Re: Windows Installer Not Working

[PA Bear [MS MVP]]

[x-post to Windows Update newsgroup]

Error message when you visit the Windows Update Web site or the Microsoft
Update Web site: "0x800A0046":
http://support.microsoft.com/kb/910338/en-us

You may receive an error message when you search for available updates on
the Windows Update Web site or on the Microsoft Update Web site:
http://support.microsoft.com/?kbid=883821

What causes Error 0x800a0046
http://www.updatexp.com/0x800a0046.html

Last but not least...

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

And/or you could...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com

Dave wrote:
> My PC is not getting any updates to the Windows XP operating system.
>
> I have tried doing a manual update via the MicrosoftUpdate Web site.
> Whether
> I choose Express OR custom update I get the error [Error number:
> 0x800A0046].
>
> The web page suggests the following
> In Internet Explorer, on the Tools menu, click Internet Options.
> Click the Security tab, click the Internet security zone icon, and then
> click Custom Level.
> In the Settings dialog box, scroll to the Miscellaneous section.
> Under Userdata persistence , select Enable.
> Click OK and when the security warning dialog box appears, click Yes.
> All of which I have done but still I get the error and NO updates.
>
> I have tried regsrv32 qmgr.dll & regsrv32 qmgrprxy.dll
> both of which succesfully registered but did not fix the problem.
>
> I have also noticed that the Windows installer does not work either.
> Therefore I cannot install any new software using MSI.
>
> I have tried re-registering the msiexec.exe with no effect. I have tried
> re
> installing MSI version 3.1 & 4.5 with no effect.
>
> I set up MSI logging and the error MSI is returning error 1601.
>
> in my mind this is all suggesting some sort of security / policy
> issue......
>
> On another forum I was advised to download and run the Windows Genine
> Advantage Diagnostic Tool and to paste it's results in this forum.
> These are the results of the tool:-
> Diagnostic Report (1.9.0011.0):
> -----------------------------------------
> WGA Data-->
> Validation Status: Genuine
> Validation Code: 0
>
> Cached Validation Code: N/A
> Windows Product Key: *****-*****-T6DFB-Y934T-YD4YT
> Windows Product Key Hash: 3g4CZGFEDgbKmn/oB4pa2FZsssU=
> Windows Product ID: 76487-OEM-2211906-00102
> Windows Product ID Type: 2
> Windows License Type: OEM SLP
> Windows OS version: 5.1.2600.2.00010100.3.0.pro
> ID: {F608820B-CDF4-458D-9E4D-E493F063B1F1}(3)
> Is Admin: Yes
> TestCab: 0x0
> WGA Version: Registered, 1.9.40.0
> Signed By: Microsoft
> Product Name: N/A
> Architecture: N/A
> Build lab: N/A
> TTS Error: N/A
> Validation Diagnostic:
> FCEE394C-458-80070005_025D1FF3-344-80070005_025D1FF3-229-80070005_025D1FF3-230-1_025D1FF3-238-2
> Resolution Status: N/A
>
> WgaER Data-->
> ThreatID(s): N/A
> Version: N/A
>
> WGA Notifications Data-->
> Cached Result: 0
> File Exists: Yes
> Version: 1.9.40.0
> WgaTray.exe Signed By: Microsoft
> WgaLogon.dll Signed By: Microsoft
>
> OGA Notifications Data-->
> Cached Result: N/A, hr = 0x80070002
> Version: N/A, hr = 0x80070002
> OGAExec.exe Signed By: N/A, hr = 0x80070002
> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>
> OGA Data-->
> Office Status: 103 Blocked VLK
> Microsoft Office Enterprise 2007 - 103 Blocked VLK
> Microsoft Office Publisher 2007 - 100 Genuine
> OGA Version: N/A, 0x80070002
> Signed By: N/A, hr = 0x80070002
> Office Diagnostics:
> FCEE394C-458-80070005_025D1FF3-344-80070005_025D1FF3-229-80070005_025D1FF3-230-1_025D1FF3-238-2
>
> Browser Data-->
> Proxy settings: N/A
> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
> Default Browser: H:\Documents and Settings\Dell\Local Settings\Application
> Data\Google\Chrome\Application\chrome.exe
> Download signed ActiveX controls: Prompt
> Download unsigned ActiveX controls: Disabled
> Run ActiveX controls and plug-ins: Allowed
> Initialize and script ActiveX controls not marked as safe: Disabled
> Allow scripting of Internet Explorer Webbrowser control: Disabled
> Active scripting: Allowed
> Script ActiveX controls marked as safe for scripting: Allowed
>
> File Scan Data-->
>
> Other data-->
> Office Details:
> <GenuineResults><MachineData><UGUID>{F608820B-CDF4-458D-9E4D-E493F063B1F1}</UGUID><Version>1.9.0011.0</Version><OS>5.1.2600.2.00010100.3.0.pro</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-YD4YT</PKey><PID>76487-OEM-2211906-00102</PID><PIDType>2</PIDType><SID>S-1-5-21-1482476501-1801674531-725345543</SID><SYSTEM/><BIOS><SLPBIOS>Dell
> System,Dell Computer,Dell System,Dell
> System</SLPBIOS></BIOS><HWID>A27139470184406D</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT
> Standard
> Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File
> Name="WgaTray.exe" Version="1.9.40.0"/><File Name="WgaLogon.dll"
> Version="1.9.40.0"/></GANotification></MachineData><Software><Office><Result>103</Result><Products><Product
> GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft
> Office Enterprise
> 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65235</Pid><PidType>14</PidType></Product><Product
> GUID="{91120000-0019-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft
> Office Publisher
> 2007</Name><Ver>12</Ver><Val>979BB238A0B0260</Val><Hash>WU6EhCy8SvL1ZmdefuAWShU5qoY=</Hash><Pid>81613-304-6577442-62151</Pid><PidType>10</PidType></Product></Products><Applications><App
> Id="15" Version="12" Result="103"/><App Id="16" Version="12"
> Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19"
> Version="12" Result="100"/><App Id="1A" Version="12" Result="103"/><App
> Id="1B" Version="12" Result="103"/><App Id="44" Version="12"
> Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA"
> Version="12"
> Result="103"/></Applications></Office></Software></GenuineResults>
>
> Licensing Data-->
> N/A
>
> HWID Data-->
> N/A
>
> OEM Activation 1.0 Data-->
> BIOS string matches: yes
> Marker string from BIOS: 1A90C:Dell Inc|1A90C:Microsoft Corporation
> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell System,Dell
> System
>
> OEM Activation 2.0 Data-->
> N/A
>
> I have also enabled logging of the MSI tool to try and diagnose the
> problem.
> This is a copy of the log from MSI:-
>
> === Verbose logging started: 05/08/2009 15:08:12 Build type: SHIP
> UNICODE
> 4.05.6001.00 Calling process: H:\WINDOWS\system32\msiexec.exe ===
> MSI (c) (BC:94) [15:08:19:718]: Resetting cached policy values
> MSI (c) (BC:94) [15:08:19:718]: Machine policy value 'Debug' is 0
> MSI (c) (BC:94) [15:08:19:718]: ******* RunEngine:
> ******* Product:
> H:\DOCUME~1\Dell\LOCALS~1\Temp\IXP377.TMP\iTunes.msi
> ******* Action:
> ******* CommandLine: **********
> MSI (c) (BC:94) [15:08:19:718]: Machine policy value 'DisableUserInstalls'
> is 0
> MSI (c) (BC:94) [15:08:25:156]: SOFTWARE RESTRICTION POLICY: Verifying
> package --> 'H:\DOCUME~1\Dell\LOCALS~1\Temp\IXP377.TMP\iTunes.msi' against
> software restriction policy
> MSI (c) (BC:94) [15:08:25:156]: SOFTWARE RESTRICTION POLICY:
> H:\DOCUME~1\Dell\LOCALS~1\Temp\IXP377.TMP\iTunes.msi has a digital
> signature
> MSI (c) (BC:94) [15:08:36:218]: SOFTWARE RESTRICTION POLICY:
> H:\DOCUME~1\Dell\LOCALS~1\Temp\IXP377.TMP\iTunes.msi is permitted to run
> at
> the 'unrestricted' authorization level.
> MSI (c) (BC:94) [15:08:37:250]: Failed to connect to server. Error:
> 0x80070005
>
> MSI (c) (BC:94) [15:08:37:265]: MainEngineThread is returning 1601
> === Verbose logging stopped: 05/08/2009 15:08:37 ===
>
> The error MSI seems to be causing is Error 1601......!

[Dave]

hI
I started with KB910338....

Step 1: Verify DCOM security
Click Start, click Run, type Dcomcnfg, and then click OK.
Expand Component Services, and then expand Computers.
Right-click My Computer, and then click Properties.
Click the COM Security tab.
Under Access Permissions, click Edit Default.
Verify that the following accounts are listed:

When I open the Dcomcnfg and expand the Component services its fine.
But when I try to expand computers, it flashes 0 objects and shuts its self
down...!

Any ideas?

[PA Bear [MS MVP]]

> I started with KB910338....

What about http://support.microsoft.com/?kbid=883821 and
http://www.updatexp.com/0x800a0046.html ?

Well, you could always...

> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/default.aspx?gprid=6527
>
> For home users, no-charge support is available by calling 1-866-PCSAFETY
> in
> the United States and in Canada or by contacting your local Microsoft
> subsidiary. There is no-charge for support calls that are associated with
> security updates.

Then again, there is a very good chance that you are seeing the effects of a
hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.