[SOLVED] [Win7 x64] How do i find which security update failed to install?

hackerman1 · Feb 20, 2017

Re: How do i find which security update failed to install ?

I see the issue. I need a couple more pieces of info so we can fix.

Code:

2017-02-19 19:57:47, Error                 CSI    00000014 (F) c0000033 [Error,Facility=(system),Code=51 (0x0033)] #1291368# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound|AllowSharingViolation), handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ), oa = @0xc1d738->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[46]"\??\C:\Program Files\\Internet Explorer\SIGNUP"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xc1d7c0, as = (null), fa = (FILE_ATTRIBUTE_DIRECTORY), sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000033]

Which issue is it ?
If it has something to do with Internet Explorer, then i don´t care..
I´m using Pale Moon...

And, just to clarify, the important thing is to know which update it is that fails (and why), not fixing it

BrianDrab · Feb 20, 2017

Re: How do i find which security update failed to install ?

Which issue is it ?
If it has something to do with Internet Explorer, then i don´t care..
I´m using Pale Moon...

No I don't believe it has to do with IE. Even if it did, IE is baked into the OS with Widnows 7 so it would be important to resolve so that you continue to get security updates (even if you never use it). Your issue (and one other that we are currently working on) appears to be unique. Notice the double backslash C:\Program Files\\Internet Explorer.

And, just to clarify, the important thing is to know which update it is that fails (and why), not fixing it

Understood. We don't have to fix it but it is my intent to provide you with all this info. I just needed to gather more data. Can you also zip up and attach the following?

C:\Windows\System32\winevt\Logs\Application.evtx
C:\Windows\System32\winevt\Logs\System.evtx

hackerman1 · Feb 21, 2017

Re: How do i find which security update failed to install ?

I´m uploading a new CBS-log.
For some (odd) reason Windows Error Reporting (WER) was set to "Manual" start in Services.
So i started it, and once again tried to install the update.
Now the log is much bigger, 71 MB instead of 21 MB...
Perhaps you will find more useful info now.

BrianDrab · Feb 21, 2017

Re: How do i find which security update failed to install ?

Go to the following key in your registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

There are some values on the right-hand side with some data. See if the data for the values shown below have an extra back slash after them. That may be your issue.

hackerman1 · Feb 21, 2017

Re: How do i find which security update failed to install ?

BrianDrab said:
See if the data for the values shown below have an extra back slash after them.

An extra backslash ?
Do you mean there should be one (1), but not two ???

There was however 1 backslash: "C:\Program Files"
I removed it, and the update was succesfully installed.

I have a linux-style setup, with separate partions for O/S, Programs, Media & Documents.
Some programs has no option for installing on a partion other than the O/S-partition (C:)
When i hacked the registry last time I restored the value to it´s original location after installing software on my program-partion.
It seems i accidentally typed in the backslash...

So the problem is solved !
So far so good.

But the original question remains, how am i supposed to find out which updates it is that fails to install properly !?
Windows Update doesn´t give a clear errormessage, errorcode 800700B doesn´t help...

The genius who came up the bright idea of putting all updates into one BIG cummulative update obviously did not think about what would happen if something goes wrong...

Yet another good reason to switch to a Linux-distribution...

Thank you for your help.

I just hope that future updates works better than this one...

BrianDrab · Feb 21, 2017

Re: How do i find which security update failed to install ?

When they create a cumulative update like the one you were trying to install KB3212646, you are correct they don't reference any of the other KB numbers within the update so you can't tell. I was trying to collect all the logs so I could show you but your issue was different anyway. If you ever have an issue again in the future, stop by and we'll try to walk through it together.

Glad it worked out. Take care.

hackerman1 · Feb 22, 2017

Re: How do i find which security update failed to install ?

I did a quick test with saving the log from Process Monitor v3.32 (latest version).
It does not crash if i select to save All events.

But it crashes if i use the default settings !
See screenshot below:

I hope you can use this information the next time you are helping someone...

BrianDrab · Feb 22, 2017

Re: How do i find which security update failed to install ?

Thank you! I'll test to see if it's a bug and report it as well.

hackerman1 · Feb 22, 2017

Re: How do i find which security update failed to install ?

You are welcome.

I have a few comments about this problem with Process Monitor crashing,
but since it has nothing to do with my original question regarding the failed update,
it would perhaps be better if you split this off into another (new) thread instead ?

Yesterday i started thinking...
I used Process Monitor a few years ago, tracing a few processes during installation of a program, i created a couple of filters to log only the relevant parts.
And i had no problems with any crashes when saving the log.

So i wondered why it crashed now ?
I remembered seeing the default setting being not to save "All" before it crashed, so i thought: what if i Save All instead...?

Perhaps the bug is: If you do not create any filters yourself, just use the default settings,
when you try to save just filtered events, then it crashes ?

Just a wild guess...

BrianDrab · Feb 22, 2017

Re: How do i find which security update failed to install ?

I've tried various ways to make it crash and couldn't unfortunately. So it's something specific on your machine. Thanks for the extra info though. The Sysinternls tools are usually solid so I would have been surprised to find a bug like that.

hackerman1 · Feb 22, 2017

Re: How do i find which security update failed to install ?

hmm....
Well it might be something weird on my computer, considering my recent update-problems...

btw. i noticed something weird in the registry while i was navigating through it: HKEY_CURRENT_USER\Environment
I got an errormessage saying something about that it "could not find it, and that i should check my settings".
That has never happened before, and this wasn´t the first time i looked into the registry...

Might have been related to the backslash in the install location (C:\Program Files), because i don´t get that errormessage now,
i just checked.

I agree, I was very surprised to see Process Monitor crashing.
Sysinternals tools are really good software.
Such a bug is not expected..

hackerman1 · Feb 22, 2017

Re: How do i find which security update failed to install ?

I tested Process Monitor again.
I saved as PML two times, no crash.
But when i tried to save as CSV it crashed again.
Same result with save as XML, chrash.
You can try that...

[SOLVED] [Win7 x64] How do i find which security update failed to install?

hackerman1

Active member

BrianDrab

Emeritus

hackerman1

Active member

BrianDrab

Emeritus

hackerman1

Active member

BrianDrab

Emeritus

hackerman1

Active member

BrianDrab

Emeritus

hackerman1

Active member

BrianDrab

Emeritus

hackerman1

Active member

hackerman1

Active member