Windows Update DISM.exe error 87 / TrustedInstaller error 1067

SkyWolf · May 21, 2015

Hi all, i'm new here after days of searching for the answer. Please be sure i exhausted my options before bothering y'all (: I have Windows 7 Ultimate 32-bit running on a Laptop.

It all started when i was trying to update as normal and the progress bar stayed at 0% forever, first i deleted the "C:\Windows\SoftwareDistribution" contents and retried, no luck.

Then i ran the sfc /scannow command and got "Windows Resource Protection could not perform the requested operation"

So i kept looking and read that it could be some issue with the TrustedInstaller service and how it starts so i tried starting it..

then i tried running it from cmd..

"System Error 1064", so it seems it might be corrupted, then i installed and ran the Window Update Readiness Tool, i ran the /Scanhealth without problem, but when trying /Checkhealth or /Restorehealth it returns "Error 87"

I checked the CheckSur.log and found issues with some packages in C:\Windows\Servicing\Packages, specifically this files:

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs
(f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name
(f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-Spanish~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name
(f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name
(f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-Spanish~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name

Unavailable repair files:

servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.mum
servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.mum
servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat
servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.cat
servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat
servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-Spanish~31bf3856ad364e35~~~11.2.9412.0.cat

Found out that it relates to some corrupted Internet Explorer update and replacing them could fix it so i went to another pc, fetched the files and still have them, since the info sources don't state that this solved the issue i don't want to replace them yet to avoid making a bigger mess.

I tried another solution, renaming the files (inserting "neutral" between the ~~~) since it all pointed out to a name mismatch (a moderator here pointed it out along with saying he doesn't know the solution himself, 4th post, from top to bottom) https://answers.microsoft.com/en-us...2/9ad1f170-d7e8-4b4e-a3d3-26259f588493?page=4

So after restoring default permissions and replacing them in /Packages i ran dism /scanhealth again and the CheckSUR.log returned different errors (the ones i replaced no longer showed up as far as i can see, since the log is x10 times larger this time) but the /Resotrehealth still returns error 87.

My particular error is described here:
https://answers.microsoft.com/en-us...en-using/ff0e0a0e-8f23-4fe5-be4a-e3055b845c76
and a lot more detailed here: IE 9 to 10 Upgrade Failure with Code 9C59 Error

After i arrived here i ran the SFCFix tool provided here, this is the result log:

SFCFix version 2.4.3.0 by niemiro.
Start time: 2015-05-21 20:50:32.850
Microsoft Windows 7 Service Pack 1 - x86
Not using a script file.

AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 0
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 5244
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.4.3.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-05-21 20:53:38.273
----------------------EOF-----------------------

Also i'm attaching the CBS.log, the first CheckSUR.log before renaming files, and the second one i ran when i replaced them (since there are different errors logged) Also i have the original .cat and .mum files before renaming them and the fetched "new" ones from the pc in case they're needed.

Thanks in advance for your help.

BrianDrab · May 23, 2015

Hi and welcome to Sysnative. The zip file that you attached is corrupt. If it's too large to attach here you may want to upload to a service such as SendSpace and then just provide the link.

The fact that we see the following however doesn't bode well. It's likely too many corruption than can be reasonably fixed manually but we'll see once we get the logs.

Code:

SURT total detected corruption count:          5244

Also, do you happen to have your Windows 7 DVD just in case it comes to a repair install?

Thanks.

SkyWolf · May 24, 2015

I've uploaded them again here https://mega.co.nz/#!XYpV2Tpa!jgHSv4sPnrSTTWwv7oK7MiWdmO-WY3F6N1JHfynpsCU or here LOGS

I have the Windows 7 Installation DVD in case it comes to a repair installation and i'm willing to do it, i'm just a little afraid of what will restore to the default settings since I've 4 years with the same hard drive an OS, everything working as intended except for the updating issue.

Also as you mention there are several errors, but the first time i ran /Scanhealth it only showed up 6, belonging to some .mum files, this happened after i changed the "packages" folder permissions and replaced the 6 corrupted files (renaming them), i ran /Scanhealth again and that's when it showed that 5000 errors, but the original ones i had disappeared, as if they were fixed.

I don't know if this is because of changing the folder permissions and owner (although i reverted them back to the original settings after i was done, probably doing it wrong) and could be fixed resotring dafult permissions or owner (TrustedInstaller)

The .7z file contains the CBS.log and both CheckSUR logs, the one with the original issue i had (6 errors) and the one after i tried fixing it (+5000 errors)

Thanks a lot for you help.

BrianDrab · May 24, 2015

Do you have any restore points that you can go to that were before you made the changes to try and fix the 6 corrupted files?

SkyWolf · May 24, 2015

Yes, should i restore the system and run /Scanhealth again?

BrianDrab · May 24, 2015

Not yet. I'm just gathering all the info so I know what options we have. I'll be back with you after reviewing the logs.

SkyWolf · May 24, 2015

Ok thanks a lot :s1: i'll stand by.

BrianDrab · May 24, 2015

OK, I've reviewed the logs and they are all Access Denied errors. So the first step would be to attempt your restore point to before you made the changes. Let me know once this is done.

Code:

(f) CBS Registry Error 0x00000005

SkyWolf · May 24, 2015

I restored the system and ran /Scanhealth, the original errors i had showed up again (thankfully)

Here is the new log: https://www.mediafire.com/?qxbxq5o96x97qjk
or Dev-Host - CheckSUR.log - The Ultimate Free File Hosting / File Sharing Service

BrianDrab · May 24, 2015

Much more manageable. Please to the following to send your COMPONENTS hive.

Retrieve Components Hive

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or One Drive or SendSpace and then just provide the link in your reply.
You can close any open windows you have as well as the RegBack program now.

SkyWolf · May 24, 2015

Here it is: components or Dev-Host - components.7z

BrianDrab · May 24, 2015

Thank you. Now I need your Software hive. You should be able to obtain from the existing backup you made in the previous step.

SkyWolf · May 25, 2015

Here: software.7z or Dev-Host - software.7z

Thanks a lot for the active response.

BrianDrab · May 25, 2015

Thanks for all the information. Please do the following.

Step#1 - Identify your TopLevel Version
1. Please browse to C:\Windows\Servicing\Packages
2. In the upper-right corner of the window there is a search box. Copy/Paste the following into it.
Microsoft-Windows-InternetExplorer-Package-TopLevel
3. You will likely find a .cat and .mum file containing this as part of the name. Please copy the name of one of these files (without the .cat/.mum) and paste into notepad or somewhere else that you can use later.

Step#2 - Uninstall Packages
1. Click your Start button and type cmd. Right-click on the cmd program that shows up and select Run as administrator. Allow the UAC prompt.
2. You should now be at C:\Windows\system32>
3. Type cd.. and hit enter
4. You should now be at C:\Windows>
5. Type cd servicing\packages and hit enter
6. You should now be at C:\Windows\servicing\Packages>
7. Copy/Paste each of the following lines (one at a time) into the command-prompt window and hit enter after each.
pkgmgr /UP:Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~x86~~11.2.9600.16428 <--- Use the name that you identified in Step#1 above. I couldn't be sure it matches mine.
pkgmgr /UP:Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0
pkgmgr /UP:Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0

Step#3 - System Update Reliability Tool (SURT)
1. Re-run this tool and post the contents of the CheckSUR.log

Thank you.

SkyWolf · May 25, 2015

I entered the 3 commands, the first one didn't prompt anything (i assume it was done correctly) but the other 2 gave me the same error message:

View attachment 12625

I did the above only once in case it was intended to happen, should i try again? Nevertheless i reran /Scanhealth and this is what that came out:

CheckSUR.7z (it seems one got repaired as this time it shows 4 errors instead of 6, the first one that didn't prompt an error i assume)
Btw happy 1000 helpful pòsts! :beerchug2:

BrianDrab · May 25, 2015

Sweet, you are correct on your assumptions. One worked and two didn't. Try the following two at the command prompt now and let me know the results.

pkgmgr /UP:Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum
pkgmgr /UP:Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0

SkyWolf · May 25, 2015

It returned 2 different errors this time:

he first one returned:

And the second one:

This is the new log: CheckSur.log

BrianDrab · May 25, 2015

The first error was because I mistakenly put the .mum at the end. I suspect if you try it you will get the same error as the second one though.

BrianDrab · May 25, 2015

SFCFix Scan
1. Download SFCFix.exe and save this to your Desktop. If it's already downloaded you may use that one.
2. Save any open documents and close all open windows.
3. Double click on SFCFix.exe to open it.
4. Follow all on screen instructions and upon completion, a file should be created on your Desktop named SFCFix.txt.
5. Please post the contents of this log in your next post. Thank you.

SkyWolf · May 25, 2015

Here it is SFCFix

Windows Update DISM.exe error 87 / TrustedInstaller error 1067

Active member

Attachments

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Active member

Emeritus

Emeritus

Active member