KB3038314 Fails to Install get the error 80092004.

Solution / workaround

Easiest way to install IE11 w/ KB3038314 is as follows:

On a clean install of Windows 7, do the following:

• Set Windows Update service to treat recommended updates the same as important updates.

- Install ALL updates EXCEPT IE11.

• Install IE10 through the offline installer.
• Install IE11 through the offline installer with switch /update-no so that no updates are installed during setup.
• Install the rest of the available updates including KB3038314 without error through Windows Update Service.

Wow SJ, that's quite an impressive piece of work.  Not sure when I'll have time to go through it, let alone try it.

The public KB article for MS15-032 has been updated:

https://support.microsoft.com/en-us/kb/3038314

Search for "Known issues with this security update".

Not really any new information (yet), but it officially acknowledges the problem.

Thanks,

David

Solution to KB3038314 Installation Failure

Issue Identified:

KB3038314 which was recently deployed by Windows update refuses to install.  This is a 64 bit Win 7 Pro machine running IE 11.  I've tried both the Windows Update web install method and downloading the update separately and both methods fail.  The update is part of MS15-032 released on April 14 (Patch Tuesday).  Has anyone else experienced this issue and found a solution?  After the update fails there is a failure code of 80092004 displayed and a message that says "Windows Update encountered an unknown error.  I have tried the Microsoft Fixit Tool and uninstalling IE 11 and reinstalling.  Any advice would be much appreciated.  Thanks!

So this was the scenario for me also. A little hardware and software information just in case my solution does not work for all:

Machine: Lenovo ThinkPad T410i

Model: 2518A57

BIOS: 6IET85WW (1.45) Latest

RAM: 8GB

OS: Windows 7 Professional (64-bit)

HDD: Seagate ST1000LM014 (1TB)

Background:

I just installed my new (1TB) hard drive on my machine. I had used the recovery disks to install the operating system. There were some teething problems with Windows Update. (That's for another forum or blog.) After getting Windows Update (WU) to work, I installed SP1. Following that, I installed some software I needed to ensure was there. This included Microsoft Security Essentials, and the .NET frameworks. Then I allowed WU to automatically install updates as it saw fit. (Not a wise idea, I was soon to discover.)

The following installs failed at some point and may have succeeded at other points through the many restart cycles:

Update for Internet Explorer 8 Compatibility View List for Windows 7 for x64-based Systems (KB2598845) Failed (No big deal)

Security Update for Microsoft XML Core Services 4.0 Service Pack 2 for x64-based Systems (KB954430) Succeeded

Update for Microsoft XML Core Services 4.0 Service Pack 2 for x64-based Systems (KB973688) Succeeded

Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB3038314) Failed (Note: This is also reported as Security Update for Windows (KB3038314) when attempted as a standalone installer.)

Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243) Succeeded

Problem:

Repeated attempts to install updates for the issue identified in KB3038314 failed despite using WU and standalone installer. Looking in the following file location, I Identified that KB3038314 was actually downloaded for installation:

C:\Windows\SoftwareDistribution\Download\3b5c0b054bf2a034f32b60dbe4de574f

Running REGEDT32, I verified that a number of keys in the registry reflected that changes had been made according to the manifest.

Since this was true, I opened Internet Explorer 11 (IE11) and selected "About Internet Explorer" after clicking on the gear symbol on the top right-hand corner. Two version numbers were reported:

I only found out what these could mean towards the end of my troubleshooting process. But I can tell you right now that the "Update Version" is what you should be concerned about. If you have the version shown above, the necessary updates have been installed in this version of IE. So why does the update keep showing up in WU? My guess is, WU was trying to update older versions of IE. This supposition is what led to the solution. (Whether this is exactly what it is, is not really in my business to find out. I will leave that to the engineers down at Microsoft.) I also didn't like the idea that "Install new versions automatically" was checked. So I unchecked it.

I examined my update history and noted that KB3038314 was already installed! But that is a problem too. This, again, I found out later, was not supposed to be this way. It is preferrable that this update does not show. I know this sounds wrong but hear me out. Each version of IE from 8 through to 11, each have been given the "update KB3038314". In other words, KB3038314 is not the name of a piece of update but the name given to the issue identified. For that issue, several fixes had been developed, one for each version of IE starting from MSIE6.0. The evidence for this is in the following TechNet page:

https://technet.microsoft.com/library/security/MS15-032?f=255&MSPPError=-2147217396

Solution:

The following steps are my recommendation to solve the update issue identified by all in this thread. At the same time, I will recommend what you can do if you wish to add other search providers as part of your installed IE versions.

First, my situation is, all updates other than that for KB3038314 had succeeded (save for one, which is a non-issue). At the same time there was an item KB3038314 in the list of updates which I searched by typing the KB number into the Search Box on the top right-hand corner:

I uninstalled this. If you do not have it, no worries. Follow along with the rest of the post.

I also uninstalled the following updates that were meant for IE11:

KB2976627

KB3021952

KB3032359

Then, I uninstalled IE11. To do that, you can look under "Programs and Features". If it does not appear here, it should at least appear in the "installed updates" window shown just above. I restarted the system.

Then I also chose to hide the update for KB3038314 and in its place, another update for KB2909210 showed up. I installed that and then restarted the computer. When I restarted the system, I could no longer find the hidden update. Chances are, the update was no longer needed. (At some point along this an update for Visual C++ 2008 SP1 showed up and I installed that too.)

With IE11 uninstalled, I found that the system fell back on IE8. This is say, IE8 was not really uninstalled when IE11 was installed the first time. My guess is the update for KB3038314 I saw in my list was for this version of IE if not IE9 or 10. Now, there was no way of uninstalling IE8. (At least, I didn't discover any.) It appeared that IE8 was needed as the baseline IE for some reason. But I knew I was not going to use this version and my aim was to install a higher version.

Now, if you looked in WU, you will find an update for KB3038314 for IE8. You will also find IE9 and IE10. As I was experimenting, I decided not to install update for IE8. (Now, here is where you might want to do things slightly different from how I did it. If it does not work, you can always come back to this step and follow exactly what I did.)

Now, for those griping about not being able to add other search engines and setting them as defaults, now is the time. I opened IE8, removed the unwanted Bing add-ons, added Google Search (you may add which ever you wish), set it as the default and exited the browser. Then I allowed WU to install ONLY IE9.

I checked and noticed IE9 was in its latest version with updates for KB3038314 installed:

All good. Now I attempted to force WU to look for more updates and I got an error "Code 80244019". But I found later that this issue would resolve itself. I just clicked to see the list of updates and then returned to the WU main page. Somehow, whatever error that was that gave the "Code 80244019" had resolved itself. What a circus! BTW, if you wish, you could just check to see that your preferred search engine is still the default in IE9. (Interestingly, I noticed that IE9 did not appear in the main "Programs and Features" window as did IE11 when I had first installed it. Instead, it appeared under the list of updates.) I closed IE9 and proceeded to install IE10.

After restarting, I noticed that IE10 also appeared under updates in "Programs and Features", but not in the main window. I opened IE10 and noted the following:

The box for installing newer versions automatically was unchecked just like how I had wanted it. I just happened to attempt to install Yahoo search as an add-on at this point and discovered that with IE10 this feature had already been blocked. So it is not true that this feature was broken because of IE11. I think for some reason, this feature was either not updated to work with later versions of IE or the installation thereof was specifically blocked, at least hereinafter if not from IE9 onwards which I had failed to check. No matter, all was good for me.

I proceeded to install IE11 and restart the computer. No updates showed up and I attempted again to force a check. Guess what... Code 80244019 error. I had seen this before and it had resolved itself. So, I went to look at the list of updates and I found IE11 in the list of updates instead of the main "Program and Features" window as it had happened when I went straight from IE8 to IE11.

Anyway, when I returned to WU the "Code 80244019" error had resolved itself and three updates were suggested. These were the updates which I had previously uninstalled.

I installed all of them and no restart was required. I also verified that IE11 had my choice of search provider set as default. IE11 also reported that it had updates for KB3038314 installed and was at version 11.0.18. So now, all is good.

That's all folks. Hope this really helps.

Okay all... I have found the solution to more than one of the issues presented in this thread. Please allow me the next hour or so to post the solution. I need to extract all the relevant aspects of my notes to post it.

I can confirm that if IE11 Help->About shows KB3038314 as below (minus the red outline):

then the correct binaries to patch the MS15-032 vulnerabilities are installed.  So, if your concern is being vulnerable to MS15-032, you are not.

If the fact that WU thinks you have uninstalled security updates is causing headaches in and of itself, then you should wait for the official fix.

I did try some of the patch juggling described in various posts (late) last night on a VM and was not successful.  Note that in trying these work arounds you are stepping off the beaten path.  Prudent counsel would to wait for the official fix, especially in light of not actually being vulnerable.

A KB is in the works for an official point of contact on this servicing bug.

Thanks,

David