none
Windows Update Error code 80072ee2

    Question

  • I am running Windows 7 Home Premium 64 bit and I keep getting the error code 80072ee2 Windows could not search for Updates. I know there are several other posts but none of them are helping me. I have tried the steps from microsoft but nothing worked. Please help.

    I am seriously thinking about going back to XP

    Dell Inspirion 580

    OS: Windows 7 Home Premium 64-bit

    2.67 GHz

    Intel (R) Core (TM)i5 CPU

     

    Tuesday, March 01, 2011 7:21 PM

Answers

  • If you uninstalled Trend Micro AV from your new Dell notebook, this is probably the answer to fixing Windows Update:

    I can confirm that deleting the UseWUServer registry entry (see below) solved my problems with Windows Update running properly.

    I received a "new" refurbished Dell notebook with Windows 7 Professional (32-bit) today and have been trying for hours to figure out how to get Windows Update to work normally.

    Like others, I also uninstalled Trend Micro AV almost as soon as I booted up the system.  I think that product is the problem.  I suspect it does not perform a "clean" uninstall and leaves the UseWUServer registry entry behind with a value of 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

    Note that you need to *delete* the UseWUServer entry and reboot.  Setting it to 0 results in Windows Update failing much faster with a different Windows Update error.

    I tried many, many fixes for Windows Update including:

    • Internet Explorer settings
    • Various Microsoft Windows Update repair utilities
    • Error 80072ee2 fixes described elsewhere
    • Reviewing/revising group policy settings

    Hours of effort and nothing worked.  Deleting the registry key above solved the problem, so kudos to supakeepa in another thread for figuring this out.


    • Proposed as answer by Flatimus Thursday, March 10, 2011 5:19 PM
    • Marked as answer by Miya YaoModerator Friday, March 11, 2011 1:58 AM
    Wednesday, March 09, 2011 2:55 AM
  • Also, you can try the steps in this Help&How-to article:

    http://windows.microsoft.com/en-US/windows7/Windows-Update-error-80072ee2

    Hope it helps.

    Styx

    Thursday, March 03, 2011 9:29 AM

All replies

  • Download and install the System Update Readiness Tool for Windows 7 and check if all is okay or not.


    Download and run the tool, it will say that it's "installing"...it's actually running the readiness scan at this time so you should let the installation run to completion. The KB article says it will appear to hang at 60% completion and I've observed this as well. Just be patient and let it finish. After the "installation" is completed, try to download and icheck if it solve your problem.


    If this does not solve your problem, please reset windows update components.




    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

     

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Tuesday, March 01, 2011 8:43 PM
  • Also, you can try the steps in this Help&How-to article:

    http://windows.microsoft.com/en-US/windows7/Windows-Update-error-80072ee2

    Hope it helps.

    Styx

    Thursday, March 03, 2011 9:29 AM
  • If you uninstalled Trend Micro AV from your new Dell notebook, this is probably the answer to fixing Windows Update:

    I can confirm that deleting the UseWUServer registry entry (see below) solved my problems with Windows Update running properly.

    I received a "new" refurbished Dell notebook with Windows 7 Professional (32-bit) today and have been trying for hours to figure out how to get Windows Update to work normally.

    Like others, I also uninstalled Trend Micro AV almost as soon as I booted up the system.  I think that product is the problem.  I suspect it does not perform a "clean" uninstall and leaves the UseWUServer registry entry behind with a value of 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

    Note that you need to *delete* the UseWUServer entry and reboot.  Setting it to 0 results in Windows Update failing much faster with a different Windows Update error.

    I tried many, many fixes for Windows Update including:

    • Internet Explorer settings
    • Various Microsoft Windows Update repair utilities
    • Error 80072ee2 fixes described elsewhere
    • Reviewing/revising group policy settings

    Hours of effort and nothing worked.  Deleting the registry key above solved the problem, so kudos to supakeepa in another thread for figuring this out.


    • Proposed as answer by Flatimus Thursday, March 10, 2011 5:19 PM
    • Marked as answer by Miya YaoModerator Friday, March 11, 2011 1:58 AM
    Wednesday, March 09, 2011 2:55 AM
  • I had the same experince.  I just purchased a referbished Dell Inspiron running windows 7 and removed the McAffee trial version at first boot.  Afterwards I would get the 8072EE2 error from windows update.  I tried all the suggestions in the microsoft knowledge base, but I had no success until I removed the UseWUServer registry setting suggested above.  That worked great!

    Thursday, March 10, 2011 5:18 PM
  • I am hugely grateful to everyone who submitted the UseWUServer fix, which I used today with total success.

    I had almost the same situation as the User named Flatimus. I'm using a refurbished Dell XPS L501X that came with McAfee trial version installed. I did a full uninstall of the McAfee software. Since then, I have not been able to run Windows Update successfully and consistently got the 8072EE2 error message.

    I did just what this article suggests. I backed up the Registry entry. I did a System Restore point to be on the safe side. Then I deleted the Registry entry. After a reboot, I ran Windows Update again and it worked like a charm. Since then, I have been installing one update after another - more than 15 of them have been waiting for me, while I found the resolution to this problem. Including SP1, which is pretty major I guess!

    So, a big THANK YOU to everyone who took the time to share their knowledge about this. I registered with this site just to be able to leave this feedback, in case there is someone else searching for a solution to this annoying and frustrating problem, and who might be unsure whether the fix is legit. I am here to tell you that, yes, it is.

    PS - I blame McAfee for this. Why do people uninstall this bloatware at the first opportunity? Because it's garbage that drags down system performance - and lightweight, FREE software does the job just as well. The fact that the software can't even gracefully uninstall itself is proof of how bad it is. Shame on you, McAfee...

    Monday, March 14, 2011 3:48 AM
  • Deleting the AU Registry entry worked for me. Tried several things which didn't help, but that did the trick. Running Win 7 64-bit. Refurb laptop from Dell as well, but not sure about the TrendMicro thing. If I uninstalled that, I don't recall it. I use Norton Internet Security now.

    SOLUTION:

    DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

    Note that you need to *delete* the UseWUServer entry and reboot.  Setting it to 0 results in Windows Update failing much faster with a different Windows Update error.

    Thank you!

    Monday, March 21, 2011 7:07 PM
  • BKiz1 basically just explained my life for the last week.  Although I didn’t have Trend Micro, I did the readiness tool, another upload, uploaded every driver from dell, found a forum that linked me to Mcaffee (they apparently have a patch to fully cleanse your system of their own software when you uninstall it)……everything you can think of.  This is the greatest answer to any question I have ever had.  I believe a shout-out to supakeepa is most definitely warranted.  I just want to know why it took me 4-5 days of research to find this answer.  I literally cracked open the regedit…which is something I never do, backed up the entry, and deleted it.  I did get a wee bit confused at the last minute when I was unsure about deleting the whole string or just the “UseWUServer”, but I made sure to follow the directions exactly as proposed.  There were two other entries in the path which I just left alone.  Next time I have a minute….I’m going back to every help site I went to and posting this solution as an option for people.  I have a dell refurb outlet system also, I’m guessing it must have something to do with that.  Thank you everyone who contributed, I now feel comfortable actually using my new laptop instead of obsessing over Win Update not working.
    Wednesday, April 06, 2011 1:43 PM
  • AFAIK, the updating registry key in Windows 7 by Default is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    As to the above key, it is not uncommon to find refurbished systems have had the above key set when it was being administered via Group Policy.

    MowGreen
    Windows Expert IT Pro - Consumer Security

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Wednesday, April 06, 2011 5:00 PM
  • I just want to say a great big THANX to BKize1 as I have run myself ragged, put myself to the grindstone and almost guillotined my head off as this problem was persisting for so darn long. Thanx so much for giving such a simple answer to such a complex and annoying issue. The removal of the entire entry of UseWUServer is the fix. Thanx again for all your hard work and diligence in troubleshooting and resolving our problem.

    MSE

    Monday, May 02, 2011 9:22 PM
  • If you uninstalled Trend Micro AV from your new Dell notebook, this is probably the answer to fixing Windows Update:

    I can confirm that deleting the UseWUServer registry entry (see below) solved my problems with Windows Update running properly.

    I received a "new" refurbished Dell notebook with Windows 7 Professional (32-bit) today and have been trying for hours to figure out how to get Windows Update to work normally.

    Like others, I also uninstalled Trend Micro AV almost as soon as I booted up the system.  I think that product is the problem.  I suspect it does not perform a "clean" uninstall and leaves the UseWUServer registry entry behind with a value of 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

    Note that you need to *delete* the UseWUServer entry and reboot.  Setting it to 0 results in Windows Update failing much faster with a different Windows Update error.

    I tried many, many fixes for Windows Update including:

     

    • Internet Explorer settings
    • Various Microsoft Windows Update repair utilities
    • Error 80072ee2 fixes described elsewhere
    • Reviewing/revising group policy settings

     

    Hours of effort and nothing worked.  Deleting the registry key above solved the problem, so kudos to supakeepa in another thread for figuring this out.


    Thank you so much, your a life saver, we have two refirb Dell's with Win 7 and Uninstalled Trend Micro as soon as we booted our new systems, we've tried everything under the sun to solve this update problem with both systems. Thank you thank you thank you... we've been trying to fix this problem for ages! Finally you had the answer the Microsoft nor Trend Micro couldn't provide.
    Thursday, June 23, 2011 12:24 AM
  • Thank you!!! This one worked perfectly for me...as soon as I deleted UseWuServer.. the updating worked. Great, thanks.
    Wednesday, June 29, 2011 10:39 PM
  • I had the same error and it was because the port 443 (HTTPS) was blocked on my Linksys router. I fix it by unblocking it.
    Sunday, July 24, 2011 10:53 PM
  • Dear BKize1,

    You are a saint!  I hope that you have informed Microsoft of this anomaly.  If the uninstallation of Trend Micro Av causes an interruption in the Windows Update Services, somebody should go to jail.  This could have national security implications.  I looked around, off and on, since May for the solution to my updates.  I tried Microsoft's first recommendation to "Wait 15 minutes and try again".  They suggested a 3rd party firewall but I only have a Windows firewall.  They suggested 3rd party Anti-Virus but I use MSE (Microsoft Security Essentials) only.  I tried via the automatic updates to update at varying hours of the morning to update.  No luck.  I tried various suggestions on the Web; eliminate items in the Hosts file related to updating, I changed something to do with BITS.  Finally, I came across your solution.  I don't remember anything about uninstalling Trend Micro AV but it could have happened; I am trying out new software all the time.  Your solution made me quiver.  Eliminating a line in the Windows Registry. Scary!  But, by this time, I was ready to do anything. I wrote down the line, and DELETE!  I restarted the computer and VOILA!, windows update worked.  I had 24 updates.  It took about an hour but a great load has been lifted from my shoulders.  Thank you!

    Sunday, July 31, 2011 1:13 AM
  • Thank you so much BKize1 , it worked!!!!!!  I also was going nuts looking for a solution...I have 38 updates downloading!!!!!!! you are a genius!!!!!!

    again...thank you!!!!!

     



    Sunday, July 31, 2011 6:17 AM
  • You are indeed a saint!  This worked perfectly for the Dell Inspiron 17R refurbished 64-bit laptop.  What I don't understand is why some of the updates worked back on Jun 25, 2011 - I had not worked on the registry at that time, but somehow the updates did download.  Anyway, I am glad I have this information now and hopefully will not have this problem and waste so much time again.  Many thanks!!!
    Wednesday, August 03, 2011 3:45 PM
  • Hi I'm getting the same error code on windows 7. I have tried all the possible  fixes and regedit and disabled windows firewall and Microsoft security essentials and still no success. Please help?

    Wednesday, May 30, 2012 11:16 PM
  • Hello!

    My registry does not have UseWUServer. I am unsure which file to delete. My path is HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\WindowsUpdate\  and then has the following four entries each with their own drop downs:

    1) Auto Update

    2) Reporting

    3 Services

    4) set up (no drop down)

    what do I delete? I have tried EVERY fix I can on every forum I could find. Damn you Microsoft! lol

    
    

    jodi Birston

    Wednesday, June 06, 2012 7:40 PM
  • Answer is not logical
    But the reason is struggling inti virus may be working to ban or other communication to update the files
    Therefore, I advise that the stop struggling to update only
    Wednesday, July 25, 2012 1:39 PM
  • Google search found this topic.  I don't think Trend Micro had been installed on this computer, but I looked for the registry entry UseWUServer anyway.  It was listed and had a value of 1.  Deleted it and rebooted, now Windows Updates are downloading correctly.
    Friday, August 17, 2012 10:36 PM
  •  I can see that you have helped a lot of people with this response.

    Could you please advise as to how I can find the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

    on my PC?  I have looked for the registry keys and it seems they are hidden somehow.

    I would appreciate your help very much.

    Thank you,

    ZG

    Wednesday, September 05, 2012 1:19 AM
  • The registry keys/values may will not exist unless they were made by TrendMicro, a previously or currently installed antivirus/security suite, or by Group Policy.

    Please see:  Temporary connection-related errors may occur when you use Windows Update or Microsoft Update

    Save the Fixit that is offered to you there by clicking the Download button. Close all open programs and web browsers and then Run it.

    Restart the system if prompted to and see if it can now update successfully..


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Wednesday, September 05, 2012 6:05 PM
  • Thank you for the response MowGreen.  I saved and ran the Fixit download, but it did not find any problems to fix.   I have been trying to fix this issue since June.  If you have any other advice on how this problem can be corrected, it would be appreciated.  Thank you, ZG

    Thursday, September 06, 2012 12:43 AM
  • You're mowst welcome, zeldagirl. The return code in question, 80072EE2, can also stem from the installed antivirus/security suite, entries in the host file, a network issue ( a wireless or wired router that contains a hardware firewall ),  or, by malware.

    First, please see if the issue is being caused by malware . Please go here Microsoft Safety Scanner

    Under Download, click the Select your version link. Choose the version that matches your system's architecture ( 32 or 64 bit ). If you're not sure what the architecture is, click on the Microsoft Support link to determine which it is.

    Save the downloaded MS Safety Scanner. Close all open programs, apps, and web browsers, then run it.

    If nothing was detected by the Scanner suggest you run it again from within what is known as Safe Mode - Start your computer in safe mode
    If nothing is being detected then restart the system to normal Windows mode now.

    Try another attempt at updating. If/when it fails, please post the last 50 or so lines of the WindowsUpdate.log .
    Click the Start orb, in the Search programs and files field type in windowsupdate.log
    Under Programs, click on windowsupdate.log

    Scroll all the way to the bottom of the log, then copy & paste the last 50 or so lines of it into your reply, please.

    We need to see if the latest version of the Windows Update Agent has been installed. The entry indicating that it has been installed will look like the below. Please include it or make sure that it is present in the log -

    2012-09-06 08:44:45:662 2748 ca0 Misc ===========  Logging initialized (build: 7.6.7600.256, tz: -0700)  ===========


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN


    Thursday, September 06, 2012 4:20 PM
  • Hi MowGreen,

    I'm sure you have guessed by the log pasted below, that the MS Safety Scanner did not find anything to correct on my computer.

    I believe the first line is the version information you were requesting be included in the log.  Your help has been Mowst appreciated.

    Thanks, ZG

    9/6/2012 21:10:28:519 1124 1984 Report WER Report sent: 7.6.7600.256 0x80246008   5F64A8C3-B42C-48F7-9925-0429E9C548D2 Download 101 Unmanaged
    9/6/2012 21:10:28:550 1124 1984 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    9/6/2012 21:10:28:550 1124 1984 Report WER Report sent: 7.6.7600.256 0x80246008   6C35C3C6-E8A6-4C26-AD5A-2B12C6097919 Download 101 Unmanaged
    9/6/2012 21:10:28:550 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:566 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {CC0ADE33-EC3B-4D16-A281-338396F58DCB}]
    9/6/2012 21:10:28:566 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:566 1124 1984 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    9/6/2012 21:10:28:566 1124 1984 Report WER Report sent: 7.6.7600.256 0x80246008   024F10D4-B471-422D-B393-39456CBA18D8 Download 101 Unmanaged
    9/6/2012 21:10:28:582 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:582 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:597 1124 1984 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    9/6/2012 21:10:28:597 1124 1984 Report WER Report sent: 7.6.7600.256 0x80246008   A114A5E9-DB76-43EF-8430-0A556240C6E9 Download 101 Unmanaged
    9/6/2012 21:10:28:597 1124 1984 Report CWERReporter finishing event handling. (00000000)
    9/6/2012 21:10:28:613 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:613 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {41F7683B-E86D-4181-8A0E-D54B8072E290}]
    9/6/2012 21:10:28:613 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:613 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:628 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:644 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:675 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {145FE545-BF00-427A-B87C-9C554830CE50}]
    9/6/2012 21:10:28:675 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:691 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:691 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:691 1124 1984 Report CWERReporter finishing event handling. (00000000)
    9/6/2012 21:10:28:738 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:753 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {AFDCB546-0D0D-48E7-BD0C-EDAE3E15573D}]
    9/6/2012 21:10:28:753 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:769 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:769 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:800 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:816 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {BCBB3F8F-80B6-4B04-84B5-4D28B1E5DCC6}]
    9/6/2012 21:10:28:816 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:816 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:816 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:847 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:894 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {FA090999-3B89-4DD1-82B2-6E16B0841E24}]
    9/6/2012 21:10:28:894 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:909 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:909 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:28:925 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:956 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {1A56B5AF-C1B0-4D82-BF13-296BAB975FA5}]
    9/6/2012 21:10:28:956 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:28:956 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:28:972 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:29:018 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:050 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {5F64A8C3-B42C-48F7-9925-0429E9C548D2}]
    9/6/2012 21:10:29:050 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:29:065 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:065 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:29:065 1124 1984 Report CWERReporter finishing event handling. (00000000)
    9/6/2012 21:10:29:065 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:112 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {6C35C3C6-E8A6-4C26-AD5A-2B12C6097919}]
    9/6/2012 21:10:29:112 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:29:128 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:128 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:29:143 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:174 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {024F10D4-B471-422D-B393-39456CBA18D8}]
    9/6/2012 21:10:29:174 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:29:190 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:190 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:29:190 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:206 1124 1b70 AU >>##  RESUMED  ## AU: Download update [UpdateId =   {A114A5E9-DB76-43EF-8430-0A556240C6E9}]
    9/6/2012 21:10:29:206 1124 1b70 AU   # WARNING: Download failed, error   = 0x80246008
    9/6/2012 21:10:29:206 1124 1b70 AU AU checked download status and it changed: Downloading is paused
    9/6/2012 21:10:29:206 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:29:206 1124 1b70 AU Currently showing Progress UX client - so not launching any other client
    9/6/2012 21:10:29:221 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:30:173 1124 478 AU BeginInteractiveInstall invoked for Install
    9/6/2012 21:10:30:173 1124 478 AU Auto-approved 0 update(s) for install (for Ux), installType=0
    9/6/2012 21:10:30:173 1124 478 AU WARNING: BeginInteractiveInstall failed, error = 0x8024000C
    9/6/2012 21:10:30:641 1124 181c AU AU received handle event
    9/6/2012 21:10:30:641 1124 181c AU No featured updates notifications to show
    9/6/2012 21:10:30:641 1124 181c AU UpdateDownloadProperties: 1 download(s) are still in progress.
    9/6/2012 21:10:30:641 1124 181c AU WARNING: Failed to change download properties of call, error = 0x80070057
    9/6/2012 21:10:30:641 1124 181c AU Triggering Offline detection (non-interactive)
    9/6/2012 21:10:30:641 1124 181c AU AU setting pending client directive to 'Install Complete Ux'
    9/6/2012 21:10:30:641 1124 181c AU WARNING: Pending directive, 'Install Complete Ux', is not applicable
    9/6/2012 21:10:30:641 1124 181c AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:30:641 1124 181c AU #############
    9/6/2012 21:10:30:641 1124 181c AU ## START ##  AU: Search for updates
    9/6/2012 21:10:30:641 1124 181c AU #########
    9/6/2012 21:10:30:672 1124 181c AU <<## SUBMITTED ## AU: Search for updates [CallId =   {20F11704-E4BA-4C5C-AEC5-50B82EF637A5}]
    9/6/2012 21:10:30:672 1124 1984 Agent *************
    9/6/2012 21:10:30:672 1124 1984 Agent ** START **  Agent: Finding updates   [CallerId = AutomaticUpdates]
    9/6/2012 21:10:30:672 1124 1984 Agent *********
    9/6/2012 21:10:30:672 1124 1984 Agent   * Online = No; Ignore download   priority = No
    9/6/2012 21:10:30:672 1124 1984 Agent   * Criteria = "IsInstalled=0   and DeploymentAction='Installation' or IsPresent=1 and   DeploymentAction='Uninstallation' or IsInstalled=1 and   DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and   DeploymentAction='Uninstallation' and RebootRequired=1"
    9/6/2012 21:10:30:672 1124 1984 Agent   * ServiceID =   {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
    9/6/2012 21:10:30:672 1124 1984 Agent   * Search Scope = {Machine}
    9/6/2012 21:10:35:891 1124 181c AU No pending client directive
    9/6/2012 21:10:40:984 1124 1984 Agent WARNING: Failed to evaluate Installed rule, updateId =   {818701AF-1182-45C2-BD1E-17068AD171D6}.101, hr = 80242013
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {1BDDBE8D-16EF-4E1D-A8EB-826691A014F6}.101 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {3F08EED3-8FC3-4253-8FA9-F301430C4B24}.101 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent Update {7EBDB020-BD62-4790-AF2B-DFB52E42F91F}.104 is pruned out due to   potential supersedence
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {D5FD720E-0F2C-4363-AA87-6AD4A6D11B0E}.105 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent Update {E2B689E4-DF53-4FCF-BBA7-F4174F30D763}.105 is pruned out due to   potential supersedence
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {FA090999-3B89-4DD1-82B2-6E16B0841E24}.107 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {BCBB3F8F-80B6-4B04-84B5-4D28B1E5DCC6}.107 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {6C35C3C6-E8A6-4C26-AD5A-2B12C6097919}.104 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent Update {71F60E65-AC13-4EA3-8651-AE4E72188DB2}.100 is pruned out due to   potential supersedence
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {41F7683B-E86D-4181-8A0E-D54B8072E290}.100 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {C7C2C625-E811-43B2-A6F6-29A86848B7BD}.100 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {AFDCB546-0D0D-48E7-BD0C-EDAE3E15573D}.101 to search result
    9/6/2012 21:10:42:748 1124 1984 Agent   * Added update   {145FE545-BF00-427A-B87C-9C554830CE50}.102 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {6252C914-64DF-49CE-8EBF-8CD3C6B3E0D9}.101 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {B4413613-7062-4F6B-A1E4-7A957409A51F}.101 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {A114A5E9-DB76-43EF-8430-0A556240C6E9}.100 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {024F10D4-B471-422D-B393-39456CBA18D8}.100 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {5F64A8C3-B42C-48F7-9925-0429E9C548D2}.100 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {CC0ADE33-EC3B-4D16-A281-338396F58DCB}.101 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {8FF20708-AEEF-4F79-B3C1-23905E105D41}.100 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Added update   {1A56B5AF-C1B0-4D82-BF13-296BAB975FA5}.101 to search result
    9/6/2012 21:10:42:749 1124 1984 Agent   * Found 18 updates and 74   categories in search; evaluated appl. rules of 1103 out of 1964 deployed   entities
    9/6/2012 21:10:42:780 1124 1984 Agent *********
    9/6/2012 21:10:42:780 1124 1984 Agent **  END  **    Agent: Finding updates [CallerId = AutomaticUpdates]
    9/6/2012 21:10:42:780 1124 1984 Agent *************
    9/6/2012 21:10:42:807 1124 1b70 AU >>##  RESUMED  ## AU: Search for updates [CallId =   {20F11704-E4BA-4C5C-AEC5-50B82EF637A5}]
    9/6/2012 21:10:42:807 1124 1984 Report CWERReporter finishing event handling. (00000000)
    9/6/2012 21:10:42:807 1124 1b70 AU   # 18 updates detected
    9/6/2012 21:10:42:808 1124 1b70 AU #########
    9/6/2012 21:10:42:808 1124 1b70 AU ##  END  ##    AU: Search for updates [CallId =   {20F11704-E4BA-4C5C-AEC5-50B82EF637A5}]
    9/6/2012 21:10:42:808 1124 1b70 AU #############
    9/6/2012 21:10:42:808 1124 1b70 AU No featured updates notifications to show
    9/6/2012 21:10:42:809 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:42:812 1124 1b70 AU Successfully wrote event for AU health state:0
    9/6/2012 21:10:42:815 1124 18c0 AU Getting featured update notifications.    fIncludeDismissed = true
    9/6/2012 21:10:42:815 1124 18c0 AU No featured updates available.
    9/6/2012 21:10:47:808 1124 1984 Report CWERReporter finishing event handling. (00000000)
    Friday, September 07, 2012 1:32 AM
  • Is your system Windows 7 32 bit or 64 bit ?
    Has Service Pack 1 been installed yet ?
    What is the name of the installed antivirus/security suite; does it include a firewall or is the system using the native Windows firewall ?
    Is the system on a home network; if yes, can you connect it directly to the network's modem, then try another attempt at updating to see if the router is causing the updating issue ?

    Please open Windows Update in the Control Panel.
    Next to "Updates were installed", click the View update history link .

    Please post the KB number & date for when the last update Successfully installed.

    The WindowsUpdate.log is showing " UpdateDownloadProperties: 1 download(s) are still in progress ".  Then it's showing a return code that indicates that BITS (Background Intelligent Transfer Service) is having an issue and the update can not be downloaded.

    After you provide answers to the above questions we'll attempt to manually download and install an update.

    I have a strong suspicion that although the MS Safety Scanner did not detect anything, there may well be some tricky malware lurking on the system. If that supposition is incorrect, then the updating issue is either stemming from something corrupted in Windows or from the network .
    We'll find out the answer to the above 2 "theories" if updates can or can not be manually installed.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Friday, September 07, 2012 5:26 PM
  •              Hi MowGreen,

                 This system is Windows 7 64 bit.

                 Service Pack 1 - Yes installed 2-16-2011.

                 McAfee Security - Firewall - Yes  (Virus Scan Version 15.0).

                 My computer is connected directly to the modem.

                 I could only view the last two days (9/5/12, 9/6/12)history in "View Update History" - so I checked the "Installed Updates"

                 The last update per that screen was KB2160841 06/14/12

                 Thank you for helping, ZG

                

            

    Friday, September 07, 2012 10:56 PM
  • Download and save this update, please - KB2728973
    The system will need to pass Validation in order for you to download the above update.
    If it passes Validation, then install it by right clicking the update and choosing 'Run as administrator'. Agree to the UAC prompt to install it.
    It will not be listed in Installed Updates as it updates the system's certificate store.

    Next, download and save this update, please - KB2718523
    When the download completes close the web browser and any other open programs or apps, then install it.
    Restart the system if prompted to.

    Was the system able to pass Validation ?
    Was the system able to download KB2728973 ?
    Did the system install KB2718523 ?

    My suspicion referring to "tricky malware" also applies to McAfee as it can act the same as malware by preventing a Windows system from being updated, zeldagirl.
    Norton 'products', likewise. ;)


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Saturday, September 08, 2012 3:03 PM
  •   Hi MowGreen,

       I followed your directions and I believe the system passed Validation, but I did not actually see

       anything on the screen to confirm that.  How would I confirm the Validation?

       The computer appears to have installed the KB2728973 update, then it rebooted back up,

        but the Windows Update service still is not downloading the updates to my computer. 

        Did I not do something correctly?  Thanks, ZG

        Also, the Windows Update screen tells me I have an Error Code 80246008.

       

      
    • Edited by zeldagirl Saturday, September 08, 2012 6:51 PM
    Saturday, September 08, 2012 6:49 PM
  • Howdy, ZG. Did the download page for KB2728973 state Validation Required and did you click Continue button prior to your downloading the update ?

    Since we now know that updates can be installed, then I suspect that McAfee is causing the issue with Windows Update.
    Let's try configuring the system to Clean Boot to see if that's what's occurring here - How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
    Ensure that the native Windows firewall is now On by clicking the Start orb, in the Search programs and files field type in fi
    Under Control Panel, click on Windows Firewall.

    After you've restarted the system to the Clean Boot state, open Windows Update.
    Click on the Check for updates link on the left.
    Was the system offered any updates ?
    If yes, then approve their download and installation.

    If no, while still in the Clean Boot state,  please go here - How to Reset Windows Update in Windows 7 and Vista
    Under Option 2, download and save Reset_Reregister_Windows_Update_Components.bat
    Follow the instructions on the above page to run the .bat file.
    Restart the system after the .bat file is run.

    See if the system can update now.

    Whether it can or can not, undo the the Clean Boot configuration ( refer to the steps you used to Clean Boot on this page -
    http://support.microsoft.com/kb/929135 ) and then restart to normal Windows mode.
    In the Clean Boot state McAfee is not running and the system is not being protected against "nasties", so please do not visit any other sites until the Clean Boot steps have been undone.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Saturday, September 08, 2012 7:29 PM
  •         MG - sorry - I couldn't reply to you - I had to shut down & restart my computer again.

             First, yes - the download page specified Validation required, and yes-I clicked the Continue button.

            The computer will not allow me to change the Windows Firewall settings, it states "Windows

             Firewall can't change some of your settings - error code 0x80070424" 

             Is it alright for me to proceed with the Clean Boot? ZG


    • Edited by zeldagirl Saturday, September 08, 2012 8:23 PM
    Saturday, September 08, 2012 8:22 PM
  • You need to first configure the system to Clean Boot, restart the system, then check to see that the Windows 7 firewall is now On, ZG.
    It should automatically turn On when the system is configured to Clean Boot but it's always best to check that it has.
    The 0x80070424 return code means that the Windows Firewall service is not running. 
    When McAfee is running (  it will not be running in the Clean Boot state ) it will not allow you to turn on the Windows firewall since there's no need to have 2 software firewalls running concurrently.

    Is that clear now, ZG ?


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Sunday, September 09, 2012 3:51 PM
  •  Hi MowGreen,

     Sorry - the order of Win Firewall and the Clean Boot eluded me - thanks for setting me straight.

     I ran everything that you mentioned in your response and I still could not get either the Firewall

     or the update to function correctly.  I even went back and ran everything as "Run as Administrator"

     to rule out that issue.  I am performing a full backup of my computer now, to be ready for what ever

     is coming next.  Should I run the sfc /scannow or is there something else I should do before that?

     Thank you so much for all your help with this.  ZG

    Sunday, September 09, 2012 11:12 PM
  • Just to be perfectly clear here ... you configured the system to Clean Boot and the Windows Firewall still did not turn On ?
    And, you ran the .bat file according to instructions, yet the system still could not update ?

    If this were a client's computer I'd redo the Clean Boot configuration steps once again, restart the system, then open the Services console, and ensure that the Background Intelligent Transfer Service ( BITS ), Windows Firewall, and  Windows Update services are running. Then I'd Stop  and restart them to ensure that they function properly.

    To do the above click the Start orb; in the Search programs and files field type in ser
    Under Programs, right click Services and choose 'Run as administrator'; agree to the UAC prompt.

    Start with BITS. If BITS has started, click the Stop the service link. Then try to Restart it. If it's not running, click the Start the service link.
    Do the same with the Windows Firewall and Windows Update services.

    Let us know what happens when you do the above, please. Include any error codes that occur, too.
    After doing the above, undo the Clean Boot configuration and restart the system to normal Windows mode.

    Also, please open Programs and Features in Control Panel.

    Is Adobe Reader or Adobe Flash Player installed ? If yes, then please check which Version is installed and post back with the Version number.
    Also check to see if a Java version is installed. I'm fairly certain it will be listed as Oracle Java or as an Oracle JRE runtime.
    If there is, please post back with that Version number, too.

    The above application/programs must be kept updated to their latest versions as they are dangerous security risks that allow "bad guyz" to take over your computer with no interaction on your part. IOW, the system can be compromised and you many never even know that it is.
    Not being able to update it is often a sign of this issue.
    Having McAfee installed will not prevent such a compromise.
    Here's an article that shows this happening - Thanks ever so much Java, for that biz-wide rootkit infection


    Unfortunately, you may be looking at an attempted Repair Installation or Clean installation of Windows 7, ZG.

    A great feature of Windows 7 is the ability to create a System Image to an external USB drive. Then when issues such as these arise, one can easily restore the system to a known, clean state.
    The backed up data  ( documents, pictures, video, music, etc. ) contained in the System Image can be accessed  and restored without having to restore the entire System Image, if one needs to recover personal data only.
    All one needs to do is to Attach the file that contains the System Image and use Windows Explorer to copy the files back to the computer from the external USB drive. 
    The  file is called a Virtual Hard Drive ( .vhd ) and individual files can be restored using that method. ;)





    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Monday, September 10, 2012 4:51 PM
  •   Hi MowGreen,

      I followed your instructions and stopped and restarted the Windows Update service.  The BITS and

      Windows Firewall were not listed, so I couldn't restart them. How do they appear on the list?Just as

       BITS and Windows Firewall - is the BITS called bits encryption service?  The only error code that

       showed up was the Windows Update error code 80246008.

       The Versions are as follows:  Java(TM) 6 Update 30 V 6.0.300, 

       Adobe Flash Player 11 Active X  V 11.4.402.265, and Adobe Reader X V 10.1.4

       I read the article, and believe you are on to something...I have done a Sandisk back up of my

       system, should I start working on that System Image as well?

        Thank you very much, ZG

    Monday, September 10, 2012 11:38 PM
  • BITS will be listed as Background Intelligent Transfer Service.
    Both Java, Adobe Reader, and Adobe Flash Player are up to date.

    The updating issue is most likely being caused by McAfee. Before you resort to using a System Image, let's try uninstalling McAfee and see if we can get  BITS and the Windows Firewall running.

    Please download and save the McAfee Consumer Product Removal (MCPR) tool  (MCPR.exe)

    DO NOT
    run it untill you first uninstall McAfee from Programs and Features in the Control Panel.

    Restart the system.
    If there were any error messages that appeared during the uninstallation, please post them.

    After you've restarted the system, run MCPR.exe by right clicking it, choose 'Run as administrator', then agree to the UAC prompt

    Here's the rest of the instructions that are found on McAfee's web site:
    How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)

    1. At the McAfee Software Removal screen, click Next.
        • At the End User License Agreement (EULA) dialog box, click Next to accept the agreement.
        • When prompted, type the Captcha information to validate to application security, then click Next.
    • If you have Family Protection installed, type your Administrator user name and password, and click Next.
    • If you cannot authenticate, follow the on-screen instructions to obtain an uninstall code. If you do not have Family Protection installed, you will not receive this authentication prompt.
    1. When you see the message CleanUp Successful, restart your computer. Your McAfee product will not be fully removed until after the restart.

    All remnants of McAfee should be gone now. The Windows Firewall and BITS should now be operating properly.
    Open the Services console once again to confirm this.

    Ensure that these Services are listed -
    Background Intelligent Transfer Service ( BITS )
    Base Filtering Engine
    Windows Firewall
    Windows Update

    If Windows Firewall, Base Filtering Engine, and BITS are not listed, are not running, are having an issue if you try to Start, Stop, or Restart the services, then please go here, read the article, then download and save the 2 registry files, 1055.BFE.reg and 0677.mpssvc.reg .

    After they've been downloaded, right click them, then choose Merge for each .reg file

    Click OK to the message that will appear.
    You should then receive a message that the information has been added to the registry.

    Next, open the registry editor by clicking the Start orb. in the Search programs and files field type in regedit
    Under Programs, right click regedit.exe and choose 'Run as administrator', agree to the UAC prompt.

    Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE
    Right click on BFE and choose Permissions.
    Click the Add button; click on the Advanced button towards the bottom of the window; click the Find Now button.
    Scroll down under the Search results: and click on Everyone to highlight it, then click the OK button. Click OK once again.

    Now click on Everyone, then click the Advanced button towards the bottom of the window.
    Everyone should now be highlighted on the Permissions page; click the Edit button.
    Put a check next to Full Control, then click OK.
    Click Apply, then click OK.
    Close the registry editor and restart the system.

    Open the Services console once again to ensure that the Base Filtering Engine service is listed.
    Start the service now and check the other ones that I've previously mentioned, too.



     


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN


    Wednesday, September 12, 2012 5:47 PM
  • Hi MowGreen,

    Thanks for posting the above.  However, the Windows Update and Windows Firewall are still giving me error messages.  The Base Filtering Engine and Windows Firewall are listed in the services - but not BITS.  I was able to turn the BFE service on, but the Windows Firewall gives me the following error message: ***windows could not start the windows firewall on local computer. For more information, review the system event log.  If this is a non-Microsooft service, contactthe service vendor, and refer to service-specific error code 5.   I just ran a quick malware scan and it didn't come up with anything amiss - so I will run a full scan tomorrow. 

    Thank you so much for helping as much as you have - you have been very patient. Take care and have a good day.  ZG

    Thursday, September 13, 2012 2:09 AM
  • Error code 5 is an Access Denied message. Did you uninstall McAfee first before trying to start the Windows Firewall ?
    If not, then either McAfee is still installed and/or there's malware that will not allow the firewall to start.

    And, to be perfectly clear here, the Background Intelligent Transfer Service  is not listed as a Service ?

    You can get no-charge support for Security issues from Microsoft, ZG. Since your system can not obtain Critical Security updates via Windows Update, you should contact them for assistance in resolving this issue.

    Suggest you start here - Need Virus and Security-Related Support?
    Click the Continue button. The page requests that you run the Microsoft Safety Scanner. You've already done that so click the Continue button. Then choose English - United States and click the Continue button again.
    Choose the Phone option. For the next page, under " What would you like assistance with ? ", choose Other.

    Tell the Security Support tech that you've already run the MS Safety Scanner and that the system has not been able to automatically download and install Security updates since June 14th . And, that the only way updates can be installed is if you download and install them manually.

    If MS will not provide support for this Security issue then you can try running the System File Checker from an Elevated Command Prompt. Instructions to do so can be viewed here - Use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7

    Please note that if you do not uninstall McAfee, restart, then run the McAfee Security removal tool (MCPR.exe), and restart once again, this issue will most likely never be resolved. Either McAfee or some well hidden malware is causing the updating issue.

    If you've managed to completely remove McAfee from the system by now, strongly suggest that you downaload and install the free Microsoft Security Essentials for Windows 7, 64 bit, after you've run the System File Checker.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN



    Thursday, September 13, 2012 5:37 AM

    • Edited by zeldagirl Thursday, September 13, 2012 3:48 PM should BITS be here? Yes - I did everything several times from time after McAfee unistalled. Thank you, ZG
    Thursday, September 13, 2012 3:47 PM
  • Let's give restoring BITS one more shot, ZG . Click here and save the download - Restore Missing BITS (Background Intelligent Transfer Service) from Services MMC
    Extract (unzip) w7-bits.zip. There will now be a w7-bits folder. Open it, right click w7_bits.reg and choose Merge.
    You'll be asked if you want to Continue. Click Yes.
    You should get a message that the information in the file has been added to the registry.
    Restart the system and check the Services again to see if the Background Intelligent Transfer Service is listed.
    If it is, it should be set to Manual for Startup type. If the service has not Started, start it and see if the system can update now.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN


    • Edited by MowGreenEditor Friday, September 14, 2012 5:28 PM URL incorrect
    Thursday, September 13, 2012 6:33 PM
  • I'm sorry MowGreen, but every time I click on the  Restore Missing BITS (Background Intelligent Transfer Service) from Services MMC, I receive "Page Not Found".  I tried to search on Microsoft site, but did not find anything that I should be downloading for this issue.  The Malwarebytes full scan I ran on the computer did not find any malicous threats. Should I reinstall McAfee? Thank you and have a good day, ZG

    Positive Update MowGreen,after doing MORE digging,  I did find that Restore Missing BITS download somewhere on the Microsoft website.  I now have the BITS service AND I download my first Windows Update since June :0) 

    I do have a couple of things of concern: My Windows Firewall is still not working. Should I reinstall McAfee and rely on that?   Also, do you think I have a malicous virus on my computer, and if so, how can I rid my system of it?

    Again, Thank You so much, you have been such a big help :0))

    ZG

    • Edited by zeldagirl Friday, September 14, 2012 1:55 AM
    Thursday, September 13, 2012 11:30 PM
  • Sorry about posting the incorrect link to the w7_bits. reg file, ZG. Nice work finding it !! The link is now correct.

    Did you run the McAfee Consumer Product Removal Tool (MCPR.exe) after first uninstalling McAfee, restarting the system, ran MCPR.exe, and then restarted once again  ?
    If you're still getting error 5 ( Access Denied ) when attempting to start the Windows Firewall then it appears that McAfee has changed some system permissions .

    There is always the possbility that some tricky, well hidden malware may have caused the updating and firewall issues. The only way to be fairly certain that no such malware is hiding on the system would be to burn an antivirus rescue CD and then boot the system from it. That way the Hard Drive of your computer is not active and it's extremely difficult for malware to hide.

    If I were a betting man, I'd go with McAfee as the cause of these security issues.
    Before you reinstall it so that a firewall is protecting your system, did you Merge the 2 registry files, 1055.BFE.reg & 0677.mpssvc.reg AND make the registry edits that were previously posted ?


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Friday, September 14, 2012 6:07 PM
  •              Hi MowGreen,  Yes - I made sure that all of McAfee was uninstalled, restarted and then ran MCPR.exe 

                 and yes, I did all the registry merging that you told me to do.  I actually just did it again to make sure

                 then restarted, went to services.msc, ran as Admin, and Windows Firewall is giving me that error 5.

                 Should I try more malware scans?  Thank you so much and have a good night, ZG.

    Friday, September 14, 2012 11:02 PM
  • Please open the registry editor again by clicking the Start orb. In the Search programs and files field type in regedit
    Under Programs, right click regedit.exe and choose 'Run as administrator', agree to the UAC prompt.   

    Navigate to HKEY_LOCAL_MACHINE.  Now go to the System subfolder, right click it and choose Permissions.
    All of the entries under SYSTEM have their Permissions inherited from here.
    Under " Group or user names: " you should see

    Creator Owner
    SYSTEM
    Administrators
    Users

    Click on Administrators. In the box below, " Permissions for Administrators ", there should be a check mark next to Full Control and Read.
    The Windows Firewall permissions are inherited from SYSTEM\CurrentControlSet\services\MpsSvc <--- this is the Windows Firewall service.

    Put a check mark next to Full Control and/or Read if they are not already checked.
    Then click Apply; then OK.


    If there are any other entries under " Group or user names ", please post exactly what they are.
    Close the registry editor and restart the system IF you put a check mark next to Full Control and/or Read.
    If you did not need to make any check marks, then you do not need to restart the system, just close the registry editor and post back, ZG.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Saturday, September 15, 2012 3:02 PM
  • Hi MowGreen,  I followed all your instructions, restarted the computer, went to services.msc as Admin

    to start Windows Firewall - and received - error 5.  Went to Control Panel to Windows Firewall, to try

    to 'turn firewall on or off' and it actually doesn't do anything.  I don't even get an error message there -

    the cursor will appear like it's working and then just stop.   Thank you, ZG

    Saturday, September 15, 2012 7:13 PM
  • Hmmm ... not having a firewall is not very good, ZG. There's still a Permissions issue that is preventing it from turning On.
    Please go here and read Option Two- How to Enable or Disable the Windows 7 Built-in Administrator Account
    If need be, print or write out the steps required to Enable the Built-in Admin account.
    Before you do that, disconnect the system from the internet.

    You do not want the system connected to the net when you've logged on with the built-in Admin account and there is no firewall running.
    With the system disconnected from the net, enable the built-in Admin account and then try to start the Windows Firewall.

    Whether the firewall starts or not, please  Disable the built-in Admin account, and restart to your User Account.
    Please post back with your results with the built-in Admin account ... eg. whether you could start the firewall or not.

    You may need to reinstall McAfee and then hope that it does not create another issue with BITS and/or Windows Update.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Monday, September 17, 2012 5:31 PM
  • Hi MowGreen,  I read all the options on the 'How to' page, first I tried Option 2 and I received the below message. So,

    I had to go with Option 4, Method II.  When doing this option I found that I could not get past #5.  The computer gave me a message that the SAM file was already in use.  So, I did like the instructions say and made a Win 7 System Repair disc....and I have no idea what I'm supposed to do with it.  I am tired and seeing double right now, so I'm going to get some rest.  Could you please help with this? Am I doing the right thing? Thank you and have a good night, ZG

    Tuesday, September 18, 2012 1:42 AM
  • The message you posted shows that the command is not correct. The last part of the command has the a right after the slash. It should look like this  /active:yes

    The command you entered has a space after the slash followed by the a. This is the command you used  / active:yes

    Do you see the space after the slash, ZG ?

    As far as making a System Repair disc, that's a good thing but you  will not need it if you enter the command exactly as it's written.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Tuesday, September 18, 2012 6:10 PM
  • Hello MowGreen, Yes - that mistake was a waste of time and SPACE.

    Anyway, I activated the Win7 built-in Admin, restarted, logged in as Admin, first went

    to services to start Win Firewall - got the message shown in Insert#1, then I went to control panel, security

    and to Windows Firewall to turn on or off and got absolutely nothing as shown in Insert#2. Then I disabled

    the Win7 built-in Admin.     Any ideas?  Thank you for helping with this, ZG

    Wednesday, September 19, 2012 12:10 AM
  • For the first graphic, if the  Computer  icon is not on the Desktop, you can view " more information" by clicking the Start orb; on the right menu,
    right click on Computer, choose Manage, agree to the UAC prompt.

    Click the arrow ( this is known as expanding or expand ) next to System Tools; click the arrow next to  (expand) Event Viewer;
    Expand Windows Logs; click on System.

    Information about Windows Firewall will be listed under Source as System Control Manager.
    The Default view of the list will be ordered by Date and Time.
    You will need to know the approximate time that attempted to start the firewall yesterday.

    The bottom pane of the System event viewer may reveal something more relevant than the Access Denied, error code 5 message but I doubt it will.

    For the second graphic you've posted, did you click the "Use recommended settings " button to see what happens ?

    You computer does not have a firewall protecting it. If your McAfee subscription is current, then strongly suggest that you contact them now.

    Explain that McAfee had interfered with Windows Updates by damaging BITS;
    you uninstalled McAfee, then ran the Consumer Product Removal Tool as per their instructions
    you repaired BITS and Windows Update functions now yet, you can not start the Windows 7 firewall and that your system is unprotected -

    Technical Support for Home and Home Office

    Suggest you try the " McAfee Virtual Technician " first. If or,  more likely,  when that fails to resolve this issue, then click the Telephone Technical Support button. Their support for your McAfee product is free as long as the subscription is current, ZG.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Wednesday, September 19, 2012 4:29 PM
  •           Hi MowGreen,  Regarding the first graphic question: The messages I found under Source were "The Windows Firewall service terminated with service-specific error Access is denied.." and "The Windows Firewall service entered the stopped state."   I have no idea how it could enter 'stopped' state when it was not started.

    Regarding the second graphic question: Yes, I click on 'Use Recommended Settings" several times.  That's when the mouse icon will look like it's going to do something, but then it just stops and nothing happens. 

    Regarding McAfee - yes, my subscription is current - I just renewed it at the end of May 2012.

    Thanks for all your help and advice - I will contact McAfee after trying that virtual technician.  Hopefully that will help, I would like this to be resolved very soon.  You have been a life saver, thanks for helping me get the Windows Update working again and the BITS - I can't say that I have much faith in McAfee if they are the reason for this problem to begin with....will you still be available if I have any questions?   Again Thank You for All your help, ZG

    Wednesday, September 19, 2012 11:23 PM
  • You're mowst welcome, ZG. And yes, I'll be lurking about and should ( key word being "should" ) get a notification when you post back to this thread if you have any further questions.

    What I find very intriguing is that you renewed your McAfee subscription at the end of May and the Windows Update/BITS issue started in the middle of June. Please tell the McAfee Support person about that specific scenario.

    I fully  understand how you feel in regards to the value of McAfee. IMHO, any security product that prevents a system from obtaining updates in a timely manner isn't worth spending money on.


    MowGreen

    *-343-* FDNY
    NEVER FORGOTTEN

     

    Thursday, September 20, 2012 3:49 PM
  • I tried all of the above solution suggestions and none fixed my windows 7 system. What did work for me was a setting I had on my AVG Internet Security 2012 where my Generic Host Process module was set for Allow For Safe. I changed it to Allow For All and my window updates were restored.

    Now if you are using a different antivirus program check that setting within it. I know the suggestions recommend disabling the antivirus but even when I disabled it the updates still did not work.

    So check the Generic Host Process status and give it Full access to the internet, that should help you.

    Cheers!

    Monday, September 24, 2012 12:24 AM
  • THANK YOU... THANK YOU... I had the exact same problem with windows 8 and ie10. Your fix worked. Thanks to you and supakeepa
    Saturday, November 10, 2012 4:59 AM
  •  I also uninstalled Trend Micro AV almost as soon as I booted up the system.  I think that product is the problem.  I suspect it does not perform a "clean" uninstall and leaves the UseWUServer registry entry behind with a value of 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

    Note that you need to *delete* the UseWUServer entry and reboot.  Setting it to 0 results in Windows Update failing much faster with a different Windows Update error.

    Hours of effort and nothing worked.  Deleting the registry key above solved the problem, so kudos to supakeepa in another thread for figuring this out.


     This worked for me. Thanks :)

    Saturday, December 29, 2012 12:02 AM
  • Thank you so much for posting this - I have been searching many, many websites for a resolution to this issue - greatly appreciated!
    Saturday, August 17, 2013 5:21 PM
  • Thank you so much for posting this - I have been searching many, many websites for a resolution to this issue - greatly appreciated!

    I am having the same issue and am excited to possible have it correctly.

    I'm not as computer literate as most here, so here is my dumb question...

    How do I access the files to make this change? 

    Josh

    Sunday, January 05, 2014 2:05 AM
  • Thanks worked like charm...
    Wednesday, March 05, 2014 5:06 AM
  • how would i go about doing this for windows 8 though? any idea?
    Wednesday, April 02, 2014 8:21 AM