Link to home
Create AccountLog in
Avatar of easybill
easybill

asked on

Windows Update KB2847927 won't install

Working on a Windows 7 Pro (x64) machine, trying to installed Windows XP Mode and Windows Virtual PC, but can't get past a Windows Update issue.  Update KB2847927 will not installed, keep getting Code 80070005.  Yes, I am logged in as administrator, have run all types of malware resolution software, including microsoft's msert, etc.  nothing is found.  had a problem with BITS but fixed that, it downloaded some updates, but still can't get past this one.  Windows Virtual PC doesn't seem to want to install without this update.
Avatar of aadih
aadih
Flag of United States of America image

From an elevated command prompt (administrative command window) run:

"sfc /scannow" (without quotes).  Restart. And try again.
First make sure virtualization setting is enabled in bios ...then try installing virtual pc

https://www.grc.com/files/securable.exe
Run the above tool to find out whether virtualization setting is enabled



Ded9
Avatar of easybill
easybill

ASKER

tried sfc /scannow early on, gets to 59% and bombs out, sfc /verifyonly runs all the way through though, and returns a message about integrity violations
Ran the securable.exe, results were 64, Yes, Yes
Download and run system readiness tool

http://www.microsoft.com/en-in/download/details.aspx?id=20858


After running this tool ...reboot and then try installing virtual pc.




Ded9
It appears that Windows Virtual PC installs, but then when I restart, it gets to 100% of installing Windows updates, then "Failure configuring Windows Updates. Reverting changes" and undoes everything
Download and run system readiness tool

http://www.microsoft.com/en-in/download/details.aspx?id=20858


After running this tool ..Uninstall your security software (Antivirus).reboot and then try installing virtual pc.




Ded9
I think I've already tried the system readiness tool, but stand by, will download and run.,
If the issue persist after system readiness tool upload checksur.log here for analysis


C:Windows\Logs\CBS\checksur.log




Ded9
If Microsoft Security Essentials is the only anti-virus software installed and running, do I need to uninstalled it as per your instructions?
No do not uninstall mse


Ded9
the .msu for the readiness tool took forever to download, then it ran a "hotfix" but I never did see the a "readiness tool" dialogue box.  Where did it go?  I had to leave that location and won't be back there until Friday of this week, will update you then.
You just need to install the system readiness tool hotfix ...restart and then try updates.



Ded9
hotfix seemed to install, restarted, no change, here's that log
CheckSUR.log
Not sure if this is related (probably), but sfc /scannow stops at 59% every time, see attached
sfc-error.png
I'm about to try this: http://www.sevenforums.com/tutorials/3413-repair-install.html but had hoped to avoid that if there was some other workaround, seeems like I'm close to a resolution.
Sorry. Looks like you have reached an unavoidable conclusion.  Please go ahead with it.
Looks like o.s files are corrupted.

 You can do a repair install and make sure you run a chkdsk on C drive....this will check for any hard drive related issue.



Ded9
had tried chkdsk previously, found no problems
trying everything I can to avoid the repair install
I think I've tried every windows update fix tool, no changes
Run mga diag..upload results here...to check whether the problem is with the product key.

http://go.microsoft.com/fwlink/?linkid=52012

Rename cbs.log ...run sfc /scannow ...after you get the error zip cbs.log and upload it

%windir%\logs\cbs\cbs.log



Ded9
gonna run the mga diag, and will upload those logs, stand by
in the meantime, I found the original Dell Reinstallation DVD, is there an option to reinstall from that, or only a clean install?
as requested, please advise
MGADIag-results.txt
as requested, cbs.log immediately after sfc /scannow fail, errors out at 59% every time
CBS.log
Problem is with the key  as per mga diag report.

You need to update the key that is located on the back of the computer

Follow these steps

Start an elevated command prompt. To do this, follow these steps:
    Click Start, and then type cmd in the search box.
        Right-click cmd, and then click Run as Administrator.

    Type the following commands in the order in which they are presented. Press Enter after each command.
    net stop sppsvc

    cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

    ren tokens.dat tokens.bar

    net start sppsvc

    cscript.exe %windir%\system32\slmgr.vbs /rilc
    Restart the computer.

Update the key on the back of the computer.
 slmgr.vbs -ipk <type your product key here>


slmgr.vbs -ato
Run the above command to activate windows

Go to http://www.microsoft.com/genuine/   via IE

Intsall the addon from genuine website and then reboot the system.


Ref
http://support.microsoft.com/kb/2736303

Run a free malwarebytes scan.

www.malwarebytes.org/products/malwarebytes_free/¿



Ded9
so far so good, but not sure what you mean by "addon" on genuine website, can't find it
isn't that just for Windows XP? (Windows Genuine Advantage Validation Tool), this is Windows 7
Well, I thought you were on to something that time, but no luck, same error trying to install that one update in Windows Update.  Darn.
error.docx
ASKER CERTIFIED SOLUTION
Avatar of ded9
ded9
Flag of India image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
Dell Reinstallation DVD did the trick (in upgrade mode).  All Windows Update errors resolved, was able to install Windows Virtual PC and Windows XP Mode.  Problem solved, thanks!
ok... I suffered the exact same issue (KB2847927 won't install) and got to the bottom of it... A repair install is NOT required though it will fix the issue (with a big hammer).

Short answer:
The machine is infected with ZeroAccess and can be repaired with this tool:
http://kb.eset.com/esetkb/index?page=content&id=SOLN2895&locale=en_US

More Details:
The cbs.log indicates that essential Windows Defender / MSE files have been corrupted. As seen by the following line showing that MpEvMsg.dll has been turned into a symbolic link and its permissions removed:

2013-07-23 09:19:50, Error                 CSI    000001c8 (F) STATUS_FILE_IS_A_DIRECTORY #4167560# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound|AllowSharingViolation|AllowAccessDenied), handle = {provider=NULL, handle=0}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES|FILE_READ_DATA), oa = @0x42cfc0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[131]"\SystemRoot\WinSxS\amd64_security-malware-windows-defender-events_31bf3856ad364e35_6.1.7600.16385_none_118cf1dcd54a3dea\MpEvMsg.dll"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0x42d070, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd00000ba]

Open in new window

The update KB284792 is attempting to service windows defender files and therefore fails with the access denied error code.

This thread also discusses this same issue:
http://www.sevenforums.com/system-security/290614-sfc-warning.html
Will make a note of that for future reference (I already used by "big hammer").
Thanks!