0x800703E3 installing Windows Update Agent

Discussion in 'Windows Update' started by Darryl, Jan 21, 2010.

  1. Darryl

    Darryl Guest

    Using XP SP3, I am getting the following when trying to install the latest
    update agent (windowsupdateagent30-x86.exe). I'd appreciate any help!

    2010-01-20 22:44:19:140 3976 1700 Misc =========== Logging initialized
    (build: 7.4.7600.226, tz: -0600) ===========
    2010-01-20 22:44:19:140 3976 1700 Misc = Process:
    d:\7b8ddf66cf37fb5bcb524483\wusetup.exe
    2010-01-20 22:44:19:140 3976 1700 Setup Windows Update Client standalone
    setup : resource dll path is d:\7b8ddf66cf37fb5bcb524483\en\wusetup.exe.mui
    2010-01-20 22:44:19:140 3976 1700 Setup *********** Setup: Checking whether
    self-update is required ***********
    2010-01-20 22:44:19:140 3976 1700 Setup * Inf file:
    d:\7b8ddf66cf37fb5bcb524483\wusetup.inf
    2010-01-20 22:44:19:187 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.788, required version
    = 7.4.7600.226
    2010-01-20 22:44:19:203 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:218 3976 1700 Setup Update required for
    C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:234 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:281 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:296 3976 1700 Setup Update required for
    C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:359 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:375 3976 1700 Setup Update required for
    C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:437 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:453 3976 1700 Setup Update required for
    C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:453 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.788, required version
    = 7.4.7600.226
    2010-01-20 22:44:19:468 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:468 3976 1700 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuweb.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-20 22:44:19:468 3976 1700 Setup * IsUpdateRequired = Yes
    2010-01-20 22:44:19:484 3976 1700 Setup Windows Update Client standalone
    setup : eula file path is d:\7b8ddf66cf37fb5bcb524483\en\eula.rtf
    2010-01-20 22:44:22:890 3976 1784 Setup *************
    2010-01-20 22:44:22:890 3976 1784 Setup ** START ** Setup: Installing
    client binaries
    2010-01-20 22:44:22:890 3976 1784 Setup *********
    2010-01-20 22:44:22:890 3976 1784 Setup * Download directory:
    d:\7b8ddf66cf37fb5bcb524483\
    2010-01-20 22:44:22:890 3976 1784 Setup * Stop and start service: Yes
    2010-01-20 22:44:22:890 1488 5b4 AU ########### AU: Uninitializing
    Automatic Updates ###########
    2010-01-20 22:44:22:906 1488 5b4 Service *********
    2010-01-20 22:44:22:906 1488 5b4 Service ** END ** Service: Service exit
    [Exit code = 0x240001]
    2010-01-20 22:44:22:906 1488 5b4 Service *************
    2010-01-20 22:44:25:953 3976 1784 Setup Starting file operations for section
    cdm_Standalone
    2010-01-20 22:44:26:437 3976 1784 Setup WARNING: Setup failed while
    processing file operations, error = 0x800703E3. Rolling back changes.
    2010-01-20 22:44:26:500 1488 9cc Misc =========== Logging initialized
    (build: 7.2.6001.788, tz: -0600) ===========
    2010-01-20 22:44:26:500 1488 9cc Misc = Process:
    C:\WINDOWS\System32\svchost.exe
    2010-01-20 22:44:26:500 1488 9cc Misc = Module:
    C:\WINDOWS\system32\wuaueng.dll
    2010-01-20 22:44:26:500 1488 9cc Service *************
    2010-01-20 22:44:26:500 1488 9cc Service ** START ** Service: Service startup
    2010-01-20 22:44:26:500 1488 9cc Service *********
    2010-01-20 22:44:26:500 1488 9cc Agent * WU client version 7.2.6001.788
    2010-01-20 22:44:26:515 1488 9cc Agent * Base directory:
    C:\WINDOWS\SoftwareDistribution
    2010-01-20 22:44:26:515 1488 9cc Agent * Access type: No proxy
    2010-01-20 22:44:26:515 1488 9cc Agent * Network state: Connected
    2010-01-20 22:44:29:437 3976 1784 Setup * WARNING: Exit code = 0x800703E3
    2010-01-20 22:44:29:437 3976 1784 Setup *********
    2010-01-20 22:44:29:437 3976 1784 Setup ** END ** Setup: Installing
    client binaries
    2010-01-20 22:44:29:437 3976 1784 Setup *************
    2010-01-20 22:44:29:437 3976 1784 Setup FATAL: InstallUpdatedBinaries failed
    with error 0x800703e3
    2010-01-20 22:44:31:578 3976 1700 Setup wusetup has finished. Exit code is
    0. Reboot is NOT needed
     
    Darryl, Jan 21, 2010
    #1
    1. Advertisements

  2. Try doing an Aggressive mode Reset: http://support.microsoft.com/kb/971058

    What anti-virus application or security suite is installed and is your
    subscription current? What anti-spyware applications (other than Defender)?
    What third-party firewall (if any)?

    Has a(another) Norton or McAfee application ever been installed on the
    computer (e.g., a free-trial version that came preinstalled when you bought
    it)?
    --
    ~Robear Dyer (PA Bear)
    MS MVP-IE, Mail, Security, Windows Client - since 2002
    www.banthecheck.com


     
    PA Bear [MS MVP], Jan 21, 2010
    #2
    1. Advertisements

  3. 0x800703E3 ERROR_OPERATION_ABORTED
    The I/O operation has been aborted because of either a thread exit or an
    application request.
    Invalid access to memory location


     
    Ǝиçεl, Jan 21, 2010
    #3
  4. Darryl

    Darryl Guest

    Thanks for the suggestions, PA Bear. I installed Fix It and did an agressive
    reset and reboot, but that didn't fix the problem; still getting the same
    error.

    No 3rd party firewall or anti-spyware. Norton/McAfee has never been
    installed. The virus checker is Trend, installed by our IT people. I tried
    to uninstall it, but it is password protected.

    Windows Update used to work fine. I did notice that the Trend icon looks
    different now than it used to look; I think our IT people pushed out a new
    version. Could this be the problem?
     
    Darryl, Jan 21, 2010
    #4
  5. Darryl

    Darryl Guest

    Thanks PA Bear. I installed Fix It and did an agressive reset, but got the
    same error.

    The machine had Trend antivirus, no 3rd party firewall or antispyware. I
    uninstalled Trend and rebooted because I suspected it (it was updated
    recently) and tried to install the update agent again, but got the same error.

    I then tried the agressive reset again, and again got the same error.

    I am trying to install the update agent because when I try to update via
    windowsupdate.microsoft.com, it says I need to install the ActiveX control,
    but I am not prompted to install the control. The information bar does not
    appear, and it just sits there.

    Any ideas? I've never had so much trouble trying to do something so simple.
     
    Darryl, Jan 21, 2010
    #5
  6. Does the computer belong to you or your employer?
     
    PA Bear [MS MVP], Jan 21, 2010
    #6
  7. Darryl

    Darryl Guest

    It belongs to my employer, but we are a small shop and generaly take care of
    our machines ourselves.
     
    Darryl, Jan 21, 2010
    #7
  8. Darryl

    MowGreen Guest


    Suggest you clean boot XP to eliminate interference from Trend:

    How to configure Windows XP to start in a "clean boot" state
    http://support.microsoft.com/kb/310353

    Run the Fixit once more or, in the clean boot state, stop the AU and
    BITS services and then install the previously downloaded Windows Update
    Agent (WUA).
    Start > Run > type in
    cmd
    Click OK or press Enter
    At the Command Prompt type in the following, pressing Enter after each
    command

    net stop wuauserv
    net stop bits

    Leave the CP window open and install the WUA now.
    Go back to the Command Prompt, enter the following, press Enter after
    each command

    net start wuauserv
    net start bits
    exit

    *Restart* the system and the latest Version of the WUA *should* now be
    installed.
    See if the system can search for updates now while still in the clean
    boot state. If it can, UNdo the steps, restart, and see if it can search
    for updates in normal Windows mode.


    MowGreen
    ===============
    *-343-* FDNY
    Never Forgotten
    ===============

    banthecheck.com
    "Security updates should *never* have *non-security content* prechecked
     
    MowGreen, Jan 21, 2010
    #8
  9. Darryl

    Darryl Guest

    Thanks Mow. I clean booted, stopped the services, and tried to install WUA.
    Same error in the log.

    I then ran Fix It in aggressvie mode, rebooted, stopped the services and
    tried to install WUA. Same error again.

    Here's what I typically find in the log:

    2010-01-21 16:52:45:671 2088 e08 Misc =========== Logging initialized
    (build: 7.4.7600.226, tz: -0600) ===========
    2010-01-21 16:52:45:671 2088 e08 Misc = Process:
    d:\6b604922dd6db28dd277f6b3\wusetup.exe
    2010-01-21 16:52:45:671 2088 e08 Setup Windows Update Client standalone
    setup : resource dll path is d:\6b604922dd6db28dd277f6b3\en\wusetup.exe.mui
    2010-01-21 16:52:45:671 2088 e08 Setup *********** Setup: Checking whether
    self-update is required ***********
    2010-01-21 16:52:45:671 2088 e08 Setup * Inf file:
    d:\6b604922dd6db28dd277f6b3\wusetup.inf
    2010-01-21 16:52:45:671 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.788, required version
    = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup Update required for
    C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup Update required for
    C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup Update required for
    C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup Update required for
    C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wups.dll: target version = 7.2.6001.788, required version
    = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup FATAL: Update required for
    C:\WINDOWS\system32\wuweb.dll: target version = 7.2.6001.788, required
    version = 7.4.7600.226
    2010-01-21 16:52:45:687 2088 e08 Setup * IsUpdateRequired = Yes
    2010-01-21 16:52:45:687 2088 e08 Setup Windows Update Client standalone
    setup : eula file path is d:\6b604922dd6db28dd277f6b3\en\eula.rtf
    2010-01-21 16:52:49:375 2088 8a4 Setup *************
    2010-01-21 16:52:49:375 2088 8a4 Setup ** START ** Setup: Installing client
    binaries
    2010-01-21 16:52:49:375 2088 8a4 Setup *********
    2010-01-21 16:52:49:375 2088 8a4 Setup * Download directory:
    d:\6b604922dd6db28dd277f6b3\
    2010-01-21 16:52:49:375 2088 8a4 Setup * Stop and start service: Yes
    2010-01-21 16:52:49:437 2088 8a4 Setup Starting file operations for section
    cdm_Standalone
    2010-01-21 16:52:49:656 2088 8a4 Setup WARNING: Setup failed while
    processing file operations, error = 0x800703E3. Rolling back changes.
    2010-01-21 16:52:49:656 2088 8a4 Setup * WARNING: Exit code = 0x800703E3
    2010-01-21 16:52:49:656 2088 8a4 Setup *********
    2010-01-21 16:52:49:656 2088 8a4 Setup ** END ** Setup: Installing client
    binaries
    2010-01-21 16:52:49:656 2088 8a4 Setup *************
    2010-01-21 16:52:49:656 2088 8a4 Setup FATAL: InstallUpdatedBinaries failed
    with error 0x800703e3
    2010-01-21 16:52:52:140 2088 e08 Setup wusetup has finished. Exit code is
    0. Reboot is NOT needed
     
    Darryl, Jan 21, 2010
    #9
  10. Let your IE Department (such as it is) handle this or contact Trend Micro
    Support.
     
    PA Bear [MS MVP], Jan 22, 2010
    #10
  11. 0x800703E3 Error_Operation_Aborted
    Invalid access to memory location

    If the above isn't Trend Micro's doing, something's really wrong with your
    computer (e.g., a hijackware infection).
     
    PA Bear [MS MVP], Jan 22, 2010
    #11
  12. Darryl

    MowGreen Guest

    Darryl,

    0x800703E3 ERROR_OPERATION_ABORTED
    The I/O operation has been aborted because of either a thread exit or an
    application request

    To be clear here, the WUA you are attempting to install was download and
    *saved* from:
    http://download.windowsupdate.com/w...one/7.4.7600.226/windowsupdateagent30-x86.exe

    Is that correct ?
    Did you download and save the Fixit or run it online ?

    Something isn't quite right here. In the clean boot state, Trend
    *should* be totally disabled. All references I see with the
    0x800703E3 updating error are related to IIS, a corrupt system file, a
    bad HD sector, or the presence of malware.

    In the clean boot state, please open a Command Prompt ( Start > Run >
    type in cmd, press Enter )
    At the prompt, type in the below and then press Enter

    proxycfg

    Under Current WinHTTP proxy settings, does it state " Direct access(no
    proxy server)" ?

    Now type in sigverif.exe and press Enter
    The File Signature Verification tool will open.
    Close the Command Prompt window by typing in exit and then press Enter.

    Now click the *Advanced* button of the File Signature Verification tool.
    Ensure that the "Look for other files that are not digitally signed"
    option is marked.
    The " Scan for this file type" field should being showing
    *.*
    For the "Look in this folder" field, set the path to the
    WINDOWS\system32 subfolder. If the WINDOWS directory is on C:\ set it to
    C:\WINDOWS\system32 or click the Browse button to select it.

    You do *not* need to check the box that states "Include subfolders"

    Now click the Logging tab. The "Save the file signature verification
    results to a log file" option should be checked.
    Under "Logging options", it should show "Append to existing log file".
    The "Log file name:" should be showing as SIGVERIF.TXT
    Click OK, then click the Start button.
    The tool will take some time to run. When it's done, please copy and
    paste the contents of SIGVERIF.TXT into your reply.


    MowGreen
    ================
    * -343-* FDNY
    Never Forgotten
    ================
     
    MowGreen, Jan 22, 2010
    #12
  13. Darryl

    Darryl Guest

    Hi Mow, thanks again for the help. I had about given up on this, so didn't
    see your post right away.

    Yes, that is the correct URL where I got the WUA that I'm trying to install.

    Yes, I downloaded FixIt and ran it from my desktop.

    I have completely uninstalled Trend AntiVirus. I got my IT guy to enter the
    password so it could be uninstalled. No change after it was uninstalled,
    though, same error.

    After a clean boot, proxycfg shows "Direct access (no proxy server)."

    I will post the logfile from sigverif in a separate post, due to length.
     
    Darryl, Jan 26, 2010
    #13
  14. Darryl

    Darryl Guest

    Darryl, Jan 26, 2010
    #14
  15. Darryl

    MowGreen Guest

    First, unregister winhttp5.dll and re-register winhttp.dll from a
    Command Prompt (CP).
    Open a CP, at the prompt type in the following pressing Enter after each
    command. NOTE the spaces after the "2" and the last " l " in the first
    command, please.

    regsvr32 winhttp5.dll /u
    regsvr32 winhttp.dll
    exit

    Were the unregister/register commands successful ?
    If not, what did the messages state ?

    There are a couple of suspicious Unsigned files showing in the sigverif.txt:

    kxentovz.dll 2/4/2009
    rockvdd.dll 4/7/2005

    The former may be an indication that 'something' was or, still is,
    present on the system.
    I can't find out enough about the latter to determine just what it's
    related to, but it appears to have been present on the system for awhile
    now.


    All of the files related to updating are old and need to be replaced or
    the system will never be able to update. Some "thing" is preventing the
    installation of the latest release of the WUA.
    So, since Trend has been uninstalled, suggest you download and run this
    tool to ensure all remnants of it are gone:
    AppRemover
    http://www.technibble.com/appremover-repair-tool-of-the-week

    Next, download, save, and then install Malwarebytes anti-malware:
    http://www.malwarebytes.org/

    Grab the free version. When installing MBAM it will try to update to
    it's latest definitions. Either allow it or wait until it's installed to
    update the defs.
    Once installed, run a QuickScan and see what, if anything, it detects.

    Please post back with your progress, Darryl.


    MowGreen
    ================
    * -343-* FDNY
    Never Forgotten
    ================

    banthecheck.com
    "Security updates should *never* have *non-security content* prechecked
     
    MowGreen, Jan 27, 2010
    #15
  16. Darryl

    Darryl Guest

    Thanks again for the help, Mow.

    The unregister/register of winhttp5.dll worked without any errors.

    kxentovz.dll is one of the dlls belonging to software that we have written
    here, so it is Ok.

    I think rockvdd.dll may be left over from something the prior owner of this
    machine installed long ago. I think it is benign based on info I found here:
    http://www.siteadvisor.com/sites/rockey.gr/downloads/2178178/

    AppRemover did not find any remnants of security software to be removed. It
    only found my installation of Malware AntiBytes.

    Early on in all this, I installed and ran AntiBytes and it found some things
    that I quarantined and removed:

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\Interface\{00ada225-ea6c-4fb3-82e8-68189201ccb9}
    (Adware.Winad) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\AppID\{735c5a0c-f79f-47a1-8ca1-2a2e482662a8}
    (Adware.Winad) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{15696ae2-6ea4-47f4-bea6-a3d32693efc7}
    (Adware.Winad) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6}
    (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\AppID\LoaderX.exe (Adware.Winad) -> Quarantined and
    deleted successfully.

    Getting rid of these things did not solve my problem, though.

    I ran it again as you suggested and it found more items, which were probably
    not causing any problems. I quarantined them and removed them anyway:

    Files Infected:
    C:\Documents and Settings\joncmartin\Local Settings\Temp\res88B.tmp
    (Adware.180olutions) -> Quarantined and deleted successfully.
    C:\Program Files\Microsoft
    AntiSpyware\Quarantine\28B36EAB-3A20-47BF-BB9A-9B4B89\6C755816-4BC4-4E67-B68F-31930B (Adware.180olutions) -> Quarantined and deleted successfully.
    C:\Program Files\Microsoft
    AntiSpyware\Quarantine\28B36EAB-3A20-47BF-BB9A-9B4B89\D8CEB3A0-F20D-4A91-A424-1CDAB6 (Adware.180olutions) -> Quarantined and deleted successfully.
    C:\Program Files\Microsoft
    AntiSpyware\Quarantine\547A6688-0AE7-4F21-8599-6C7272\FBC29733-84E4-4766-9ABB-D365FA (Adware.180olutions) -> Quarantined and deleted successfully.

    I'm starting to think that the only solution is going to be repaving this
    machine!
     
    Darryl, Jan 28, 2010
    #16
  17. Darryl

    MowGreen Guest

    You're mowst welcome, Darryl.
    Previously, I suggested the unregistering of winhttp5.dll and the re
    registering of *winhttp.dll*.
    Did you mistakenly re register winhttp5.dll ?

    Before proceeding, I can see there are at least 2 partitions involved, C
    and D. Suggest you download another copy of the WUA and place it on the
    partition where the Windows directory is *not* installed, which I assume
    is D:\ -
    http://download.windowsupdate.com/w...one/7.4.7600.226/windowsupdateagent30-x86.exe

    Then stop the AU and BITS services.
    ( Adding the /force switch to the executable prior to running it should
    not have be done when the services are stopped. )
    Next, show hidden files, folders, and system files:
    http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

    Using Windows Explorer, navigate to
    WINDOWS\Software Distribution
    Open the Software Distribution subfolder and delete *all* of it's
    subfolders.
    The only thing left now in the Software Distribution subfolder should be
    the ReportingEvents.log
    Now run windowsupdateagent30-x86.exe from the D partition and then
    restart the system.
    See if it can search for updates now.

    If no joy, the only other suggestion left is to download, save, and then
    run Process Monitor when you try to install the Windows Update Agent.
    You could set a filter for the executable, windowsupdateagent30-x86.exe,
    and perhaps see which process/handle/thread is preventing it from
    installing properly.


    MowGreen
    ================
    * -343-* FDNY
    Never Forgotten
    ================

    banthecheck.com
    "Security updates should *never* have *non-security content* prechecked
     
    MowGreen, Jan 28, 2010
    #17
  18. Darryl

    Darryl Guest

    Mow, you're right, I had messed up the winhttp registration/unregistration.
    Went back and redid it, but still no error messages.

    I tried to install from the D:\ drive, stopping the services first and
    clearing out the distribution folder as instructed, but got that same old
    error again.

    I downloaded and installed the Process Monitor. I set up a filter for
    windowsupdateagent30-x86, cleared the display and ran the installer.
    Scanning through the items (and not being very familiar with interpreting the
    entries), I finally decided that based on the WindowsUpdate.log, it looked
    like what was failing was wusetup, not windowsupdateagent30-x86 itself. So I
    set another filter for wusetup, cleared the display, and ran the installer
    again. Again, I'm not sure how to interpret the entries, but if you would
    like to take a look, I saved the log and you can get it here:
    http://darrylsimagehost.s3.amazonaws.com/Logfile.PML

    Hoping you'll find the silver bullet in there! (and thanks again!)
     
    Darryl, Jan 28, 2010
    #18
  19. Darryl

    MowGreen Guest

    Well, I didn't an obvious cause of the WUA failing to be updated,
    Darryl. There are no failures showing in the log.
    It very well may signify that either the HD has bad sectors or the
    memory may be starting to go kaput.

    The only other thing I can think of is that there's a minifilter still
    present that may have been installed by Trend.

    From: http://support.microsoft.com/kb/922582

    " Click Start, click Run, type cmd, and then click OK.
    Type fltmc.exe, and then press ENTER.

    The following example shows a legacy filter and minifilters:

    Filter Name Num Instances Frame
    ------------------------------ ------------------ --------
    TestLegacyFilter <Legacy>
    TestMiniFilter1 4 1
    TestMiniFilter2 0 0

    The following example shows only minifilters:

    Filter Name Num Instances Frame
    ------------------------------ ------------------ --------
    TestMiniFilter1 4 1
    TestMiniFilter2 0 0 "


    Please post back with the results of running filtmc.exe.


    MowGreen
    ================
    * -343-* FDNY
    Never Forgotten
    ================

    banthecheck.com
    "Security updates should *never* have *non-security content* prechecked
     
    MowGreen, Jan 29, 2010
    #19

  20. Filter on Operation Contains WRITE
    to find C:\$PrepareToShrinkFileSize
    WTH is that? Notice that it is surrounded by a bunch of WU.log writes;
    so you should be able to use the pattern of their timestamps and lengths
    to see if there is anything interesting in the log which explains that.
    Tip: I use Notepad with its Status line on and press End to find out
    which lines end where. ; )
     
    Robert Aldwinckle, Jan 29, 2010
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.