Prev: KB951847 vs KB953595 & .Net 3.5 Full Package
Next: Fix for upate failure code C8000643
From: James on 6 Feb 2009 17:40
(Windows XP Professional SP3)
Apologize in advance for a long message.

My Automatic Update is not running, even though "Automatic (recommended)"
checkbox is selected in System Properties - Automatic Updates tab.

After opening Services (services.msc), Automatic Updates's Description,
Status and Startup Type columns are empty. "Log On As" value is Local System.

When double clicking or right click -> select Properties on Automatic
Updates in Services, I get this message,
"Unable to open service Automatic Updates for reading on Local Computer.
Error 5: Access is denied."

When I go to Windows Update site and try installing updates manually
(http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us), I
get "Error number: 0x80070005" during installation after download is complete.

This seems to happen after I got some spywares, which I removed through
scouring registries and cleaning offensive DLLs in system32 directory.

According to many articles indicated, this is a permission problems with
potential errors in registry. I tried a number of suggested fixes with no
successful result,

- Verified BITS is running
- Verified I'm in Administrator group
- Added Trace Flag in Windows registry
- Stopped AdAware daemon. Cannot stop Norton however. But I was able to
run Auto Updates before with Norton running
- Run 2 commands as suggested in this article,
http://www.eggheadcafe.com/software/aspnet/32178096/fatal-client-call-record.aspx
a) "sc sdset bits ..." returned SUCCESS
b) "sc sdset wuauserv ..." returned "OpenService FAILED 5: Access is denied"
- Install and run SubInACL tool to repair file and registry permissions
(http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx)
* finish successfully, but same Access error afterwards
- Munually re-install Automatic Update client
(http://msmvps.com/blogs/athif/pages/49608.aspx)
* Browse C:\windows\ServicePackFiles\i386 where wuapi.dll is located.
Restart the system. Same Access is Denied error
- Any attempt to "net stop/start wuauserv" returns Access is Denied

Random clues:

%windir%\inf\wuau.adm
======================
I notice in this file it uses,
KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
which is a path I don't have under HKLM, does this indicate a problem?

%windir%\setupapi.log
=====================
#-290 Processing REGISTERDLLS section [AU_dlls]. Binary: "%11%\wuaueng.dll",
flags: 0x0001, timeout: 60s.
#E127 Calling "DllRegisterServer" in OLE Control
"C:\WINDOWS\system32\wuaueng.dll" failed. Error 0x80070005: Access is denied.
#E291 Failed to register OLE server "C:\WINDOWS\system32\wuaueng.dll". Error
0x80070005: Access is denied.

%windir%\WindowsUpdate.log
==========================
- I added a Trace flag in registry for WindowsUpdate
(HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Trace, Flags=7,
Level=4). Below is the log it generates during reboot.
------------------ 8< -----------------------
2009-02-06 11:52:47-0800 4708 16f4 OpenService failed with error 0x80070005
2009-02-06 11:52:47-0800 4708 16f4 WU client fail to create WU service with
error 0x80070005
2009-02-06 11:53:20-0800 4080 248 OpenNamedService failed (0x80070005) for
service "wuauserv", permissions = 0x00000004
2009-02-06 11:53:20-0800 4080 248 AU service is not running.
2009-02-06 11:53:20-0800 4080 248 WUCheckForUpdatesAtShutdown failed,
hr=8024000C
2009-02-06 11:54:03-0800 1104 af8 AU service is not running.
2009-02-06 11:54:03-0800 1104 af8 WUAutoUpdateAtShutdown failed, hr=8024000C
2009-02-06 11:55:30-0800 1544 a24 Service Main starts
2009-02-06 11:55:30-0800 1544 a24 updated service status to 2
2009-02-06 11:55:30-0800 1544 a24 Processing any required registration
2009-02-06 11:55:30-0800 1544 a24 CSusProxyManager successfully initialized.
2009-02-06 11:55:30-0800 1544 a24 CIpAddressMonitor::CreateListenSocket
returning with hr = 0
2009-02-06 11:55:30-0800 1544 a24 Logging events locally at
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2009-02-06 11:55:30-0800 1544 a24 Using event cache directory at
C:\WINDOWS\SoftwareDistribution\EventCache.
2009-02-06 11:55:30-0800 1544 a24 Using BatchFlushAge = 5240.
2009-02-06 11:55:30-0800 1544 a24 Using SamplingValue = 162.
2009-02-06 11:55:30-0800 1544 a24 Write buffer is empty. Not scheduling a
flush.
2009-02-06 11:55:30-0800 1544 a24 Successfully loaded event namespace
dictionary.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 1: Default Event.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 2: Retail Log event.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 3: Debug Log event.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 147: Agent has finished
detecting items.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 148: Error: Agent failed
detecting with reason: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 149: Unable to Connect:
Windows is unable to connect to the automatic updates service and therefore
cannot download and install updates according to the set schedule. Windows
will continue to try to establish a connection.
2009-02-06 11:55:31-0800 1544 a24 Performance warning: CTraceCategory::Trace
had to allocate memory
2009-02-06 11:55:31-0800 1544 a24 Loaded event 150: Update is installed.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 151: Update is installable.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 152: Update is superseded.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 154: Client has an invalid Pid.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 161: Error: Download failed.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 162: Download succeeded.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 163: Download canceled.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 182: Installation Failure:
Windows failed to install the following update with error %1: %2.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 183: Installation Successful:
Windows successfully installed the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 184: Installation successful
and restart required for the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 185: Hide update: user hid
one update.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 186: user cancelled the install
2009-02-06 11:55:31-0800 1544 a24 Loaded event 187: Installation killed:
Installation of the following update is killed by the agent: %2
2009-02-06 11:55:31-0800 1544 a24 Loaded event 188: Installation Ready: The
following updates are downloaded and ready for installation. This computer is
currently scheduled to install these updates on %1 at %2: %3
2009-02-06 11:55:31-0800 1544 a24 Loaded event 189: Installation Ready: The
following updates are downloaded and ready for installation. To install the
updates, an administrator should log on to this computer and Windows will
prompt with further instructions: %1
2009-02-06 11:55:31-0800 1544 a24 Performance warning: CTraceCategory::Trace
had to allocate memory
2009-02-06 11:55:31-0800 1544 a24 Loaded event 190: Installation Successful:
Windows successfully installed the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 191: Installation successful
and restart required for the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 192: Installation killed:
Installation of the following update is killed by the agent: %2
2009-02-06 11:55:31-0800 1544 a24 Loaded event 193: Restart Required: To
complete the installation of the following updates, the computer must be
restarted. Until this computer has been restarted, Windows cannot search for
or download new updates: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 194: Restart Required: To
complete the installation of the following updates, the computer will be
restarted within %1 minutes: %2
2009-02-06 11:55:31-0800 1544 a24 Loaded event 195: Installation Failure:
Windows failed to install the following update with error %1: %2.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 196: Unhide update: user
unhid one update.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 197: Installation Successful:
Windows successfully installed the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 198: Installation Failure:
Windows failed to install the following update with error %1: %2.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 199: Installation successful
and restart required for the following update: %1
2009-02-06 11:55:31-0800 1544 a24 Loaded event 200: Installation killed:
Installation of the following update is killed by the agent: %2
2009-02-06 11:55:31-0800 1544 a24 Loaded event 201: Installation pending.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 221: Uninstallation Failure:
Windows failed to uninstall the following update with error %1: %2.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 222: Uninstallation
Successful: Windows successfully uninstalled the following update: %1.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 223: User cancelled the
uninstall.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 224: Uninstallation
successful and restart required for the following update: %1.
2009-02-06 11:55:31-0800 1544 a24 Loaded event 225: Uninstallation killed:
Uninstallation of the following update is killed by the agent: %2.
2009-02-06 11:55:31-0800 1544 a24 Successfully loaded client event namespace
descriptor.
2009-02-06 11:55:31-0800 1544 a24 Successfully initialized local event
logger. Events will be logged at
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2009-02-06 11:55:31-0800 1544 a24 Successfully initialized NT event logger.
2009-02-06 11:55:31-0800 1544 a24 Batch flush age for server 0 is 120 seconds.
2009-02-06 11:55:31-0800 1544 a24 Write buffer is empty. Not scheduling a
flush.
2009-02-06 11:55:31-0800 1544 a24 Successfully initialized event uploader 0.
2009-02-06 11:55:31-0800 1544 a24 Batch flush age for server 1 is 5240
seconds.
2009-02-06 11:55:31-0800 1544 a24 Write buffer is empty. Not scheduling a
flush.
2009-02-06 11:55:31-0800 1544 a24 Successfully initialized event uploader 1.
2009-02-06 11:55:31-0800 1544 a24 destination 2 subscribes for subscription
1 with internalrouting 0
2009-02-06 11:55:31-0800 1544 a24 destination 2 subscribes for subscription
0 with internalrouting 0
2009-02-06 11:55:31-0800 1544 a24 Network interfaces : 1
2009-02-06 11:55:31-0800 1544 a24 Signal subscription event 8
2009-02-06 11:55:31-0800 1544 a24 create subscription event for destination
2 and routing 0
2009-02-06 11:55:31-0800 1544 a24 destination 2 subscribes for subscription
8 with internalrouting 0
2009-02-06 11:55:31-0800 1544 a24 Network interfaces : 1
2009-02-06 11:55:31-0800 1544 a24 destination 2 subscribes for subscription
9 with internalrouting 0
2009-02-06 11:55:31-0800 1544 a24 EE Handler QI: ISusExprEvaluate
2009-02-06 11:55:31-0800 1544 a24 CEEMsiHandler::AddRef: refcount is 2
2009-02-06 11:55:31-0800 1544 a24 Initializing BITS callback handler.
2009-02-06 11:55:31-0800 1544 a24 AddRef: ref count -> 1
2009-02-06 11:55:31-0800 1544 a24 DH Listener AddRef: ref count -> 1
2009-02-06 11:55:31-0800 1544 a24 Handler QI: IUnknown
2009-02-06 11:55:31-0800 1544 a24 CUHHandlerBase::AddRef: refcount is 2
2009-02-06 11:55:31-0800 1544 a24 CUHHandlerBase::Release: refcount is 1
2009-02-06 11:55:31-0800 1544 a24 Handler QI: ISusUpdateInstallerInfo
2009-02-06 11:55:31-0800 1544 a24 CUHHandlerBase::AddRef: refcount is 2
2009-02-06 11:55:31-0800 1544 a24 CUHHandlerBase::Release: refcount is 1
2009-02-06 11:55:31-0800 1544 a24 ref count on CCR after AddRef is 2
2009-02-06 11:55:31-0800 1544 a24 ref count on CCR after Release is 1
2009-02-06 11:55:31-0800 1544 a24 fail to register class object 0x80004015
2009-02-06 11:55:31-0800 1544 a24 Client call recorder fails to init with
error 0x80004015
2009-02-06 11:55:31-0800 1544 a24 WU client with version 5.4.3790.5512
failed to initialize with error 0x80004015 from component agent
2009-02-06 11:55:31-0800 1544 a24 Failed to initialize WU client: 0x80004015
2009-02-06 11:55:31-0800 1544 a24 updated service status to 3
2009-02-06 11:55:32-0800 1544 a24 CEEMsiHandler::Release: refcount is 1
2009-02-06 11:55:32-0800 1544 a24 CEEMsiHandler::Release: refcount is 0
2009-02-06 11:55:32-0800 1544 a24 CUHHandlerBase::Release: refcount is 0
2009-02-06 11:55:32-0800 1544 a24 Submitting work item thread request.
2009-02-06 11:55:32-0800 1544 a24 new event 1 of type 2 added to event system
2009-02-06 11:55:32-0800 1544 a24 Asynchronously flushing
CEventQueue(a)00608220.
2009-02-06 11:55:32-0800 1544 a24 Asynchronously flushing
CEventQueue(a)00608220.
2009-02-06 11:55:32-0800 1544 a24 Done with asynchronous flush.
2009-02-06 11:55:32-0800 1544 a24 event 1 of type 2 removed from event system
2009-02-06 11:55:32-0800 1544 a24 DH Listener Release: ref count -> 0
2009-02-06 11:55:32-0800 1544 a24 DH Listener waiting for m_hSafeToDeleteEvent
2009-02-06 11:55:32-0800 1544 a24 Release: ref count -> 0
2009-02-06 11:55:32-0800 1544 a24 Waiting for m_hSafeToDeleteEvent
2009-02-06 11:55:32-0800 1544 a24 WUAUENG ServiceMain exits. Exit code is
0x80004015
------------------ >8 -----------------------

Again I apologize for the long message. But I'm running out of ideas. Any
help would be greatly appreciated!

 | 
Pages: 1
Prev: KB951847 vs KB953595 & .Net 3.5 Full Package
Next: Fix for upate failure code C8000643