Windows 7 Pro - Security Monthly Quality Rollup fails

swapped · Apr 24, 2019

Windows 7 Pro 64 bit VM - Security Monthly Quality Rollups fail. The latest update which fails is KB4493472, but tried months prior as well and they did not work. I keep encountering unknown error code 80070002. Tried removing software distribution folder, tried manually installing updates as well as Microsoft update troubleshooter.

SFC /scannow - no errors

SFCFix Output:

Code:

SFCFix version 3.0.1.0 by niemiro.

Start time: 2019-04-24 20:09:28.784

Microsoft Windows 7 Service Pack 1 - amd64

Not using a script file.









AutoAnalysis::

SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.

CBS & SFC total detected corruption count: 0

CBS & SFC total unimportant corruption count: 0

CBS & SFC total fixed corruption count: 0

SURT total detected corruption count: 12

SURT total unimportant corruption count: 0

SURT total fixed corruption count: 0

AutoAnalysis:: directive completed successfully.









Successfully processed all directives.

SFCFix version 3.0.1.0 by niemiro has completed.

Currently storing 0 datablocks.

Finish time: 2019-04-24 20:10:15.975

----------------------EOF--------------

Thank you very much for your help!

Sysnative Windows Update · Apr 25, 2019

Hello and welcome!

Due to the precise nature of your corruption, you will receive help from a user named Bruce1270. He's one of our senior trainees here who's in his final phase of his studies and needs to gain some real world experience in specific areas of Windows Update. This means that he'll be assisting you, but that I will first need to double check and approve his fixes before he posts them to you. If anything this is a good thing for you because it means that you've got at least two of us watching over your thread, but it will unfortunately add a slight delay between each reply. I hope that you understand and can accept the need for us to train up new members in this way in order to carry on doing what we do here, however, if for any reason you object to this setup, I will happily take on your thread myself.

Thank you very much for your understanding. We'll be with you very shortly.

swapped · Apr 25, 2019

Thanks for the reply. That sounds great.

bruce1270 · Apr 27, 2019

Hi swapped

My name is Bruce1270 and I shall be assisting you. Apologies for the delay.

Please do the following

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Download SFCFix.exe (by niemiro) and save this to your Desktop.
Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
Save any open documents and close all open windows.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
SFCFix will now process the script.
Upon completion, a file should be created on your Desktop: SFCFix.txt.
Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put </> tags around the log to break up the text.

Then run SURT again and post the CheckSUR.log.

swapped · Apr 28, 2019

Thank you for your help! Please see below for the logs.

SCFFix Output:

Code:

SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-04-28 21:30:52.613
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\olmakrys\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\Temp\CheckSur\WinSxS\Manifests

Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\amd64_netfx-system.data.sqlxml_b03f5f7f11d50a3a_6.1.7601.19091_none_1423663a23aa2435.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\amd64_netfx-system.data.sqlxml_b03f5f7f11d50a3a_6.1.7601.19091_none_1423663a23aa2435.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\amd64_netfx-system.data.sqlxml_b03f5f7f11d50a3a_6.1.7601.23290_none_fd55d61e3d516aeb.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\amd64_netfx-system.data.sqlxml_b03f5f7f11d50a3a_6.1.7601.23290_none_fd55d61e3d516aeb.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\amd64_netfx-system.xml_b03f5f7f11d50a3a_6.1.7601.19091_none_615a18343c22d61d.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\amd64_netfx-system.xml_b03f5f7f11d50a3a_6.1.7601.19091_none_615a18343c22d61d.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\amd64_netfx-system.xml_b03f5f7f11d50a3a_6.1.7601.23290_none_4a8c881855ca1cd3.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\amd64_netfx-system.xml_b03f5f7f11d50a3a_6.1.7601.23290_none_4a8c881855ca1cd3.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.data.sqlxml.resources_b77a5c561934e089_6.1.7601.19091_en-us_06d8cf9533f47133.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.data.sqlxml.resources_b77a5c561934e089_6.1.7601.19091_en-us_06d8cf9533f47133.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.data.sqlxml.resources_b77a5c561934e089_6.1.7601.23290_en-us_f00b3f794d9bb7e9.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.data.sqlxml.resources_b77a5c561934e089_6.1.7601.23290_en-us_f00b3f794d9bb7e9.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.data.sqlxml_b77a5c561934e089_6.1.7601.19091_none_05dce182619b9d88.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.data.sqlxml_b77a5c561934e089_6.1.7601.19091_none_05dce182619b9d88.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.data.sqlxml_b77a5c561934e089_6.1.7601.23290_none_ef0f51667b42e43e.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.data.sqlxml_b77a5c561934e089_6.1.7601.23290_none_ef0f51667b42e43e.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.xml.resources_b77a5c561934e089_6.1.7601.19091_en-us_4bab5a4adcb1df91.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.xml.resources_b77a5c561934e089_6.1.7601.19091_en-us_4bab5a4adcb1df91.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.xml.resources_b77a5c561934e089_6.1.7601.23290_en-us_34ddca2ef6592647.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.xml.resources_b77a5c561934e089_6.1.7601.23290_en-us_34ddca2ef6592647.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.xml_b77a5c561934e089_6.1.7601.19091_none_5604cd4805eeb210.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.xml_b77a5c561934e089_6.1.7601.19091_none_5604cd4805eeb210.manifest.
Successfully copied file C:\Users\olmakrys\AppData\Local\niemiro\Archive\Manifests\msil_system.xml_b77a5c561934e089_6.1.7601.23290_none_3f373d2c1f95f8c6.manifest to C:\Windows\Temp\CheckSur\WinSxS\Manifests\msil_system.xml_b77a5c561934e089_6.1.7601.23290_none_3f373d2c1f95f8c6.manifest.

Successfully restored ownership for C:\Windows\Temp\CheckSur\WinSxS\Manifests
Successfully restored permissions on C:\Windows\Temp\CheckSur\WinSxS\Manifests
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-04-28 21:30:53.676
Script hash: 8+8snUMWOsdviBJ/p4URStNlJNe/bAkIxP0OaLOOAmo=
----------------------EOF-----------------------

bruce1270 · Apr 29, 2019

Hi Swapped

Please do the following

Step#1 - Update Install
Please try windows update again and install KB4493472 only and attach CBS log if it fails.

Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload to SendSpace and just provide the link in your next post.

swapped · Apr 29, 2019

The update failed. Here is CBS.log file from the c:\windows\logs\cbs folder.

bruce1270 · Apr 30, 2019

Hi swapped

Please do the following

Step#1 - ChkDsk Scan/Repair
1. Right-click your Start button and select Command Prompt (Admin). Answer Yes to allow if the User Account Control dialog comes up.
2. You should now have a black window open that you can type in to.
3. Please type chkdsk /r and then press enter. Note: There is a space after the command chkdsk and before the forward slash
4. You will get a prompt telling you chkdsk cannot run because the volume is in use. Answer Y and hit enter to schedule the run at next boot. Reboot your machine.
5. Chkdsk will start to run. Please allow it to finish. You will know it is running when you see text as follows.

6. Download ListChkdskResult.exe by SleepyDude and save it on your desktop. If it's already downloaded to your desktop, just skip this step.
7. Right-click this file and select Run as administrator (Allow if prompted) and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.

swapped · May 1, 2019

Please see below:

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 5/1/2019 3:29:50 PM >------
Category:
Computer Name: WIN7-X64.XXX.XXX
Event Code: 1001
Record Number: 7696
Source Name: Microsoft-Windows-Wininit
Time Written: 05-01-2019 @ 04:13:25
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
360960 file records processed.

File verification completed.
448 large file records processed.

0 bad file records processed.

2 EA records processed.

76 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
516652 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
360960 file SDs/SIDs processed.

Cleaning up 329 unused index entries from index $SII of file 0x9.
Cleaning up 329 unused index entries from index $SDH of file 0x9.
Cleaning up 329 unused security descriptors.
Security descriptor verification completed.
77847 data files processed.

CHKDSK is verifying Usn Journal...
34167648 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
360944 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
19474135 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

134112255 KB total disk space.
55619364 KB in 255897 files.
130824 KB in 77848 indexes.
0 KB in bad sectors.
465523 KB in use by the system.
65536 KB occupied by the log file.
77896544 KB available on disk.

4096 bytes in each allocation unit.
33528063 total allocation units on disk.
19474136 allocation units available on disk.

Internal Info:
00 82 05 00 ba 17 05 00 1b 84 08 00 00 00 00 00 ................
93 01 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 ....L...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------

bruce1270 · May 1, 2019

Hi swapped

Please do the following

Step #1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

swapped · May 1, 2019

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-05.2019
Ran by xxx (01-05-2019 17:51:22) Run:1
Running from C:\Users\xxx\Desktop
Loaded Profiles: xxx (Available Profiles: xxx & xxx)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
C:\Windows\WinSxS\ManifestCache\205a0d038d754aa8_blobs.bin

*****************

Restore point was successfully created.
C:\Windows\WinSxS\ManifestCache\205a0d038d754aa8_blobs.bin => moved successfully

==== End of Fixlog 17:51:33 ====

bruce1270 · May 3, 2019

Hi Swapped

Please do the following

Step#1 - Update Install
Please try windows update again and install KB4493472 only and attach CBS log if it fails.

Please Note:: if the file is too big (over 7MB) to upload to your next post, please upload to SendSpace and just provide the link in your next post.

bruce1270 · May 8, 2019

Hi swapped

I have not heard from you for a while. Do you still require assistance?

Thanks

Windows 7 Pro - Security Monthly Quality Rollup fails

swapped

Member

Attachments

Sysnative Windows Update

Inactive

swapped

Member

bruce1270

Moderator, Windows Update Analyst, Security Analyst

Attachments

swapped

Member

Attachments

bruce1270

Moderator, Windows Update Analyst, Security Analyst

swapped

Member

Attachments

bruce1270

Moderator, Windows Update Analyst, Security Analyst

swapped

Member

bruce1270

Moderator, Windows Update Analyst, Security Analyst

Attachments

swapped

Member

bruce1270

Moderator, Windows Update Analyst, Security Analyst

bruce1270

Moderator, Windows Update Analyst, Security Analyst