[SOLVED] Error Code 8007371B

josephus · May 25, 2015

Good afternoon Brian,

Actually I had to reboot the computer to get to the COMPONENTS file. The reason was because of a different message than "Access denied". The message did say: "The action could not be completed because it is used by another program". The only program that it was running at that particular time was Fire Fox which is my regular browser to access the internet and my email and the reason of accessing it was to send you the file you requested and check my emails.

Well, when I was able to access the COMPONENTS file thru c:\windows\system32\config\ I notice that this file and the others that were completed to the program 'regback" are the same with the exception that COMPONENTS wasn't there. The other issue that I want you to know, is that the file SOFTWARE that I send yesterday evening was dated yesterday (May 24) has 91.7 MB. Today (May 25) the same file SOFTWARE has 94.00 MB. an increase of data by 3.3 MB. which it's hard to believe. Last night my last work in my system was to send you the SOFTWARE file which was dated on the 24 of May. Anyways it will cost me awhile to figure it out and most probably you know why that increase of data in less than 24 hours.

Enclosed is the COMPONENTS file you requested.

Thank you for your assistance.

BrianDrab · May 25, 2015

Please do the following.

Step#1 - Uninstall Update
1. Click your Start button.
2. Type the following in the search box and hit enter
wusa /uninstall /KB:2949927

Let me know if it uninstalls or if it tells you that the update is not installed.

Step#2 - List Restore Points
1. Click your Start button. Type cmd. When the cmd program shows up, right-click on it and select Run as administrator.
2. Once the command prompt is open copy/paste the following into it and enter.
vssadmin list shadows >1 && notepad 1

3. Notepad will open with some information. Please paste this into your next post.

Thank you.

josephus · May 25, 2015

Hi Brian,

The results are as follows:

On Step 1; I'm not so sure but I'm sending you the image.

On Step 2: This is the results of the "Shadow file / program"

----------------------------------------------------------------------------------------------------------------------
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Contents of shadow copy set ID: {0d0cc9df-2ab0-47b0-ac23-85b1615f2026}
Contained 1 shadow copies at creation time: 5/16/2015 11:17:14 AM
Shadow Copy ID: {34ca15d3-a6a2-4361-86e7-4f3873e6050e}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {bcb6aab4-1b33-4496-8e78-fe5e4b8ca940}
Contained 1 shadow copies at creation time: 5/16/2015 11:17:45 AM
Shadow Copy ID: {0e632b21-8621-46f2-aa04-f4108adc74d2}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {1c7c18c5-1c22-4fc1-8c4a-9a1ce3b9343b}
Contained 1 shadow copies at creation time: 5/16/2015 6:00:44 PM
Shadow Copy ID: {056c34f9-e5b2-4d03-8679-0d6c8d36d876}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {3db2f7e7-6935-453d-9e88-c928a35b313c}
Contained 1 shadow copies at creation time: 5/16/2015 11:11:57 PM
Shadow Copy ID: {33e60e25-b99c-42bd-be53-3cfa42269b4a}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {907f4039-0434-47ca-9a75-b0244e6a3408}
Contained 1 shadow copies at creation time: 5/16/2015 11:26:09 PM
Shadow Copy ID: {5c83c5ba-0c96-4b28-b745-e17eabaf5c0e}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy5
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {acf25bde-4729-4203-a8e5-a64f81af8427}
Contained 1 shadow copies at creation time: 5/16/2015 11:37:22 PM
Shadow Copy ID: {2287ab36-c30c-43ec-a4e2-80762d48721e}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {b26f4cd1-b64d-45ce-bf55-006884b74f87}
Contained 1 shadow copies at creation time: 5/16/2015 11:39:10 PM
Shadow Copy ID: {df0b34ea-ebbc-4a1f-995c-747ae08dd2a7}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy7
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {3bac641c-e816-4441-bdf3-afb7da0e2e28}
Contained 1 shadow copies at creation time: 5/17/2015 3:00:28 AM
Shadow Copy ID: {5bbd7eb5-2e0d-4837-96d5-a1ecdea4186b}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy8
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {b77cc8cc-2198-4a5b-b870-05159a77c59a}
Contained 1 shadow copies at creation time: 5/18/2015 3:00:29 AM
Shadow Copy ID: {97275570-c114-4eda-98ce-b72acc3d7322}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy9
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {c697fba4-d84d-4644-b1f9-ac83abf978c4}
Contained 1 shadow copies at creation time: 5/19/2015 3:00:29 AM
Shadow Copy ID: {b9f51f1d-4cd2-4366-9cd3-4cf953b3f55d}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy10
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {bb6f565e-222c-4111-ad7a-11e2f2a03c41}
Contained 1 shadow copies at creation time: 5/19/2015 8:40:46 PM
Shadow Copy ID: {58e7bed8-142e-411e-bd64-1b5a4a9d2f1c}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy11
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {6b6628d7-78af-4ccb-b9dc-b5af2bf18711}
Contained 1 shadow copies at creation time: 5/20/2015 3:00:28 AM
Shadow Copy ID: {58350b3c-4813-47ae-b6b0-7e4989d16153}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy12
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {decb1c28-894f-4d83-affe-2212cd94c814}
Contained 1 shadow copies at creation time: 5/21/2015 3:00:28 AM
Shadow Copy ID: {a4824d97-274a-4eb1-b9b3-e8e6dc0cf336}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy13
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {9ab45403-0130-4e7f-881e-f700b683a3bc}
Contained 1 shadow copies at creation time: 5/22/2015 3:00:28 AM
Shadow Copy ID: {d6ec4361-b9d2-4be1-b037-9b547c544057}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy14
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {2c4389c3-9b88-4715-b2ba-9e910fbab937}
Contained 1 shadow copies at creation time: 5/23/2015 8:22:44 AM
Shadow Copy ID: {763e7e10-6e5d-4861-88b9-255fc661e086}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy15
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {1f93d69a-4938-480e-8ea7-38aacd7eb9c9}
Contained 1 shadow copies at creation time: 5/23/2015 3:37:59 PM
Shadow Copy ID: {6b4d7456-1058-405d-82ff-8d6096a73c40}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy16
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {946a0a3c-c77e-4267-a776-49628a190b45}
Contained 1 shadow copies at creation time: 5/23/2015 3:43:10 PM
Shadow Copy ID: {ca14044d-1260-465b-8ecc-80cf5785690a}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy17
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {30c2efae-d8d1-4d8a-9b8f-81daa54242d2}
Contained 1 shadow copies at creation time: 5/23/2015 5:25:25 PM
Shadow Copy ID: {4854f470-136d-4d2e-92cc-eed5acd9b5e0}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy18
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {fd0d0d41-b8fc-414a-99d8-bfdc36ad44e3}
Contained 1 shadow copies at creation time: 5/24/2015 3:00:28 AM
Shadow Copy ID: {47c83c3e-a559-4593-b05a-bd9afce7dc0d}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy19
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {7cd9b27f-cf82-4b02-bb80-40d50f9bb4af}
Contained 1 shadow copies at creation time: 5/24/2015 7:25:40 PM
Shadow Copy ID: {ac47499d-4217-4161-be55-2e4eb26722d4}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy20
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {7ab9b9a6-4aaf-4d52-bac2-9382b3f9405f}
Contained 1 shadow copies at creation time: 5/25/2015 3:00:29 AM
Shadow Copy ID: {91c27c69-65f3-46de-b9ae-4dedcfbd7348}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy22
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {a3562e96-6d3e-4e12-a853-c23957067cb1}
Contained 1 shadow copies at creation time: 5/25/2015 3:19:50 PM
Shadow Copy ID: {785bc33b-594f-40ef-b232-e330e05943f2}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy23
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

Contents of shadow copy set ID: {fb058271-14e0-4d48-95d5-75d9218d83a3}
Contained 1 shadow copies at creation time: 5/25/2015 4:39:13 PM
Shadow Copy ID: {87d25bf2-de26-465f-8de7-0f2b1ff4348b}
Original Volume: (C:)\\?\Volume{a1aa329c-fba7-11e2-a895-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy24
Originating Machine: JosepPerez-PC
Service Machine: JosepPerez-PC
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessibleWriters
Attributes: Persistent, Client-accessible, No auto release, Differential, Auto recovered

--------------------------------------------------------------------------------------------------------------------------------

Thanks for your support

Josephus

BrianDrab · May 25, 2015

For Step#1 there is a space after wusa, and a space after uninstall. Can you try again?

wusa /uninstall /KB:2949927

josephus · May 25, 2015

Yes, this time it has been uninstall. I'm require to re-start the computer which I will do after i send the message.

Josephus

BrianDrab · May 25, 2015

Excellent. Try downloading and installing KB3033929 again.

josephus · May 25, 2015

Hi Brian,
I re-Install the program Security Update for Windows (KB3033929) and (see picture) it was not successful.

Josephus

BrianDrab · May 25, 2015

Thanks. Please zip up and send me the following two files.

C:\Windows\WindowsUpdate.log
C:\Windows\Logs\CBS\CBS.log

You should copy them to the desktop and then zip them up. thanks.

josephus · May 25, 2015

Hi Brian,

Enclosed are the two log files you requested.

Josephus

BrianDrab · May 25, 2015

Perfect. If you could do the same thing again but this time provide a Process Monitor trace.

Step#1 - Capture Process Monitor Trace
1. Download KB3033929 and save it to your desktop.
2. Download and run Process Monitor. Leave this running while you perform the next steps.
3. Go ahead and attempt to install the update that you just downloaded. File name should be Windows6.1-KB3033929-x64.msu
4. Stop Process Monitor as soon as the update fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.

11908d1430506241-windows-updates-fail-repeatedly-stop-jpg

5. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
6. Zip up and attach the LogFile.PML file as well as your CBS.log as well as your C:\Windows\WindowsUpdate.log.

Go The Power · May 26, 2015

Hi Josephus,

Instead of having the two threads, we will just stick to this one.

As well getting the requested information from Brian can you please also provide the following:

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

Double-click SystemLook.exe to run it.
Copy the content of the following codebox into the main textfield:
Code:
```
:filefind
*Microsoft-Windows-crypt32-dll*
```
Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

josephus · May 26, 2015

Hi Alex and good morning from Toronto,

Well comeback to my nightmares and thank you very much for the extraordinary support that you and Brian have given me for the past few weeks.

Last night I was trying to send to Brian the files he has requested and, for whatever reason, my Mozilla Firefox crash twice then I realized that the cause could have been that one of the files he requested was too large and it could not be taken by your server. So, I will attached the files he requested plus your 'SystemLok" additional file.

Keeping you informed and Brian about the last events I must point out that the file from Microsoft called Windows6.1-KB3033929-x64.msu was downloaded and installed and a message did show up saying "Installation complete", therefore for and, whatever reason, he wanted this file to be installed; it has been done successfully.

After that I reboot the system thinking that in doing this it will activate the Microsoft Security Systems and I will be able to updates the rest of the files (6 all together out of 89). But it did not happened calling Error Code 800731B as the cause of not be able to update those files.

Bellow is the link of the log file done yesterday that I was not able to upload.

https://www.dropbox.com/s/251nknk54asey1r/Logfile_May25.rar?dl=0

Finally as an attachment, I'm sending you the rest of the files.

Thank you very much for your extraordinary support.

Josephus

BrianDrab · May 26, 2015

Hi and thank you for the information you provided as it was helpful. I had you manually try to install Windows6.1-KB3033929-x64.msu since it was one of the updates that was failing. Sometimes it's better to try and download/install manually when working on issues with Windows Update. Now that it has been installed successfully, can you please download and attempt to install KB3035132. The name of this file will be Windows6.1-KB3035132-x64.msu.

Let us know how it goes. Thanks.

josephus · May 26, 2015

Hi Brian and Alex and good afternoon to both of you,

This is actually what I have done this morning I was trying to download each of them, one at a time, individually and Security Updates for Windows, (KB3049563); (KB3033929), and the message I got was that "The following Updates were not installed" (I took the pictures of its results for you to view it). Then I went to Windows Update Troubleshooting and after it was completed, on 'Problems found' you will be able to see what it has been fixed and what it wasn't. Microsoft congratulates itself for the fixes they have done and it was not able to fix the issue of reference. What Microsoft doesn't know is that the tree fixes they claimed they "fixed" was done by your guys and not by Microsoft Engineers. The most peculiar thing of all this is that when we click on "Explore additional options" is telling to call your friends, go to Microsoft forums, etc. and if by any chance you call them, the minimum charge is $USA 90.00 and, you know what? they will tell you, after falling to do the corrections, that the best solution is to re-install the software.

Going back to your recommendation to install Windows Update (KB3035132) the results have been as the same as the others. That's the reason I did not went any further.

I'm attaching the pictures of those that I have done this morning and the one you recommended for me to install.

Josephus

BrianDrab · May 26, 2015

Would you mind trying this again? Please delete any log files that you have on your desktop to avoid confusion. Then do the following. Please also provide me the exact time that you start attempting to install the update. Thank you.

Capture Process Monitor Trace
1. Download KB3035132 and save it to your desktop.
2. Download and run Process Monitor. Leave this running while you perform the next steps. If you already have Process Monitor downloaded, simply open up the program.
3. Go ahead and attempt to install the update that you just downloaded. File name should be Windows6.1-KB3035132-x64.msu
4. Stop Process Monitor as soon as the update fails. You can simply do this by clicking the magnifying glass on the toolbar as shown below.

5. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
6. Zip up and attach the LogFile.PML file as well as your CBS.log as well as your C:\Windows\WindowsUpdate.log.

josephus · May 26, 2015

Hi Brian,

All programs, the 1)Process Monitor and the 2)Microsoft Update started, the first one, 1) at 8.00pm and the second one, 2) immediately. What I did notice is when I click on the Microsoft Update to run, it took almost 5 second for the process Monitor to stop without the need of clicking on the magnifying glass. Nevertheless I click on it immediately after I saw that the message indicating that Microsoft Update failed.

All files have been dated with today's date (May 26 or 26 May) to avoid confusion. In the Log file I added 8pm which was the starting time. Two have been attached given you the location thru Dropbox link. And the Windows Update log file as an attachment

https://www.dropbox.com/s/fq9dqrvl8bdgx0f/Logfile_26May_8pm.rar?dl=0
https://www.dropbox.com/s/fq9dqrvl8bdgx0f/Logfile_26May_8pm.rar?dl=0

Everything was done accordingly and with the best of my knowledge and ability.

Josephus

josephus · May 27, 2015

Hi Brian,
Besides the information that I send you yesterday, I took the liberty of downloading a program called "Security Task Manager" for a 30 days trial. What the program does is to run the "Running proceses" in my computer and it looks at each an individual process, programs, drivers, library files, etc. you name it and is there. I'm not so sure if sending you the "save file" of this program will help you out in your search. But if you can look into it maybe it can be of help. I don't know, but it could be that one of those programs, drives, or .dll files that may be an impediment to update the files.

Thanks for your help

Josephus

BrianDrab · May 27, 2015

Thanks for the info. Can you copy the following files to your desktop and then zip them up and attach?

C:\Windows\servicing\Sessions\Sessions.xml
C:\Windows\servicing\Sessions\30447632_696068296.xml
C:\Windows\inf\setupapi.dev.log

Go The Power · May 28, 2015

Hello,

There are some keys missing from your COMPONENTS hive. Can you please also run the following for me:

SFCFix script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Go to your desktop and right click on the background -> Select New -> Text Document -> Name this file SFCFixScript.txt.

Open up SFCFixScript.txt and copy all of the following text inside the code box below and paste it into SFCFixScript.txt.

Code:

::

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18700_none_b99c8312f46ee3bd]
"identity"=hex:4d,69,63,72,6f,73,6f,66,74,2d,57,69,6e,64,6f,77,73,2d,63,72,79,\
  70,74,33,32,2d,64,6c,6c,2c,20,43,75,6c,74,75,72,65,3d,6e,65,75,74,72,61,6c,\
  2c,20,56,65,72,73,69,6f,6e,3d,36,2e,31,2e,37,36,30,31,2e,31,38,37,30,30,2c,\
  20,50,75,62,6c,69,63,4b,65,79,54,6f,6b,65,6e,3d,33,31,62,66,33,38,35,36,61,\
  64,33,36,34,65,33,35,2c,20,50,72,6f,63,65,73,73,6f,72,41,72,63,68,69,74,65,\
  63,74,75,72,65,3d,61,6d,64,36,34,2c,20,76,65,72,73,69,6f,6e,53,63,6f,70,65,\
  3d,4e,6f,6e,53,78,53
"S256H"=hex:35,58,a0,da,b2,b8,c1,cf,0c,09,86,08,59,a3,33,67,f3,2c,6d,3d,61,8c,\
  69,2f,44,34,20,3f,94,2f,46,94
"c!d05410dc1ef..ef26ad169a3_31bf3856ad364e35_6.1.7601.18700_cdcbbb32333ffd70"=hex:
"f!crypt32.dll"=hex:63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,\
  00,6c,00

Click on File -> Save. Close out of SFCFixScript.txt.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

Once done please run Windows Update again, it will still most likely still fail, but I want to see if this value is now not showing as an issue. Once it does fail please upload the following:

Convert CBS.log to CBS.txt

Click on the

button => Inside the search box copy and paste the following command:
Code:
```
cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
Press Enter
Once this has completed please go to your Desktop and you will find CBS.txt, please rename this file to CBS_{Insert forum username here}_{insert todays Date here}.txt For example "CBS_Go The Power_1803.txt"
Please upload CBS_{Username}_{Date}.txt to this thread.

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive

Click on the Start

button and in the search box, type regedit
When you see regedit on the list, right-click on it and select Run as administrator
When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide
Once selected, click File > Export....
Change the Save as type: to Registry Hive Files (*.*)
Name this file SideBySide (with no file extension) and save it to your Desktop.

Once done please upload this file via Dropbox or One Drive

Please ignore this section.

Analysis:

CBS error:

Code:

2015-05-25 20:41:30, Info                  CSI    00000242 Changelist shadowed missing its manifest - Microsoft-Windows-Security-CredSSP, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000243 Changelist shadowed missing its manifest - Microsoft-Windows-Security-Digest, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000244 Changelist shadowed missing its manifest - Microsoft-Windows-Security-Schannel, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000245 Changelist shadowed missing its manifest - Microsoft-Windows-Security-NTLM, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000246 Changelist shadowed missing its manifest - Microsoft-Windows-SystemRestore-Main, Version = 6.1.7601.18717, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000247 Changelist shadowed missing its manifest - Microsoft-Windows-Security-Digest, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000248 Changelist shadowed missing its manifest - Microsoft-Windows-crypt32-dll, Version = 6.1.7601.18700, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000249 Changelist shadowed missing its manifest - Microsoft-Windows-MSAuditEvtLog.Resources, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024a Changelist shadowed missing its manifest - Microsoft-Windows-ncrypt-dll, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024b Changelist shadowed missing its manifest - Microsoft-Windows-SystemRestore-Main, Version = 6.1.7601.18717, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024c Changelist shadowed missing its manifest - Microsoft-Windows-OS-Kernel, Version = 6.1.7601.18717, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024d Changelist shadowed missing its manifest - Microsoft-Windows-Security-Kerberos, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024e Changelist shadowed missing its manifest - Microsoft-Windows-MSAuditEvtLog.Resources, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000024f Changelist shadowed missing its manifest - Microsoft-Windows-ncrypt-dll, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000250 Changelist shadowed missing its manifest - Microsoft-Windows-LSA.Resources, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000251 Changelist shadowed missing its manifest - Microsoft-Windows-Security-Kerberos, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000252 Changelist shadowed missing its manifest - Microsoft-Windows-MSAuditEvtLog, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000253 Changelist shadowed missing its manifest - Microsoft-Windows-LSA, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000254 Changelist shadowed missing its manifest - Microsoft-Windows-Security-CredSSP, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000255 Changelist shadowed missing its manifest - Microsoft-Windows-Security-Schannel, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000256 Changelist shadowed missing its manifest - Microsoft-Windows-OS-Kernel, Version = 6.1.7601.18717, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000257 Changelist shadowed missing its manifest - Microsoft-Windows-LSA, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000258 Changelist shadowed missing its manifest - Microsoft-Windows-Security-NTLM, Version = 6.1.7601.18714, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    00000259 Changelist shadowed missing its manifest - Microsoft-Windows-MSAuditEvtLog, Version = 6.1.7601.18719, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Info                  CSI    0000025a Changelist shadowed missing its manifest - Microsoft-Windows-crypt32-dll, Version = 6.1.7601.18700, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2015-05-25 20:41:30, Error                 CSI    0000025b@2015/5/26:00:41:30.858 (F) d:\win7sp1_gdr\base\wcp\componentstore\csd_winners.cpp(935): Error STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE originated in function OriginateManifestsMissingError expression: (null)
[gle=0x80004005]
2015-05-25 20:41:32, Error                 CSI    0000025c (F) STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE #2763819# from CCSDirectTransaction::PerformChangeAnalysis(...)[gle=0xd0150024]
2015-05-25 20:41:32, Error                 CSI    0000025d (F) STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE #2763818# from CCSDirectTransaction::PrepareForCommit(...)[gle=0xd0150024]
2015-05-25 20:41:32, Error                 CSI    0000025e (F) STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE #2763817# from CCSDirectTransaction::ExamineTransaction(...)[gle=0xd0150024]
2015-05-25 20:41:32, Error                 CSI    0000025f (F) STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE #2763816# from CCSDirectTransaction_IRtlTransaction::ExamineTransaction(...)[gle=0xd0150024]

Manifest is on machine:

Code:

C:\Windows\winsxs\Manifests\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18700_none_b99c8312f46ee3bd.manifest	------- 2747 bytes

Checked HKLM\COMPONENTS\DerivedData\Components\
-No associated key (HKLM\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18700_none_b99c8312f46ee3bd)

Key exists inside VersionIndexed:

Code:

HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.1.7601.18766 (win7sp1_gdr.150217-1551)\ComponentFamilies\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_none_bedf38e7613bbfd6\v!6.1.7601.18700

This key has value called InstallMapMissingComponentKey.

josephus · May 28, 2015

Hi Alex and Brian and good afternoon from Toronto,

Glad to see your Australian flag.

Happy that both of team up to solve that problem. Anyways, I'm enclosing the files you have requested.

Josephus

[SOLVED] Error Code 8007371B

Contributor

Emeritus

Contributor

Attachments

Emeritus

Contributor

Emeritus

Contributor

Emeritus

Contributor

Attachments

Emeritus

Senior Administrator, Windows Update Expert, Contributor

Contributor

Attachments

Emeritus

Contributor

Attachments

Emeritus

Contributor

Attachments

Contributor

Attachments

Emeritus

Senior Administrator, Windows Update Expert, Contributor

Contributor

Attachments