[SOLVED] Windows Update corruption

x BlueRobot · Jul 29, 2022

Yes please and then if it's successful, then please attempt the update again.

rclarke · Jul 29, 2022

Here was the result of the icacls check & command

Code:

C:\Windows\system32>icacls "C:\Windows\Servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.5246.1.6.cat"
C:\Windows\Servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.5246.1.6.cat NT AUTHORITY\SYSTEM:(I)(F)
                                                                                               BUILTIN\Administrators:(I)(F)
                                                                                               BUILTIN\Users:(I)(RX)
                                                                                               APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(RX)
                                                                                               APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>icacls "C:\Windows\Servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.5246.1.6.cat" /T /Q /C /RESET
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>icacls "C:\Windows\Servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.5246.1.6.cat"
C:\Windows\Servicing\Packages\Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.5246.1.6.cat BUILTIN\Administrators:(I)(F)
                                                                                               NT AUTHORITY\SYSTEM:(I)(F)
                                                                                               NT SERVICE\TrustedInstaller:(I)(F)
                                                                                               BUILTIN\Users:(I)(RX)

Successfully processed 1 files; Failed processing 0 files

So I ran the updates again.
Unfortunately it has still failed.

I have attched the CBS log as it has now reduced in size

x BlueRobot · Jul 29, 2022

It seems that at least one of the packages has been successfully removed and then installed. We've got one package which is the same one as before:

Rich (BB code):

2022-07-29 17:11:56, Info                  CBS    File already exists when adding the catalog: \\?\C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat
2022-07-29 17:11:56, Info                  CBS    Failed to delete existing package catalog '\\?\C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat' [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-07-29 17:11:56, Info                  CBS    Failed to install catalog for package: Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-07-29 17:11:56, Info                  CBS    Failed to stage package manifest. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-07-29 17:11:56, Info                  CBS    Failed to add package. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-07-29 17:11:56, Info                  CBS    Failed to persist package: Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-07-29 17:11:56, Info                  CBS    Failed to update states and store all resolved packages. [HRESULT = 0x80070005 - E_ACCESSDENIED]

Could you please try the following script to delete the file?

rclarke · Aug 1, 2022

Hi,

I ran the script but it produced this error

Code:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-08-01 10:13:53.172
Microsoft Windows Server 10 Build 14393 - amd64
Using .txt script file at C:\Users\coodes.admin\Desktop\SFCFixScript.txt [0]




TakePermissions::
Successfully took permissions for file or folder C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat
TakePermissions:: directive completed successfully.




Delete::
Failed to delete all files and folders matching pattern C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat with result code 1.
Delete:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2022-08-01 10:13:53.329
Script hash: ZHRwDxbz5DTS924ovmHzaBtclRn+orT2lLu8kXjzKXY=
----------------------EOF-----------------------

So i checked the permissions with icacls

Code:

C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat Everyone:(F)
                                                                                            BUILTIN\Administrators:(I)(F)
                                                                                            NT AUTHORITY\SYSTEM:(I)(F)
                                                                                            Everyone:(I)(F)
                                                                                            BUILTIN\Users:(I)(RX)

Successfully processed 1 files; Failed processing 0 files

Then tried to reset the acl again

Code:

C:\Windows\system32>icacls "C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat" /T /Q /C /RESET
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>icacls "C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat"
C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat BUILTIN\Administrators:(I)(F)
                                                                                            NT AUTHORITY\SYSTEM:(I)(F)
                                                                                            Everyone:(I)(F)
                                                                                            BUILTIN\Users:(I)(RX)

Successfully processed 1 files; Failed processing 0 files

Then ran the SFC script again,

Code:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-08-01 10:22:07.739
Microsoft Windows Server 10 Build 14393 - amd64
Using .txt script file at C:\Users\coodes.admin\Desktop\SFCFixScript.txt [1]




TakePermissions::
Successfully took permissions for file or folder C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat
TakePermissions:: directive completed successfully.




Delete::
Failed to delete all files and folders matching pattern C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat with result code 1.
Delete:: directive failed to complete successfully.




Failed to process all directives successfully.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2022-08-01 10:22:07.739
Script hash: ZHRwDxbz5DTS924ovmHzaBtclRn+orT2lLu8kXjzKXY=
----------------------EOF-----------------------

x BlueRobot · Aug 1, 2022

Have you tried deleting the .cat file yourself without any tools? As deleting it as you would with any other file.

rclarke · Aug 1, 2022

Just tried to delete it, but it says the file is in use.
Tried stopping the following servcies and still get the same message - Windows Update, Update Orchestrator Service for Windows Update, Windows Modules Installer.
What else could be acessing the file?

x BlueRobot · Aug 1, 2022

I would reboot the machine and delete it from Safe Mode, or use Process Explorer to check which processes have open handles to that particular .cat file.

rclarke · Aug 1, 2022

I used Process Explorer to see what open handles there were ot that .cat file. There was nothing.
I rebooted the server and ran the SFC script again. This deleted the file succesfully.

Code:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-08-01 12:45:03.951
Microsoft Windows Server 10 Build 14393 - amd64
Using .txt script file at C:\Users\coodes.admin\Desktop\SFCFixScript.txt [3]




TakePermissions::
Successfully took permissions for file or folder C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat
TakePermissions:: directive completed successfully.




Delete::
Successfully deleted files matching pattern C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat.
Delete:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2022-08-01 12:45:07.233
Script hash: ZHRwDxbz5DTS924ovmHzaBtclRn+orT2lLu8kXjzKXY=
----------------------EOF-----------------------

I've tried using Windows Update again and this prompted that it was downloading - but has failed again.
The file C:\Windows\Servicing\Packages\Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat is back now, but there are also many other files with incremental numbers.

I have uploaded a new copy of the CBS.log here:

CBS.log

x BlueRobot · Aug 4, 2022

Rich (BB code):

2022-08-01 13:01:03, Info                  CBS    File already exists when adding the catalog: \\?\C:\Windows\Servicing\Packages\Package_7_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat
2022-08-01 13:01:03, Info                  CBS    Failed to delete existing package catalog '\\?\C:\Windows\Servicing\Packages\Package_7_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat' [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CBS    Failed to install catalog for package: Package_7_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CBS    Failed to stage package manifest. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CBS    Failed to add package. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CBS    Failed to persist package: Package_7_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CBS    Failed to update states and store all resolved packages. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 13:01:03, Info                  CSI    0000000a@2022/8/1:12:01:03.353 CSI Transaction @0x1bcd47e9ae0 destroyed

Rich (BB code):

2022-08-01 12:58:45, Info                  CBS    Failed to delete existing package catalog '\\?\C:\Windows\Servicing\Packages\Package_41_for_KB5015808~31bf3856ad364e35~amd64~~10.0.1.6.cat' [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 12:58:45, Info                  CBS    Failed to install catalog for package: Package_41_for_KB5015808~31bf3856ad364e35~amd64~~10.0.1.6 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 12:58:45, Info                  CBS    Failed to stage package manifest. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 12:58:45, Info                  CBS    Failed to add package. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 12:58:45, Info                  CBS    Failed to persist package: Package_41_for_KB5015808~31bf3856ad364e35~amd64~~10.0.1.6 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2022-08-01 12:58:45, Info                  CBS    Failed to update states and store all resolved packages. [HRESULT = 0x80070005 - E_ACCESSDENIED]

It seems that the permissions issue has returned for another set of packages, let's try and reset the permissions for the entire packages folder this time, using the same command as before:

Rich (BB code):

icacls "C:\Windows\Servicing\Packages\*" /T /Q /C /RESET

Afterwards, please attempt the failed updates again.

rclarke · Aug 4, 2022

Thank you for taking the time to come back to me.
I have tried to do this. Unfortunately only about half of the files were succesfully reset.
The cmd window (Ran as administrator) states 'Access is denied' for over half of the files

Code:

Successfully processed 23552 files; Failed processing 27444 files

x BlueRobot · Aug 5, 2022

I'll reboot the system as you did before and then attempt the command again, those files are probably in use by another process.

rclarke · Aug 5, 2022

I tried rebooting then running the command again shortly after posting my reply yesterday evening.

I've also just tried running cmd as system using psexec

Code:

 psexec -i -s cmd.exe

Then running the icacls command again.

Still getting the same amount of errors
The last file in the returned output is

Code:

 C:\Windows\Servicing\Packages\Windows-Defender-Server-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~~10.0.14393.0.cat: Access is denied.

I have used Process Explorer to see if there are any open handles on this file. It didn't find any.

Usings icacls it reports this

Code:

C:\Windows\Servicing\Packages\Windows-Defender-Server-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~~10.0.14393.0.cat NT SERVICE\TrustedInstaller:(F)
                                                                                                                                BUILTIN\Administrators:(RX)
                                                                                                                                NT AUTHORITY\SYSTEM:(RX)
                                                                                                                                BUILTIN\Users:(RX)
                                                                                                                                APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
                                                                                                                                APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)

Successfully processed 1 files; Failed processing 0 files

x BlueRobot · Aug 5, 2022

The packages in question are the following:

Rich (BB code):

Package_41_for_KB5015808~31bf3856ad364e35~amd64~~10.0.1.6.cat
Package_7_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106.cat

I would check if those have been set to the TrustedInstaller and then attempt to install the update if they have. Otherwise, you carry out the same procedure you did in post #28 but adjust the script so it uses the two package files mentioned above.

rclarke · Aug 5, 2022

I have tried various things this afternoon to get these updates installed.
Each time I reset the ACL for a specific package and try to install the updates. It fails and the CBS log references a different package to be at fault. Some packages have deleted OK. While others still put back an 'Acces Denied' message.
The latest error was package 48 which will not delete.
Unfortunately I am now going on leave for 2 weeks so will nto be able to look into this any further. It seems a real mess though with all of the packages in a state where they cannot have the ACL reset.
I also found a line in the log stating

Code:

2022-08-05 16:07:33, Info                  DPX    Extraction of file: update.ses failed because it is not present in the container (\\?\C:\Windows\SoftwareDistribution\Download\e5590efc92c5f582eecac5c21b61f1a4\Windows10.0-KB5015808-x64-express.cab).

Here's a link to the latest CBS log
CBS.log

x BlueRobot · Aug 6, 2022

rclarke said:
I also found a line in the log stating

That log line is fine and can be ignored.

rclarke said:
Each time I reset the ACL for a specific package and try to install the updates. It fails and the CBS log references a different package to be at fault. Some packages have deleted OK. While others still put back an 'Acces Denied' message.
The latest error was package 48 which will not delete.

That's the issue here, because the previous updates were never installed correctly, they seem to have caused a number of permissions issues within the Packages folder. Unfortunately, we're just going to have to keep ploughing through until the errors are resolved. It seems that you're making some forward progress though.

rclarke · Aug 22, 2022

Thanks for the reply.
I am back from leave and will be ploughing on with this issue.
I guess from your last post, that the best approach from now is to attempt to update. If it fails, check the CBS log for the failing package and attempt to reset the acl for that package, rinse and repeat until all errors clear.

rclarke · Aug 23, 2022

I have removed a lot of the corrupted package files now.
But now I get an error "HRESULT = 0x80070476 - ERROR_TOO_MANY_LINKS" for one package.

rclarke · Aug 24, 2022

I'm pleased to say that this is now resolved.
I ended up in a state where the CBS log was reporting 'HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION' for one of the packages.
This was resolved by running DISM.exe /Online /Cleanup-image /RestoreHealth.

Then I extracted the cab file from the MSU file for KB4486129 & used DISM to add the package:
DISM /Online /Add-Package /PackagePath:C:\Tools\KB4486129\Windows10.0-KB4486129-x64.cab

This completed succesfully and after a reboot Windows Update has reported it is now up to date.

A massive 'Thank You' to @x BlueRobot for the assistance. Without your help I woudl never have been able to resolve this issue.

x BlueRobot · Aug 25, 2022

That's great news! I'm glad you managed to get the updates installed in the end!

[SOLVED] Windows Update corruption

Administrator

Well-known member

Attachments

Administrator

Attachments

Well-known member

Administrator

Well-known member

Administrator

Well-known member

Attachments

Administrator

Well-known member

Administrator

Well-known member

Administrator

Well-known member

Administrator

Well-known member

Well-known member

Attachments

Well-known member

Administrator