Advice on Windows updates please.

[Frenchman96]

Since my reformat and lots of help on this forum, all is working well and today I received some automatic updates from m/s.

My puzzle is that the last date shown on my add/remove list is 8 July but when I look in Windows update history, there are dates after that including some today.

1--why are they not the same and which is the most important record, I assume update history??

2--in update history, there is one re-occuring update with a red ball KB917344
so I think what happens is whenever Windows updates tries to install it, it is unable to do so and another red ball is created.

Its not doing any harm but my padantic nature wants to clear up.

[rVidia]

1--why are they not the same and which is the most important record, I assume update history??

I would go by your windows update log - go here (http://support.microsoft.com/kb/902093/) for information on that:

To view the log file, follow these steps:
1. Click Start, and then click Run.
2. In the Open box, type %windir%\windowsupdate.log, and then click OK.

2--in update history, there is one re-occuring update with a red ball KB917344
so I think what happens is whenever Windows updates tries to install it, it is unable to do so and another red ball is created.

What's the error message after you try to install it (http://www.microsoft.com/downloads/details.aspx?familyid=D28C02BE-CAC3-4579-9B93-939FD5D3CDE6&displaylang=en)?

I'd recommend looking here (http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&query=0x80242008++MVP&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windowsupdate&p=1&tid=f71d0228-9e42-4f4f-9a99-609e28badd31&mid=503bb1a9-8235-409a-96df-167866fa40ed) for some recommended fixes.

[Frenchman96]

Rvidia

I disable ZA
Enabled W firewall
Disabled NOD32
opened Windows updates
tried to install update available
would not install
clicked on red ball for failure notice code
see 2 attachments for results

[rVidia]

George:

Thanks for supplying the images. I checked this database (http://docxp.mvps.org/WU5-ERR.htm) for your error code (0x8007F007):

The error string is "STATUS CANT FIND INF"
The description is "Setup could not find the update.inf file needed to update your system."

Do you have SP1 or SP2 (Start > Control Panel > System > look under General tab)?

Check to make sure Cryptographic Services is "Started" (Start > Run > type services.msc > right-click on Cryptographic Services > click Properties > under startup type, make sure it is set to Automatic.

[Frenchman96]

Cryptographic Services is set at automatic and I have sp2

[rVidia]

George:

Since your reformat, is this the first time you've installed updates with MS Update?

... ...

I found a MSKB article that may help you - You cannot install some updates or programs (http://support.microsoft.com/kb/822798#). One of the symptoms was "Setup could not verify the integrity of the file Update.inf" which is similar to your error code (0x8007F007). I would go there, and under On This Page (at the top), click on RESOLUTION. I recommend trying each method one at a time and try installing the update (http://www.microsoft.com/downloads/details.aspx?familyid=D28C02BE-CAC3-4579-9B93-939FD5D3CDE6&displaylang=en) after each one, posting back with results.

Good luck on this one :tea:

[Frenchman96]

rVidia

I visited the m/s help page as suggested.

First 2 I did (although cryptographic services was already on automatic) but on the third one, it did not explain how you do this>>>>>>>

remove all temp cat files ?????????????????

[rVidia]

George:

Make sure you try to install the update after *each* method. Did you do that after you tried the first method? I will assume the update failed to install if you're moving on.

... ...

Good question about temporary .cat files. MS should have had more information on this. I'll try to keep this as short as possible. Before you continue trying any of the methods in general, I'd make a restore point (http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx#ETC) in case you run into any additional problems along the way.

You should be able to delete the contents of your "CatRoot" folder without any problems, but it really depends on your system and what you have installed on it; it should be okay to get rid of all KB files. So with that in mind, here's how I would go about doing things:

1) Make two folders on your desktop. You can name them whatever you'd like, although I'd suggest something like "127" and "F75" --- skip down to blue text in #7 for attachment info and then come back to #2
2) Go to Start > Run > paste this into the Open box and click OK after: %systemroot%\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
3) Empty out the folder by moving its contents to the folder on your desktop "127" (the name is similar to the actual folder name in your CatRoot folder)
4) Go to Start > Run > paste this into the Open box and click OK after: %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} --- everything will probably be in this folder.
5) Empty out the folder by moving its contents to the folder on your desktop "F75"
6) See if there are any problems by going to Start > Run > paste this into the Open box and click OK after: %systemroot%\system32\CatRoot2\dberr.txt > scroll down to the bottom and see if there are any errors pertaining to .cat files
7) If there are no problems, you should be able to delete the two folders on your desktop. There are, however, a few .cat files from Windows installation that you may need to keep. I attached an image with those file names.

You should then be able to continue with Method 3:



2. Click Start, click Run, type cmd, and then click OK.

3. At the command prompt, type the following commands, and then press ENTER after each line:

net stop cryptsvc
ren %systemroot%\System32\Catroot2 oldcatroot2
net start cryptsvc
exit
Then try the update again.

Let me know how it goes :)

[Frenchman96]

rVidia

First my apologies in not replying sooner, I became distracted by some other minor problem so again sorry as i do very much appreciate the effort you and others go to on my(and others) behalf.

I decided this morning (3 Aug) to try W updates and there were two which appeared to download at last, I thought. But the old problem one KB917344 would still not download. I did a Google and as always was steered to a MS page which looks very thorough but a bit frightening as what they say to do, is not always possible and makes it more complicated to us ametuers.

This made me go back to my original post(here) and am looking at your tips to cure. I will attempt it but once again, I dont hold out much hope, easy when you know how.

While I was on a MS help page, part of their solution was to do this, but I could not navigate to it in Windows Explore can you advise

Navigate to the \winnt\system32 directory

[Frenchman96]

rVidia

Since my reply to you above, I have carried out part of your instructions but when you reached no 7 and said>>>>>>>>>>>>

7) If there are no problems, you should be able to delete the two folders on your desktop. There are, however, a few .cat files from Windows installation that you may need to keep. I attached an image with those file names.


You did not say what to do if there were problems as THERE WERE some errors on cat files and all were numbered 0x800b003 so I have stopped there and have left the folders with contents. And BTW>>>>
3) Empty out the folder by moving its contents to the folder on your desktop "127" (the name is similar to the actual folder name in your CatRoot folder) there was no folder, just a file called TIME STAMP


F75 p/s is cropped a lot

[Frenchman96]

vRidia

Since my last post, I cannot open/FF/Gmail/Hotmail but I can open IE.

In case I have done something wrong trying to follow fixes, I am doing a restore to yesterday so anything I have followed of your instructions will be undone.

[rVidia]

George:

While I was on a MS help page, part of their solution was to do this, but I could not navigate to it in Windows Explore can you advise

Navigate to the \winnt\system32 directory

Try this:
Go to Start > Run > type %systemroot%\system32 > click OK. This should bring you right to the system32 folder. "WINNT" can usually be replaced with "WINDOWS"

...there was no folder, just a file called TIME STAMP

Inside of my {127D0A1D-4EF2-11D1-8608-00C04FC295EE} folder, there is also only TimeStamp.

I have carried out part of your instructions but when you reached no 7...You did not say what to do if there were problems...

The main reason I had instructed you to move all of the files to the folders on your desktop was so if you encountered any problems, as you did, you could move them back to their original folders, which should solve these problems.

I also noticed that in your attachment, there was a "TempDir" folder in {F750E6C3-38EE-11D1-85E5-00C04FC295EE}. If you want to attempt this again after your
restore job, I would appreciate it if you took a screenshot of a few of the files in this folder, as these may be the "temporary" files MS was referring to (in the article (http://support.microsoft.com/kb/822798)).
There is no "TempDir" folder on my machine, so this could be an important step in clearing up your Windows Update problem. ???

[Frenchman96]

vRidia

Right, I must start again sorry, maybe because of restore but all that was in both folders 75 + 27 was Time so they are now deleted. Going back to your latest reply, this is where my ignorance shows, I did a copy/paste/%systemroot%\system32/run/and you can see result in attachment, but what do you mean when you say "WINNT" can usually be replaced with "WINDOWS"

Whilst I await your reply, and I am determined to go a step at a time if you dont mind, how important is it (if at all) for me to obtain this one download?

[rVidia]

...what do you mean when you say "WINNT" can usually be replaced with "WINDOWS"

You can generally substitute "WINNT" with "WINDOWS", e.g., C:\WINNT --> C:\WINDOWS; however, to avoid confusion, you can just use %systemroot% to open your Windows folder, e.g., Start > Run > %systemroot%

Hopefully that made some sense.

Whilst I await your reply, and I am determined to go a step at a time if you dont mind, how important is it (if at all) for me to obtain this one download?

What download? and I am not sure exactly what the attachment is? What MS help page are you getting instructions from?

[Frenchman96]

Ray

Ecuse any gaps in reply, I am still tweaking my GM/OE/MW arrival of mail

you said>>>> What download? and I am not sure exactly what the attachment is? What MS help page are you getting instructions from?

Its gone on a while now ans I have done some attachments but we have covered this ground. I am probably confusing you/other/and myself having been involved with a couple of things.

There was a while when I could not download windows updates but its mainly sorted out now but when I do go for updates, there is one I cant download and when I follow advice to fix, the enormous amount of links confuse me more.

My first question must be>>is it important to download this update and what might happen if I dont??

[rVidia]

My first question must be>>is it important to download this update and what might happen if I dont??

The security update is JScript 5.6

A vulnerability exists in Microsoft JScript. An attacker could exploit the vulnerability by constructing a Web page that, when visited by the user, would execute code of the attacker’s choice with user privileges.

See what version you have: go to Start > Run > type %systemroot%\system32 > click OK > find jscript.dll > right-click on it and select Properties > click on the Version tab. If the version is 5.1 or 5.5, then you need the update in order to protect yourself from this vulnerability.

[Frenchman96]

Ray

The answer is 5.0.0.8820 what now???

[rVidia]

George:

That update has a severity rating of "critical"

It's very important to install security updates in order to patch up holes that open your computer up to vulnerabilities, so you should try to fix this problem so you can download the update. IMO, from this point on, you should only follow instructions from this (http://support.microsoft.com/kb/822798) MS help page. Please post any questions you may have, as I am glad to help
out if I can. As before, post back with results, and try installing the update after going through each method.

Good luck!

Ray

[Frenchman96]

Ray

I have completes method 1 & 2 and tried updates, now on 3 but it says "remove tmp#files, how do I do that, iy does not mean the usual temp Internet files does it?

[rVidia]

...on 3 but it says "remove tmp#files, how do I do that, iy does not mean the usual temp Internet files does it?

George:

This brings us back to this (http://www.kickenhardware.net/forum/showthread.php?p=7002#post7002) post. Before you continue with anything, however, please do the following:

Go to Start > Run > type %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TempDir > click OK > take a screenshot of the files in this folder, and please post back with it.

[Frenchman96]

Ray

The window was totally blank Tempdir

[rVidia]

The window was totally blank

Thanks for the information, George. Try removing the "TempDir" folder (remember to empty the Recycle Bin after).

I would then just remove KB*.cat files [go to Start > Run > type %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} > click OK > delete .cat files beginning with "KB" > empty the Recycle Bin (remember to make a restore point (https://www.microsoft.com/windowsxp/using/setup/learnmore/tips/kimsey1.mspx) before doing so)].

Then, continue on with Method 3:

Click Start, click Run, type cmd, and then click OK.

At the command prompt, type the following commands, and then press ENTER after each line:

net stop cryptsvc
ren %systemroot%\System32\Catroot2 oldcatroot2
net start cryptsvc
exit

After, reboot, see if there are any problems, and try the update again. If it doesn't work, please post back with any error message(s) and move on to Method 4.

[Frenchman96]

Finished 3, only same error, cant connect, going on to 4 now

[Frenchman96]

Ray

Finished 4/restart/w-updates/this time got past the window,cant open/it looked for updates/there were 2, including baddie I cant install/started download/one was ok.the baddie no/.

Then, and its too much of a coinceidence, cannot open Firefox, anyway, see two messages while I go onto 5.

I assume(hopefully) when you say.start/run etc/type xyz...I can do copy/paste

[Frenchman96]

ray

Now on method 7 but I feel they dont make it clear how to do the following

see attach

[Frenchman96]

Ignore FF problem--have re-installed it ok and working.

[rVidia]

I assume(hopefully) when you say.start/run etc/type xyz...I can do copy/paste

You sure can!

Now on method 7

First, go to My Computer > double-click on C: > right-click and select New, Folder > name the folder 917344.

Then see if you can download the update from here (http://www.microsoft.com/downloads/details.aspx?FamilyID=c717d943-7e4b-4622-86eb-95a22b832caa&DisplayLang=en) (MS Download Center) and install it to that folder.

If not, try going to the Windows Update Catalog (http://go.microsoft.com/fwlink/?LinkId=8973) (you might have to install an ActiveX control - open this link using IE). Once there, on the left, click "Find Microsoft Windows updates" and then scroll/select your operating system (XP SP2 is at the very bottom). Click "Critical Updates and Service Packs" -- see if KB917344 is listed. If it is, hit "Add" and then at the top click "Go to Download Basket". Once there, in the "Type or browse to the download location of your choice" box, click Browse and navigate to the folder you created in C: (917344); then hit Download Now and Accept to the license agreement.

Then, go to the folder (Start > Run > type C:\917344 > click OK), find and right-click on the KB file, select Properties > select the Digital Signatures tab > click on the digital signature > select Details > click View Certificate > click Install Certificate > click Next (to start the Certificate Import Wizard) > click Place all certificates in the following store > click Browse > click Trusted Publishers > hit OK > click Next > click Finish > hit OK.

Not sure if this will work at all, but I'm just going by the MS help page :frown:

[Frenchman96]

Ray

I could not have done that part without you, thanks, but unfortunately, it failed again.

As I WAS able to download that Script, I missed out the section in MS Help, I assume that was ok.

Its a stubborn beggar is it not? sorry for the time is is taking for you.

[rVidia]

Ray

I could not have done that part without you, thanks, but unfortunately, it failed again.

As I WAS able to download that Script, I missed out the section in MS Help, I assume that was ok.

George:

First, thanks for the kind words. By "I missed out the section in MS Help", do you mean you skipped over Method 7 because you were able to download the update from either the MS Download Center/Update Catalog? If so, you will still need to complete Method 7. Am I misunderstanding you?

... ...

If the update failed again, are you going to try to make your way through the last three methods (8-10)? If you're giving it one last shot, I'll write a few notes about each of these methods that you may be confused about:

Method 8 : Step 2 for this method is not necessary UNLESS the certificates mentioned in Step 1 are missing (they will most likely be there, and in that case, you don't have to worry about Step 2); if they are missing... if you have a spare computer, do Step 2 and then go back to 1. If you don't, I would gladly follow instructions in Step 2 and send those certificates to you so you can continue.

Method 9 : On step 1, I would suggest moving the contents of these folders (get to them using Start | Run) to two folders on your desktop, 127 and F75. This should be familiar to you. On step 2, get to the command prompt by going to Start > Run > type cmd > click OK. And all step 3 is saying is to try to download the update again.

Method 10: On step 4, you can get to the "Windows distribution" folder by going to Start > Run > type %systemroot%\SoftwareDistribution > click OK > delete everything in this folder (and remember to empty the Recycle Bin).

Let me know if you run into any trouble.

Its a stubborn beggar is it not? sorry for the time is is taking for you.

No need to be sorry, George! As I attempt to help you through this, I, too, am learning a great deal, so thanks for expanding my knowledge :thumb:

[Frenchman96]

Ray

I am now in Method 8 (no 7) and I thought I better check this>>>

No 7 says 11/5/97---7/1/04 but it ACTUALLY SAYS 12/5/97--8/1/04 (uk style)

before I continue, let me know.

[rVidia]

I am now in Method 8 (no 7)

Does this mean you are skipping over Method 7?

No 7 says 11/5/97---7/1/04 but it ACTUALLY SAYS 12/5/97--8/1/04 (uk style)

First, in the UK, is it month/day/year?

Next, do something for me: Go to Windows Update and check your update history. Find an update that had been successfully installed and post back with the following info:

1. What was the update?
2. When was it installed?
3. Are you using Automatic Updates?

[Frenchman96]

Ray

See post 27, I did Method 7 re certs.......

In uk the 4th july 06 would read 4/7/06.

I do have auto updates ticked and now and then the yellow shield appears in ST but no installing reading like normal eg % showing.

[rVidia]

No 7 says 11/5/97---7/1/04 but it ACTUALLY SAYS 12/5/97--8/1/04 (uk style)

before I continue, let me know.

Valid from dates should be (UK) 11/5/1997 to 7/1/2004 (if the dates are 12/5/1997 to 8/1/2004, this should also be fine). If this is true, verify that This certificate is OK (step 8). Note: the article uses "month/day/year" as opposed to "day/month/year" (UK).

Has this answered your question?

[Frenchman96]

Ray

Method 8/step 1/no 9/cyber root does not agree with what it should be??

And BTW, these multiple small windows cannot be cosed or minimised when needing to divert somewhere, any tricks??

[rVidia]

Method 8/step 1/no 9/cyber root does not agree with what it should be??

Can you be more specific? For instance, how many GTE CyberTrust Root certificates do you have? If there is not one with an expiration date of 2/23/2006, what is the expiration date?

And BTW, these multiple small windows cannot be cosed or minimised when needing to divert somewhere, any tricks??

EDIT: This is normal. You must close out of them before going elsewhere.
----------------------------------------------------------------------
Keyboard shortcuts are your friends. You can generally go to the File menu to see if any keyboard shortcuts are listed, but just because one isn't doesn't mean there is not a shortcut for it. In your browser, for example, to close out of a window, press Alt+F4 and to minimize a window, press Alt+spacebar+N (when you press Alt+spacebar you'll actually see a menu with options to minimize, close, etc).

You can also move from window to window using Alt+Tab (after you press this, hold Alt to see what windows are open and press Tab to move through them/select one), although this can sometimes be confusing when you have a lot of windows open.

[Frenchman96]

Sorry Ray

Forgot attach.........

[rVidia]

Thanks, George. Try going to step 10...

On the General tab, make sure that the Valid from dates are "2/23/1996 to 2/23/2006."
...and then going back to step 9.

And again, how many GTE CyberTrust Root certificates do you have? If there are multiple ones, check each to see if one has the expiration date of 2/23/2006
(EDIT: or 23/2/2006 --UK).

[Frenchman96]

Ray

is there a s/c to take me to the general tab or need I start from scratch, and BTW, if you dont hear after this contact, I wont be on pc until bedtime as friends are calling.

[rVidia]

is there a s/c to take me to the general tab or need I start from scratch...
Make sure you are in Internet Explorer > Tools > Internet Options > Content (tab) > Certificates, and then simply find the GTE CyberTrust Root certificate (how many do you have?) However, if you are still in the Certification Path tab, simply click on the General tab to go there.

[rVidia]

:bump:

George cannot install Windows update KB917344 (JScript 5.6, critical) -- only this update -- due to error code 0x8007F007 (setup could not find the update.inf file needed to update the system). He is following instructions from this (http://support.microsoft.com/kb/822798) MS Help page (You cannot install some updates or programs), as one of the listed symptoms is "Setup could not verify the integrity of the file Update.inf" Thus far, none of the methods in the article have solved his JScript 5.6 failure to install problem. Please join in (the thread (http://www.kickenhardware.net/forum/showthread.php?t=3033)) to help resolve this. I am sure any suggestions are appreciated.

[Frenchman96]

Ray

Strange you should post that, I was thinking what a good and well organised site this is, meaning that other memmbers will have been reading it but have respectfully left you to carry on trying to help.

i will continue in the morning with the rest of steps Ray....good night from this side of pond.

[rVidia]

............:bump:
Strange you should post that, I was thinking what a good and well organised site this is, meaning that other memmbers will have been reading it but have respectfully left you to carry on trying to help.
I truly do appreciate this. This is a very unique forum in the sense that many of the members here are very kind and considerate people and have learned to be patient with everyone, even when frusturated. Such respect in a forum is rare, and, of course, appreciated.

The reason I have asked others to please join in is because the suggestions in the MSKB article seem to not be working, unless by some chance one of the last three methods does the trick. For this reason, I felt it would be to your benefit to involve some other members, in an attempt to identify what may be causing this problem.

On a final note, thanks for going through all this, George; you're a good sport :cool: Let me know how the last few methods go, and as usual, feel free to post any questions you may have and I'll try my best to help.

[Frenchman96]

Hi Ray

Well all quiet on the western front, I am wondering if maybe I should go through the whole lot again slowly, just in case I made a mistake?

If the dowload number, and the error code attached to the non function are all allowed for in that MS help page, perhaps there is nowhere else to go?

If no good, I must say, you were a brick for time spent.

[Frenchman96]

BINGO

I decided to try method 10 and it worked KB 917344 have dowmloaded and installed and in Update history, no failed updates.

Cant thank you enough Ray, I am glad Rich M steered me to this forum.

[rVidia]

Awesome, George! I'm sure that's a load off your chest ;)

[Frenchman96]

Hi Ray

Sure is, you begin to wonder why/when/how etc and with you establishing it was a "critical" I suppose it was worth persevering with.

So all in all, I feel quite happy now the way pc is running, I gathered confidence about Mylanta and his suggesting NOD32 which BTW is the first prog I have bought.

I have even uninstalled ZA and am running Windows firwall plus the faithfuls SB-Adaware-Ewido-SpywareBlaster-CCleaner so touch wood.

You seem to be early riser (USA?) I myself have been awake since 4.30am so speak again Ray