Error with Windows Update KB3000850

Anonymous
2014-11-19T14:40:18+00:00

Hi,

This update, KB3000850, is quite large -- something like 720+Mb.  After quite some time downloading (seemed to get stuck at 4% and 90% downloaded), I got error 800700002 when I tried to install this windows update.

Right after starting download, I disabled my real time anti-virus.

Can anyone suggest ways to overcome this problem???

Thanks

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

64 answers

Sort by: Most helpful
  1. Anonymous
    2014-12-18T18:20:26+00:00

    Robert,

    OK, have posted both ReportEvents.log and CBS.log to my OneDRive Public folder: DELETED -- see below

    Please let me know what you find

    In the meantime, please help me with ProcMon -- what is it?  How do I activate?

    Again, your help is very much appreciated!

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2014-12-18T16:04:44+00:00

    AlResnick, it is ReportingEvents.Log which is itself a log file.  You will find it in:

    c:\Windows\SoftwareDistribution\

    And CBS.log is in c:\windows\logs\CBS\

    Older CBS log files are in the same folder with the names beginning CbsPersist followed by the date and time.

    (or replace c:\windows with %windir%)

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2014-12-17T19:03:11+00:00

    2014-12-17 10:54:55, Error                 CBS    Exec: Failed to pend CSI transaction because transactions cannot be merged: 0. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    2014-12-17 10:54:55, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    These may mean something to someone who has access to the source and support documentation but as I indicated I would be using ProcMon to help "read between the lines".  E.g. we don't even know what "File" (if any) was not found.  (The 2 could just be a misleading return code that a subordinate returned caused by an access error due to a permissions problem.  ProcMon could clarify that.)

    If you want you can post both your ReportingEvents.log and your CBS.log to your OneDrive Public folder and post a link to it here and I could see if there is anything more to be gleaned from just these default diagnostics but I doubt it.  A related log would be WindowsUpdate.log.  Reporting Events.log  would be wanted to help find some context in that too.

    There should have been some more recent updates for December.  Did those go on OK?  And you could retry the DISM and SFC checks because of them.

    HTH

    Robert


    Robert,

    First and foremost, how do I activate ReportingEventsLog and where is its output stored?

    I did get the December updates and they were successfully installed

    Thanks

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2014-12-17T18:44:52+00:00

    2014-12-17 10:54:55, Error                 CBS    Exec: Failed to pend CSI transaction because transactions cannot be merged: 0. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    2014-12-17 10:54:55, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    These may mean something to someone who has access to the source and support documentation but as I indicated I would be using ProcMon to help "read between the lines".  E.g. we don't even know what "File" (if any) was not found.  (The 2 could just be a misleading return code that a subordinate returned caused by an access error due to a permissions problem.  ProcMon could clarify that.)

    If you want you can post both your ReportingEvents.log and your CBS.log to your OneDrive Public folder and post a link to it here and I could see if there is anything more to be gleaned from just these default diagnostics but I doubt it.  A related log would be WindowsUpdate.log.  Reporting Events.log  would be wanted to help find some context in that too.

    There should have been some more recent updates for December.  Did those go on OK?  And you could retry the DISM and SFC checks because of them.

    HTH

    Robert


    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2014-12-17T16:38:28+00:00

     -- CBS    Appl: Selfupdate, Component: amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_0.0.0.0_none_efffadd33d50fea5 (6.3.9600.17415), elevation:4, lower version revision holder: 6.3.9600.17031

    And it goes on for several pages

    Thoughts?

    Those aren't errors.  Just reporting events which involve directories or files which contain that word.   Please go back to ReportingEvents.log and see what the problem is AND ITS TIMESTAMP.  The timestamp will give you some context for the CBS.log.  Or do you think that you are already doing that?

    FWIW in my CBS.log strangely I am finding errorreportingfaults for 16521 and no entries at all about 17415.  I have not tried going back into any of the archived pieces of it.

    Powershell can be used to show that I do have .manifest files for those, though I think that mine are probably compressed (so the checksum part of the name may be different):

    PS C:\windows> dir -re -fi "*errorreportingfaults*17415*" ft Length, FullName -AutoSize<br><br><br><br><br><br>Length FullName <br><br>------ -------- <br><br>       C:\windows\WinSxS\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.3.9600.17415_none_611217891086c435 <br><br>       C:\windows\WinSxS\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.3.9600.17415_none_04f37c05582952ff <br><br>4074   C:\windows\WinSxS\Manifests\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.3.9600.17415_none_611217891086c435.manifest <br><br>4073   C:\windows\WinSxS\Manifests\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.3.9600.17415_none_04f37c05582952ff.manifest

    We would need to find a method of decompressing .manifest files to get more clues from those.

    BTW my approach to diagnosing your problem symptom would be to use ProcMon to provide a supplementary trace of the whole failed install procedure.  I don't have access to the source or support documentation to enable me to "read between the lines" what error messages mean--even when we do have some to look at.

    HTH

    Robert


    Robert,

    Just spent several hours of quality time trying to install this now infamous update -- all to no avail.

    First, I found several instances of Object not found.  All of these were attributable to "standard" Windows folders:

    • Accessories and subfolders Tablet PC and System Tools
    • I re-created these in C:\Program Data\Microsoft\Windows\Start Menu\Programs\
    • Had real challenge in creating Accessories folder because when I did it, the name changed to Windows accessories, BUT I finally did it.
    • Also, tried to change attributes from Read Only, but could NOT do so -- and am am an admininstrator

    Thought I had it made; turned off my anti-virus software and ran update; update downloaded and started install and stalled about halfway through -- and, once again, failed to install

    I did find several instances of ERRORs showing up (the word was immediately following the date & time):

    2014-12-17 10:53:26, Error                 CSI    00000ea7 (F) STATUS_OBJECT_NAME_NOT_FOUND #10352394# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0, name= ("null")}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES), oa = @0xcc60aedeb8->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[86]"??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xcc60aede98, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)

    [gle=0xd0000034]

    2014-12-17 10:53:26, Error                 CSI    00000ea8@2014/12/17:15:53:26.684 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)

    [gle=0x80004005]

    2014-12-17 10:54:10, Error                 CSI    00000ea9 (F) STATUS_OBJECT_NAME_NOT_FOUND #10352393# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenFilesystemDirectory(flags = 0, da = (FILE_ALL_ACCESS), dn = [ml:520{260},l:172{86}]"??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories", sa = (FILE_SHARE_READ|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)

    [gle=0xd0000034]

    2014-12-17 10:54:10, Error                 CSI    00000eaa (F) STATUS_OBJECT_NAME_NOT_FOUND #9564881# from PrimitiveInstaller::CCoordinator::FinalizeChanges(...)[gle=0xd0000034]

    2014-12-17 10:54:10, Error                 CSI    00000eab (F) STATUS_OBJECT_NAME_NOT_FOUND #4521798# from CCSDirectTransaction::PerformChangeAnalysis(...)[gle=0xd0000034]

    2014-12-17 10:54:10, Error                 CSI    00000eac (F) STATUS_OBJECT_NAME_NOT_FOUND #4521797# from CCSDirectTransaction::PrepareForCommit(...)[gle=0xd0000034]

    2014-12-17 10:54:10, Error                 CSI    00000ead (F) STATUS_OBJECT_NAME_NOT_FOUND #4521796# from CCSDirectTransaction::ExamineTransaction(...)[gle=0xd0000034]

    2014-12-17 10:54:10, Error                 CSI    00000eae (F) STATUS_OBJECT_NAME_NOT_FOUND #4521795# from CCSDirectTransaction_IRtlTransaction::ExamineTransaction(...)[gle=0xd0000034]

    2014-12-17 10:54:27, Error                 CSI    00000eb7 (F) STATUS_OBJECT_NAME_NOT_FOUND #13248897# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0, name= ("null")}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES), oa = @0xcc60aeda28->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[86]"??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xcc60aeda08, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)

    [gle=0xd0000034]

    2014-12-17 10:54:27, Error                 CSI    00000eb8@2014/12/17:15:54:27.489 (F) base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)

    [gle=0x80004005]

    2014-12-17 10:54:54, Error                 CSI    00000eb9 (F) STATUS_OBJECT_NAME_NOT_FOUND #13248896# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenFilesystemDirectory(flags = 0, da = (FILE_ALL_ACCESS), dn = [ml:520{260},l:172{86}]"??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories", sa = (FILE_SHARE_READ|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)

    [gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000eba (F) STATUS_OBJECT_NAME_NOT_FOUND #12534543# from PrimitiveInstaller::CCoordinator::FinalizeChanges(...)[gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000ebb (F) STATUS_OBJECT_NAME_NOT_FOUND #10352399# from CCSDirectTransaction::PerformChangeAnalysis(...)[gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000ebc (F) STATUS_OBJECT_NAME_NOT_FOUND #10352398# from CCSDirectTransaction::PrepareForCommit(...)[gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000ebd (F) STATUS_OBJECT_NAME_NOT_FOUND #10352397# from CCSDirectTransaction::GenerateComponentChangeList(...)[gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000ebe (F) STATUS_OBJECT_NAME_NOT_FOUND #10352396# from Windows::COM::CPendingTransaction::ExtractInformationFromRtlTransaction(...)[gle=0xd0000034]

    2014-12-17 10:54:54, Error                 CSI    00000ebf (F) HRESULT_FROM_WIN32(ERROR_FILE_NOT_FOUND) #4345325# from Windows::COM::CPendingTransaction::IStorePendingTransaction_Analyze(...)[gle=0x80070002]

    2014-12-17 10:54:54, Error                 CSI    00000ec0 (F) HRESULT_FROM_WIN32(ERROR_FILE_NOT_FOUND) #4022641# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 47 (0x0000002f), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x80070002]

    2014-12-17 10:54:54, Error                 CSI    00000ec1 (F) HRESULT_FROM_WIN32(ERROR_FILE_NOT_FOUND) #4022640# 166228269 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x0000002f, pSink = NULL, disp = 0)

    [gle=0x80070002]

    2014-12-17 10:54:55, Error                 CBS    Exec: Failed to pend CSI transaction because transactions cannot be merged: 0. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    2014-12-17 10:54:55, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]

    BTW, am sorry for the length of this note, but could not figure out how to attach the CBS log

    What do I have to do to get this update to install??

    Again, thank you so much for sticking with me

    Was this answer helpful?

    0 comments No comments