KB2871997 update failure

I'm also having this same issue.  I can't install KB2871997 on one Windows 7 Pro SP1 64-bit machine.  This is the only Windows Update I'm having a problem with, and I'm not having an issue with KB2871997 on any other machines.  The update seems to progress about 50% of the way through, then it pauses, and then it seems to complete - but then it fails with error 800736B3.

I tried sfc /scannow per Method 1.  The System File Checker didn't find any issues, and I still wasn't able to install the update.

I ran the System Update Readiness Tool per Method 2.  I gave it plenty of time to install and run, and then I opened the CheckSUR logs which showed no errors detected.  I still wasn't able to install the update.

I performed a clean boot per Method 3.  That made no difference - I still wasn't able to install the update.

Method 4 as listed doesn't make much sense.  The link you provided simply redirects to a download page for Microsoft Security Essentials, which was already installed on this PC by the way.  I searched the page I was redirected to, and the only thing that seemed similar to the "Protection" scan you called out was the Microsoft Safety Scanner, which appears to be a virus-scanning tool.  So I downloaded that and ran a full scan.  Nothing was found, and I was still unable to install KB2871997.

I also tried a few other things.  I downloaded the stand-alone installer for KB2871997 and ran it, but I got the same error.  I disabled Real Time protection in Microsoft Security Essentials, but that didn't help.  I then completely uninstalled Security Essentials, but that also didn't help.  I ran a few other third-party antivirus tools and registry clean-up utilities that I know to be effective, both in normal mode and in safe mode with networking, but those didn't find anything either and I still can't install this update.

So can anyone shed some more light on what exactly this update is trying to do and/or what system files or registry entries it's trying to modify?  Is there anything else to try?  TCP/IP stack, Winsock/LSPs, anything?  (I read the Fix it solution, so I have a rough idea I think, but that solution also says it only takes effect if KB2871997 is already installed, so I didn't run that.)  I really don't want to reinstall the entire OS on this machine, do a repair install, or even just hide the update.  Resolving this is the last thing I need to do to get this PC ready for a user.

One thing I'm curious about is the references I've read in this thread and others about Norton or McAfee being installed at any point.  This machine was loaned to a customer of mine for awhile, and their corporate McAfee was installed on it.  But I did a clean uninstall of that before installing Security Essentials on it, or at least I thought I did.  I use a combination of Add/Remove Programs, a third-party uninstaller, and a third-party registry cleaner.  I also removed just about everything else on the PC that's not something I regularly install on my machines, and I'm normally very thorough - I'm my company's network/domain/Exchange administrator.  But this one has me stumped right now, and it's VERY frustrating.

<consumer response>

If you never attach to a corporate network I would skip this update.  This is backporting the "pass the hash" protection that was included in Windows 8.1  In a peer to peer network none of these security enhancements can be enabled.

<I hate it when patches barf response>

I would still like to get to a root cause.  We've already seen interaction with A/V is a root cause so by all means disable any antivirus before attempting an install.  If you have any other third party software of a security nature, disable that as well.

I don't use Internet Explorer and had no issues prior to running KB2871997.

Will look at other thread.

John

I split your message from the thread you posted to as it is obvious from your message that you have more far reaching problems than others posting to the thread.

Please access the new thread I created and respond to the message I left there for you:

http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update/problems-with-windows-update-system-restore-and/dfc2a1c1-d590-4a32-ac03-948f3ae15505

A suggestion if you are using Internet Explorer 9, 10 or 11.

Access your profile. Make sure you have signed in. Click on All Threads, click on the Star towards the top right of the screen (you will need to press F11 to see it if you are reading Full Screen), click the scroll to the right of Add to Favourites and select Add to Favourites Bar. Edit the long name to something memorable and you can immediately access your threads from your Internet Explorer Home Page.

http://answers.microsoft.com/en-us/profile/10827787-aa80-415a-8102-e4d6b2fc8e4e

I did this yesterday, posted, saw the post and now gone ?  let's 'rinse and repeat"

http://1drv.ms/1p5nujc