Server 2008 SP 2 Hash Mismatch/Updates Fail Install

redrumrudy · Feb 1, 2019

Hello,

I have a Server 2008 machine that fails to install two updates: KB4480968 and Windows Internet Explorer 9 for Windows Server 2008 for x64 based systems. Unsure if the hash mismatch is related, but is reflected in the attached log files.

Appreciate your help in advance.

View attachment CBS.zip View attachment CBS.zip

[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]=================================
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 25.0
2019-01-31 13:03[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Windows Servicing Packages[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Package Manifests and Catalogs[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Package Watchlist[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Component Watchlist[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Packages[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking Component Store[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Summary:
Seconds executed: 1135
No errors detected[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18971.
Processor architecture: amd64.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18971&language=neutral&processorArchitecture=amd64&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18971&language=neutral&processorArchitecture=wow64&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.[/FONT]

[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-02-01 13:03:54.315
Microsoft Windows Server 2008 Service Pack 2 - amd64
Not using a script file.[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif][/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]
AutoAnalysis::
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 4
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 0
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.[/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif][/FONT]
[FONT=Verdana,Arial,Tahoma,Calibri,Geneva,sans-serif]
Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2019-02-01 13:04:41.534
----------------------EOF-----------------------[/FONT]

redrumrudy · Feb 1, 2019

Hello!

I managed to correct the errors found in the SFCFix by copying the relevant files from another 2008 server.

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-02-01 14:26:27.738
Microsoft Windows Server 2008 Service Pack 2 - amd64
Not using a script file.

AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2019-02-01 14:26:48.597
----------------------EOF-----------------------

=================================
Checking System Update Readiness.
Binary Version 6.0.6002.23186
Package Version 25.0
2019-02-01 14:40
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store
Summary:
Seconds executed: 783
No errors detected
Checking CoreOS key for repairing corruptions.
Winner version: 6.0.6002.18971.
Processor architecture: amd64.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18971&language=neutral&processorArchitecture=amd64&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.
Check key to be repaired: wcm://Microsoft-Windows-CoreOS?version=6.0.6002.18971&language=neutral&processorArchitecture=wow64&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\ComputerName
Recreated value: @_type.
Recreated value: @dataOnly.
Recreated value: @default.
Recreated value: @description.
Recreated value: @displayName.
Recreated value: @handler.
Recreated value: @legacyName.
Recreated value: @legacyType.
Recreated value: @migrate.
Recreated value: @scope.
Recreated value: @xsd:type.

Updates continue to fail:

View attachment CBS.zip.zip View attachment CBS.zip.zip

Thanks in advance.

Sysnative Windows Update · Feb 8, 2019

Hello and welcome! Apologies for the delay! Do you still require assistance?

redrumrudy · Feb 11, 2019

Thanks for the reply and yes I could still use some help with this server.

The situation has changed a bit. I had managed to fix the hash mismatches, but one has returned. Also Windows Internet Explorer 9 for Windows Server 2008 for x64 fails with error code 9C48, while KB4480968 fails with error code 8007371C. These two updates have failed repeatedly for several months.

It may or may not be related, but I am unable to add/remove any roles/features from the server.

CBS log - https://1drv.ms/u/s!AmF5O4hAUJEkqGGlmacfnr0haK8F

Sysnative Windows Update · Feb 11, 2019

Thanks.

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service and just provide the link here.

redrumrudy · Feb 12, 2019

Thanks. Will do after hours as it's a production server.

redrumrudy · Feb 13, 2019

I've tried rebooting twice and receive file in use during copy.

Sysnative Windows Update · Feb 14, 2019

Please try the following:

Option#2 (only if you are unable to follow the previous instructions)

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Filedropper or One Drive or SendSpace and then just provide the link in your reply.
You can close any open windows you have as well as the RegBak program now.

redrumrudy · Feb 15, 2019

Success.

https://1drv.ms/u/s!AmF5O4hAUJEkqGKrxFq9RhZkswDh

Sysnative Windows Update · Feb 16, 2019

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC Scan

Click on the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

redrumrudy · Feb 18, 2019

Thanks for the reply.

SFC run:

Code:

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-02-18 07:44:13.287
Microsoft Windows Server 2008 Service Pack 2 - amd64
Using .zip script file at C:\Users\MIS.MAIN\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_9.1.8112.16834_none_0a9969568e1a8f19\inetres.admx
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_9.1.8112.16834_none_0a9969568e1a8f19\inetres.admx to C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_9.1.8112.16834_none_0a9969568e1a8f19\inetres.admx.
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_9.1.8112.16834_none_0a9969568e1a8f19\inetres.admx
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_9.1.8112.16834_none_0a9969568e1a8f19\inetres.admx
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-02-18 07:44:13.615
Script hash: WhOLyzQZzqKMLMBYCJAaw62yWDX+W8Y9E3vUlQu3cTo=
----------------------EOF-----------------------

Sysnative Windows Update · Feb 18, 2019

Thanks. Do you happen to have another Server 2008 at your disposal?

redrumrudy · Feb 18, 2019

Yes I do. What do you need me to do?

Sysnative Windows Update · Feb 20, 2019

Navigate to the following folder:

C:\Windows\WinSxS and copy the following folders to your desktop and zip them up afterwards. Attach them here or upload them somewhere and post the link here :)

amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42
amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a
amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29
amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6
amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251

redrumrudy · Feb 21, 2019

I'm assuming you meant form the other server? If you meant the broken server let me know and I'll zip those up for you.

Sysnative Windows Update · Feb 21, 2019

Yes, from the other Server. Thank you. I'll prepare a fix for you later tonight.

Sysnative Windows Update · Feb 21, 2019

Thank you!

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

SFC Scan

Click on the Start button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

sfc /scannow

Wait for this to finish before you continue

copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

redrumrudy · Feb 22, 2019

Thanks for the reply.

Here you go:

Code:

 SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-02-22 08:19:29.966
Microsoft Windows Server 2008 Service Pack 2 - amd64
Using .zip script file at C:\Users\MIS.MAIN\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a\InetRes.adml
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml to C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml.
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml to C:\Windows\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml.
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml to C:\Windows\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml.
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a\InetRes.adml to C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a\InetRes.adml.
Successfully copied file C:\Users\MIS.MAIN\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml to C:\Windows\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml.
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-allroles_31bf3856ad364e35_6.0.6001.18000_none_bfc70af2dc253251\TerminalServices.Events.xml
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-printing-server-role_31bf3856ad364e35_6.0.6001.18000_none_f571d1c7bf1857d6\printservices.events.xml
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-n..npas-role-view-file_31bf3856ad364e35_6.0.6001.18000_none_ed5dad479b710b29\NetworkPolicyAndAccessServices.Events.xml
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a\InetRes.adml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm.resources_31bf3856ad364e35_9.1.8112.16834_en-us_8ba7f17a73c31c7a\InetRes.adml
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-d..rvices-domain-files_31bf3856ad364e35_6.0.6001.18000_none_f729a9bdfbbd7f42\ActiveDirectoryDomainServices.Events.xml
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 5 datablocks.
Finish time: 2019-02-22 08:19:30.497
Script hash: O3N7IcKayPdCXPGH8ab3gkjyxIdmsDXE8yJjsvx0bCU=
----------------------EOF-----------------------

redrumrudy · Feb 22, 2019

Looks like the hash mismatches are corrected. Many thanks for that. :)

Update on the failed updates:

After the latest round of updates, their are now three failures:
1. Windows Internet Explorer 9 for Windows Server 2008 for x64-based syustems - 9C48;
2. KB4487023 - 8007371C, and;
3. KB4487081 - 66A.
The updates show up in the notification area, but the option to install/shutdown is not available on shutdown/restart menu.
1. It did show up once under a domain admin account, but after logout/login, this option had disappeared.
After update failure is presented on screen, there is often two windows presented at the same time.

Thanks for your time and effort with these problems.

Sysnative Windows Update · Feb 22, 2019

What was the message you got from SFC Scan?

Please run it once again (only the scan) and attach CBS.log :)

We must ensure it's fully clean before we proceed.

Server 2008 SP 2 Hash Mismatch/Updates Fail Install

Member

Member

Inactive

Member

Attachments

Inactive

Member

Member

Inactive

Member

Inactive

Attachments

Member

Attachments

Inactive

Member

Inactive

Member

Attachments

Inactive

Inactive

Attachments

Member

Attachments

Member

Inactive