Can’t install Security Monthly Quality Rollup

Topic

New Reply

I seem to be able to install all Win7 64-bit updates except for the Monthly Quality Rollup updates such as:

November, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems ( (KB3197868)

The update seems to install, but when I reboot, I get a “rolling back” message from the startup screen. This does not happen on my work computer, with the same security programs (Norton 360, CryptoPrevent, WinPatrol, Spyware Blaster, GWX Control Panel).

Zig

Reply | Quote

Replies

In Update history, right click on the failed update and select View details and that will give you an error code to work on.

Reply | Quote

It’s error code 80004005; MS is no help directly. Google reveals many threads, some dealing with WIN10 installation issues. I have tried the following:
1) run sfc /scannow – no problems
2) Downloaded the offline installer – same result
3) Tried the offline installer while disconnected from the internet – same answer
I see that I’m now not able to install the quality rollups, nor the Preview to the QRs.
Any help would be appreciated.

Thanx in advance,

Zig

Reply | Quote

As you’ve found, that error is a bit of an obscure code, but generally any code ending in 05 is an Access Denied.

I’ve never been a fan of CryptoPrevent but open Norton 360 – click on Settings then on Antivirus and turn off Auto Protect by clicking on it.

Click on Apply and then select Never from the dropdown and click Apply.

Do the same for Smart Firewall under the Firewall section and then retry the install, but first check to see that you have KB3197867 installed.

(You may need to uninstall CryptoPrevent to eliminate that as well).

You can check this by going to Installed Updates and then type that KB into the top right search box.

If you don’t have it then direct download from https://www.catalog.update.microsoft.com/Search.aspx?q=KB3197867

Select the 2nd one from the bottom.

You can restore Norton 360 by opening it and clicking on the Fix now button.

If it still reverts then let’s see if we can clear things out a bit.

Go Start – type disk cleanup then right click on Disk Cleanup and select Run as administrator.

This will scan the WinSxS folder for obsolete updates of which one may be the cause of the failure.

When it has completed, reboot a couple of times for Windows to reconfigure the updates then go Start – type cmd – right click on cmd and select Run as administrator – accept the UAC then enter or copy & paste these commands to the Command Prompt.

If you copy & paste them then they will auto run except perhaps for the last one where you will need to press enter.

net stop wuauserv

net stop cryptSvc

net stop bits

net stop msiserver

ren C:WindowsSoftwareDistribution SoftwareDistribution.old

ren C:WindowsSystem32catroot2 catroot2.old

net start wuauserv

net start cryptSvc

net start bits

net start msiserver

Enter exit to close the cmd window.

The SoftwareDistribution cmd will clear the update history but will not affect the installed updates.

If it’s still a no go, see what the System Update Readiness Tool (SURT) finds.

This is a 500MB download and can hang on checking your computer for updates but when complete, it will produce a log which can be found in C:WindowsLogsCBS then double click on the Checksur one which will open in Notepad which you can copy & paste into the reply box – but I don’t guarantee to be able to understand it

https://www.microsoft.com/en-gb/download/details.aspx?id=20858

Reply | Quote

Sudo15,

Thanks for your detailed help; before beginning the whole megillah, however, I noted that I also did NOT have KB3197867 installed, nor do I see that it was ever offered in my Update History file. ??What to do now?? ??Manually download & apply the latter update??

Zig

Reply | Quote

Sudo15

Indeed, I did NOT have KB3197867 installed, nor did I have record of it being offered (I was out of the country at that time, and perhaps it was superseded). I installed it using the standalone installer, but still couldn’t install KB3197868.

I used the Disk Cleanup tool to get rid of update files, and rebooted – back in the same “reverting windows” loop.

I checked Disk Cleanup again, and found that updates were still present (now 1+ GB, instead of 2+ GB); I ran the tool again, getting them down to 90 MB. I ran the tool a 3rd time and thy were gone. Restarting, I was in the same “reverting” loop, even though I hadn’t tried to install the update again.

Next, to CMD. I ran the commands you gave me (didn’t know you could copy & paste into CMD, because I’d always tried ctrl-C & ctrl-V), but I’m still in the “reverting” loop.

I’ve D/Led the SURT & will run it soon; we’ll see if it can sort things out.

Thanks again,
Zig

Reply | Quote

Well, I ran the SURT, and the log is attached; I doubt you’ll have trouble figuring it out.

I then tried to install 868 from the download, but still no success (forgot to turn off Norton & CryptoPrevent though –
they were both running on my office machine). Same result.
Not sure of where to go from here, except to try the install again without Norton & CP.

Awaiting further wisdom,
Zig :confused:

Reply | Quote

Can you boot up into the advanced boot options, select Repair your computer and navigate to the Recovery Environment to select Command Prompt and then enter –

(You can usually get into the advanced boot options by tapping F8 as you switch on, but that key/method can differ with different makes of computer).

dism.exe /image:c: /cleanup-image /revertpendingactions

Note there is a space before each /

This cmd should stop the loop.

Enter exit to close the cmd window then Restart.

If you still have the loop after the restart then shutdown, remove all power sources and hold the power button in for ~30secs then switch back on.

Have you tried the install with Norton 360 disabled and CryptoPrevent uninstalled.

The reason I’m not a fan of CryptoPrevent is because it takes over your computer.

EDIT – Just seen your last post regarding Norton and CP.

Checksur not reporting any errors takes us back to something blocking the install.

Reply | Quote

Sudo,

I’m not sure if I should go ahead with the DSIM, as the SURT showed no errors. In any event, I tried the M$ Update Troubleshhoter, which seemed to find (and fix) several problems:
46029-UpdateFix
However, the result was the same, this time with Norton turned off. I can do it again with CP turned off as well, later.

(I understand your misgivings about CP, but I’m used to running an administrator account with UAC turned off, so this adds a modicum of backstopping. I’ve had few problems with it once I’ve whitelisted Spotify, NirUtils, Skype & SysInternals.) Been thinking about the MalwareBytes antiransomware tool or the WinPatrol antiransomware tool, though.

Still hoping,
Zig

Reply | Quote

…I’m used to running an administrator account with UAC turned off…

I have attended too many customers who were having serious problems caused mainly by their having disabled UAC; one thing to turn UAC off temporarily, quite another to disable UAC permanently even if you’re an advanced user.

Reply | Quote

Has the loop stopped ?

The dism cmd only deals with that and not update problems.

That troubleshooter isn’t much good as it tends to report that it has fixed things but not the original problem.

I’m off to roost now as it’s after 1:00am here in the UK.

Reply | Quote

If you do need to rule out your security software, download the SymNRT before starting the following routine:

Turn CryptoPrevent back on, undo all the changes previously made, reboot and test again. With Norton you’ll need to fully uninstall it: shutdown, then boot into Safe Mode, run the (live link ->SymNRT tool<- live link) and shutdown.

Startup in normal mode, check that Defender and the firewall are active and test again.

Reply | Quote

The loop stopped by itself – a good thing as Repair you computer is not an option under F8; I’d have to boot from an install disc to get to it.

Satrow – I doubt it’s the security software, as the same are running on my office computer; I’ll consider uninstalling Norton later.

(honored to have two of the “big guns” helping me out here.)

Zig

Reply | Quote

Unfortunately I’ve just been firing blanks so far

Reply | Quote

To all,

I’m moving my home office today, so won’t be able to try anything else out for a day or so. All suggestions welcome.

Zig

Reply | Quote

To all,

I’m moving my home office today, so won’t be able to try anything else out for a day or so. All suggestions welcome.

Zig

Okay.

I use Norton Security and have experienced it blocking one website download on one machine while not on another, so it doesn’t necessarily follow that because things are okay with Norton on one machine that it will be okay on another.

Reply | Quote

Win7/64 Bit
I am having this exact same problem with January Roll-up Update 3212646, except I don’t run Norton. I use Emisisoft Suite with Windows Firewall.
Every time I shut down, it stops while it installs updates. When I turn it back on, it tries to configure, fails, reverts, reboots, tries to configure, fails, reverts and then starts Windows normally.

When I go to Windows Update>History and right-click on the failures, I get January, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3212646)
Error details: Code 80004005 (No info except to exhort me to install the update.)

I also failed to install the December roll-up, although it doesn’t behave this way. The first time it failed, the error code was: 80010108 . Worthless information-wise to me, but you guys might have a clue.
The second time it failed the error code was 80004005. My last December failure was on the 31st, the last I saw of the December roll-up.

I haven’t done anything because I have no clue what to do. :confused:

Reply | Quote

I advise you to install Belarc Advisor.

It worked for me, and after such tales of woe I hope it will work for you. It will identify all of the missing critical updates, patches and whatnot, with links to retreive them, for all Microsoft products and many other products as well (e.g. Adobe).

Nothing ventured nothing gained.

Reply | Quote

Thanks. I will look into Belarc.

MS Security Essentials listed an Emsisoft file as a ransomware program. I wrote to Emsisoft. They wrote back (right away, bless them) to say they had already discovered this and got MS to update it in MS Security Essentials. I updated that and re-scanned. When I shut down after that, the roll-up installed without a problem. Configured without a problem on restart. No problems since. No idea why that actually happened, mind you.

Reply | Quote

Hi All,

I’m having the exactly the same problem with Windows 8.1.

You mentioned a prerequisite update which must me installed but of course it is applicable to Windows 7.

Is there a similar essential prerequisite for 8.1?

Many thanks,

Dee Bee

Reply | Quote

Hi All,

I’m having the exactly the same problem with Windows 8.1.

You mentioned a prerequisite update which must me installed but of course it is applicable to Windows 7.

Is there a similar essential prerequisite for 8.1?

Many thanks,

Dee Bee

You’ll need to open your own thread giving full details as the fix for Zig may not be the fix for you.

Reply | Quote

You’ll need to open your own thread giving full details as the fix for Zig may not be the fix for.

My apologies – I will do so.

Regards to all – Dee Bee

Reply | Quote

Put it in the Win 8/8.1 section.

Reply | Quote

Well, all good things come to those who wait. After moving my home office, I was struck by a bronchitis that left me out of action for a couple weeks, then had some major work with a new Electronic Health Record (don’t ask) at my work office, which kept me otherwise occupied.

I eventually got back to attempting to install the Windows Quality Rollup updates (now up to December), first by using Sudo’s suggestion of completely uninstalling Norton 360, then using the Norton Uninstall Tool to remove all traces. No go.

Next, I really got radical, scanned my rig with MalwareBytes & SUPER Antispyware (finding only tracking cookies)and inactivated:
Microsoft Security Essentials (which I had installed after Norton was deleted)
WinPatrol,
Spyware Blaster and
CryptoPrevent. Still no go.

Keeping all those still inactivated, I dropped down to a really clean boot (including Task Scheduler) as described on the Tweaking.com website:

http://www.tweaking.com/articles/pages/performing_a_proper_windows_clean_boot_on_xpvista78,1.html

Still no go. I tried booting into Safe Mode, but found that updates would not install in this mode (by now I was using the downloaded December update).

As a last gasp, I stayed in clean boot, safe mode with all anti-spyware nonfunctional and ran the Tweaking.com All-in-One Windows Repair:

http://www.tweaking.com/content/page/windows_repair_all_in_one.html

I unselected any repairs referring to DVD drives, Windows 8 or 10, sidebar & gadgets, as well as partitions other than C.:. After the repairs ran, I again attempted to install the update, and was notified it was already installed!!!

Mirabile visu, mirabile dictu. I ran “check for updates,” and found that no updates were missing. Hallelujah!

Now that everything is running, I’m just going to wait until the January update, to see if I continue to install updates correctly. Had this not worked, my next step (barring other suggestions from y’all) was to do a nondestructive reinstall of Windows 7. I’m still considering doing this, since I was unable to install Windows 10 earlier this year. I simply may go ahead with re-attempting to install Windows 10 (temporarily) again, in any event. I’ll discuss this in another topic in the Windows 10 forum.

In any event, thanks to all of you for your assistance in this perplexing and persistent problem.

Zig

Reply | Quote

That’s strange there was no reboot required or that you were not prompted to not switch off while it configured the updates.

Can you go to Windows Update/View update history and check when the last update was installed and what it was ?

BTW – Glad that you have gotten over your bronchitis – that can be nasty.

Reply | Quote

Sudo,

After all the above, nothing was in my recently installed list (AllInOne Repair must have cleared my list; I have since added KB915597 (Windows Defender definitions update).

However, looking at Programs and Features|Installed Updates shows KB 3207752 (December Rollup) as installed on the date of the repair. Remember that I was in Safe Mode, thus had to reboot to get back to Windows Update.
One section of the AIO Repair is “Repair Windows Update.” (FWIW)

Lets leave this thread open awhile longer, to see if any further wisdom results.

Zig

Reply | Quote

Yes, the AIO deletes the files in the SoftwareDistribution folder which removes the history, but as you have found out, updates don’t work in Safe Mode so it would have had to have installed in normal mode.

For it not to have been listed in the history would mean that it had installed before you ran AIO.

Does reliability history have any record of it installing and it may have created a restore point.

Reply | Quote

Sudo,

Interestingly, Reliability History shows failure to install on 12/24, 12/26 and 1/1/17, the latter at 3:50 PM; however, Programs & Features shows it as installed on 1/1/17. Go figure!

A restore point was made just before that time (3:40 PM), and shows the Security Rollup Update as affected by (included in) the restore point.

Zig

Reply | Quote

Persistent, wasn’t it

Let’s hope this month’s go smoother as it probably included an Update Agent update.

Reply | Quote

IT’S BAAACK! January rollup wouldn’t install – even with upgraded Norton turned off (not uninstalled); won’t be able to work on this for another week or so; stay tuned.

Zig

Reply | Quote

Did it give you an error code ?

Reply | Quote

When I go to Updat History, it gives me Code 80004005, but when the “Updates failed to load notification comes up. it tells me Win10 failed install, with a different error code. I’ll have to get back to you in a few days about this.

Reply | Quote

The 05 is an Access Denied but too vague to tell you why.

Not sure if Event Viewer would give more details ?

If normal updates are failing that could be the reason why Win 10 is failing also.

I think you should get Win 7’s updates sorted before attempting the upgrade.

SURT came back clean last time, do you want to see if it still does ?

Reply | Quote

The Win 10 update error was C19001-4000D; I attempted it last week, but the error was showing up when I attempted to install the Rollup updates in November & December.

??Perhaps it’s telling me I should clean my System disk of old install & pre-install files?? Will have to wait until late next week to do it carefully. CCleaner has already been run.

Will recheck SURT next week, also.

Zig

Reply | Quote

You haven’t said which make of computer you are using but a number of Dell users have experienced problems upgrading to 10 that Dell have produced this article.

http://www.dell.com/support/article/uk/en/ukbsdt1/SLN297955

It could be that your computer isn’t Win 10 compatible, but that wouldn’t answer why you are getting the same error code for the Win 7 updates.

Do you have any non-essential devices plugged in ?

Reply | Quote

It’s a home built computer–no Dell components in it.

I had disconnected all of my external backup hard discs; the only “nonessential” things plugged in were a USB connector for my headset, a USB 3 extension hub, a similar USB 2 hub, and an internally-mounted auxiliary USB 2 hub and memory card reader. Nothing was plugged into any of the various USB ports.

Zig

Reply | Quote

Something about a memory card reader rings a bell in my Google searches – are you able to disable it ?

Reply | Quote

I can unplug it from the internal USB connector. Won’t get to it until next weekend (i.e., 10 days or so).

Zig

Reply | Quote

Called outta town on business; will get to it next w/e.

Zig

Reply | Quote

Okay.

Reply | Quote

To all,
Haven’t had much time to work on this problem, including getting inside the box, then doing an in-place nondestructive reinstall, but I did have time to run DISM.exe.
I first tried Dism.exe /online /cleanup-image /restorehealth, but kept getting error 87, probably because /restorehealth isn’t supported on Win 7.
I next tried the /scanhealth switch, with the following results (BTW, sfc/scannow finds no errors):

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.18741
2017-04-15 20:03

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs
(f) CBS MUM Corrupt 0x00000000 servicingPackagesMicrosoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name
(f) CBS MUM Corrupt 0x00000000 servicingPackagesMicrosoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 258
Found 2 errors
CBS MUM Corrupt Total count: 2

Unavailable repair files:
servicingpackagesMicrosoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
servicingpackagesMicrosoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
servicingpackagesMicrosoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat
servicingpackagesMicrosoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat
==================================================================================================
??So, what to do now???

Frustratedly,
Zig

Reply | Quote

SFC can’t repair those files – they have to be manually replaced.

Two ways you could go about this – do the repair install or register on the http://www.sysnative.com forum and open a thread in the Windows Update section where there’s a guy who’ll be able (usually) to fix this.

In the http://www.tweaking.com Support forum they used to do this but because of the changes to Win 10, it was becoming impractical to keep up and extract those files, so that section was closed.

Reply | Quote