[SOLVED] Server 2008 R2 Datacenter - Most Updates Failing 0x80070002

[Kokomo]

Hello Sysnative Windows Update Wizards,

Have a 2008 R2 Datacenter VM that's having some issues getting patched, almost all attempted updates are returning error 0x80070002, unfortunately we need to bandaid it for now in lieu of replacing it.

Attached is CBS Logs, when attempting to run componentsScanner.exe it is crashing:


SFC has run with no corruption detected/repaired in its dialog, SURT has also been ran a couple times. Tried SFCFix by itself and it returns "Something has gone horribly wrong and SFCFix has crashed".

Let me know if I can provide anything else. Appreciate any assistance!

 

[PeterJ]

Hello and welcome,

Open an elevated command prompt.
Copy and paste the following command into it, then press enter.

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

 

[Kokomo]

Hello and welcome,

Open an elevated command prompt.
Copy and paste the following command into it, then press enter.

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

Hi Peter,

Attached is the zipped cbs.txt. Thanks!

 

[PeterJ]

Export registry as hive

• Click on the Start button and in the search box, type regedit
• When you see regedit on the list, right-click on it and select Run as administrator.
• When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
  
  
• Once selected, click File > Export....
• Change the Save as type: to Registry Hive Files (*.*).
• Name this file ComponentBasedServicing (with no file extension) and save it to your Desktop.
• Right-click on the saved file and choose Send To -> Compressed (zipped) Folder.
• Attach the .ZIP file to your next post.
• If the file is too large to upload here, please upload to Gofile or WeTransfer and just provide the downloadlink here.

 

[Kokomo]

Export registry as hive

• Click on the Start button and in the search box, type regedit
• When you see regedit on the list, right-click on it and select Run as administrator.
• When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
  
  
• Once selected, click File > Export....
• Change the Save as type: to Registry Hive Files (*.*).
• Name this file ComponentBasedServicing (with no file extension) and save it to your Desktop.
• Right-click on the saved file and choose Send To -> Compressed (zipped) Folder.
• Attach the .ZIP file to your next post.
• If the file is too large to upload here, please upload to Gofile or WeTransfer and just provide the downloadlink here.

Registry hive attached

 

[PeterJ]

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the attachment and extract it.
Open the extracted folder, double-click the file regfix.reg.
When prompted allow to change the registry settings.
Report the result.

Step 2:
Restart the machine.
Open an elevated command prompt.
Copy and paste the following commands into it, press enter after each.

sfc /scannow

Wait for this to finish before you continue

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

 

[Kokomo]

Step 1:
Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

Download the attachment and extract it.
Open the extracted folder, double-click the file regfix.reg.
When prompted allow to change the registry settings.
Report the result.

Step 2:
Restart the machine.
Open an elevated command prompt.
Copy and paste the following commands into it, press enter after each.

sfc /scannow

Wait for this to finish before you continue

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

I did receive an error trying to import the regfix saying not all keys could be imported due to being in-use, but using: regedit.exe /s regfix.reg returned no error. Is '"Fisibility"=-' intended in the regfix or possibly a typo?

System has been rebooted and SFC ran, CBS attached.

Appreciate all your help so far!

 

[PeterJ]

Is '"Fisibility"=-' intended in the regfix or possibly a typo?

Yes, that is intended.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download
  
  SFCFix and move the executable to your desktop.
• Download the attachment SFCFixScript.txt and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

 

[Kokomo]

Yes, that is intended.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download
  
  SFCFix and move the executable to your desktop.
• Download the attachment SFCFixScript.txt and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

SFCFix version 3.0.2.1 by niemiro.
Start time: 2023-09-11 13:48:40.771
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Using .txt script file at C:\Users\admin\Desktop\SFCFixScript.txt [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.

WARNING: Failed to create backup for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.

Successfully imported registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.

Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.
RegistryScript:: directive completed successfully.




Successfully processed all directives.



Failed to generate a complete zip file. Upload aborted.


SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2023-09-11 13:57:30.812
Script hash: zCio3r5Okqi+rDXyyyHQupdl4ucu/SAV4KMCep0bfUs=
----------------------EOF-----------------------

 

[PeterJ]

Restart the machine.
Open an elevated command prompt.
Copy and paste the following commands into it, press enter after each.

sfc /scannow

Wait for this to finish before you continue

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

 

[Kokomo]

Restart the machine.
Open an elevated command prompt.
Copy and paste the following commands into it, press enter after each.

sfc /scannow

Wait for this to finish before you continue

copy %windir%\Logs\CBS\cbs.log "%userprofile%\Desktop\cbs.txt"

This will create a file, cbs.txt on your Desktop. Zip this file and attach the zipped cbs.txt to your next post.

CBS attached. Also some background that may or may not be useful. I've been primarily trying to get .Net updates installed to fix a problem with an application not able to establish a TLS connection as the required ciphers don't seem to be present on this system. I've also noticed that ServerManager/MMC is crashing trying to load roles/features every time with the following error, probably more of a symptom of the corruption with .Net than a cause, but may be helpful:

Problem signature:
Problem Event Name: CLR20r3
Problem Signature 01: mmc.exe
Problem Signature 02: 6.1.7601.23892
Problem Signature 03: 5990c6ab
Problem Signature 04: Microsoft.Windows.ServerManager
Problem Signature 05: 6.1.0.0
Problem Signature 06: 4ce7c964
Problem Signature 07: 1446
Problem Signature 08: 54
Problem Signature 09: System.ArgumentException
OS Version: 6.1.7601.2.1.0.400.8
Locale ID: 1033

If what you're seeing now is a lot of deep rooted corruption that would take a lot of time to iron out manually let me know, looks like I may have compiled the necessary software and configs now to rebuild this VM from scratch, so don't want to waste your time if this system is turning out to be properly hosed.

 

[PeterJ]

The registry problems are still not solved.

Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the Farbar Recovery Scan Tool and save it to your Desktop:
   64-bit: Downloading Farbar Recovery Scan Tool
   Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
   
2. Download the attachment fixlist.txt and save it to your desktop.
3. Right-click on FRST64.exe and select "Run as administrator".
4. Press the Fix button.
5. The tool will now process fixlist.txt.
6. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
7. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
8. Attach the logfile Fixlog.txt to your next reply.

 

[Kokomo]

The registry problems are still not solved.

Warning: This script was written specifically for this user, for use on that particular machine. Do not run this script on another machine.

1. Download the Farbar Recovery Scan Tool and save it to your Desktop:
   64-bit: Downloading Farbar Recovery Scan Tool
   Note: Your antivirus program may report FRST incorrectly as an infection. If so, disable the real-time protection when downloading and running FRST.
2. Download the attachment fixlist.txt and save it to your desktop.
3. Right-click on FRST64.exe and select "Run as administrator".
4. Press the Fix button.
5. The tool will now process fixlist.txt.
6. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
7. When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
8. Attach the logfile Fixlog.txt to your next reply.

Yes, it looks like permissions to these registry keys were denying access this whole time, even though SFCFix did not return error.

First run of FRST64 returned access denied on the 3 keys, I gave Administrators permissions to those three and ran again and it was successful. I also located some additional keys with corrupt characters looking through the CBS log and corrected those under the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-kernel32_31bf3856ad364e35_0.0.0.0_none_13b6767256d3361a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-lsa_31bf3856ad364e35_0.0.0.0_none_26431bf35d52e5a2

After doing that and running another SFC and reboot, so far so good, first round of updates that were previously failing have now installed and I'm running the next round now which should include the updates I need to get my app in question communicating correctly over TLS. Also am no longer getting the MMC crashes and can successfully browse roles/features.

I'll provide further update tomorrow if this next round of updates completes, if so I should be all set. Thanks so much for your assistance.

 

[PeterJ]

Ok. Keep me informed of the progress or when the issues are solved.

 

[Kokomo]

Ok. Keep me informed of the progress or when the issues are solved.

Hi Peter, everything looks good now, all subsequent updates have completed successfully.

 

[PeterJ]

Great. I 'll mark this thread as solved.

Take care.