Windows Update problems - important files in use

shortas · Jun 4, 2013

Hello everybody,

I'm facing a problem with Windows Update right now. There is one pending update (KB 982018) that
I'm not able to install because of error:

Restart your computer to install important updates.

Windows can't update important files and services while the system is
using them. Save any open files and restart the computer and then try
to check for new updates.

I have tried a lot of things, but none have worked...

Can you please help me?

Many thanks.

tom982 · Jun 4, 2013

Hello shortas, welcome to Sysnative!

It may seem like a stupid question but I have to ask it anyway, have you tried rebooting your computer? If so, what happens?

Your CBS log shows there are a few issues with pending files for deletion over a reboot which we will need to fix if the reboots are failing to achieve anything:

Code:

2013-06-04 08:22:01, Info                  CSI    0000013e Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:110{55}]"$$DeleteMe.mscorlib.resources.dll.01cbb943155a3c21.0014".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    0000013f Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:110{55}]"$$DeleteMe.mscorlib.resources.dll.01cc2c16ace5fe6e.0008".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000140 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:110{55}]"$$DeleteMe.mscorlib.resources.dll.01cc8a426669ab46.0009".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000141 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:110{55}]"$$DeleteMe.mscorlib.resources.dll.01cdd86331e9514a.0016".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000142 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:88{44}]"$$DeleteMe.sortkey.nlp.01cbb94315557969.0013".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000143 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:88{44}]"$$DeleteMe.sortkey.nlp.01cc2c16acd92d2e.0007".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000144 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:88{44}]"$$DeleteMe.sortkey.nlp.01cc8a42666601c6.0008".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000145 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:88{44}]"$$DeleteMe.sortkey.nlp.01cdd86331d8a7aa.0015".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000146 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:90{45}]"$$DeleteMe.sorttbls.nlp.01cbb94315426e89.0012".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000147 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:90{45}]"$$DeleteMe.sorttbls.nlp.01cc2c16acc1ad8e.0006".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000148 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:90{45}]"$$DeleteMe.sorttbls.nlp.01cc8a42664903e6.0007".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    00000149 Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:90{45}]"$$DeleteMe.sorttbls.nlp.01cdd86331b9b5ca.0014".  Reason: [13]"Cannot Delete"
2013-06-04 08:22:01, Info                  CSI    0000014a Couldn't mark for pending delete: [ml:78{39},l:76{38}]"\SystemRoot\WinSxS\Temp\PendingDeletes"\[l:86{43}]"$$DeleteMe.sqmapi.dll.01cbf5c46c5c2144.0004".  Reason: [13]"Cannot Delete"

Tom

shortas · Jun 5, 2013

Hello Tom,

when I tried to fix this I performed reboot many times. If there are some files marked
for deletion after reboot then I can say it had no effect.

Thanks.

tom982 · Jun 5, 2013

Hello shortas,

Okay, not to worry, we can try something else:

Can you boot into the recovery environment, and launch command prompt please: How to use the Windows 7 System Recovery Environment Command Prompt

When command prompt is launched, type in the following command and press enter:

DISM /image:C:\ /cleanup-image /revertpendingactions

Then reboot your computer, booting into Windows normally. Try updating again and post your CBS log please :)

Tom

shortas · Jun 5, 2013

Hello Tom,

thank you for your reply. The procedure was a little bit different altough...

I had to change the command to this:

DISM /image:\ /cleanup-image /revertpendingactions

The drive was mapped as D: (dunno why). Anyway I'm enclosing also the dism.log,
so you can check it. After the change of command it reported that it run successfully
and will perform the cleanup after reboot.

Then I tried to update it but the problém remained. I'm enclosing the CBS.log so you can check it.

Many thanks.

tom982 · Jun 6, 2013

Hi shortas,

Thanks for the logs, and great job for correcting the dism command! Most of the time it's C: but as you spotted, yours is D:.

Your CBS log is full of these errors:

Code:

2013-06-05 17:42:58, Info                  CBS    Did not send SQM reports for pending package: Package_55_for_KB982018~31bf3856ad364e35~x86~~6.1.3.2 [HRESULT = 0x80070057 - E_INVALIDARG]
2013-06-05 17:42:58, Info                  CBS    Startup: Package: Package_55_for_KB982018~31bf3856ad364e35~x86~~6.1.3.2 completed startup processing, new state: Staged, original: Staged, targeted: Installed.  hr = 0x80070005
2013-06-05 17:42:58, Info                  CBS    WER: Generating failure report for package: Package_for_KB982018_RTM~31bf3856ad364e35~x86~~6.1.3.2, status: 0x80070005, failure source: DOQ, start state: Staged, target state: Installed, client id: WindowsUpdateAgent
2013-06-05 17:42:58, Info                  CBS    Failed to query DisableWerReporting flag.  Assuming not set... [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2013-06-05 17:42:58, Info                  CBS    Failed to add %windir%\winsxs\pending.xml to WER report because it is missing.  Continuing without it...
2013-06-05 17:42:58, Info                  CBS    Failed to add %windir%\winsxs\pending.xml.bad to WER report because it is missing.  Continuing without it...
2013-06-05 17:42:58, Info                  CBS    Failed to parse CSI error string. [HRESULT = 0x80070057 - E_INVALIDARG]
2013-06-05 17:42:58, Info                  CBS    Failed to get AI/GC error details from raw error details. [HRESULT = 0x80070057 - E_INVALIDARG]

Let's have a look at that package which is throwing the access denied error:

Modify Registry Permissions

Click on the Start

button and in the search box, type regedit
When you see regedit on the list, right-click on it and select Run as administrator.
In the left hand panel of regedit, you will see a list of registry keys. Navigate to the following key, right-click on it and select Permissions...:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB982018_RTM~31bf3856ad364e35~x86~~6.1.3.2
Click Advanced.

Can you take a screenshot of this view and attach it to your next post please?

Tom

shortas · Jun 7, 2013

Hi Tom,

here it is. Anyway TrustedInstaller has full control

.

Please tell me if you need translation :).

Thanks.

tom982 · Jun 8, 2013

Hi shortas,

Hmm, no luck there! Let's have a look at the package itself. Can you take a screenshot of the advanced permissions window on this file please:

C:\Windows\servicing\packages\Package_for_KB982018_RTM~31bf3856ad364e35~x86~~6.1.3.2.mum

And on this file:

C:\Windows\servicing\packages\Package_for_KB982018_RTM~31bf3856ad364e35~x86~~6.1.3.2.cat

Tom

shortas · Jun 12, 2013

Hi Tom,

please check the attachment.

Thanks.

shortas · Jun 24, 2013

Hi guys,

is there anything new?

Many thanks,
shortas.

shortas · Aug 15, 2013

Hi guys,

can yomeone help us with this?

Thank you.

tom982 · Sep 9, 2013

Hi shortas,

Sorry for the delay! Let's get a new set of logs and see what's going on:

Export CBS folder

Click the Start button

then click Computer.
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.

Attach CBS.zip to your next post please.

Tom

shortas · Sep 16, 2013

Hi Tom,

no problem. Nothing has changed since the last time. I tried to
install Windows 7 sp1 manually and it didn't work (installed it and
it reverted changes after the install automatically). So I was
forced to disable updates completely.

Here it is View attachment 5307

Thanks for your help,

shortas.

tom982 · Sep 16, 2013

Hi shortas,

I'm seeing a lot of 0x80070013 errors in your log. What hard drive do you have?

Code:

2013-09-02 12:31:55, Info                  CBS    NonStart: Success, startup processing not required as expected.
2013-09-02 12:31:55, Info                  CBS    Startup processing thread terminated normally
2013-09-02 12:31:55, Info                  CSI    00000008 CSI Store 5818560 (0x0058c8c0) initialized
2013-09-02 12:31:55, Info                  CBS    Session: 30320583_2779202331 initialized by client WindowsUpdateAgent.
2013-09-02 12:32:09, Info                  CBS    Session: 30320583_2912026659 initialized by client WinMgmt.
2013-09-02 12:32:19, Info                  CBS    Failed to open online software key. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to get SOFTWARE registry key. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    SQM: Failed to get SOFTWARE key from session. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Warning: Failed to apply SQM sample policy for package: Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to open online package store: Packages\Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to get key for store object type: 2 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to get out of package store package: Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed while trying to find package: Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to set state of Package and Updates while finishing initialization. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to initialize package: Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0, from path: \\?\C:\windows\Servicing\Packages\Package_for_KB2547666~31bf3856ad364e35~x86~~6.1.1.0.mum, existing package: 1 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to resolve package [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to populate children. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to initialize package: Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~x86~~6.1.7600.16385, from path: \\?\C:\windows\Servicing\Packages\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~x86~~6.1.7600.16385.mum, existing package: 1 [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to resolve package [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to populate children. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to initialize internal package [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Info                  CBS    Failed to create package. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-09-02 12:32:19, Error                 CBS    Failed to internally open package. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]

Tom

shortas · Sep 17, 2013

Hi Tom,

it is SEAGATE ST9250410AS hdd 250GB 2.5" 7200 16MB SATA2.

Thanks,

shortas

tom982 · Sep 17, 2013

Hi shortas,

Thanks. Well that's a perfectly normal disk, so I would like to see if chkdsk detects any errors:

chkdsk /f

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

Click on the Start

button and in the search box, type Command Prompt
When you see Command Prompt on the list, right-click on it and select Run as administrator
When command prompt opens, copy and paste the following commands into it, press enter after each

chkdsk /f
Reboot
Download ListChkdskResult.exe (by SleepyDude) from the link below:

https://dl.dropboxusercontent.com/u/12354842/My Tools/ListChkdskResult.exe
Double click on it to run it. It will take a few seconds to scan, then it will open a Notepad window with the log. Copy and paste the contents of this into your next post please!

Tom

shortas · Sep 18, 2013

Ok Tom,

here it is. Translated by google translate :):

ListChkdskResult by SleepyDude v0.1.6 Beta | 17-06-2013

------ < Log generate on September 18, 2013 2:36:59 p.m. > ------
Category : 0
Computer Name :
Event Code: 1001
Record Number: 237977
Source Name : Microsoft -Windows- Wininit
Time Written : 20130918122856.000000-000
Event Type: Information
user :
Message :

Checking file system on C :
The file system is NTFS type .

She was scheduled check disk.
The system will now check the disk.

CHKDSK is verifying files (stage 1 of 3) ...
File records processed : 824064

File verification completed.
Number of records processed large files : 641

Processed damaged file records : 0

EA records processed : 182

Processed change log processing : 120

CHKDSK is verifying indexes (stage 2 of 3 ) ...
Number of items processed index : 894476

Authenticated public corporation completed.
Number of processed unindexed file : 0

Number of restored files indexed : 0

CHKDSK is verifying security descriptors (stage 3 of 3) ...
Processed SD / SID File : 824064

The system maze 2265 unused index entries $ SII of file 0x9 .
The system maze 2265 unused index entries $ SDH of file 0x9 .
The system maze 2265 unused security descriptors .
Authentication security descriptors has been completed.
Number of processed data files : 35207

CHKDSK is verifying USN journal ...
Number of processed byte USN : 37504880

Authentication USN journal has been completed.
CHKDSK discovered free space marked as allocated in
MFT bitmap .
CHKDSK discovered free space marked as allocated
in the volume bitmap .
Windows repaired the file system .

226061311 KB total disk space .
97897208 695440 KB in file .
225956 KB in 35208 registers.
0 KB in bad sectors
935967 KB in use by the system
65536 KB occupied by the log file .
127002180 kB disk space is free .

4096 bytes in each allocation unit
56515327 allocation units on disk
31750545 free allocation units

Inside information :
00 93 0c 00 d2 25 0b 00 6e da 0e 00 00 00 00 00 ..... % .. n ......
ab 14 00 00 78 00 00 00 00 00 00 00 00 00 00 00 .... x ...........
48 63 3d 00 50 01 3b 00 e8 1d 3b 00 00 00 3b 00 Hc = . P.; ... , ... ,.

Windows has finished checking the disk .
Please wait while your system is restarted.

Thank you.

tom982 · Sep 18, 2013

Hi shortas,

No issues there. Can you download and install the System Update Readiness Tool?

Download System Update Readiness Tool for Windows 7 (KB947821) [August 2013] from Official Microsoft Download Center

Post the log when complete:

C:\Windows\Logs\CBS\CheckSUR.persist.log

Tom

shortas · Sep 19, 2013

Hi Tom,

here it is. I have also included the cbs.log as I noticed that there were
some changes too.

View attachment CheckSUR.persist.log
View attachment CBS.zip

Thanks,

shortas

tom982 · Sep 20, 2013

Hi shortas,

I'm really sorry but I'm drawing blanks on this one and have no time left to research this as I have no internet between the 21/9 and 1/10

I think your best bet is to do a repair install:

https://www.sysnative.com/forums/wi...-install-windows-windows-7-windows-vista.html

Tom

Windows Update problems - important files in use

Member

Attachments

Emeritus

Member

Emeritus

Member

Attachments

Emeritus

Member

Attachments

Emeritus

Member

Attachments

Member

Member

Emeritus

Member

Emeritus

Member

Emeritus

Member

Emeritus

Member

Emeritus