Windows Update error 80070002

A

Assimilator

Member
Joined
May 21, 2015
Posts
9
Hi all,

A few days ago I noticed that some Windows updates had come through, but when I checked on them (I install all updates manually) I saw they were all old updates that I knew I already had, so I ignored them. Today I had to reboot my computer after a driver installation, and since then Windows Update gives me error 80070002 whenever I try to check for updates.

I'm running Windows 7 x64 Professional with Service Pack 1.

What I've tried so far:

* Followed the instructions at Windows Update error 80070002 - Windows Help - error still remains
* Ran Microsoft Fixit 50202 from https://support.microsoft.com/en-us/kb/910336 - ran successfully in both normal and Aggressive mode, but error still remains
* Installed the System Update Readiness Tool from https://www.microsoft.com/en-us/download/details.aspx?id=20858 - installed successfully, but error still remains
* Downloaded and ran SFCFix as per https://www.sysnative.com/forums/windows-update/4736-windows-update-forum-posting-instructions.html - didn't find any errors
* Ran sfc /scannow from an Administrator command prompt - tells me that "Windows Resource Protection could not perform the requested operation."

Please find attached my C:\Windows\CBS folder. When I originally compressed it the size was ~47MB, so I removed the CbsPersist_*.cab files to get it down to a more manageable size - please advise if you need those files.

Thanks in advance!

View attachment CBS.zip
 
Hi and welcome to Sysnative. I see the issue in your logs. Not sure if we can solve it but let's give it a shot. Please do the following.

Code: 
2015-05-21 19:59:13, Error                 CSI    00000005 (F) STATUS_OBJECT_NAME_NOT_FOUND #1688754# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0x119e510->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[165]"\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dc\u00d8\u00ff\u00ff\u00ffR[gle=0xd0000034]
2015-05-21 19:59:13, Error                 CSI    00000006@2015/5/21:17:59:13.666 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
2015-05-21 19:59:13, Error                 CSI    00000007 (F) STATUS_OBJECT_NAME_NOT_FOUND #1688753# from Windows::Rtl::SystemImplementation::CKey::OpenExistingKey(f = 0, da = (KEY_READ), oa = @0x119e9d0, key = NULL, disp = (null))[gle=0xd0000034]
2015-05-21 19:59:13, Info                  CBS    NonStart: Failed to get store. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

Retrieve Software Hive

  • One up the RegBack program that you used previously.
  • Click the New Backup button. Accept the defaults and simply click Start.
  • When it says Finished successfully, click the Close button.
  • This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
  • This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named SOFTWARE.
  • Copy the SOFTWARE file to your Desktop.
  • Now right click on the SOFTWARE file that is on your desktop and select Send to > Compressed (zipped) folder.
  • Then please upload the zip file (SOFTWARE.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or One Drive or SendSpace and then just provide the link in your reply.
  • You can close any open windows you have as well as the RegBack program now.
 
Hello, I just had this exact same issue happen to my PC 2-3 days ago after I update Windows 7 Pro 64 bit SP1 with the last set of updates, I found this thread and was hopping for a solution since it was new.

I did everything Assimilator (OP) did and still getting the same 80070002 error. I also tried to run the repair off of my DVD to no avail, I tried to restore and this was no good. I really cannot afford to do a format, I have MS products not supported anymore and I do not think that I can get the updates anymore...

I ran the sfcfix.exe and it states 0 errors, if anyone could help I would be grateful for it.... Thanks you Steve
 
Wow looks like many of us are having this issue...... Will MS take notice and put out a fix? Thanks
 
BrianDrab said:
Hi and welcome to Sysnative. I see the issue in your logs. Not sure if we can solve it but let's give it a shot. Please do the following.

Code: 
2015-05-21 19:59:13, Error                 CSI    00000005 (F) STATUS_OBJECT_NAME_NOT_FOUND #1688754# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0x119e510->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[165]"\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dc\u00d8\u00ff\u00ff\u00ffR[gle=0xd0000034]
2015-05-21 19:59:13, Error                 CSI    00000006@2015/5/21:17:59:13.666 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
2015-05-21 19:59:13, Error                 CSI    00000007 (F) STATUS_OBJECT_NAME_NOT_FOUND #1688753# from Windows::Rtl::SystemImplementation::CKey::OpenExistingKey(f = 0, da = (KEY_READ), oa = @0x119e9d0, key = NULL, disp = (null))[gle=0xd0000034]
2015-05-21 19:59:13, Info                  CBS    NonStart: Failed to get store. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

Retrieve Software Hive

  • One up the RegBack program that you used previously.
  • Click the New Backup button. Accept the defaults and simply click Start.
  • When it says Finished successfully, click the Close button.
  • This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
  • This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named SOFTWARE.
  • Copy the SOFTWARE file to your Desktop.
  • Now right click on the SOFTWARE file that is on your desktop and select Send to > Compressed (zipped) folder.
  • Then please upload the zip file (SOFTWARE.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or One Drive or SendSpace and then just provide the link in your reply.
  • You can close any open windows you have as well as the RegBack program now.
Click to expand...

Hi Brian,

Apologies for my late reply, I totally forgot about this thread.

Anyhow, I assume the program you're referring to is RegBak from Acelogix? If so, then here is a link to my SOFTWARE hive from RegBak; please note, it's compressed with 7-Zip in order to save bandwidth as my upload speed is only 1Mbps:
<Removed Link to Software Hive as it has sensitive data>

From what you've said so far I assume you are going to hex-edit the SOFTWARE hive file to attempt to remove the corrupted bytes that are causing the key in question to be read incorrectly?
 
Last edited by a moderator:
We'll do a hex edit if we need to but let's try this first.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCScript.txt, and save this to your Desktop.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
  5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please

Step#2 - SFC Scan


  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
Items for your next post
1. SFCFix.txt
2. CBS.txt
 

Attachments

Doesn't seem to have worked. When I check with Regedit, the corrupt key is still there and when I try to select it it says "The system cannot find the file specified". SFC also still errors out with "Windows Resource Protection could not perform the requested operation". Logs attached as requested:

View attachment SFCFix.txt
View attachment cbs.zip
 
I assume you see the following key in RegEdit but when you click on it you get an error? Or are you clicking on a different key?

Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dc
 
BrianDrab said:
I assume you see the following key in RegEdit but when you click on it you get an error? Or are you clicking on a different key?

Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dc
Click to expand...

What I see is:

Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dcØÿÿÿR

In other words, the key name has <LATIN CAPITAL LETTER O WITH STROKE><LATIN SMALL LETTER Y WITH DIAERESIS><LATIN SMALL LETTER Y WITH DIAERESIS><LATIN SMALL LETTER Y WITH DIAERESIS><LATIN CAPITAL LETTER R> appended. I presume that the actual/correct key name is the one you've specified, but somehow some rogue bytes have got into the hive and are now being interpreted as part of the key name, hence the "File not found" error.

I've already tried deleting the corrupt key from within Regedit, but it gives me "Error deleting key", presumably because it can't find it.
 
It looks like the correct format for SideBySide\Winners registry keys is for them to end with a 16-digit hexadecimal number. My corrupt key has the first 2 digits (dc) correct, if I look at the bytes of the characters following that (ØÿÿÿR) I get:

dc00d800ff00ff52

which is 16 digits. I'll see if I can find another Win7 x64 machine with working Windows Update, and check what it has under Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\ - maybe that will tell me if the key name I've guessed is correct, or not.
 
What I see is:

Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_dcØÿÿÿR
Click to expand...

That's the curious thing. When I look at the hive that you sent me, this key doesn't exist. Nothing is corrupt within the hive that you sent me so there is nothing to fix. I know what the key should be to fix but I just don't see anything. I've never seen this before.

Can you go to C:\Windows\System32\Config and copy your COMPONENTS hive to your desktop? Then zip it up and send to SendSpace and then just provide a link. If you get an in-use error, reboot your computer and try again. Thanks.
 
BrianDrab said:
That's the curious thing. When I look at the hive that you sent me, this key doesn't exist. Nothing is corrupt within the hive that you sent me so there is nothing to fix. I know what the key should be to fix but I just don't see anything. I've never seen this before.

Can you go to C:\Windows\System32\Config and copy your COMPONENTS hive to your desktop? Then zip it up and send to SendSpace and then just provide a link. If you get an in-use error, reboot your computer and try again. Thanks.
Click to expand...

I used the COMPONENTS file backup that was created by RegBak, is that okay? https://onedrive.live.com/redir?resid=47236C31C92270CB!728&authkey=!AGRVyo-OQu2nwvo&ithint=file,7z
 
That was fine. Now can you use RegBack and make a NEW backup and then send me a PM with a link to the new Software hive backup. The Software hive has sensitive data so I would prefer the link not to be public. Thanks.
 
Thanks for the info. This is so weird. There is no issue when the hive is backed up. It's only while it's actively being used on your machine. I have a colleague looking at it right now. In the meantime can you do the following?

Retrieve System Information
1. Download Speccy to your desktop. The setup file will be named spsetup126.exe or something similar.
2. Double-click on this file and install it. Note: Please ensure that you uncheck any foistware that may be presented during the install (i.e. Chrome Browser install).
3. When the program opens it will retrieve some information regarding your system.
4. Once it's done, select the File menu and choose Publish snapshot. Answer Yes to the confirmation message.
5. On the next screen that comes up, choose the Copy to Clipboard button and paste this link in your next reply.
 
BrianDrab said:
Thanks for the info. This is so weird. There is no issue when the hive is backed up. It's only while it's actively being used on your machine. I have a colleague looking at it right now. In the meantime can you do the following?

Retrieve System Information
1. Download Speccy to your desktop. The setup file will be named spsetup126.exe or something similar.
2. Double-click on this file and install it. Note: Please ensure that you uncheck any foistware that may be presented during the install (i.e. Chrome Browser install).
3. When the program opens it will retrieve some information regarding your system.
4. Once it's done, select the File menu and choose Publish snapshot. Answer Yes to the confirmation message.
5. On the next screen that comes up, choose the Copy to Clipboard button and paste this link in your next reply.
Click to expand...

http://speccy.piriform.com/results/uYn2OZe0NDtUoRIxqiG4gjY

"This is so weird" - tell me about it! I've been running Windows since 1999 and learned quite a bit along the way about how to install and troubleshoot. But this is the first issue I've ever encountered where my own skillset (and Google) has failed me.
 
OK, I see you have two 8GB sticks of RAM. Could you do the following please?

1. Shut down your machine
2. Remove one of the sticks of RAM.
3. Boot your machine back up.
4. Open up the registry and let me know if you see the same error in the hive.

If you do, shut down your machine and swap the RAM. Take the one out and put the other in so only one stick is in. Boot back up and check again.

Please let me know if you are willing to do this.

Thanks.
 
BrianDrab said:
OK, I see you have two 8GB sticks of RAM. Could you do the following please?

1. Shut down your machine
2. Remove one of the sticks of RAM.
3. Boot your machine back up.
4. Open up the registry and let me know if you see the same error in the hive.

If you do, shut down your machine and swap the RAM. Take the one out and put the other in so only one stick is in. Boot back up and check again.

Please let me know if you are willing to do this.

Thanks.
Click to expand...

Swapped the RAM as requested, but regardless of what configuration of memory I use, the error remains.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top