[SOLVED] Windows 10 (21H2) Windows Update KB5015878 Error 0x8007000d

[cinnyboy]

Windows fails to install optional update KB5015878. It looks like it is installed, but after restarting WU, it states that it failed. DISM, chkdsk, and SFC, report no errors prior to installation. CBS logs are attached below.

 

[x BlueRobot]

2022-07-28 12:43:38, Error                 CSI    000000d3 (F) Matching binary ndadmin.exe missing for component Microsoft-Windows-NewDev, version 10.0.19041.1865, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}[gle=0x80004005]
2022-07-28 12:43:38, Info                  CBS    Sending WER
2022-07-28 12:43:38, Error                 CSI    000000d4@2022/7/28:10:43:38.841 (F) onecore\base\wcp\componentstore\storelayout.cpp(1702): Error 800f0984 [Warning,Facility=15 (0x000f),Code=2436 (0x0984)] originated in function ComponentStore::CRawStoreLayout::HydrateFileUsingForwardAndReverseDeltas expression: ((SCODE) (((unsigned long)(1)<<31) | ((unsigned long)(15)<<16) | ((unsigned long)(0x984))) )
[gle=0x80004005]
2022-07-28 12:43:38, Error                 CSI    000000d5@2022/7/28:10:43:38.841 (F) Attempting to mark store corrupt with category [l:18 ml:19]'CorruptPayloadFile'[gle=0x80004005]
2022-07-28 12:43:38, Error                 CSI    000000d6@2022/7/28:10:43:38.954 (F) onecore\base\wcp\rtllib\win32lib\delta_library.cpp(287): Error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) originated in function Windows::Rtl::DeltaDecompressBuffer expression: g_pfnApplyDeltaB(( (DELTA_FLAG_TYPE)0x00000000 ), ReferenceInput, CompressedInput, &UncompressedOutput)
[gle=0x80004005]

SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

 

[cinnyboy]

Thanks for the script. I applied it and it copied all the files without a problem (code below). Update however returns the same result. It looks like it's installed but when searching for new updates shows error 0x8007000d. I will attach CBS folder below.

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-07-31 10:06:09.931
Microsoft Windows 10 Build 19044 - amd64
Using .zip script file at C:\Users\radek\Pulpit\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\WinSxS

Successfully created directory tree \\?\C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1.
Successfully created directory tree \\?\C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\r.
Successfully created directory tree \\?\C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\f.

Successfully copied file C:\Users\radek\AppData\Local\niemiro\Archive\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\ndadmin.exe to C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\ndadmin.exe.
Successfully copied file C:\Users\radek\AppData\Local\niemiro\Archive\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\r\ndadmin.exe to C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\r\ndadmin.exe.
Successfully copied file C:\Users\radek\AppData\Local\niemiro\Archive\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\f\ndadmin.exe to C:\WINDOWS\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1\f\ndadmin.exe.

Successfully restored ownership for C:\WINDOWS\WinSxS
Successfully restored permissions on C:\WINDOWS\WinSxS
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 11 datablocks.
Finish time: 2022-07-31 10:06:16.175
Script hash: qIYfS8r9wsZt7tSYtaABRavUg42vVcEd8FDMta8V+AE=
----------------------EOF-----------------------

 

[x BlueRobot]

2022-07-31 10:39:02, Error                 CSI    000000d2 (F) Hydration failed with error NTSTATUS_FROM_WIN32(ERROR_INVALID_DATA) . Delta Type: Forward Delta , IntegrityState Valid: true , RetrievedChecksum: 1066601217 , ComputedChecksum: 1066601217[gle=0x80004005]
2022-07-31 10:39:02, Error                 CSI    000000d3 (F) Hydration failed for component Microsoft-Windows-NewDev, version 10.0.19041.1865, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} on file newdev.exe with NTSTATUS -1073283059. Matching Component = Microsoft-Windows-NewDev, version 10.0.19041.1620, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}. FileHasForwardReverseDeltas  = false[gle=0x80004005]
2022-07-31 10:39:02, Error                 CSI    000000d4 (F) Matching binary newdev.exe missing for component Microsoft-Windows-NewDev, version 10.0.19041.1865, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}[gle=0x80004005]

It's the same component as before but with a different payload file this time. Please follow the same instructions as before.

 

[cinnyboy]

Still no cigar. SFCFix successfully applied and then the same error is being shown after the update is supposedly installed. CBS folder is attached below.

 

[x BlueRobot]

Thanks, it seems to be complaining about the binary we just patched in our last fix, could you please provide your COMPONENTS hive using the following instructions:

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or WeTransfer and then just provide the link in your reply.

 

[cinnyboy]

I've managed to successfully copy and zip the COMPONENTS file. I'll be awaiting further fixes. Thanks for the help!

 

[x BlueRobot]

SFCFixScript.txt
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.[/list]
   
   If successful, then please attempt to the install the failing update again.

 

[cinnyboy]

Thanks! I've successfully executed the script, code will follow below. When I complete the update I will write again.

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-08-04 22:59:53.485
Microsoft Windows 10 Build 19044 - amd64
Using .txt script file at C:\Users\radek\Pulpit\SFCFixScript.txt [0]




RegistryScript::
Successfully took ownership and permissions for registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components.

Successfully imported registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1.

Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\amd64_microsoft-windows-newdev_31bf3856ad364e35_10.0.19041.1865_none_85fb561a060afbe1.
Successfully restored ownership and permissions for registry key HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components.
RegistryScript:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 13 datablocks.
Finish time: 2022-08-04 22:59:53.765
Script hash: KbgP3yggBV7cWLnuloJRlCjvt6w+uJpzaBXRsZRhH2E=
----------------------EOF-----------------------

 

[cinnyboy]

It went further than before, even requiring a restart to complete but it still doesn't stick. The error code changed though, it's now 0x80073712. CBS folder will be below.

 

[x BlueRobot]

It seems like there possibly might be additional registry corruption, could you please follow these instructions:

Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try updating the system just like you have in the past.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square icon on the toolbar as shown below.

4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up and provide the link to the LogFile.PML file as well as your CBS.log Examples of services to upload to are Dropbox or OneDrive or WeTransfer.

 

[cinnyboy]

Thanks for the assistance! I've run the update that finished with the same error and managed to capture the Process Monitor Trace. I had to compress the file because it's 15GB big.

Link for the file is below:

Logfile.zip

Note that for security reasons it's password protected. Password is here:

2sstkY$PWkt4

 

[x BlueRobot]

It seems like there is a large amount of missing components from your COMPONENTS hive, let's first of all attempt to remove the update which may be partially installed.

Remove Update Manually
1. Click on the Start button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following command into it, and press Enter
wusa /uninstall /KB:5015878

4. Let me know if it says it was successful or if there are any errors, then please continue to the next which is to search the registry using FRST64.

FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:

reg load HKLM\COMPONENTS C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS

4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB5015878 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.

 

[cinnyboy]

Thanks for the instructions! The registry command prompt returned a notification that the update is not installed. COMPONENTS loaded successfully. FRST search results are attached below.

 

[x BlueRobot]

Thanks, it seems like the update isn't partially installed but there is still some significant corruption in your COMPONENTS hive. I'll see if I can source those missing subkeys and then provide you with an updated COMPONENTS hive.

 

[cinnyboy]

Great! I'll be patiently waiting for it!

 

[x BlueRobot]

Could you please create a backup of your current COMPONENTS hive and then replace it with the one attached? Afterwards, please attempt to install the problematic update again and provide the CBS logs if it fails.

 

[cinnyboy]

I've successfully replaced the component hive but the update still won't stick. The error code is 0x80073712. As usual CBS folder will be attached below.

 

[x BlueRobot]

Could you please provide your current COMPONENTS hive and then get another Process Monitor trace while attempting to install the update?

 

[cinnyboy]

I’m encountering new issues between programs and the system, unrelated to this one that we are trying to solve. I will do a fresh install, I feel that this install is not stable anymore. Thank you very much for all the help, it’s been invaluable!