. I would hope that Aaron will not mind my quoting his
> subsequent private response to me: "Windows Update and Microsoft
> Update don't work in a "runas" context - the desktop must be running
> as admin"
>
> Regards

Thank you for the response!

The info was just a little over my head. Carey Frish had reccomended the
WGAdiag2 tool, which did correct the problem with KB892130.

As for Admin rights it is correct here.

As for Maurice, thanks point well taken.

As for ADD and Remove list, on the update site as stated all 40 listed and
green in history list but in my actual list on the system there are none to
be found anywhere. Not even Windows XP, go figure!

YES even with the check mark.

I did notice that there are others reporting the Phanthom Icon, I just have
to go back in the newsgroups and find it again.

Thanks again Everyone!
HAVE A GREAT DAY

"Dave English" wrote:

> In message <B19CEBAA-62CF-457A-92EB->, OXFORD
> <> writes
> >Hello Dave and all who are affected by this:
> >I too am affected by this problem, XP pro current everything. I have tried
> >every suggestion that has been presented
> ....
> >I
> >hope that there is help on the horizion.
> >Thanks in advance to all!
>
> I am not an expert in this, other here will know more. I had posted
> here just to relate my own specific finding.
>
> I can easily believe that when a change like this is made then it will
> shake out a bunch of users, not all with the exactly the same problem.
>
> It seems to me that the key advice at the moment is:
>
> In message <>, "Carey Frisch
> [MVP]" <> writes
>
> >Subject: Re: Windows Genuine Advantage (KB892130) Failed in Windows Update
> >Date: Mon, 6 Mar 2006 10:31:34 -0600
> ....
> >Newsgroups: microsoft.public.windowsupdate
> ....
> >The WGA diagnostic tool has been updated to correct a problem
> >seen by some users. Please download and execute it from:
> >
> >http://go.microsoft.com/fwlink/?linkid=52012
> >
> >After running the tool, please return to Windows Update and try it again.
> >
> >--
> >Carey Frisch
> >Microsoft MVP
> >Windows - Shell/User
>
> Regards
> --
> Dave English Senior Software & Systems Engineer
> Internet Platform Development, Thus plc
>

Oxford,

Regarding that "Phantom icon". Be very sure your system if not infested with malware or spyware, or viruses.
You can run a free online antivirus & security check at Trendmicro
http://housecall.trendmicro.com

you should do a number of other checks for "malware".
See The Parasite Fight Quick Fix Protocol at <http://www.aumha.org/a/quickfix.htm>

Malware/scumware use a variety of ways to hide themselves.
One useful tool to have is Silentrunners at http://www.silentrunners.org


Here are 2 tools from SysInternals that may help you get an insight on what's running.
Autoruns (checks & shows what's set to auto-load at Windows startup)
http://www.sysinternals.com/ntÂ*w2k/...autoruns.shtml

Process Explorer http://www.sysinternals.com/ntÂ*w2k/.../procexp.shtml

--
Maurice N
MVP Windows - Shell / User
-----

OXFORD wrote:
> Thank you for the response!
>
> The info was just a little over my head. Carey Frish had reccomended
> the WGAdiag2 tool, which did correct the problem with KB892130.
>
> As for Admin rights it is correct here.
>
> As for Maurice, thanks point well taken.
>
> As for ADD and Remove list, on the update site as stated all 40
> listed and green in history list but in my actual list on the system
> there are none to be found anywhere. Not even Windows XP, go figure!
>
> YES even with the check mark.
>
> I did notice that there are others reporting the Phanthom Icon, I
> just have to go back in the newsgroups and find it again.
>
> Thanks again Everyone!
> HAVE A GREAT DAY
>
> "Dave English" wrote:
>
>> In message <B19CEBAA-62CF-457A-92EB->,
>> OXFORD <> writes
>>> Hello Dave and all who are affected by this:
>>> I too am affected by this problem, XP pro current everything. I
>>> have tried every suggestion that has been presented
>> ....
>>> I
>>> hope that there is help on the horizion.
>>> Thanks in advance to all!
>>
>> I am not an expert in this, other here will know more. I had posted
>> here just to relate my own specific finding.
>>
>> I can easily believe that when a change like this is made then it
>> will shake out a bunch of users, not all with the exactly the same
>> problem.
>>
>> It seems to me that the key advice at the moment is:
>>
>> In message <>, "Carey Frisch
>> [MVP]" <> writes
>>
>>> Subject: Re: Windows Genuine Advantage (KB892130) Failed in Windows
>>> Update Date: Mon, 6 Mar 2006 10:31:34 -0600
>> ....
>>> Newsgroups: microsoft.public.windowsupdate
>> ....
>>> The WGA diagnostic tool has been updated to correct a problem
>>> seen by some users. Please download and execute it from:
>>>
>>> http://go.microsoft.com/fwlink/?linkid=52012
>>>
>>> After running the tool, please return to Windows Update and try it
>>> again.
>>>
>>> --
>>> Carey Frisch
>>> Microsoft MVP
>>> Windows - Shell/User
>>
>> Regards
>> --
>> Dave English Senior Software & Systems Engineer
>> Internet Platform Development, Thus plc

"Dave English" <> wrote:

> In message <>, Maurice N ~ MVP
> <> writes
> >Dave,
> >Thank you for posting this information !
>
> You are welcome. I would hope that Aaron will not mind my quoting his
> subsequent private response to me: "Windows Update and Microsoft Update
> don't work in a "runas" context - the desktop must be running as admin"

That's simply wrong (or Aaron is right not stating this in public.-)!

I'm using both (through the "Windows Update.lnk" of the Start Menu, i.e.
%SystemRoot%\system32\wupdmgr.exe, where I enabled the "Run as ..." box)
since years under Windows 2000!
Of course the registry entries for DesktopProcess and SeparateProcess
need to be set.

Stefan