Microsoft Update - Error Code 0x80070005

Beginning with NSW 'Standard Edition' (Ver. 10), and continuing now with NIS 2010 (Ver. 17.8.0.5), I frequently am unable to install Security and Product Updates for my Win XP SP3 using Microsoft Update.  While the D/L's seem to progress OK, the process sometimes falters during the 'verify' phase and a 'fail!' results.  A review of Microsoft's Install History invariably offers the dreaded "Error Code 0x80070005" as the cause.  Numerous telecons with MS Tech Support always blames my Norton Firewall/NAV/AntiSpyware for creating "permission" problems, whatever those are.

 

As a dedicated 12 year user of Norton products, I've resisted Microsoft's occasional attempts to get me to Disable and/or discontinue use of Symantec utilities.  I've always found workarounds to get MS Update to work - but their latest "Update for Windows XP (KB971029)" has given me fits, and I've been unable to get it to install after EIGHT attempts.  These attempts include Disabling various NIS functions, including: Smart Firewall (turn ON Windows Firewall), AntiVirus, AntiSpyware, Intrusion Protection, and Browser Protection.  Just today, when discovering this NIS Forum and searching for this Error Code, I set 'Norton Product Tamper Protection' to OFF.  No joy - the same Error Code still posts when I try MS Update again.

 

Because my only connection to the 'Net is an old 56K Dial-Up modem, I configure Microsoft's 'Automatic Updates' to 'Notify'.  I then launch Microsoft Update to D/L and install the Updates.

 

My two questions:
 1.  How do I configure NIS 2010 to work most reliably in getting Microsoft Updates to install?  If I need to set up special pre-conditions before attempting 'Patch Tuesdays', I'm OK with that.

 2.  As part of my current NIS 2010 subscription, I've been offered a free upgrade to NIS 2011.  Would such an upgrade help with this MS Update issue?  If so, HOW LARGE is the NIS 2011 download (so I can brace myself for a LONG download via my antiquated 56K Dial-Up modem)?

 

I thank you in advance for your fine support!

Sounds to me like you have a buggered Win Updates. Check out this link: http://www.pbcomp.com.au/windows-xp-updates-fail.html

 

Could also be a permissions issue. Check out this link: http://www.eggheadcafe.com/software/aspnet/28608223/microsoft-update-fails-error-0x80070005.aspx  Be careful in this area!

 

Does this occur on all methods of Windows Updating; automatically or manually via the Start Menu?

 

Note that there are numerous web postings about Win Updates not working after a WIN XP SP3 repair and the like.

 

I have been running NIS 2011 for 5 months now and never had a problem with WIN updates.

 

Bottom line is if your can download Win Updates OK, which it appears you can, I don't think your problem is related to your current NIS installation.

 

You can try to disable NIS antivirus autoprotect before you install the WinUpates and see if they install OK.

 

I install Win Updates by first downloading them and when I get a notification that the Updates are ready to be installed, I then do a "custom installation" ensuring all updates downloaded are selected.

 

If the Win Updates install OK with NIS AV auto-protect disabled, then you at least know that NIS is your problem.

 

Note: Make sure you re-enable NIS auto-protect when you are done with your testing

 

 

Thank you for your thoughtful help, donziehm!  I am sorry for my delayed response, but I needed to reconstruct a history of my Win Update problems (getting progressively worse over more than 3 years) and condense it down to something readable.  It includes extensive troubleshooting by Microsoft Tech Support, but with only limited success at best.

 

I know my Windows Update function is 'buggered'.  First warning signs were in June '07 when I would select updates directly from Microsoft Updates site:  during the D/L phase, the Progress Bar would remain EMPTY during the entire D/L for some of the updates selected.  But the Install phase would always work perfectly; I began to accept the empty PB's as normal, as long as the updates installed OK.  [Note:  2 months later, Event Viewer began reporting 'BAD BLOCKS' for my HDD.  I ran CHKDSK to repair 'em, and then replaced the HDD, and Restored a Ghost image from late July.  The image seemed to work great - but was it perfect, given my HDD may have been degrading when imaged?]

 

In Jan '08, Automatic Update's Tray icon (the method I would use to get Win Defender Definition Updates) began to act intermittent.  Because of my slow Dial-Up connection, I configure AU to 'Notify', and let AU work in the background when I OK it to D/L.  Worked smoothly until Jan '08, when the AU Tray icon would sometimes disappear from the Tray after I OK the D/L.  Randomly, the AU icon would re-appear and resume the D/L, but it could again drop out at anytime or it could pop-up the 'ready to install'.  At this time, to answer your question, donziehm, the only 100% reliable way I could get my updates was to bypass Automatic Updates by launching my browser directly to 'Microsoft Updates' web site - this would work flawlessly.  I only had download interruptions when AU was D/L'ing Updates in the background via BITS.

 

In March '08, Microsoft Tech Support tried to troubleshoot my "intermittent AU D/L" problem.  Actions included:
 *  Recreated ...\Catroot2\ and ...\SoftwareDistribution\
 *  Ran Regsvr32 tool to re-register DLL's in the Registry
 *  Deleted everything in C:\Windows\TEMP and \Prefetch\ folders
 *  Sent 'em my WindowsUpdate.log
 *  Ran 'Microsoft Product Support Reporting Tool for Network' (MPSRPT_NETWORK.EXE) so MS can see my system configuration in detail, hopefully leading to fault isolation.
 *  Reset the Winsock Catalog and sent report to MS.

RESULT:  On 4/16/08, Microsoft GAVE UP!  "No sign of file corruption found, per parity check.  All files look clean.  We find that 70 to 80% of the time, removal of 3rd party FIREWALL (i.e. Symantec) fixes the problem".

 

 Unhappy with this fruitless result, I sent my MS Tech the following on 4/22/08:
 ********************************************************
"Final customer critique of the subject case:
 
While I appreciate whatever effort the team at Microsoft Windows Technical Support made in this unsuccessful effort, I feel it necessary to disagree with Microsoft's theory of the 'possible' Cause.
 
I must take exception with Microsoft's conclusion that appears to hold the Microsoft Windows XP Operating System blameless, while limiting 'Cause' to a competitor's product and/or an "Internet connection issue".  Based upon all the exhaustive testing I have done in this matter, along with all I have carefully documented to Microsoft, it is clear to me that both my Symantec firewall (a component of Norton AntiVirus), and my Broadcom V.92 56K modem and it's connection to the same ISP for nearly the past 4 years, are all performing flawlessly.
 
Completely missing from your Final Disposition is any reference to Automatic Updates, the only Win XP function that malfunctions with intermittent download of Updates.  Direct access to 'Microsoft Updates' via my IE7 Browser always results in complete, uninterrupted downloads -- and this is always successful with my full Symantec firewall protections enabled and the same 'Net connection configuration I always use.
 
Why Microsoft has not tried to distinguish what programming code makes Automatic Updates (Notify) unique compared against a User's direct-Browser access to Microsoft Updates remains a mystery to me.  Clearly, they behave differently.  Without such analysis, it is little wonder a root-cause was not achieved at Microsoft.  To then cast blame on a competitor's product is especially disappointing, and not justified, based upon any proof that I have seen.
 
I shall continue to regard the root-cause of this download malfunction in Automatic Updates as strictly limited to an undiagnosed flaw in Microsoft Windows XP Home Edition."

 *********************************************************
Donziehm, your reply included Win Update issues related to Win XP SP3; the pbcomp.com article you linked seems to relate more to a complete failure to get Win Updates.  This has never been my problem - in fact, after I installed SP3 on 6/14/08, AU D/L's worked perfect.  But only for about 1 month, before the 'intermittent AU' behavior returned.

 

My workaround since then has been to use AU only to 'Notify' me Update(s) are available.  If it's Win Def Definitions, I launch Windows Defender --> 'Check for Updates' - works perfect.  If it's a 'Patch Tuesday', I launch Microsoft Update and do it as a dedicated application.  This worked well until 6/10/09 -- THE FIRST TIME I SAW ERROR CODE 0x80070005 when running Microsoft Update.  Again, it's hit-or-miss - some updates D/L and install just fine.  Never had a problem with MS Office 2003 patches nor "Cumulative Security Updates for IE8".  It's the "Security Updates for Win XP" and "Update for Win XP" that are batting .500 or less.  With great reluctance, I again reached out to Microsoft in August 2009, since BOTH AU and now MS Update (with the frequent Error Code 0x80070005) are 'buggered'.

 

In addition to the gauntlet they ran me through in March '08, they also had me D/L and install SubInACL.exe, a tool to reset the Permissions, much like the eggheadcafe.com article you linked me, donziehm - except I don't have to dick around in the Registry (I've used regedit on occasion - but I'm never comfortable doing it!).  Again, the result in Aug. '09 was little improvement in MS Update and none for AU.  My workaround to this date has been to temporarily disable the Norton security functions during MS Update.  As my initial post indicates, even disabling my NIS 2010 is spotty in helping MS Update.

 

Donziehm, I apologize this reply is so long.  You certainly must have the patience of a saint if you're still reading.  But I am grateful for your help - THANK YOU VERY MUCH - I don't know where else to turn in this frustrating matter.  Perhaps repeating some of the old corrective actions from MS will help, at least marginally.  I don't know.  What's a mother to do?

The error your getting with KB971029 is in the verification of the download.  It's not a failure to install is it?

 

If you go to the KB article and download the update to your desktop and then run it,  will it install without any errors?

 

http://support.microsoft.com/kb/971029

 

You want the last one for Windows XP,m it will take you to this page for the actual download:

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=96ca61f6-8b16-4157-9635-8cfc0bbf4c35&displaylang=en

 

Dave

Try DaveH's suggestion and let us know what happen.

 

I was thinking back to the days when I was on dial-up and I always had problems with WinUpates. That was before the "mega" update downloads that many vendors are doing these days including Microsoft. The longer that dial-up connection is active during a download, the higher the likelihood of a corrupted download.

 

Is broadband available in your area? If it is and money is the isse, do consider a lower cost slower speed option. A 1.5 mbps broadband connection will be more reliable for downloading than dial-up. 

 

Finally, "cloud" processing which most AV vendors are migrating to is designed for broadband connections.

Lovshak,

 

PMJI something very complicated but I notice you saying: << If it's Win Def Definitions, I launch Windows Defender --> 'Check for Updates' - works perfect.   >>

 

Also you refer to Norton AntiVirus as well as to Norton Internet Security (perhaps what you have currently).

 

I'm under the impression that having Defender and NIS installed at the same time is "not a good thing" ... that they can interfere with each other.

 

FWIW I have no problems over the years with Windows/Microsoft Updates on XP SP1 -- SP3 using the Notify but do not download and when I'm ready to download and install just clicking on the popup in the system tray.

 

No idea whether that is relevent or not .... just FWIW

Thanks for your inputs, DaveH, donziehm and huwyngr.  Hopefully, you'll all see this one post to donziehm, rather doing 3 separate posts (I'm just a Newbie - let me know if 3 posts are best).

 

Dave, Microsoft Update makes no attempt to enter the 'Install' phase when a 'fail!' is posted for a particular Update.  A troubled update, for me, will pause with a full Progress Bar at 'Verifying the download', then post 'fail!'.  If there are more updates I selected, the D/L will then attempt to get each one.  After all D/L's have been attempted and either Verified or not, only the successfully D/L'd and Verified Updates will be installed by MU (the 'Install' phase has never been a problem for me).

 

Donziehm, because the time taken to D/L a 'fail' Update seems normal (based on size), my theory is that it DID properly D/L, but some form of file protection/firewall activity is queering it from getting past 'verify'.  I do NOT believe a slow 56K Dial-Up increases the chance of "corrupted download", as suggested in your 2nd post.  I've found Dial-Up D/L's to be highly reliable, if one can tolerate SLOW.  I have installed some HUGE Updates from MU with no problem.  Successful large Updates include: 'Cumulative Security Update for IE8' - 9.9 MB; never a problem with multi-MB size 'Security Updates for Office 2003' components; in October, I had MU get 3 'Security Updates for Microsoft.NET Framework', largest being 13.7 MB.  Like I said in my 2nd post (3rd to last paragraph), "Never had a problem with MS Office 2003 patches nor "Cumulative Security Updates for IE8".  It's the "Security Updates for Win XP" and "Update for Win XP" that are batting .500 or less."  And these last two Update types are notably smaller in size, typically several hundred KB's in size - I brace myself for failure ONLY when I see MU trying to get ONLY these two types of Updates.  This tells me some form of protective activity is overly-sensitive, and blocking, desired overwrites of OS system files of a particular type.

 

Dave, KB971029 is an "Update for Windows XP", and when it failed for me via several MU attempts, I followed the same links provided by Microsoft, and saw that it was offered as a standalone D/L, separate from MU.  My guess is that taken in this fashion and then executing it from the Desktop would likely result in a successful install (never done it this way before - I'm too stubborn about expecting MU to do its job!).  Seems like a good idea, though - I'll leave all the NIS 2010 functions enabled the entire time.  If it Installs this way, then MU's 'Verification' phase and possible interaction with NIS protections will remain the issue.

 

Donziehm, I know I'm cheap, but my 56K Dial-Up is only $8.99/month through a small ISP in the Minneapolis area.  I've had no problems D/L'ing some huge files, some in the 60 MB range and higher.  Just a matter of selecting my file -- and doing something else for several HOURS.  Last time I priced broadband looked like national-debt sized numbers - especially when the 'Introductory Rate' expires.

 

Huwyngr, there is no problem having multiple AntiSpyware apps installed.  But, to avoid conflict, it is important to enable only one app to do the Real-Time, background scanning.  I choose to Enable NIS 2010's AntiSpyware, while I Disable Windows Defender's 'Real-Time Protection'.  I only perform Manual scans with Win Defender. It's nice to have TWO sources of Definitions and Engines.  My only reason for mentioning Win Defender is that it has it's own D/L engine for it's Definition/Engine Updates; Automatic Updates 'Notifies' me they're there, but since my AU is intermittent and unreliable, I choose to use Win Defender to get 'em.

 

I'll let you folks know how the added hassle of a Manual install goes for KB971029.

 

Thanks again!

    Larry


Lovshak1 wrote:

 

I'll let you folks know how the added hassle of a Manual install goes for KB971029.

 

Thanks again!

    Larry


I'm sorry for suggesting such an added hassle to you.  I didn't know manually installing a 3MB update might be a problem.

I just figured after spending so much time trying to fix this it wouldn't be a big deal.

 

But I agree with you,  I also think the update will install fine that way.

 

My next suggestion would be a lot bigger added hassle then that.

Since it's patch tuesday I would have suggested you use internet explorer to visit microsoft update through the browser and try installing a few from there.  Since your familiar with the types of updates that normally fail it should take too long to determine if it works or not.

 

Dave

 

Thanks for the update -- ther's no problem in posting as you did -- in fact in most cases it is better when it deals with the one area of discussion.

 

I was brief about multiple applications partly because it's better to be general at first and partly because I don't use Windows Defender and so don't know about what you can activate or disable. But when troubleshooting IMO it's best not to rely on "disabling" as being the same as "not installed" with the way security software digs down into the depths of the system.

 

So since the error code comes from Microsoft, if all else fails (or even before going to a lot of other "hassle") I personally would totally remove Defender and see what happens .....