Windows 7 - Tuesday 3rd April update won't work

Asked By XPclum

04-Apr-07 11:22 AM

Using "Windows Update" from my IE7 browser under XPpro, after a few moments
checking for updates, I get this message;
trying to view. The options provided below might help you solve the problem. "
-the few options provided don't help.

Looking in eventlog I see entries like these;

Catalog Database (1836) The version store for this instance (0) has reached
its maximum size of 16Mb. It is likely that a long-running transaction is
preventing cleanup of the version store and causing it to build up in size.
Updates will be rejected until the long-running transaction has been
completely committed or rolled back.
Possible long-running transaction:
SessionId: 0x02E103C0
Session-context: 0x00000000
Session-context ThreadId: 0x00000194

wuaueng.dll (3596) SUS20ClientDataStore: The version store for this instance
(0) has reached its maximum size of 8Mb. It is likely that a long-running
transaction is preventing cleanup of the version store and causing it to
build up in size. Updates will be rejected until the long-running transaction
has been completely committed or rolled back.
Possible long-running transaction:
SessionId: 0x022603C0
Session-context: 0x00000000
Session-context ThreadId: 0x00000648

Any idea what these are, and how I can clear them? The event-log help site
has no entries on these topics..

TIA

04-Apr-07 02:11 PM

Download KB925902 from here:
http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F-4B78-9463-10AC20A75020&displaylang=en

Save it, do NOT run it from 'it's present location'.
Close the browser and any other open programs.
Now run WindowsXP-KB925902-x86-ENU.exe and when it's done the system
should prompt for a restart.

For the Catalog Database event, is 1836 the Event ID ?

FWIW, and this is only an educated guess, the contents of
WINDOWS\SoftwareDistribution are either corrupted or unable to be clear out.
Which AV/security suite software is installed ? Suggest whichever
product that is installed be configured NOT to scan the
SoftwareDistribution folder. As of yet, there has been no malware that
has used that folder to infect a system.

To clear the 'clogged' folders in WINDOWS\SoftwareDistribution you'll
need to stop the Automatic Updates service using the Services console
Start > Run > type in

services.msc

Click OK
Click the 'Stop the service' link in the left frame
Leave the Services console open

Navigate to
WINDOWS\SoftwareDistribution\DataStore and delete DataStore.edb
[if the logs in the Logs folder have suffered corruption, then you *may*
need to delete those, too. Delete them all if any have grown larger than
128 KB]

Open the WINDOWS\SoftwareDistribution\Download folder and delete all
contents
Same for the EventCache folder
Close the window

Go back to Automatic Updates in the Services console and restart the service

That *should* allow the system to obtain updates now.


MowGreen  [MVP 2003-2007]
===============
*-343-*  FDNY
Never Forgotten
===============

04-Apr-07 03:48 PM

Thanks for the prompt response MowGreen. We are making *some* progress..

After following your instructions I see no more of those application error
messages in Event Viewer, but sadly I still can't run Windows Update.

The downloaded executable ran as you suggested, requiring a reboot.
I went on to stop the AU service, deleted the files you suggested (not the
logs yet - they were all 128k), then restarted the AU service. For good
measure I rebooted again, then;
When I go to TOOLS, WINDOWS UPDATE in my browser, the landing page opens,
then before the green progress bar starts scrolling and it's "Checking if you
have the latest version..", I'm suddenly dumped at the Information page
saying,

trying to view. The options provided below might help you solve the problem.
For self-help options:

Frequently Asked Questions

Find Solutions

Windows Update Newsgroup
For assisted support options:

Microsoft Online Assisted Support (no-cost for Windows Update issues) "

There were no prompts about wanting to run Active X, and the
update.microsoft.com path is in my trusted sites list.

Can you suggest the next thing to try? BTW, my AV is CA's eTrust Antivirus -
with the latest sigfiles.

Thanks,
XPclump.

04-Apr-07 04:22 PM

Please open the WindowsUpdate.log located in the WINDOWS directory
[folder]. Scroll all the way to the bottom of the log.
Copy&paste the last 40 to 50 lines or so of the log into your reply so
we can see what's going on here.

KB925902 is installed now, correct ?
BTW, CA AV should not be causing any issues with the
SoftwareDistribution folder.
Is there any other security software installed ?


MowGreen  [MVP 2003-2007]
===============
*-343-*  FDNY
Never Forgotten
===============

04-Apr-07 05:36 PM

Hi Again.

Copy & Paste below as requested.

In answer to your questions;
KB925902 is installed now.
The only other security software is Windows own Defender etc.

Hope you can find the answer in this lot....

2007-04-04	20:18:07	1456	850	Service	*************
2007-04-04	20:18:07	1456	850	Service	** START **  Service: Service startup
2007-04-04	20:18:07	1456	850	Service	*********
2007-04-04	20:18:08	1456	850	Agent	  * WU client version 5.8.0.2469
2007-04-04	20:18:08	1456	850	Agent	  * SusClientId =
'd8e156b1-63e6-4d4f-b387-92036a158657'
2007-04-04	20:18:08	1456	850	Agent	  * Base directory:
C:\WINDOWS\SoftwareDistribution
2007-04-04	20:18:08	1456	850	Agent	  * Access type: No proxy
2007-04-04	20:18:08	1456	850	Agent	  * Network state: Connected
2007-04-04	20:18:53	1456	850	Agent	***********  Agent: Initializing Windows
Update Agent  ***********
2007-04-04	20:18:53	1456	850	Agent	***********  Agent: Initializing global
settings cache  ***********
2007-04-04	20:18:53	1456	850	Agent	  * WSUS server: <NULL>
2007-04-04	20:18:53	1456	850	Agent	  * WSUS status server: <NULL>
2007-04-04	20:18:53	1456	850	Agent	  * Target group: (Unassigned Computers)
2007-04-04	20:18:53	1456	850	Agent	  * Windows Update access disabled: No
2007-04-04	20:18:55	1456	850	DnldMgr	Download manager restoring 0 downloads
2007-04-04	20:18:55	1456	850	AU	###########  AU: Initializing Automatic
Updates  ###########
2007-04-04	20:18:55	1456	850	AU	  # Approval type: Scheduled (User preference)
2007-04-04	20:18:55	1456	850	AU	  # Scheduled install day/time: Every day at
3:00
2007-04-04	20:18:55	1456	850	AU	  # Auto-install minor updates: Yes (User
preference)
2007-04-04	20:25:25	3236	cc4	Misc	===========  Logging initialized (build:
5.8.0.2469, tz: +0100)  ===========
2007-04-04	20:25:25	3236	cc4	Misc	  = Process: C:\Program Files\Internet
Explorer\iexplore.exe
2007-04-04	20:25:25	3236	cc4	Misc	  = Module: C:\WINDOWS\system32\wuweb.dll
2007-04-04	20:25:25	3236	cc4	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003
2007-04-04	20:27:14	3236	cc4	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003
2007-04-04	20:29:04	3236	cc4	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003
2007-04-04	20:39:09	3236	cc4	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003
2007-04-04	20:43:22	3236	cc4	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003
2007-04-04	20:57:14	1456	850	AU	#############
2007-04-04	20:57:14	1456	850	AU	## START ##  AU: Search for updates
2007-04-04	20:57:15	1456	850	AU	#########
2007-04-04	20:57:15	1456	850	AU	<<## SUBMITTED ## AU: Search for updates
[CallId = {D35BAE6D-991D-4DCB-A249-FE447598C719}]
2007-04-04	20:57:15	1456	5c0	Agent	*************
2007-04-04	20:57:15	1456	5c0	Agent	** START **  Agent: Finding updates
[CallerId = AutomaticUpdates]
2007-04-04	20:57:15	1456	5c0	Agent	*********
2007-04-04	20:57:34	1456	5c0	Setup	FATAL: IsUpdateRequired failed with error
0x80245003
2007-04-04	20:57:34	1456	5c0	Report	***********  Report: Initializing static
reporting data  ***********
2007-04-04	20:57:34	1456	5c0	Report	  * OS Version = 5.1.2600.2.0.65792
2007-04-04	20:57:35	1456	5c0	Report	  * Computer Brand = IBM
2007-04-04	20:57:35	1456	5c0	Report	  * Computer Model = 18297QG
2007-04-04	20:57:35	1456	5c0	Report	  * Bios Revision = 1RETDNWW (3.19 )
2007-04-04	20:57:35	1456	5c0	Report	  * Bios Name = Phoenix FirstBIOS(tm)
Notebook Pro Version 2.0 for IBM ThinkPad
2007-04-04	20:57:35	1456	5c0	Report	  * Bios Release Date =
2005-10-13T00:00:00
2007-04-04	20:57:35	1456	5c0	Report	  * Locale ID = 2057
2007-04-04	20:57:35	1456	5c0	Setup	WARNING: SelfUpdate: Default Service:
IsUpdateRequired failed: 0x80245003
2007-04-04	20:57:35	1456	5c0	Setup	WARNING: SelfUpdate: Default Service:
IsUpdateRequired failed, error = 0x80245003
2007-04-04	20:57:35	1456	5c0	Agent	  * WARNING: Skipping scan, self-update
check returned 0x80245003
2007-04-04	20:57:36	1456	5c0	Agent	  * WARNING: Exit code = 0x80245003
2007-04-04	20:57:36	1456	5c0	Agent	*********
2007-04-04	20:57:36	1456	5c0	Agent	**  END  **  Agent: Finding updates
[CallerId = AutomaticUpdates]
2007-04-04	20:57:36	1456	5c0	Agent	*************
2007-04-04	20:57:36	1456	5c0	Agent	WARNING: WU client failed Searching for
update with error 0x80245003
2007-04-04	20:57:36	1456	5c0	AU	>>##  RESUMED  ## AU: Search for updates
[CallId = {D35BAE6D-991D-4DCB-A249-FE447598C719}]
2007-04-04	20:57:36	1456	5c0	AU	  # WARNING: Search callback failed, result
= 0x80245003
2007-04-04	20:57:36	1456	5c0	AU	#########
2007-04-04	20:57:36	1456	5c0	AU	##  END  ##  AU: Search for updates [CallId
= {D35BAE6D-991D-4DCB-A249-FE447598C719}]
2007-04-04	20:57:36	1456	5c0	AU	#############
2007-04-04	20:57:36	1456	5c0	AU	AU setting next detection timeout to
2007-04-05 00:57:36
2007-04-04	20:57:40	1456	5c0	Report	REPORT EVENT:
{87BD9CB0-2D90-48A5-BA03-686D7B0B1D5D}	2007-04-04
20:57:34+0100	1	148	101	{D67661EB-2423-451D-BF5D-13199E37DF28}	0	80245003	SelfUpdate	Failure	Software
Synchronization	Error: Agent failed detecting with reason: 0x80245003
2007-04-04	21:25:36	3236	f50	WUWeb	FATAL: CheckIfClientUpdateNeeded failed:
error 0x80245003


TIA

XPclump

05-Apr-07 08:08 AM

This message board has been unavailable for a few hours, so I Googled
elsewhere.
I found another helpful reply to a sort of similar problem and tried it.
It seems to have worked. I can now connect to Windows Update. It downloaded
a new Defender file and says there's nothing else to come. Assuming that's
correct I'll wait until the the next Tuesday-Update and see if we're still
working ;-)

For your info, this is the advice I followed;

===================================
1. Click Start, Run, type: cmd and press Enter. Please run the following
command in the opened window.

Net stop WuAuServ

2. Click Start, Run, type: %windir% and press Enter.
3. In the opened folder, rename the folder SoftwareDistribution to Sdold.
4. Click Start, Run, type: cmd and press Enter. Please run the following
command in the opened window.

Net start WuAuServ

2. Remove the corrupted Active X control
=====================================
1. Open Interent Options
2. On the General Tab choose Settings under Temporary Internet Files
3. Then click on View Objects.
4. Right Click WuWebControl Class and choose remove
5. Right Click MuWebControl Class and choose remove
6. Delete the file c:\windows\system32\wuweb.dll
7. Delete the file c:\windows\system32\muweb.dll

The above steps will help us remove the ActiveX controls for Windows Update
and Microsoft Update. Then will download a new one to instead of the
corrupted one. "



My notes:-  I didn't have either of the MuWeb items to be deleted.
Still don't know what caused the problem, but at least it's working again.

One thing I noticed during step 2.4 above,  there were (and still are) three
program files tagged as "Damaged".
They are;
Java Plug-in 1.4.1
Java2 Runtime Environment 1.4.1
and
{9F1C11AA-197B-4942-BA54-47A8489BB47F} version 5.4.3790.14

- they all have 2003 creation dates but current (yesterday/today)
last-accessed dates.

Just a red herring?

T again IA

05-Apr-07 03:02 PM

Nice work ! I suspect that one of the ActiveX controls was damaged.
Wuweb is for Windows Update, MU is for Microsoft Update. That's why
there were no MU files <w>
As to the Java version ... how many different ones are listed in
Add/Remove Programs in the Control Panel ?
There should be only one version listed, the latest, non vulnerable
versions are 1.5.0 Update 11 and version 6 Update 1

Uninstall all versions prior to Update 11 if they are listed. You can
also right click the 1.4 versions when "View objects" is chosen and
choose Remove if they are not deleted during the uninstallation of older
java packages.
Installing the latest version will install the needed ActiveX objects.

For the record, the error code in the WindowsUpdate.log,
0x80245003 means


There are no other updates out now. However, there *will* be new updates
coming out next Tuesday.
The system should be good to go now. :)

MowGreen  [MVP 2003-2007]
===============
*-343-*  FDNY
Never Forgotten
===============

06-Apr-07 07:02 AM

Hi there,

In control panel add-remove Programs, there is only one reference to
anything "Java". That is;

It's 60Megs in size and was last used two years ago. I think it came with
the [IBM] Laptop..

In the control-panel Internet options, General, settings, view objects pane,
I only see the following two Java entries;

Java Plug-in 1.4.1 (damaged)
Java2 Runtime Environment 1.4.1 (damaged)

If I delete those two damaged items, and remove the IBM app that hasn't been
run since June 2005, will I automatically be prompted to download a new Java
version the first time I need it? or should I go and get a latest version now?

Thanks again for all your help and advice MowGreen!!

XPclump

06-Apr-07 04:08 PM

Glad to have assisted you, XPclump. You're mowst welcome <g>

Uninstall the IBM java package from Add/Remove Programs. If the ActiveX
controls are left, then you can manually remove them.
I *highly* doubt that the system will be prompted to download another
java package as there will be none installed at that point.
Download the latest 1.5 JRE from here:

Java Runtime Environment (JRE) 5.0 Update 11
http://java.sun.com/javase/downloads/index_jdk5.jsp

Click the Download button next to that *specific package*.
Accept the agreement and then choose the
Windows Offline Installation, Multi-language package

Save it. When the download is finished, close the browser and any other
open programs.
Now install it BUT watch that Sun does not SNEAK the Google Toolbar onto
your system without your express consent and acknowledgement.
It is checked by DEFAULT, a rather sneaky way of generating revenue, IMO.
One must uncheck it in order to prevent it's installation.

This java package will notify you of any subsequent updates. However, it
may take quite some time to do so.
Since Sun does NOT uninstall older, vulnerable versions of their java
package, after a new package is installed you will have to uninstall the
OLDER, VULNERABLE version from ARP.


MowGreen  [MVP 2003-2007]
===============
*-343-*  FDNY
Never Forgotten
===============

07-Apr-07 02:44 PM

Thanks again MowGreen!

All done and dusted now.
I have seen that default ticked-box for Google Toolbars before, but
interestingly I wasn't offered it today - nor did I have the Toolbar foisted
upon me.

Finger crossed for next Tuesday's updates...

Regards

XPclump