We recently had 2 problems regarding Windows Update:
1) We could not change any of the settings in Windows Update such as
the time to install new updates or whether or not to install updates
automatically, etc. Even though the user was logged in as an administrator
and started the application using "Run as Administrator", settings could not
be changed. However, when User Account Control was turned off, the
application did accept these changes.
2) When we attempted to check for updates using the Windows Update
application, we got the following error message:
Windows could not search for new updates
Error(s) found:
Code 80004002
We have not been able to fix this misbehavior. Turning off User Account
Control had no effect. A look at Control Panel->Programs and
Features->Installed Updates indicates that no updates have been installed
since 3/1/2009.
This same combination of problems has been reported by others. For example,
see the forum article dated 12-17-2008:
We have tried the following. In all cases, the user was logged in as an
administrator and started programs using "Run as Administrator":
1) Microsoft Knowledge Base article 956708
a. The error code 80004002 is mentioned in the Microsoft Knowledge Base
article 956708, (http://support.microsoft.com/kb/956708, Error message when
you try to install updates by using the Windows Update or Microsoft Update
Web site: "0x80004002"
b. Solution #1 is to run the following .bat file:
REGSVR32 WUPS2.DLL /S
REGSVR32 WUPS.DLL /S
REGSVR32 WUAUENG.DLL /S
REGSVR32 WUAPI.DLL /S
REGSVR32 WUCLTUX.DLL /S
REGSVR32 WUWEBV.DLL /S
REGSVR32 JSCRIPT.DLL /S
REGSVR32 MSXML3.DLL /S
I tried the above, and I also tried running the command on each file
individually without the /s (quiet) option. When I run them individually, I
get an error message such as the following for 5 of the files:
The module "c:\windows\system32\[file name].dll" was loaded but the
entry-point DLLRegisterServer was not found.
The 5 files were:
WUDFCoinstaller.dll
WUDFPlatform.dll
WUDFSvc.dll
WDUFx.dll
Wudriver.dll
c. Solution #2 is to re-install Windows Update. I downloaded
windowsupdateagent30-86.exe from the Microsoft web site. This did not fix
the problem.
2) I checked for malicious software.
a. Norton Protection Center came with the computer and has been active
since day 1. No viruses were found after a manually triggered scan. (Some
tracking cookies were found and deleted.)
b. I download and ran the Microsoft Malicioius Software Removal Tool.
This took 2.5 hours to run. No viruses were found.
c. I used the Windows OneCare Safety Scanner (Beta for Vista) from the
Microsoft web site. No viruses were found.
d. I was going to post the results from OTListlt and Security Check to
the AumHa forum, but it looks like they have too many users right now.
3) Someone in this forum (??cel) in a reply to PA BEAR
suggested that the System File Checker be run with elevated privileges.
[See microsoft.public.windows.update, 3/31/2009 9:22 AM.]
When I did this, I got 69 occurrences of "...cannot repair
...WindowsUpdateClient..." in the cbs.log file. The screen output from "sfc
/scannow" follows:
****BEGINNING OF OUTPUT***
Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some
of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log
The system file repair changes will take effect after the next reboot.
C:\Windows\system32>
***END OF OUTPUT***
I'd like to know how to interpret the results from this System File Checker.
What other things can I check? Has anyone had this problem and actually
found a solution?
Is the computer still under Warranty or Service Contract? Have you opened a
free Windows Update support incident (with Microsoft) yet [1] ?
By any chance have you installed IE8 (beta or final)?
When (date) was the last time you were able to access and configure your
Automatic Updates settings without having to disable UAC? [Do you
understand that logging-in as "an administrator" (i.e., with admin
privileges) and logging-in as *the* Administrator are not the same thing in
Vista?]
When (date) was the last time you were able to run Windows Update manually?
> ...Norton Protection Center came with the computer and has been active
> since day 1.
Is it called Norton Protection Center or, e.g., Norton Internet Security?
Did this application "come with the computer" or is it a freebie from your
ISP (AT&T/SBC/PacBell)? If the latter, what anti-virus/internet security
free-trial came preinstalled on the computer?
If the Norton application did come preinstalled by Lenovo, are you certain
that the subscription or free-trial is still current/valid?
> ...I was going to post the results from OTListlt and Security Check to
> the AumHa forum, but it looks like they have too many users right now.
The forum has been having "server issues" recently. Other forums where you
might post include
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.dslreports.com/forum/cleanup, and
http://forums.spybot.info/forumdisplay.php?f=22. Note the each forum has
their own set of preparatory requirements, Ron.
This does "smell" like a bad hijackware infection.
==============
[1] Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527
For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net
> By any chance have you installed IE8 (beta or final)?
No. We have IE 7.0.6001.18000
>When (date) was the last time you were able to access and configure your
>Automatic Updates settings without having to disable UAC?
According to the Control Panel list of Installed Updates, we did an update
for Microsoft Windows (KB959772) on 2/27/2009 and an update for Vista that
installed WinHlp32.exe (KB917607) on 3/1/2009. I'm pretty sure we did both
of these manually because the laptop was off most of the time and would have
missed the 1:00 AM automatic update trigger.
[Do you
> understand that logging-in as "an administrator" (i.e., with admin
> privileges) and logging-in as *the* Administrator are not the same thing
> in Vista?]
No! Please explain the difference. Which is better? How do you log in to
each?
> When (date) was the last time you were able to run Windows Update
> manually?
Probably on 2/27/2009 (see above).
>> ...Norton Protection Center came with the computer and has been active
>> since day 1.
>
> Is it called Norton Protection Center or, e.g., Norton Internet Security?
> Did this application "come with the computer" or is it a freebie from your
> ISP (AT&T/SBC/PacBell)? If the latter, what anti-virus/internet security
> free-trial came preinstalled on the computer?
> If the Norton application did come preinstalled by Lenovo, are you certain
> that the subscription or free-trial is still current/valid?
It's Norton Internet Security. One of the 2 tabs says Norton Internet
Security and the other says Norton Security Center. It came with the
computer and is still active. As of today, we have 24 days remaining before
it expires. The "About Norton Internet Security" page says "Version
15.5.0.23, Lenovo China (90)."
> This does "smell" like a bad hijackware infection.
It certainly does smell.
> ==============
> [1] Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/default.aspx?gprid=6527
I'll try this next, unless anyone on this forum has any other ideas.
"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23GMX52i...@TK2MSFTNGP02.phx.gbl...
=> If this is a Vista x64 machine, Ron, STOP HERE! and tell me now, please.
=> If you do NOT plan on purchasing/subscribing to Norton Internet Security
(NIS) when the free-trial expires, STOP HERE! and tell me now, please.
====
First of all, I wouldn't worry about any KB956708-related issues you
encountered as it's pretty much a WinXP-specific KB article.
Second, there's a related and eerily similar thread thread/discussion in
this same newsgroup that's been ongoing since early Feb-09. Though there's
been no resolution in that thread so far, I'm going to borrow something from
it in case it might help you:
1. Download the System Update Readiness (CheckSUR) tool, saving it to your
desktop:
http://www.microsoft.com/downloads/details.aspx?FamilyID=2889489c-ee87-4607-8aa5-812e8078ab27
[I should mention that a recently revised version of this tool is supposedly
"waiting in the wings" but it's not available yet. This Aug-08 version
might help you anyway.]
2. Reboot into Safe Mode (tutorial:
http://www.bleepingcomputer.com/tutorials/tutorial61.html#vista).
3. Right-click on the file you saved in #1 above and select "Run as
Administrator."
4. Sit back & let the utility run to completion, then reboot into normal
(Windows) mode.
5. Open Notepad, click on Format (in toolbar at top) and make sure "Word
wrap" is NOT checked.
6. CheckSUR will have generated and saved two (2) logs:
%SYSTEMROOT%\Logs\CBS\CheckSUR.log
%SYSTEMROOT%\Logs\CBS\CheckSUR.persist.log
[%SYSTEMROOT% = the boot drive, usually the C: drive]
Please open each log (in Notepad) and then copy/paste the contents of each
log into a reply to this post.
COMMENT: It would appear that Automatic Updates is working and has been
keeping the computer fully-patched, despite the errors/problems being
discussed in this thread. The next batch of Windows Updates will be
released on Tuesday, 14 April 2009. If Automatic Updates fails to install
these Apr-09 updates after seven (7) days, you might consider opening a free
support incident; see footnote [1] in my previous reply.
--
~PA Bear
I plan on removing Norton Security soon and installing Norton 360. I
already have a license for 3 machines, so if it installs correctly on Vista
I will use it. If not, I'll buy a separate copy of Norton 360. I didn't
want to change security software until this update issue is resolved so as
not confuse the matter.
I will check out your other suggestions shortly.
"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:uTuXZFlt...@TK2MSFTNGP02.phx.gbl...
I then re-booted normally. With UAC still disabled, I double-clicked the
installation file and got the error message, "Installer encountered and
error: 0x80004002 No such interface supported."
"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:uTuXZFlt...@TK2MSFTNGP02.phx.gbl...
Since (a) you'll be uninstalling the NIS free-trialware soon and replacing
it with N360 and since (b) you will want to download/run the Norton Removal
Tool after uninstalling the NIS free-trial and before installing N360 anyway
[trust me on this], let's jump the gun a bit and see if NIS might be the
troublemaker here, Ron:
1. After making certain you have a copy of your Product Key/license for N360
2009, uninstall all Norton software (including LiveUpdate and any Norton
Add-ons) via Control Panel | Programs | Uninstall a program (or Control
Panel | Programs and Features, if using Classic view).
2. IMPORTANT! => Enable the Windows Firewall!!
NB: You're "working without a net" now: Don't to ANYTHING else online (e.g.,
browsing; reading email; chatting) except #3 through #5 below until your new
anti-virus application has been installed and fully updated!
3a. Download the Norton Removal Tool to your desktop:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039
3b. Right-click on the saved download and select Run as Administrator.
4. Reboot and /immediately/ install either Avira AntiVir (free;
http://www.free-av.com/) or Avast (free;
http://www.avast.com/eng/avast_4_home.html)
NB: Do NOT install N360 2009 yet!
5. Manually update your new anti-virus application reboot into Safe Mode and
run a full system scan, then reboot into normal (Windows) mode and test
running Windows Update manually now.
Do your problems persist?
Again, please do NOT uninstall AntiVir/Avast or install N360 2009 yet!
PS: When the time comes to install N360, you will want to be running N360
v3, not v2.5. You may need to do a free upgrade; see
http://www.symantec.com/home_homeoffice/support/special/upgrade2007/product_n360_download.jsp.
--
~PA Bear
Ron Avanzino wrote:
> I downloaded the System Readiness Update Tool, turned off UAC, and booted
> into Safe Mode using the F8-key method. When I right-clicked on the
> installation program name, "Run as Administrator" did not appear on the
> list
> options, so I double left clicked instead. After a few seconds, I got the
> error message, "Installer encountered an error 0x8007043c. This service
> cannot be started in Safe Mode."
>
> I then re-booted normally. With UAC still disabled, I double-clicked the
> installation file and got the error message, "Installer encountered and
> error: 0x80004002 No such interface supported."
<paste>
> The laptop is running 32-bit Vista not x64.
>
> I plan on removing Norton Security soon and installing Norton 360. I
> already have a license for 3 machines, so if it installs correctly on
> Vista
> I will use it. If not, I'll buy a separate copy of Norton 360. I didn't
> want to change security software until this update issue is resolved so as
> not confuse the matter.
</paste>
I think I am going to do the following:
1) File a Windows Update support incident request with Microsoft
2) Continue to check for malware
3) Wait until after April 14 to see whether the new updates will load
automatically. (I'll make sure the computer is on when the updates are
scheduled.)
4) Install Norton 360 as you suggest.
In any event, I'll let you know what happens.
"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:OLzRBnwt...@TK2MSFTNGP02.phx.gbl...
Speaking from experience, I would *strongly* recommend (1) uninstalling the
NIS free-trial, (2) running the Norton Removal Tool and (3) rebooting before
(4) installing N360 2009, Ron. And if you end up with NIS 2009 v2.5,
upgrade to v3.x ASAP.