Share via

Windows update refuses to work NEED HELP

Anonymous
2009-07-06T02:39:07+00:00

I clean installs my windows vista 32.  Loaded the drivers for motherboard and sound card and video card. then I installed virus protection and proceeded to update windows. Windows refused to update.

Only 3 updates took.  KB938371, KB937287, and KB935509 Then I get failed for all other attempted updates.  7.2.6001.788 When I do "Try Again" I get error code 8024001B I tried to update the windows update agent from links in vista (See link below) but would not install.  Would get windows modules installer stopped working and was closed. Below is event log...

http://download.windowsupdate.com/windowsupdate/redist/standalone/7.2.6001.788/windowsupdateagent30-x86.exe

Error    7/5/2009 10:23:53 PM    Application Hang    1002    (101)

Log Name:      Application

Source:        Application Hang

Date:          7/5/2009 10:23:53 PM

Event ID:      1002

Task Category: (101)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

The program wusetup.exe version 7.2.6001.788 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 4b4 Start Time: 01c9fde096ac16da Termination Time: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Hang" />

    <EventID Qualifiers="0">1002</EventID>

    <Level>2</Level>

    <Task>101</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-07-06T02:23:53.000Z" />

    <EventRecordID>697</EventRecordID>

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>wusetup.exe</Data>

    <Data>7.2.6001.788</Data>

    <Data>4b4</Data>

    <Data>01c9fde096ac16da</Data>

    <Data>0</Data>

    <Binary>54006F00700020006C006500760065006C002000770069006E0064006F0077002000690073002000690064006C00650000000000</Binary>

  </EventData>

</Event>

____________________________________________________________________________

Log Name:      Application

Source:        Windows Error Reporting

Date:          7/5/2009 10:23:06 PM

Event ID:      1001

Task Category: None

Level:         Information

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Fault bucket 1338470580, type 1

Event Name: APPCRASH

Response: None

Cab Id: 0

Problem signature:

P1: TrustedInstaller.exe

P2: 6.0.6001.18000

P3: 47918bff

P4: wcp.dll

P5: 6.0.6001.18000

P6: 4791a76e

P7: c0000005

P8: 001563c2

P9:

P10:

Attached files:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF086.tmp.version.txt

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF087.tmp.appcompat.txt

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF098.tmp.hdmp

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF74D.tmp.mdmp

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report048774d2

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Windows Error Reporting" />

    <EventID Qualifiers="0">1001</EventID>

    <Level>4</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-07-06T02:23:06.000Z" />

    <EventRecordID>696</EventRecordID>

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>1338470580</Data>

    <Data>1</Data>

    <Data>APPCRASH</Data>

    <Data>None</Data>

    <Data>0</Data>

    <Data>TrustedInstaller.exe</Data>

    <Data>6.0.6001.18000</Data>

    <Data>47918bff</Data>

    <Data>wcp.dll</Data>

    <Data>6.0.6001.18000</Data>

    <Data>4791a76e</Data>

    <Data>c0000005</Data>

    <Data>001563c2</Data>

    <Data>

    </Data>

    <Data>

    </Data>

    <Data>

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF086.tmp.version.txt

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF087.tmp.appcompat.txt

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF098.tmp.hdmp

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0eb6f788\WERF74D.tmp.mdmp</Data>

    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report048774d2</Data>

  </EventData>

</Event>

______________________________________________

Log Name:      Application

Source:        Microsoft-Windows-WMI

Date:          6/25/2009 10:11:52 PM

Event ID:      10

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />

    <EventID Qualifiers="49152">10</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:11:52.000Z" />

    <EventRecordID>36</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>//./root/CIMV2</Data>

    <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>

    <Data>0x80041003</Data>

  </EventData>

</Event>

_____________________________________________________

Log Name:      Application

Source:        VSS

Date:          6/25/2009 10:18:09 PM

Event ID:      8194

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:

   Gathering Writer Data

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {af169da5-5e5a-4345-a9ac-ea56662240ff}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="VSS" />

    <EventID Qualifiers="0">8194</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:18:09.000Z" />

    <EventRecordID>62</EventRecordID>

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>0x80070005</Data>

    <Data>

Operation:

   Gathering Writer Data

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {af169da5-5e5a-4345-a9ac-ea56662240ff}</Data>

    <Binary>2D20436F64653A20575254575254494330303030313038382D2043616C6C3A20575254575254494330303030313035362D205049443A202030303030313334302D205449443A202030303030323330382D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365202020202020202D20557365723A204E5420415554484F524954595C4E4554574F524B2053455256494345202020202D205369643A2020532D312D352D3230</Binary>

  </EventData>

</Event>

______________________________________

Log Name:      Application

Source:        Application Error

Date:          6/25/2009 10:18:59 PM

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Faulting application TrustedInstaller.exe, version 6.0.6001.18000, time stamp 0x47918bff, faulting module wcp.dll, version 6.0.6001.18000, time stamp 0x4791a76e, exception code 0xc0000096, fault offset 0x001563c7, process id 0x48c, application start time 0x01c9f61c7f7589a5.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Error" />

    <EventID Qualifiers="0">1000</EventID>

    <Level>2</Level>

    <Task>100</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:18:59.000Z" />

    <EventRecordID>116</EventRecordID>

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>TrustedInstaller.exe</Data>

    <Data>6.0.6001.18000</Data>

    <Data>47918bff</Data>

    <Data>wcp.dll</Data>

    <Data>6.0.6001.18000</Data>

    <Data>4791a76e</Data>

    <Data>c0000096</Data>

    <Data>001563c7</Data>

    <Data>48c</Data>

    <Data>01c9f61c7f7589a5</Data>

  </EventData>

</Event>

________________________________________________________

Log Name:      Application

Source:        VSS

Date:          6/25/2009 10:19:12 PM

Event ID:      8194

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:

   Gathering Writer Data

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {af169da5-5e5a-4345-a9ac-ea56662240ff}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="VSS" />

    <EventID Qualifiers="0">8194</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:19:12.000Z" />

    <EventRecordID>117</EventRecordID>

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>0x80070005</Data>

    <Data>

Operation:

   Gathering Writer Data

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {af169da5-5e5a-4345-a9ac-ea56662240ff}</Data>

    <Binary>2D20436F64653A20575254575254494330303030313038382D2043616C6C3A20575254575254494330303030313035362D205049443A202030303030313334302D205449443A202030303030313733362D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365202020202020202D20557365723A204E5420415554484F524954595C4E4554574F524B2053455256494345202020202D205369643A2020532D312D352D3230</Binary>

  </EventData>

</Event>

____________________________________________________

Log Name:      Application

Source:        Microsoft-Windows-User Profiles Service

Date:          6/25/2009 10:22:20 PM

Event ID:      1530

Task Category: None

Level:         Warning

Keywords:      Classic

User:          SYSTEM

Computer:      matiz

Description:

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -

 1 user registry handles leaked from \Registry\User\S-1-5-21-438996796-164210927-3526649294-1000:

Process 520 (\Device\HarddiskVolume5\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-438996796-164210927-3526649294-1000

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />

    <EventID Qualifiers="32768">1530</EventID>

    <Version>0</Version>

    <Level>3</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:22:20.000Z" />

    <EventRecordID>133</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security UserID="S-1-5-18" />

  </System>

  <EventData Name="EVENT_HIVE_LEAK">

    <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-438996796-164210927-3526649294-1000:

Process 520 (\Device\HarddiskVolume5\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-438996796-164210927-3526649294-1000

</Data>

  </EventData>

</Event>

_______________________________________________

Log Name:      Application

Source:        Microsoft-Windows-WMI

Date:          6/25/2009 10:26:55 PM

Event ID:      10

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      matiz

Description:

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />

    <EventID Qualifiers="49152">10</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-06-26T02:26:55.000Z" />

    <EventRecordID>145</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>matiz</Computer>

    <Security />

  </System>

  <EventData>

    <Data>//./root/CIMV2</Data>

    <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>

    <Data>0x80041003</Data>

  </EventData>

</Event>

file:///C:/Users/joshzac/Desktop/log%20of%20problems.evtx

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2009-07-10T13:04:02+00:00

Hi Joshzac,

I'm sorry to know that, you are still not able to install the updates successfully. I've checked many of my resources as per the error messages you got. Please try the following steps to fix the issue.

  1. Run System File Checker to verify the Windows Vista files that are currently running on the computer.

 To do this, follow these steps:

Open an elevated command prompt. To do this, click Start, click All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .

If you are prompted for an administrator password or for a confirmation, type the password, or click Allow .

At the prompt, type sfc /scannow and hit enter.

  1. Register the Windows Update .dll files and then try again to connect to the Windows Update Web site. To register the Windows Update .dll files, follow these steps: 

The following outlines how to stop services pertaining to Windows Update, register related DLL files, and then restart the previously mentioned services. This troubleshooting generally applies to all Windows Update related issues.

Stopping services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

        net stop wuauserv

        net stop bits

        net stop cryptsvc

4.     Please do not close the Command Prompt window.

Registering DLL’s pertaining to Windows Update

1.     Please copy and paste the following text into a new Notepad document, and save the file as WindowsUpdate.BAT

2.     If saved correctly the icon will change from a Notepad file to BAT file which has two blue cogs as its icon.

            -or-

3.     You can manually type each command at the command prompt:

regsvr32 c:\windows\system32\vbscript.dll /s

regsvr32 c:\windows\system32\mshtml.dll /s

regsvr32 c:\windows\system32\msjava.dll /s

regsvr32 c:\windows\system32\jscript.dll /s

regsvr32 c:\windows\system32\msxml.dll /s

regsvr32 c:\windows\system32\actxprxy.dll /s

regsvr32 c:\windows\system32\shdocvw.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups2.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 Softpub.dll /s

regsvr32 Mssip32.dll /s

regsvr32 Initpki.dll /s

regsvr32 softpub.dll /s

regsvr32 wintrust.dll /s

regsvr32 initpki.dll /s

regsvr32 dssenh.dll /s

regsvr32 rsaenh.dll /s

regsvr32 gpkcsp.dll /s

regsvr32 sccbase.dll /s

regsvr32 slbcsp.dll /s

regsvr32 cryptdlg.dll /s

regsvr32 Urlmon.dll /s

regsvr32 Shdocvw.dll /s

regsvr32 Msjava.dll /s

regsvr32 Actxprxy.dll /s

regsvr32 Oleaut32.dll /s

regsvr32 Mshtml.dll /s

regsvr32 msxml.dll /s

regsvr32 msxml2.dll /s

regsvr32 msxml3.dll /s

regsvr32 Browseui.dll /s

regsvr32 shell32.dll /s

regsvr32 wuapi.dll /s

regsvr32 wuaueng.dll /s

regsvr32 wuaueng1.dll /s

regsvr32 wucltui.dll /s

regsvr32 wups.dll /s

regsvr32 wuweb.dll /s

regsvr32 jscript.dll /s

regsvr32 atl.dll /s

regsvr32 Mssip32.dll /s

 Restarting services pertaining to Windows Update

1.     Click Start, click All Programs, click Accessories, right-click Command Prompt, and select Run as Administrator.

2.     If you receive a notification from User Account Control simply click Continue.

3.     At the command prompt, type the following, commands and then press ENTER after each command.

        net start wuauserv

        net start bits

        net start cryptsvc 

        exit

Let me know if this worked.

All the best!

Thanks and Regards:

Syed V - Microsoft Support.

Was this answer helpful?

0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2009-07-07T03:00:55+00:00

    Please also note new error code on attempts to update:   Windows Update error 8024000b

    Was this answer helpful?

    0 comments
  2. Anonymous
    2009-07-07T00:52:22+00:00

    Ok, I went and restarted each service we had stopped as per line number 6 in step one.  I then did step 2. which seemed to have reinstalled an updater. I then followed instructions to do updates.  Here is where things went wrong.  I hope the error log helps get a solution.  I got:  

    Log Name:      Application

    Source:        Application Error

    Date:          7/6/2009 7:06:00 PM

    Event ID:      1000

    Task Category: (100)

    Level:         Error

    Keywords:      Classic

    User:          N/A

    Computer:      matiz

    Description:

    Faulting application TrustedInstaller.exe, version 6.0.6001.18000, time stamp 0x47918bff, faulting module wcp.dll, version 6.0.6001.18000, time stamp 0x4791a76e, exception code 0xc0000005, fault offset 0x001563c2, process id 0xd6c, application start time 0x01c9fe8e4d8d0360.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Application Error" />

        <EventID Qualifiers="0">1000</EventID>

        <Level>2</Level>

        <Task>100</Task>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2009-07-06T23:06:00.000Z" />

        <EventRecordID>809</EventRecordID>

        <Channel>Application</Channel>

        <Computer>matiz</Computer>

        <Security />

      </System>

      <EventData>

        <Data>TrustedInstaller.exe</Data>

        <Data>6.0.6001.18000</Data>

        <Data>47918bff</Data>

        <Data>wcp.dll</Data>

        <Data>6.0.6001.18000</Data>

        <Data>4791a76e</Data>

        <Data>c0000005</Data>

        <Data>001563c2</Data>

        <Data>d6c</Data>

        <Data>01c9fe8e4d8d0360</Data>

      </EventData>

    </Event>

    _______________________________________________________________________

    Log Name:      Application

    Source:        Windows Error Reporting

    Date:          7/6/2009 7:08:01 PM

    Event ID:      1001

    Task Category: None

    Level:         Information

    Keywords:      Classic

    User:          N/A

    Computer:      matiz

    Description:

    Fault bucket 1338470580, type 1

    Event Name: APPCRASH

    Response: None

    Cab Id: 0

    Problem signature:

    P1: TrustedInstaller.exe

    P2: 6.0.6001.18000

    P3: 47918bff

    P4: wcp.dll

    P5: 6.0.6001.18000

    P6: 4791a76e

    P7: c0000005

    P8: 001563c2

    P9:

    P10:

    Attached files:

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE24.tmp.version.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE25.tmp.appcompat.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE64.tmp.hdmp

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERE548.tmp.mdmp

    These files may be available here:

    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report06f2b927

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Windows Error Reporting" />

        <EventID Qualifiers="0">1001</EventID>

        <Level>4</Level>

        <Task>0</Task>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2009-07-06T23:08:01.000Z" />

        <EventRecordID>810</EventRecordID>

        <Channel>Application</Channel>

        <Computer>matiz</Computer>

        <Security />

      </System>

      <EventData>

        <Data>1338470580</Data>

        <Data>1</Data>

        <Data>APPCRASH</Data>

        <Data>None</Data>

        <Data>0</Data>

        <Data>TrustedInstaller.exe</Data>

        <Data>6.0.6001.18000</Data>

        <Data>47918bff</Data>

        <Data>wcp.dll</Data>

        <Data>6.0.6001.18000</Data>

        <Data>4791a76e</Data>

        <Data>c0000005</Data>

        <Data>001563c2</Data>

        <Data>

        </Data>

        <Data>

        </Data>

        <Data>

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE24.tmp.version.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE25.tmp.appcompat.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERDE64.tmp.hdmp

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report08a4e584\WERE548.tmp.mdmp</Data>

        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report06f2b927</Data>

      </EventData>

    </Event>

    __________________________________________________________________

    Log Name:      Application

    Source:        Application Error

    Date:          7/6/2009 8:40:28 PM

    Event ID:      1000

    Task Category: (100)

    Level:         Error

    Keywords:      Classic

    User:          N/A

    Computer:      matiz

    Description:

    Faulting application TrustedInstaller.exe, version 6.0.6001.18000, time stamp 0x47918bff, faulting module wcp.dll, version 6.0.6001.18000, time stamp 0x4791a76e, exception code 0xc0000005, fault offset 0x001563c2, process id 0xc00, application start time 0x01c9fe9b456ed840.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Application Error" />

        <EventID Qualifiers="0">1000</EventID>

        <Level>2</Level>

        <Task>100</Task>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2009-07-07T00:40:28.000Z" />

        <EventRecordID>814</EventRecordID>

        <Channel>Application</Channel>

        <Computer>matiz</Computer>

        <Security />

      </System>

      <EventData>

        <Data>TrustedInstaller.exe</Data>

        <Data>6.0.6001.18000</Data>

        <Data>47918bff</Data>

        <Data>wcp.dll</Data>

        <Data>6.0.6001.18000</Data>

        <Data>4791a76e</Data>

        <Data>c0000005</Data>

        <Data>001563c2</Data>

        <Data>c00</Data>

        <Data>01c9fe9b456ed840</Data>

      </EventData>

    </Event>

    _______________________________________________________________________

    Log Name:      Application

    Source:        Windows Error Reporting

    Date:          7/6/2009 8:41:09 PM

    Event ID:      1001

    Task Category: None

    Level:         Information

    Keywords:      Classic

    User:          N/A

    Computer:      matiz

    Description:

    Fault bucket 1338470580, type 1

    Event Name: APPCRASH

    Response: None

    Cab Id: 0

    Problem signature:

    P1: TrustedInstaller.exe

    P2: 6.0.6001.18000

    P3: 47918bff

    P4: wcp.dll

    P5: 6.0.6001.18000

    P6: 4791a76e

    P7: c0000005

    P8: 001563c2

    P9:

    P10:

    Attached files:

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AB4.tmp.version.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AB5.tmp.appcompat.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AE5.tmp.hdmp

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER61D9.tmp.mdmp

    These files may be available here:

    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report087ffc6f

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Windows Error Reporting" />

        <EventID Qualifiers="0">1001</EventID>

        <Level>4</Level>

        <Task>0</Task>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2009-07-07T00:41:09.000Z" />

        <EventRecordID>815</EventRecordID>

        <Channel>Application</Channel>

        <Computer>matiz</Computer>

        <Security />

      </System>

      <EventData>

        <Data>1338470580</Data>

        <Data>1</Data>

        <Data>APPCRASH</Data>

        <Data>None</Data>

        <Data>0</Data>

        <Data>TrustedInstaller.exe</Data>

        <Data>6.0.6001.18000</Data>

        <Data>47918bff</Data>

        <Data>wcp.dll</Data>

        <Data>6.0.6001.18000</Data>

        <Data>4791a76e</Data>

        <Data>c0000005</Data>

        <Data>001563c2</Data>

        <Data>

        </Data>

        <Data>

        </Data>

        <Data>

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AB4.tmp.version.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AB5.tmp.appcompat.txt

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER5AE5.tmp.hdmp

    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report0e7f6204\WER61D9.tmp.mdmp</Data>

        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report087ffc6f</Data>

      </EventData>

    </Event>

    Was this answer helpful?

    0 comments
  3. Anonymous
    2009-07-07T00:08:06+00:00

    Am stuck on # 6 step 1.  I followed all of step 1 till I got to number 6.  How do I restart stopped services?  Do I go back steps 1 through 5 and hit restart? on each one?

    Please advise....

    PS:  When I went to stop windows update, it was stopped already.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2009-07-06T15:51:44+00:00

    Hi Joshzac,

    Thank you for visiting Microsoft Windows Vista Forums.

    Try the following steps to install the windows updates successfully.

    **Step 1:**Rename the SoftwareDistribution and Catroot2 folders.

    1.     Click Start, type services.msc and hit enter.

    2.     From the list of services, right click and stop the following services: Windows Update, Cryptographic Service, Background Intelligent Transfer Service.

    3.     Click Start, type %windir% and hit enter.

    4.     Rename the SoftwareDistribution folder as OLDSD.

    5.     Open System32 folder and rename the Catroot2 folder as OLDCR2. If fails, then try to rename it in safe mode.

    6.     Start the stopped services.

    Step 2: Download and install the “Download the System Update Readiness Tool for Windows Vista (KB947821) package now.   http://www.microsoft.com/downloads/details.aspx?FamilyID=0435684b-8d12-4028-9cb0-b2903257f1fd  Have a look at the following article for more information:

    http://support.microsoft.com/default.aspx/kb/947821

    Step 3: Visit the Windows updates site and install the updates.

    Let me know if this worked.

    All the best!

    Thanks and Regards:

    Syed V - Microsoft Support.

    Was this answer helpful?

    0 comments