AVG Kit warns randomly warns operating Blackhole exploit
From a few weeks ago and that coincident with no change update or addon Firefox, AVG starts giving intermittent threat detection alerts, identical.
All alerts that say the same thing:
file: www.laseroffers.com/feed/
infection: feat Blackhole exploit Kit (type 2170)
If I open firefox, I get one of these every 15 minutes or more.
I have scanned for viruses and malware, cleared the cache, rebooted, disabled all addons and reinstalled firefox. Interestingly, after that I reinstalled it, there was a short pause, maybe an hour, until the warnings started coming again. Warnings occur when I visit sites that I know are clean. Yahoo, Amazon, simple html sites, etc.
I'd really like to find a way to solve this problem. I want my back Firefox!
It's a live RSS feed item.
Have you checked the bookmarks to see if you have not bookmarked the URL?
Do a check with some malware malware, analysis of programs on the Windows computer.
You need to scan with all programs, because each program detects a different malicious program.
Make sure that you update each program to get the latest version of their databases before scanning.
- http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
- http://www.superantispyware.com/ - SuperAntispyware
- http://www.microsoft.com/security/scanner/en-us/default.aspx - scan Microsoft Security
- http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
- http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
Alternatively, you can write a check for an infection rootkit TDSSKiller.
See also:
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
Tags: Firefox
Similar Questions
-
Windows Update does not work: WARNING: ECP: could not validate the downloaded cab file digest
2014-01-23 09:52:03:516 808 d84 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, URL of the server = https://fe1.update.microsoft.com/v6/ClientWebService/client.asmx
2014-01-23 09:52:06:031 808 d84 PT WARNING: ECP: could not validate the downloaded cab file digest from http://download.windowsupdate.com/msdownload/update/common/2013/07/8488969_0c6ef7063e4597732f47750e8c583f83cb7f728e.cab with error 0 x 80091007
2014-01-23 09:52:06:031 808 d84 PT WARNING: ECP: this trip contained some optimized updates failed. New number of update = 34, former County = 60
2014-01-23 09:52:06:656 808 d84 PT WARNING: synchronization of updates: 0x8024402f
2014-01-23 09:52:06:656 808 d84 PT WARNING: SyncServerUpdatesInternal failed: 0x8024402f
2014-01-23 09:52:06:656 808 d84 Agent * WARNING: could not synchronize, error = 0x8024402F
2014-01-23 09:52:06:656 808 d84 Agent * WARNING: exit code = 0x8024402F
2014-01-23 09:52:06:656 808 d84 Agent *.
2014-01-23 09:52:06:656 808 d84 Agent * END * Agent: finding updates [CallerId = Device Driver recovery customer] of
2014-01-23 09:52:06:656 808 d84 Agent *.
2014-01-23 09:52:06:656 808 d84 Agent WARNING: customer WU didn't search for the update with error 0x8024402f
2014-01-23 09:52:06:656 808 125 c COMAPI > COMAPI - RECOVERY -: search [ClientId = Device Driver recovery customer]
2014 01-23 09:52:06:656 125 808 c COMAPI - updates found = 0
2014-01-23 09:52:06:656 808 125 c COMAPI - WARNING: exit code = 0x00000000, result code = 0x8024402F
2014-01-23 09:52:06:656 808 125 C COMAPI -.
2014-01-23 09:52:06:656 808 125 c COMAPI - END--COMAPI: search [ClientId = Device Driver recovery customer]
2014-01-23 09:52:06:656 808 125 C COMAPI -.
2014-01-23 09:52:06:656 808 1474 COMAPI WARNING: operation failed because the previous error, hr = 8024402F
2014-01-23 808 1474 COMAPI FATALE 09:52:06:656: impossible search asynchronous complete. (hr = 8024402F)Incorrect?
I tried several suggestions to fix Windows Update, none work. I have reset the PC to factory settings and still does not work. A daughter of MS tech support spent a whole day trying to solve this remote, not a not fix it.
Then... I'm starting to think this isn't a problem on my PC, I'm good?
Hey Rolo,
Error 0x8024402F means WU_E_PT_ECP_SUCCEEDED_WITH_ERRORS. These errors can be caused by one of the following problems:
- Programs or processes that interfere with Internet communications
- Problems of computer resources
- Strong Internet activity
- Recoverable database errors
Perform the steps from the link below and see if it helps.
http://support.Microsoft.com/kb/836941/en-us
Answer please if you have any questions.
-
Microsoft technical support does not have to deal with such a question of virus it early- and the whole reason I tried Windows 8 was to see if I could work to use it. The virus just kept hit me offline on others so I wasn't able to work for more than 40 days!
Of course, this strategy has worked and I'm beginning to really love 8. But I have installed and reinstalled XP, Vista and 7, so many times trying to control this thing all my files are backup players. The line at the bottom is so, does anyone have solid advice on how to get rid of a kit root on ANY operating system, IE one makes it easier than the other, and how do you get rid of a virus of root? They are invisible to all except unix software.Thanks for all the ideas,TomMicrosoft technical support does not have to deal with such a question of virus it early- and the whole reason I tried Windows 8 was to see if I could work to use it. The virus just kept hit me offline on others so I wasn't able to work for more than 40 days!
Of course, this strategy has worked and I'm beginning to really love 8. But I have installed and reinstalled XP, Vista and 7, so many times trying to control this thing all my files are backup players. The line at the bottom is so, does anyone have solid advice on how to get rid of a kit root on ANY operating system, IE one makes it easier than the other, and how do you get rid of a virus of root? They are invisible to all except unix software.
Thanks for all the ideas,TomLow level formatting (zero / filling/zero-write) to aid diagnosis and utilities bootable from the hard drive manufacturer. Install your operating system, your application antivirus and anti malicious app of choice. Computer practice of common sense.
-
What is Exploit: Win32 / Pdfjsc.RF, is that a threat?
Found this on my computer when I used AVG Anti-Virus for the first time: Exploit: Win32 / Pdfjsc.RF
Should I remove it, or is it for the most part harmless?Hello
all you have to do is Google "Exploit: Win32 / Pdfjsc.RF" for this kind of thing
top of the list of results, it
http://www.Microsoft.com/security/portal/threat/encyclopedia/Browse.aspx?L=P&page=29
_______________________________________________________________
and read this response:
-
Windows Explorer (file) crashes randomly without reason in windows 8
Specifications of the computer:
CPU: 2.00 GHTz DUal Core CPU (not overclocked)Video: NVidia GT610 1 GB GalaxyOn-board soundHard drives: three drives of 160 GBExplorer Windows seems to crash randomly during operations of files on internal disks or outside of any kind. All controls and system disks come out without any problems whatsoever, and I'm pretty well versed in computers and operating systems, so I'm at a loss on what could be the issue.Hello
Please, try the command SFC/scannow in the administration command prompt and see if that helps.Hope this helps, good luck :) -
Everyone knows feat: JS / Blacole.FZ? What is a Virus or a Malware?
Hello
I did a full ASNA on my MSE.
He discovered the above and also serious and gave me the opportunity to remove what I did.
That would be enough and no matter who else heard of this?
I also ran Malwarebytes Anti-Malware analysis at the request of [free] and were reported as clean.
Concerning
Hi snowshine,
To answer your question: ' "is it a Virus or Malware?".
It really isn't, but a feat. Detection for this was created recently.
"JS/Blacole is a detection of a component of the Blackhole feat kit - one kit used by the attackers to distribute malware. The attackers install the kit on a server, and then when you visit the server compromised, kit tries to exploit various, multiple vulnerabilities on your computer in order to install malicious software. For example, if you locate a site compromise containing the exploit pack using a vulnerable computer, malware could be downloaded and then installed on your computer.
Generally, the Blackhole exploit kit attempts to exploit vulnerabilities in applications such as Oracle Java, Sun Java, Adobe Acrobat and Adobe Reader.
For more information on this kit of the exploit and the steps you can take to avoid being compromised, please see the detailed description of the Blacole elsewhere in our encyclopedia... »
From there:
http://www.Microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=js/Blacole
http://www.Microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=exploit%3AJS%2FBlacole.FZIt's in your Temporary Internet files, then removing it via MSSE or deleting your files TIF would have sufficed - until what you return to the Web page in question. If the malicious software has been downloaded and installed, MBAM probably would have found or MSSE could warn you of the additional problems.
-
630 HP: HP 630 - upgrade to Windows 10 - Wifi problem
Hi all
completed the free upgrade to WIndows 7 Home to 10 Windows. This is done via Ethernet NIC - all filled with success - activated license. After I clean install and once again everything seems fine - except when I tried to use the WiFi. There is a red cross on it and it cannot detect all networks. Setting-does not react. Only thing it does is switch or disable airplane mode by pressing the button hardware or software.
Of course the driver problem. In the Device Manager WiFi shows as Aetheros AR9285 and there is no warning - operation normally. I tried to consult no HP site for the product but in fact there are just the Windows 7 driver that can not be installed as Windows 10 says this isn't for this version of the operating system.
So I tried to download directly from Aetheros https://www.atheros-drivers.com/atheros-wireless-drivers.html. Downloaded AR9285 for Windows 10 (no exe just inf files etc.) and installed it via "update driver". Not completed successfully, restart done but always the same - no WiFi - impossible to enable it in Windows.
Anyone have this laptop and know which driver to use?
so, finally I managed to find a solution on some Linux forum:
-Remove the battery
-Go into the BIOS
-F9 to reset to the default values
-F10 to save and exit
WiFi works again.
-
Root/CIMV2, MSFT_NetInvalidDriverDependency, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
I tried to rebuild WMI, but always with 30 errors
30469 16:21:35 (0) * WMIDiag v2.1 began Monday, July 9, 2012 at 4:15.
30470 16:21:35 (0) *.
30471 16:21:35 (0) * copyright (c) Microsoft Corporation. All rights reserved - July 2007.
30472 16:21:35 (0) *.
30473 16:21:35 (0) * this script is not supported under a Microsoft standard support program or service.
30474 16:21:35 (0) * the script is provided AS IS, without warranty of any kind. Microsoft disclaims any
30475 16:21:35 (0) * implied warranties, including, without limitation, implied guarantees of marketability
30476 16:21:35 (0) * or adequacy has a particular use. The entire risk arising out of use or performance
30477 16:21:35 (0) * scripts and documentation remains with you. In any case, Microsoft, its authors,.
30478 16:21:35 (0) * or anyone involved in the creation, production or delivery of the script is responsible for
30479 16:21:35 (0) * damage whatsoever (including, without limitation, damages for loss of business profits,
30480 16:21:35 (0) * business interruption, loss of business information or any other pecuniary loss) arising out of
30481 16:21:35 (0) * the use or inability to use the script or documentation, even if Microsoft has been advised
30482 16:21:35 (0) * of the possibility of such damages.
30483 16:21:35 (0) *.
30484 16:21:35 (0) *.
30485 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30486 16:21:35 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
30487 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30488 16:21:35 (0) *.
30489 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30490 16:21:35 (0) * Windows Server 2008 R2 - Service pack 1 - user 64-bit (7601) - "MGATE\ECIADMIN" on the computer "BES".
30491 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30492 16:21:35 (0) ** INFO: Environment: .................................................................................................. 1 ARTICLE (S)!
30493 16:21:35 (0) * INFO:-online 4 shutdown (s) incorrect possible detected on:
30494 16:21:35 (0) *-stop on January 19, 2012 23:30:23 (GMT-0).
30495 16:21:35 (0) *-stop on January 19, 2012 23:50:41 (GMT-0).
30496 16:21:35 (0) *-stop on February 9, 2012 15:37:35 (GMT-0).
30497 16:21:35 (0) *-stop on July 7, 2012 00:58:51 (GMT-0).
30498 16:21:35 (0) *.
30499 16:21:35 (0) ** System drive: ....................................................................................................... C: (Disk Partition #0 #1).
30500 16:21:35 (0) ** Drive type: ......................................................................................................... SCSI (virtual disk VMware SCSI Disk Device).
30501 16:21:35 (0) * there is no missing file of WMI system:... Ok.
30502 16:21:35 (0) * there is no missing WMI repository files:... Ok.
30503 16:21:35 (0) * WMI repository state:... MORE LOGIC.
30504 16:21:35 (0) * AFTER you run WMIDiag:
30505 16:21:35 (0) * repository WMI has a size of:... 19 MB.
30506 16:21:35 (0) *-free space on the "C:" drive:... 22250 MB.
30507 16:21:35 (0) *-INDEX. BTR, 4349952 bytes, 09/07/2012 16:16:50
30508 16:21:35 (0) *-MAPPING1. CARD, 51804 bytes, 07/09/2012-16:16:50
30509 16:21:35 (0) *-MAPPING2. CARD, 51804 bytes, 07/09/2012-14:23:20
30510 16:21:35 (0) *-OBJECTS. DATA, 15515648 bytes, 09/07/2012 16:16:50
30511 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30512 16:21:35 (2)! WARNING: Windows Firewall: .......................................................................................... PEOPLE WITH DISABILITIES.
30513 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30514 16:21:35 (0) ** DCOM Status: ........................................................................................................ Ok.
30515 16:21:35 (0) * Registry WMI configuration:... Ok.
30516 16:21:35 (0) * INFO: WMI service has dependents:... 1 SERVICE (S)!
30517 16:21:35 (0) *-(ICS) (SHAREDACCESS, StartMode = 'Disabled') Internet connection sharing
30518 16:21:35 (0) *-online if the WMI service is stopped, or the services listed should be stopped as well.
30519 16:21:35 (0) * note: If the service is marked with a (*), this means that the service application / use WMI, but
30520 16:21:35 (0) * there is no hard dependency on WMI. However, if the WMI service is stopped.
30521 16:21:35 (0) * this can prevent the application of service / to work as expected.
30522 16:21:35 (0) *.
30523 16:21:35 (0) ** RPCSS service: ...................................................................................................... OK (already begun).
30524 16:21:35 (0) ** WINMGMT service: .................................................................................................... OK (already begun).
30525 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30526 16:21:35 (0) * for the WMI service DCOM configuration:... Ok.
30527 16:21:35 (0) * components WMI DCOM registrations:... Ok.
30528 16:21:35 (0) * records WMI ProgID:... Ok.
30529 16:21:35 (2)! WARNING: WMI provider DCOM missing registrations for the following providers:... 3 WARNING (S)!
30530 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_REFERENT_EVENT_PROVIDER ({9D5BED16-0765-11D1-AB2C-00C04FD9159E})
30531 16:21:35 (0) * the provider DLL: "
30532 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_CLASS_PROVIDER ({70426720-F78F-11CF-9151-00AA00A4086C})
30533 16:21:35 (0) * the provider DLL: "
30534 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_ENCAPSULATED_EVENT_PROVIDER ({19C813AC-FEE7-11D0-AB22-00C04FD9159E})
30535 16:21:35 (0) * the provider DLL: "
30536 16:21:35 (0) * => this is a problem because there are still some WMI classes referencing this list of suppliers
30537 16:21:35 (0) * while the DCOM registration is incorrect or missing. This may be due to:
30538 16:21:35 (0) *-an uninstall of the software.
30539 16:21:35 (0) *-a deletion of some data to registry keys.
30540 16:21:35 (0) *-a corruption of the registry.
30541 16:21:35 (0) * =>, you can correct the DCOM configuration by:
30542 16:21:35 (0) *-running "REGSVR32. EXE' command.
30543 16:21:35 (0) * note: you can create a list of classes in relation to the WMI provider and the MOF with WMIDiag file.
30544 16:21:35 (0) * (this list can be built on a WMI Windows similar and functional installation)
30545 16:21:35 (0) * the following command line must be used:
30546 16:21:35 (0) * i.e. "WMIDiag CorrelateClassAndProvider.
30547 16:21:35 (2)! WARNING: The re-registration with REGSVR32. EXE DLL all the of 'C:\WINDOWS\SYSTEM32\WBEM\ '.
30548 16:21:35 (0) * can not solve the problem as the DLL supporting the WMI classes
30549 16:21:35 (0) * can be located in a different folder.
30550 16:21:35 (0) * you must consult the class name to determine the software providing the associated DLL.
30551 16:21:35 (0) *-online if the software has been uninstalled intentionally, so this information must be
30552 16:21:35 (0) * deleted of the WMI repository. You can use the "WMIC. EXE' command to remove
30553 16:21:35 (0) * registration of provider data.
30554 16:21:35 (0) * i.e. ' WMIC. EXE /NAMESPACE:\\ROOT\SNMP\LOCALHOST path __Win32Provider Where Name = 'MS_SNMP_ENCAPSULATED_EVENT_PROVIDER' DELETE'
30555 16:21:35 (0) *-online if namespace was ENTIRELY dedicated to the intentionally, uninstalled software
30556 16:21:35 (0) * the namespace and ALL of its content can be ENTIRELY deleted.
30557 16:21:35 (0) * i.e. ' WMIC. EXE /NAMESPACE:\\ROOT\SNMP path __NAMESPACE Where Name = 'LOCALHOST' DELETE'
30558 16:21:35 (0) * - re - install the software.
30559 16:21:35 (0) *.
30560 16:21:35 (0) * registrations CIM WMI provider:... Ok.
30561 16:21:35 (0) * provider WMI CLSID:... Ok.
30562 16:21:35 (0) * availability EXE/DLL WMI providers:... Ok.
30563 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30564 16:21:35 (0) * INFO: User Account Control (UAC):... PEOPLE WITH DISABILITIES.
30565 16:21:35 (0) * INFO: filtering Local account:... PERMIT.
30566 16:21:35 (0) *-online tasks WMI to access WMI information on this computer and that requires remote administration
30567 16:21:35 (0) * privileges SHOULD use part of the DOMAIN of the Local computer administrators group account
30568 16:21:35 (0) * to ensure that the privileges are granted. If a Local user account is used for outdoor
30569 16:21:35 (0) * access, it will be reduced to a simple user (filtered token), even if it is part of the Local Administrators group.
30570 16:21:35 (0) *.
30571 16:21:35 (0) * global DCOM security status:... Ok.
30572 16:21:35 (0) * overall WMI decision:... Ok.
30573 16:21:35 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
30574 16:21:35 (0) * INFO: SUBSCRIPTION permanent WMI (S):... 1.
30575 16:21:35 (0) *-ROOT/SUBSCRIPTION, consumption of NTEventLogEventConsumer.Name event log = "SCM".
30576 16:21:35 (0) * ' select * from MSFT_SCMEventLogEvent'
30577 16:21:35 (0) *.
30578 16:21:35 (0) * WMI TIMER method:... NONE.
30579 16:21:35 (0) * INFO: WMI or requiring a CONFIDENTIALITY of the PACKAGE:... 2 NAMESPACE (S)!
30580 16:21:35 (0) *-ROOT/CIMV2/SECURITY/MICROSOFTTPM.
30581 16:21:35 (0) *-ROOT/CIMV2/TERMINALSERVICES.
30582 16:21:35 (0) * => when connecting remotely, the or listed have the WMI client
30583 16:21:35 (0) * use an encrypted connection by specifying the level of CONFIDENTIALITY of the PACKET authentication.
30584 16:21:35 (0) * (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
30585 16:21:35 (0) * i.e. ' WMIC. EXE/node: "NYBES' /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\CIMV2\TERMINALSERVICES Class __SystemSecurity'
30586 16:21:35 (0) *.
30587 16:21:35 (0) * THE WMI MONIKER CONNECTIONS:... Ok.
30588 16:21:35 (0) ** WMI CONNECTIONS: .................................................................................................... Ok.
30589 16:21:35 (1). ERROR: WMI GET operation reported errors:... ERROR 32 (S)!
30590 16:21:35 (0) * - Root/CIMV2, MSFT_NetInvalidDriverDependency, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30591 16:21:35 (0) * MOF registration: "
30592 16:21:35 (0) * - Root/CIMV2, Win32_OsBaselineProvider, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30593 16:21:35 (0) * MOF registration: "
30594 16:21:35 (0) * - Root/CIMV2, Win32_OsBaseline, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30595 16:21:35 (0) * MOF registration: "
30596 16:21:35 (0) * - Root/CIMV2, Win32_DriverVXD, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30597 16:21:35 (0) * MOF registration: "
30598 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_BITS_BITSNetUtilization, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30599 16:21:35 (0) * MOF registration: "
30600 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_BITS_BITSNetUtilization, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30601 16:21:35 (0) * MOF registration: "
30602 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_GenericIKEandAuthIP, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30603 16:21:35 (0) * MOF registration: "
30604 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_GenericIKEandAuthIP, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30605 16:21:35 (0) * MOF registration: "
30606 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30607 16:21:35 (0) * MOF registration: "
30608 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30609 16:21:35 (0) * MOF registration: "
30610 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30611 16:21:35 (0) * MOF registration: "
30612 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30613 16:21:35 (0) * MOF registration: "
30614 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30615 16:21:35 (0) * MOF registration: "
30616 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30617 16:21:35 (0) * MOF registration: "
30618 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30619 16:21:35 (0) * MOF registration: "
30620 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30621 16:21:35 (0) * MOF registration: "
30622 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServices, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30623 16:21:35 (0) * MOF registration: "
30624 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServices, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30625 16:21:35 (0) * MOF registration: "
30626 16:21:35 (0) * - root/WMI, ReserveDisjoinThread, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30627 16:21:35 (0) * MOF registration: "
30628 16:21:35 (0) * - root/WMI, ReserveLateCount, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30629 16:21:35 (0) * MOF registration: "
30630 16:21:35 (0) * - root/WMI, ReserveJoinThread, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30631 16:21:35 (0) * MOF registration: "
30632 16:21:35 (0) * - root/WMI, ReserveDelete, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30633 16:21:35 (0) * MOF registration: "
30634 16:21:35 (0) * - root/WMI, ReserveBandwidth, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30635 16:21:35 (0) * MOF registration: "
30636 16:21:35 (0) * - root/WMI, ReserveCreate, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30637 16:21:35 (0) * MOF registration: "
30638 16:21:35 (0) * - root/WMI, SystemConfig_PhyDisk, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30639 16:21:35 (0) * MOF registration: "
30640 16:21:35 (0) * - root/WMI, SystemConfig_Video, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30641 16:21:35 (0) * MOF registration: "
30642 16:21:35 (0) * - root/WMI, SystemConfig_IDEChannel, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30643 16:21:35 (0) * MOF registration: "
30644 16:21:35 (0) * - root/WMI, SystemConfig_NIC, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30645 16:21:35 (0) * MOF registration: "
30646 16:21:35 (0) * - root/WMI, SystemConfig_Network, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30647 16:21:35 (0) * MOF registration: "
30648 16:21:35 (0) * - root/WMI, SystemConfig_CPU, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30649 16:21:35 (0) * MOF registration: "
30650 16:21:35 (0) * - root/WMI, SystemConfig_LogDisk, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30651 16:21:35 (0) * MOF registration: "
30652 16:21:35 (0) * - root/WMI, SystemConfig_Power, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
30653 16:21:35 (0) * MOF registration: "
30654 16:21:35 (0) *-online performance when WMI class is missing (for example "Win32_PerfRawData_TermService_TerminalServices"), it is usually due to
30655 16:21:35 (0) * a lack of refresh of the buffer of the WMI provider class exposing WMI performance counters.
30656 16:21:35 (0) * you can update the WMI provider class buffer with the following command:
30657 16:21:35 (0) *.
30658 16:21:35 (0) * i.e. "WINMGMT. EXE /SYNCPERF'
30659 16:21:35 (0) *.
30660 16:21:35 (0) * representations WMI MOF:... Ok.
30661 16:21:35 (0) * WMI QUALIFIER access operations:... Ok.
30662 16:21:35 (0) * WMI ENUMERATION operations:... Ok.
30663 16:21:35 (2)! WARNING: Operation WMI EXECQUERY reported errors:... 1 WARNING (S)!
30664 16:21:35 (0) *-Root/CIMV2, ' Select * from Win32_USBController' did not return any instance while the instance at LEAST 1.
30665 16:21:35 (0) *.
30666 16:21:35 (2)! WARNING: GET the VALUE WMI operation reported errors:... 5 WARNING (S)!
30667 16:21:35 (0) *-root, example: __EventConsumerProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
30668 16:21:35 (0) *-root, example: __EventProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
30669 16:21:35 (0) *-root, example: __EventSinkCacheControl = @, property: ClearAfter = "00000000000015.000000:000" (expected default = "00000000000230.000000:000").
30670 16:21:35 (0) *-root, example: __ObjectProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
30671 16:21:35 (0) *-root, example: __PropertyProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
30672 16:21:35 (0) *.
30673 16:21:35 (0) * WRITE WMI operations:... NOT TESTED.
30674, 16:21:35 (0) * WMI PUT operations:... NOT TESTED.
30675 16:21:35 (0) * WMI DELETE operations:... NOT TESTED.
30676 16:21:35 (0) * the static instances of WMI retrieved:... 1934.
30677 16:21:35 (0) * WMI dynamic instances retrieved:... 0.
30678 16:21:35 (0) * WMI instance request cancellations (to limit the performance impact):... 1.
30679 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30680 16:21:35 (0) * number of events in the event log BEFORE run WMIDiag since the last 20 day (s):
30681 16:21:35 (0) ** DCOM: ............................................................................................................. 0.
30682 16:21:35 (0) ** WINMGMT: .......................................................................................................... 0.
30683 16:21:35 (0) ** WMIADAPTER: ....................................................................................................... 0.
30684 16:21:35 (0) *.
30685 16:21:35 (0) * number of events AFTER you run WMIDiag additional event log:
30686 16:21:35 (0) ** DCOM: ............................................................................................................. 0.
30687 16:21:35 (0) ** WINMGMT: .......................................................................................................... 0.
30688 16:21:35 (0) ** WMIADAPTER: ....................................................................................................... 0.
30689 16:21:35 (0) *.
30690 16:21:35 (0) * 32 error (s) 0 x 80041002 - (WBEM_E_NOT_FOUND) object not found
30691 16:21:35 (0) *-online this error is usually a WMI error. This WMI error is due to:
30692 16:21:35 (0) *-a missing definition of WMI class or object.
30693 16:21:35 (0) * (see any failure of a GET operation, ENUMERATION, EXECQUERY and GET the VALUE).
30694 16:21:35 (0) * you can correct the missing class definitions by:
30695 16:21:35 (0) *-the MOF file (s) recompile manually with the command "MOFCOMP.
30696 16:21:35 (0) * note: you can create a list of classes in relation to the WMI provider and the MOF with WMIDiag file.
30697 16:21:35 (0) * (this list can be built on a WMI Windows similar and functional installation)
30698 16:21:35 (0) * the following command line must be used:
30699 16:21:35 (0) * i.e. "WMIDiag CorrelateClassAndProvider.
30700 16:21:35 (0) * note: when a WMI class performance class is missing, you can manually resynchronize the performance counters
30701 16:21:35 (0) * with WMI by starting the ADAP process.
30702 16:21:35 (0) *-a corruption of WMI repository.
30703 16:21:35 (0) * in such a case, you must re-run the WMIDiag with the parameter "WriteInRepository.
30704 16:21:35 (0) * to validate the WMI repository operations.
30705 16:21:35 (0) * note: make sure THAT you are an administrator with FULL access to ALL WMI of the computer before namespaces
30706 16:21:35 (0) * the WriteInRepository command. To write temporary data of the root namespace, use:
30707 16:21:35 (0) * i.e. 'WMIDiag WriteInRepository = Root'
30708 16:21:35 (0) *-if the WriteInRepository command fails, while an administrator with all access to all namespaces
30709 16:21:35 (0) * the WMI repository needs to be rebuilt.
30710 16:21:35 (0) * note: rebuilding the WMI repository is required to locate all MOF files that are needed to rebuild the repository.
30711 16:21:35 (0) * otherwise, some applications may fail after the reconstruction.
30712 16:21:35 (0) * this can be achieved with the following command:
30713 16:21:35 (0) * i.e. "WMIDiag ShowMOFErrors.
30714 16:21:35 (0) * note: the reconstruction of the repository should be a solution of LAST RESORT and ONLY after execution
30715 16:21:35 (0) * all patches previously mentioned.
30716 16:21:35 (2)! WARNING: Static information stored by external applications in the repository will be LOST! (e.g., the SMS inventory)
30717 16:21:35 (0) *.
30718 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30719 16:21:35 (0) * unexpected, registry keys values incorrect or absent:... 1 KEY (S)!
30720 16:21:35 (0) * INFO: unexpected registry key value:
30721 16:21:35 (0) *-current: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ)-> 0
30722 16:21:35 (0) *-expected: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ)-> 1
30723 16:21:35 (0) * from the command line, the configuration of the registry can be corrected with the following command:
30724 16:21:35 (0) * i.e. ' Reg. Add EXE /v "HKLM\SOFTWARE\Microsoft\WBEM\CIMOM", "Registration" t "REG_SZ" d '1' f'
30725 16:21:35 (0) *.
30726 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30727 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30728 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30729 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30730 16:21:35 (0) *.
30731 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30732 16:21:35 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
30733 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
30734 16:21:35 (0) *.
30735 16:21:35 (0) * ERROR: detected WMIDiag to problems that could prevent WMI works properly! Check ' C:\USERS\ECIADMIN\APPDATA\LOCAL\TEMP\WMIDIAG-V2.1_2K8R2. SRV. SP1.64_NYBES_2012.07.09_16.15.16.log' for more details.
30736 16:21:35 (0) *.
30737 16:21:35 (0) * WMIDiag v2.1 ended Monday, July 9, 2012 at 16:21 (s: 1 W:79 E:38).Hi Jimmy Wang ,
I wish you post your question in the TechNet Forums because it caters to an audience of professionals .
To do this, you must refer to the below mentioned link.
http://social.technet.Microsoft.com/forums/en-us/categories/
Hope this helps!
-
Hello
We have a computer in the domain that was not able to run Microsoft Updates (Windows Update worked great, no problem). See below for the newspaper (sorry for the long list). The error lines have been marked in bold.
I have tried all suggestions in http://support.microsoft.com/kb/971058 , including the step 4.
Please suggest what to do about it!
Thank you
El
2012-11-08 12:45:29:495 1424 e68 Misc = logging initialized (build: 7.6.7600.256, tz: + 1300) =.
2012-11-08 12:45:29:495 1424 e68 Misc = process: C:\Program may Explorer\IEXPLORE. EXE
2012-11-08 12:45:29:495 1424 e68 Misc = Module: C:\WINDOWS\system32\wuapi.dll
2012-11-08 12:45:29:495 1424 e68 COMAPI - COMAPI: IUpdateServiceManager::AddService -.
2012-11-08 12:45:29:495 1424 e68 COMAPI - ServiceId = {7971f918-a847-4430-9279-4a52d1efe18d}
2012-11-08 12:45:29:495 1424 e68 COMAPI - AuthorizationCabPath = C:\WINDOWS\SoftwareDistribution\AuthCabs\muauth.cab
2012-11-08 12:45:29:542 1124 5 a 8 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\7971f918-a847-4430-9279-4a52d1efe18d.auth.cab.temp\muauth.cab:
2012-11-08 12:45:29:557 1124 5 a 8 Misc Microsoft signed: Yes
2012-11-08 12:45:29:839 1112 764 Misc = logging initialized (build: 7.6.7600.256, tz: + 1300) =.
2012-11-08 12:45:29:839 1112 764 Misc = process: C:\WINDOWS\system32\wuauclt.exe
2012-11-08 12:45:29:839 1112 764 Misc = Module: C:\WINDOWS\system32\wuaueng.dll
Properties of the update service DtaStor 1112 764 2012 12:45:29:839 / 11 / 08: registered with AU service is {7971F918-A847-4430-9279-4A52D1EFE18D}
2012-11-08 12:45:29:839 1424 COMAPI e68 - added service, URL = http://www.update.microsoft.com/microsoftupdate/
2012-11-08 12:45:29:839 1424 e68 COMAPI - COMAPI: IUpdateServiceManager::RegisterServiceWithAU -.
2012-11-08 12:45:29:839 1424 e68 COMAPI - ServiceId = {7971f918-a847-4430-9279-4a52d1efe18d}
2012-11-08 12:45:29:886 1424 e68 Misc = logging initialized (build: 7.6.7600.257, tz: + 1300) =.
2012-11-08 12:45:29:886 1424 e68 Misc = process: C:\Program may Explorer\IEXPLORE. EXE
2012-11-08 12:45:29:886 1424 e68 Misc = Module: C:\WINDOWS\system32\muweb.dll
2012-11-08 12:45:29:886 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:29:964 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:30:026 1424 e68 Misc WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:30:026 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:30:042 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:30:089 1424 e68 Misc WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:30:089 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:30:104 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:31:401 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:31:417 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:31:433 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.cab:
2012-11-08 12:45:31:464 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:33:480 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.cab:
2012-11-08 12:45:33:495 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:33:714 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.cab:
2012-11-08 12:45:33:730 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:33:745 1424 e68 Setup * configuration: check if it is necessary to update *.
2012-11-08 12:45:33:745 1424 e68 Setup * Inf file: C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.inf
2012-11-08 12:45:33:777 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuweb.dll update: target = 7.6.7600.257, required version = 7.0.6000.381 version
2012-11-08 12:45:33:777 1424 e68 Setup * IsUpdateRequired = No
2012-11-08 12:45:33:808 1424 e68 Misc = logging initialized (build: 7.6.7600.257, tz: + 1300) =.
2012-11-08 12:45:33:808 1424 e68 Misc = process: C:\Program may Explorer\IEXPLORE. EXE
2012-11-08 12:45:33:808 1424 e68 Misc = Module: C:\WINDOWS\system32\wuweb.dll
2012-11-08 12:45:33:808 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:33:824 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:33:855 1424 e68 Misc WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:33:855 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:33:870 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:33:917 1424 e68 Misc WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:33:917 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:33:933 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:120 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:34:136 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:136 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.cab:
2012-11-08 12:45:34:152 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:402 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.cab:
2012-11-08 12:45:34:417 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:417 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.cab:
2012-11-08 12:45:34:433 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:433 1424 e68 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.cab:
2012-11-08 12:45:34:449 1424 e68 Misc Microsoft signed: Yes
2012-11-08 12:45:34:464 1424 e68 Setup * configuration: check if it is necessary to update *.
2012-11-08 12:45:34:464 1424 e68 Setup * Inf file: C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.inf
2012-11-08 12:45:34:480 1424 e68 installation NOT required for the C:\WINDOWS\system32\cdm.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:480 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuapi.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:511 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuapi.dll.mui update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:511 1424 e68 installation NOT required for C:\WINDOWS\system32\wuauclt.exe update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:511 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuaucpl.cpl update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:527 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuaucpl.cpl.mui update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:527 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuaueng.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:542 1424 e68 installation NOT required for the C:\WINDOWS\system32\wuaueng.dll.mui update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:542 1424 e68 installation NOT required for the C:\WINDOWS\system32\wucltui.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:574 1424 e68 installation NOT required for the C:\WINDOWS\system32\wucltui.dll.mui update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:574 1424 e68 installation NOT required for the C:\WINDOWS\system32\wups.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:574 1424 e68 installation NOT required for the C:\WINDOWS\system32\wups2.dll update: target = 7.6.7600.256, = 7.6.7600.256 required version version
2012-11-08 12:45:34:574 1424 e68 Setup * IsUpdateRequired = No
2012-11-08 12:45:39:387 1424 e68 COMAPI-
2012-11-08 12:45:39:387 1424 e68 COMAPI - START - COMAPI: search [ClientId = MicrosoftUpdate]
2012-11-08 12:45:39:387 1424 e68 COMAPI-
2012-11-08 12:45:39:402 1124 e84 Agent *.
2012-11-08 12:45:39:402 1424 COMAPI e68<-- submitted="" --="" comapi:="" search="" [clientid="">
2012-11-08 12:45:39:402 1124 e84 Agent * START * Agent: finding updates [CallerId = MicrosoftUpdate] of
2012-11-08 12:45:39:402 1124 e84 Agent *.
2012-11-08 12:45:39:402 1124 e84 Agent * Online = Yes; Ignore download priority = No
2012-11-08 12:45:39:402 1124 e84 Agent * criteria = "IsInstalled = 0 and IsHidden = 0".
2012-11-08 12:45:39:402 1124 e84 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} third service
2012-11-08 12:45:39:402 1124 e84 Agent * Search Scope = {Machine}
2012-11-08 12:45:39:418 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:39:434 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:465 1124 e84 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0 x 80190194
2012-11-08 12:45:39:465 1124 e84 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0 x 80190194
2012-11-08 12:45:39:465 1124 e84 Misc WARNING: DownloadFileInternal failed for http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:39:465 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:39:480 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:512 1124 e84 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0 x 80190194
2012-11-08 12:45:39:512 1124 e84 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0 x 80190194
2012-11-08 12:45:39:512 1124 e84 Misc WARNING: DownloadFileInternal failed for http://download.microsoft.com/v9/1/windowsupdate/redir/muv4wuredir.cab: error 0 x 80190194
2012-11-08 12:45:39:512 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:39:512 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:902 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-11-08 12:45:39:902 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:918 1124 e84 Agent looking for updates auth cab for 7971f918-a847-4430-9279-4a52d1efe18d to http://ds.download.windowsupdate.com/v10/1/microsoftupdate/redir/muauth.cab service
2012-11-08 12:45:39:918 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-11-08 12:45:39:934 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:965 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-11-08 12:45:39:980 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:39:980 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-11-08 12:45:39:996 1124 e84 Misc Microsoft signed: Yes
Properties of the update service DtaStor 1112 764 2012 12:45:39:996 / 11 / 08: registered with AU service is {7971F918-A847-4430-9279-4A52D1EFE18D}
2012-11-08 12:45:46:731 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muredir.cab:
2012-11-08 12:45:46:762 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:46:778 1124 e84 Misc validation signature for C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muredir.cab:
2012-11-08 12:45:46:778 1124 e84 Misc Microsoft signed: Yes
2012-11-08 12:45:46:794 1124 e84 PT +++ PT: Synchronizing server updates +++
2012-11-08 12:45:46:794 1124 e84 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, URL of the server = https://update.microsoft.com/v6/ClientWebService/client.asmx
2012-11-08 12:45:57:826 1124 e84 PT WARNING: ECP: could not validate the downloaded cab file digest from http://download.windowsupdate.com/msdownload/update/common/2012/04/4977235_28b8de5708f29a19b05b4f954e8cea567b534478.cab with error 0 x 80091007
2012-11-08 12:45:57:826 1124 e84 PT WARNING: ECP: this trip contained some optimized updates failed. New number of update = 25, old Count = 30
2012-11-08 12:46:04:061 1124 e84 PT WARNING: synchronization of updates: 0x8024402f
2012-11-08 12:46:04:061 1124 e84 PT WARNING: SyncServerUpdatesInternal failed: 0x8024402f
2012-11-08 12:46:04:061 1124 e84 Agent * WARNING: could not synchronize, error = 0x8024402F
2012-11-08 12:46:04:061 524-1124 (non-interactive) Offline detection trigger
2012-11-08 12:46:04:061 524-1124 TO THE #.
2012-11-08 12:46:04:061 524-1124 to THE # START # to THE: research updates
2012-11-08 12:46:04:061 524-1124 TO THE #.
AU 12:46:04:061 524 1124 2012-11-08<## submitted="" ##="" au:="" search="" for="" updates="" [callid="">
2012-11-08 12:46:04:092 1124 e84 Agent * WARNING: exit code = 0x8024402F
2012-11-08 12:46:04:092 1124 e84 Agent *.
2012-11-08 12:46:04:092 1124 e84 Agent * END * Agent: finding updates [CallerId = MicrosoftUpdate] of
2012-11-08 12:46:04:092 1124 e84 Agent *.
2012-11-08 12:46:04:092 1124 e84 Agent WARNING: customer WU didn't search for the update with error 0x8024402f
2012-11-08 12:46:04:108 1124 e84 Agent *.
2012-11-08 12:46:04:108 1124 e84 Agent * START * Agent: finding updates [CallerId = AutomaticUpdates]
2012-11-08 12:46:04:108 1124 e84 Agent *.
2012-11-08 12:46:04:108 1124 e84 Agent * Online = No; Ignore download priority = No
2012-11-08 12:46:04:108 1124 e84 Agent * criteria = "IsHidden = 0 and IsInstalled = 0 and DeploymentAction = 'Installation' and IsAssigned = 1 or IsHidden = 0 and IsPresent = 1 and DeploymentAction = 'Uninstall' and IsAssigned = 1 or IsHidden = 0 and IsInstalled = 1 and DeploymentAction = 'Installation' and IsAssigned = 1 and = 1 RebootRequired or IsHidden = 0 and IsInstalled = 0 and DeploymentAction = 'Uninstall' and IsAssigned = 1 and = 1 RebootRequired."
2012-11-08 12:46:04:108 1124 e84 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} third service
2012-11-08 12:46:04:108 1124 e84 Agent * Search Scope = {Machine}
2012-11-08 12:46:04:124 1424 6bc COMAPI > COMAPI - RECOVERY -: search [ClientId = MicrosoftUpdate]
2012-11-08 12:46:04:124 1424 6bc COMAPI - updates found = 0
2012-11-08 12:46:04:124 1424 6bc COMAPI - WARNING: exit code = 0x00000000, result code = 0x8024402F
2012-11-08 12:46:04:124 1424 6bc COMAPI-
2012-11-08 12:46:04:124 1424 6bc COMAPI - END--COMAPI: search [ClientId = MicrosoftUpdate]
2012-11-08 12:46:04:124 1424 6bc COMAPI-
2012-11-08 12:46:04:171 1424 e68 COMAPI WARNING: operation failed because the previous error, hr = 8024402F
2012-11-08 12:46:04:171 1424 e68 COMAPI FATALE: impossible search asynchronous complete. (hr = 8024402F)
2012-11-08 12:46:14:734 1124 e84 Agent update {1428A603-509C-40D6-B5C0-3108687BA385}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {9F3DD20A-1004-470E-BA65-3DC62D982958}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {28BC880E-0592-4CBF-8F95-C79B17911D5F}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {68623613-134C-4B18-BCEC-7497AC1BFCB0}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {1E602215-B397-46CA-B1A8-7EA0059517BC}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {ED036C16-1BD6-43AB-B546-87C080DFD819}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {935C5617-D17A-37CC-DBCF-423E5BEAB8EA}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {7145181B-9556-4B11-B659-0162FA9DF11F}.51 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {0580151D-FD22-4401-AA2B-CE1E3AE62BC9}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {0FA1201D-4330-4FA8-8AE9-B877473B6441}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {69E6D51D-1462-42E0-95E8-9C889AD82909}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {E7BA9D21-4C88-4F88-94CB-A23488E59EBD}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {5E870422-BD8F-4FD2-96D3-9C5D9AAFDA22}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {5EF2C723-3E0B-4F87-B719-78B027E38087}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {1403F223-A63F-F572-82BA-C92391218055}.113 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B54E7D24-7ADD-428F-8B75-90A396FA584F}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {0D675426-E657-48AF-A8EF-ED65B58975FE}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {6D992428-3B47-4957-BB1A-157BD8C73D38}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {E0789628-CE08-4437-BE74-2495B842F43B}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {4E487029-F550-4C22-8B31-9173F3F95786}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {23F5EB29-DDC6-4263-9958-CF032644DEEA}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {C8C19432-F207-4D9D-AB10-764F3D29744D}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {7FFF3336-2479-4623-A697-BCEFCF1B9F92}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {56309036-4C77-4DD9-951A-99EE9C246A94}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {2B496C37-F722-4E7B-8467-A7AD1E29E7C1}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B52EF437-21A1-4FBA-9FD0-15D242F19FE5}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {35C4463B-35DC-42AC-B0BA-1D9B5C505DE2}.103 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {6ED4A93E-E443-4965-B666-5BC7149F793C}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {EA5C4346-B59B-49D6-BC51-A8E457A3A601}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {523A2448-8B6C-458B-9336-307E1DF6D6A6}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B567E54E-648B-4AC6-9171-149A19A73DA8}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {E6CF1350-C01B-414D-A61F-263D14D133B4}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {504AE250-57C5-484A-8A10-A2C35EA0689B}.102 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {F76B7F51-B762-4FD0-A35C-E04F582ACF42}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {CB090352-C615-4C0F-A2AB-E86220921A2E}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {116A3557-3847-4858-9F03-38E94B977456}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B3D0AF68-8A86-4BFC-B458-AF702F35930E}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {78F4E068-1609-4E7A-AC8E-174288FA70A1}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {4F93EB69-8B97-4677-8DE4-D3FCA7ED10E6}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {BF93416A-5128-433E-B31C-70057E7AD6F4}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {477B856E-65C4-4473-B621-A8B230BB70D9}.105 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {CA9E8C72-81C4-11DC-8284-F47156D89593}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {8BC19572-A4B6-4910-B70D-716FECFFC1EB}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {0A4C6C73-8887-4D7F-9CBE-D08FA8FA9D1E}.51 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {2A42BA79-317B-469F-91DF-BDB315C99FC4}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {FE729F7E-3945-11DC-8E0C-CD1356D89593}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {EC231084-85C2-4DAF-BFC4-50BBE4022257}.102 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {2425DE84-F071-4358-AAC9-6BBD6E0BFAA7}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {60916385-7546-4E9B-836E-79D65E517BAB}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {48CE8C86-6850-4F68-8E9D-7DC8535CED60}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {8508AF86-B85E-450F-A518-3B6F8F204EEA}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {03C7C488-F8ED-496C-B6E0-BE608ABB8A79}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {7A62BA8B-E865-47CB-9F43-075EF26AF7B4}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {23B3DA8B-060E-4517-A431-3CB10F040794}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B0C3B58D-1997-4B68-8D73-AB77F721D099}.202 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {AFD77D9E-F05A-431C-889A-34C23C9F9AF5}.103 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {041E4F9F-3A3D-4F58-8B2F-5E6FE95C4591}.126 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {2AF51AA0-509A-4B1D-9218-7E7508F05EC3}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {EC9AACA2-F868-4F06-B201-FB8EEFD84CEF}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {68C5B0A3-D1A6-4553-AE49-01D3A7827828}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {A36724A5-DA1A-47B2-B8BE-95E7CD9BC909}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {26A5D0A5-B108-46F1-93FA-F2A9CF10D029}.102 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {41DCE4A6-71DD-4A02-BB36-76984107376D}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {22BF57A8-4FE1-425F-BDAA-32B4F655284B}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {F8C3C9A9-10DE-4F09-BC16-5EB1B861FB4C}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {377473AF-531B-4FAB-AD0F-5A60A4A947C4}.103 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {6964AAB4-C5B5-43BD-A17D-FFB4346A8E1D}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {04D85AC2-C29F-4414-9CB6-5BCD6C059070}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {558F4BC3-4827-49E1-ACCF-EA79FD72D4C9}.102 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {42A2ADC5-2930-4E96-A6F5-FE888B739A6F}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {9F9B1ACE-A810-11DB-BAD5-F7F555D89593}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {B4832BD8-E735-4761-8DAF-37F882276DAB}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {A0C687DC-5AA5-11DD-940F-554E56D89593}.100 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {EEF074E9-61D6-4DAC-B102-3DBE15FFF3EA}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {0F3412F2-3405-4D86-A0FF-0EDE802227A8}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {9476D3F6-A119-4D6E-9952-8AD28A55BBA6}.101 has no local extended metadata. Do not return.
2012-11-08 12:46:14:734 1124 e84 Agent update {C96C35FC-A21F-481B-917C-10C4F64792CB}.102 has no local extended metadata. Do not return.
2012-11-08 12:46:14:750 1124 e84 Agent * found 0 updates day and 0 categories in the search. evaluated Appl. rules of 469 out of 1392 deployed entities
2012-11-08 12:46:14:750 1124 e84 Agent *.
2012-11-08 12:46:14:750 1124 e84 Agent * END * Agent: finding updates [CallerId = AutomaticUpdates]
2012-11-08 12:46:14:750 1124 e84 Agent *.
2012-11-08 12:46:14:766 1124 80 c to THE > # RETURN # to THE: research updates [CallId = {F1B38A61-FFF8-4D5A-8710-9CBE80988184}]
2012-11-08 12:46:14:766 1124 e84 report REPORT EVENT: {D39657D6-D6C3-40E8-B985-3A0B3D955425} 2012-11-08 + 1300 1 148 101 12:46:04:092 {00000000-0000-0000-0000-000000000000} 0 software MicrosoftUpdate failure 8024402f from Windows Update Client sync did not detect with error 0x8024402f.
2012-11-08 12:46:14:766 1124 80 c to # 0 updates detected
2012-11-08 12:46:14:766 1124 80 C TO THE #.
2012-11-08 12:46:14:766 1124 80 c to # END # in THE: research updates [CallId = {F1B38A61-FFF8-4D5A-8710-9CBE80988184}]
2012-11-08 12:46:14:766 1124 80 C TO THE #.
2012-11-08 12:46:14:766 1124 80 c to THE present notification is disabled.
2012-11-08 12:46:14:766 1124 80 c time of installation to THE adjustment to THE planned for 2012-11-08 06:00Hello
Thanks for posting the question in the Microsoft Community.
I apologise for the inconvenience.
The question you have posted better suited in the TechNet Forums.
Here is the link:
Hope the helps of information. Please respond to help you further.
-
All svchost.exe memory leak issues and the answers seem to be of mid-2010.
I tried to correct my leak memory using the anwser and so far nothing has worked.
http://download.windowsupdate.com/v9/microsoftupdate/redir/Muauth.cab
2012-01-07 09:52:27:625 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-01-07 09:52:27:625 1428 1654 Misc Microsoft signed: Yes
2012-01-07 09:52:27:703 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-01-07 09:52:27:703 1428 1654 Misc Microsoft signed: Yes
2012-01-07 09:52:27:703 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
2012-01-07 09:52:27:734 1428 1654 Misc Microsoft signed: Yes
The service properties 2012-01-07 09:52:27:828 4560 1630 DtaStor update: registered with AU service is {7971F918-A847-4430-9279-4A52D1EFE18D}
2012-01-07 09:53:50:281 1428 1654 Agent * WARNING: exit code = 0x8007000E
2012-01-07 09:53:50:281 1428 1654 Agent *.
2012-01-07 09:53:50:281 1428 1654 Agent * END * Agent: finding updates [CallerId = MicrosoftUpdate] of
2012-01-07 09:53:50:281 1428 1654 Agent *.
2012-01-07 09:53:50:281 1428 1654 Agent WARNING: customer WU didn't search for the update with error 0x8007000e
2012-01-07 09:53:50:296 496 518 COMAPI > COMAPI - RECOVERY -: search [ClientId = MicrosoftUpdate]
2012-01-07 09:53:50:296 496 518 COMAPI - updates found = 0
2012-01-07 09:53:50:296 496 518 COMAPI - WARNING: exit code = 0x00000000, result code = 0x8007000E
2012-01-07 09:53:50:296 496 518 COMAPI-
2012-01-07 09:53:50:296 496 518 COMAPI - END--COMAPI: search [ClientId = MicrosoftUpdate]
2012-01-07 09:53:50:296 496 518 COMAPI-
2012-01-07 09:53:50:296 496 9 a 4 COMAPI WARNING: operation failed because the previous error, hr = 8007000E
2012-01-07 09:53:50:296 496 9 a 4 COMAPI FATALE: impossible search asynchronous complete. (hr = 8007000E)
2012-01-07 09:53:55:296 1428 1654 report REPORT EVENT: {D9F17968-B8BC-481E-AA08-5EDA6B57B321} 2012-01-07 09:53:50:234 - 0500 1 148 101 {00000000-0000-0000-0000-000000000000} 0 8007000e MicrosoftUpdate software synchronization failure Windows Update Client did not detect with error 0x8007000e.Hello
· What are the troubleshooting steps you have tried?
· You try to install Windows update? If you try to install Windows update then update you are trying to install?
· What is the exact error message?
Response with above information to better help you.
I suggest you follow the steps in the link and check if the problem persists:
http://Windows.Microsoft.com/en-us/Windows7/Windows-Update-error-80070008-or-8007000e
Note: this link is also applicable for Windows XP.
-
How to change the remote ip address connection svs - vCenter was reloctated
We just finished relocating our vCenter from one subnet to another, the IP address has changed and now we cannot add vmware port groups in the vNetwork Distributed Switch.
When we tried to add the port profile the warning was "warning: operation successful locally but the update failed on the vCenter server.» Check if you are connected to vCenter Server. "We have checked the configuration on the 1010V link and found the culprit, the svs to vCenter connection had the old remote ip address.
What is the preferred method to change it without destroying the config?
Thanks in advance.
How to do is the following:
n1000v (config) # svs connection vcenter
n1000v(config-SVS-conn) # no connection
# 1.1.1.1 remote ip address n1000v(config-SVS-conn)
n1000v(config-SVS-conn) # connect
Essentially to turn off, change the IP address and then reactivate the connection.
-
What is 'RANK RANK PLACE' in sql plan?
Hi all.
The oracle is 11.2.0.3 on a linux machine.
I did ' select (index ffs) parallel and insert serial.
Here is the among the tracefiles tkprof output (parallel slave produced several trace file).
This is why block related counters are not accurate.
I found 'RANK RANK PLACE' operation and I Googled it.
There is little information on this subject.
The index 'PARTITIONED_AAA_PK' is hash global index is partitioned (level 16 hash).
What is "RANK RANK PLACE"?
Thanks in advance.insert into TEST_AAA_HIS select /*+ index_ffs(t PARTITIONED_AAA_HIS_PK) parallel_index(t,PARTITIONED_AAA_HIS_PK,8) */ * from PARTITIONED_AAA t where seq > 548215475 call count cpu elapsed disk query current rows ------- ------ -------- ---------- ---------- ---------- ---------- ---------- Parse 1 0.01 0.08 33 33 0 0 Execute 1 23.63 32.67 44336 112722 399430 1407251 Fetch 0 0.00 0.00 0 0 0 0 ------- ------ -------- ---------- ---------- ---------- ---------- ---------- total 2 23.64 32.75 44369 112755 399430 1407251 Misses in library cache during parse: 1 Optimizer mode: ALL_ROWS Parsing user id: SYS Number of plan statistics captured: 1 Rows (1st) Rows (avg) Rows (max) Row Source Operation ---------- ---------- ---------- --------------------------------------------------- 0 0 0 LOAD TABLE CONVENTIONAL (cr=112722 pr=44336 pw=0 time=32670190 us) 1407251 1407251 1407251 PX COORDINATOR (cr=48 pr=0 pw=0 time=4328843 us) 0 0 0 PX SEND QC (RANDOM) :TQ10000 (cr=0 pr=0 pw=0 time=0 us cost=151381 size=93444240 card=210460) 0 0 0 PX PARTITION HASH ALL PARTITION: 1 16 (cr=0 pr=0 pw=0 time=0 us cost=151381 size=93444240 card=210460) 0 0 0 TABLE ACCESS BY GLOBAL INDEX ROWID PARTITIONED_AAA PARTITION: ROW LOCATION ROW LOCATION (cr=0 pr=0 pw=0 time=0 us cost=151381 size=93444240 card=210460) 0 0 0 INDEX RANGE SCAN PARTITIONED_AAA_PK PARTITION: 1 16 (cr=0 pr=0 pw=0 time=0 us cost=731 size=0 card=210460)(object id 814571)
Best regards.869578 wrote:
I did ' select (index ffs) parallel and insert serial.
Here is the among the tracefiles tkprof output (parallel slave produced several trace file).
This is why block related counters are not accurate.I found 'RANK RANK PLACE' operation and I Googled it.
There is little information on this subject.The index 'PARTITIONED_AAA_PK' is hash global index is partitioned (level 16 hash).
What is "RANK RANK PLACE"?
For partitioned queries the plan still shows a 'start of partition' as 'partition In the case of a scan of systematic index range or comprehensive analysis of a partitioned global index, the operation at the table of visits by rowid saves these as 'PLACE of LINE'.
select /*+ index_ffs(t PARTITIONED_AAA_HIS_PK) parallel_index(t,PARTITIONED_AAA_HIS_PK,8) */ * 0 0 0 INDEX RANGE SCAN PARTITIONED_AAA_PK PARTITION: 1 16 (cr=0 pr=0 pw=0 time=0 us cost=731 size=0 card=210460)(object id 814571)Your index_ffs() index failed - possibly because you have the wrong name in the indication of the KP index.
Concerning
Jonathan Lewis -
DB 9.2.0.8 high library cache latch
We have AIX 5 L (5.3) server with 8 power 6 CORES 4200 MHz (hyperthreading enabled, so 16 CPU virtual) and database Oracle 9.2.0.8 (migration to 11 GR 2 will next year occur). Database is part of the configuration of dataguard with 1 expectation of maximum availability mode database.
Our night work (use to run in 30 parallel sessions in PL/SQL) suffers a statement cache large library (11% free, but sometimes he goes over 20%, then divide by two locking latches are cache library and library cache pins). Database and SQL, we have resolved several times, we have reduced the random disk operations, events, affirmation of channels cache buffer, removed waiting buffer busy but after each issue of optimization of the library cache locks grew (we just found another bottleneck). DB used to analyze the 3 500-4500 per second during this work (due to a bug SYS_CONTEXT), now it's just 45 per second, so we have reduced the number of library cache searches, too.
In the following report statspack (I na not paste entire file, just gerenal information, wait events, statistics, locks and TOP SQL by analysis of calls) we have:
< li > analysis count (total) 117 058
< Li > TOP SQL by parsed (this is recursive SQL, hv = 3286148528) 70 187
In fact, more than 70% of searches of library cache are caused by recursive 2 SQL (like many, I know, recursive SQL is still ignoring session_cached_cursors). I have 8 physical CŒURS, Oracle has created in 9i 17 latches cache library at the start of the instance. I thought most waits on research of library cache were caused by a lock child (because of SQL hv = 3286148528), but I was definitely wrong. Snapshot of v$ latch_children, I've done every 3 minutes and wait were evenly distributed between all the 17 locks .
I don't understand why I expected "library cache" upper 3times then "pine cache library" (WHERE kglupc: child and kglpnc: child). In most our databases (with research in lc low and high run count), we have the two latches at the same level. . Any ideas would be appreciated
It is also good to mention that srver is 0 inactive when the job is running (but our goal is to complete the process as soon as possible). There are no other database on the server, of course.
Pavol Babel
Oracle Certified Master
Published by: Pavol Babel June 21, 2011 23:29STATSPACK report for DB Name DB Id Instance Inst Num Release Cluster Host ------------ ----------- ------------ -------- ----------- ------- ------------ CTP 3761805420 CTPO 1 9.2.0.8.0 NO sd3test Snap Id Snap Time Sessions Curs/Sess Comment --------- ------------------ -------- --------- ------------------- Begin Snap: 196615 18-Jun-11 22:43:43 130 93.2 End Snap: 196622 18-Jun-11 23:26:56 129 112.8 Elapsed: 43.22 (mins) Cache Sizes (end) ~~~~~~~~~~~~~~~~~ Buffer Cache: 3,072M Std Block Size: 8K Shared Pool Size: 1,200M Log Buffer: 16,384K Load Profile ~~~~~~~~~~~~ Per Second Per Transaction --------------- --------------- Redo size: 3,312,111.10 23,670.00 Logical reads: 233,724.40 1,670.31 Block changes: 18,297.28 130.76 Physical reads: 1,102.05 7.88 Physical writes: 1,716.01 12.26 User calls: 27.51 0.20 Parses: 45.14 0.32 Hard parses: 0.13 0.00 Sorts: 3,665.77 26.20 Logons: 0.10 0.00 Executes: 42,748.58 305.50 Transactions: 139.93 % Blocks changed per Read: 7.83 Recursive Call %: 99.97 Rollback per transaction %: 1.42 Rows per Sort: 2.85 Instance Efficiency Percentages (Target 100%) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Buffer Nowait %: 99.94 Redo NoWait %: 100.00 Buffer Hit %: 99.57 In-memory Sort %: 100.00 Library Hit %: 100.04 Soft Parse %: 99.71 Execute to Parse %: 99.89 Latch Hit %: 99.53 Parse CPU to Parse Elapsd %: 2.90 % Non-Parse CPU: 99.99 Shared Pool Statistics Begin End ------ ------ Memory Usage %: 18.46 18.92 % SQL with executions>1: 84.52 84.58 % Memory for SQL w/exec>1: 74.23 74.95 Top 5 Timed Events ~~~~~~~~~~~~~~~~~~ % Total Event Waits Time (s) Ela Time -------------------------------------------- ------------ ----------- -------- CPU time 15,869 32.09 db file sequential read 2,255,519 10,374 20.98 PL/SQL lock timer 13,010 10,085 20.39 latch free 261,042 5,591 11.31 buffer busy waits 381,101 2,244 4.54 ------------------------------------------------------------- Wait Events for DB: CTP Instance: CTPO Snaps: 196615 -196622 -> s - second -> cs - centisecond - 100th of a second -> ms - millisecond - 1000th of a second -> us - microsecond - 1000000th of a second -> ordered by wait time desc, waits desc (idle events last) Avg Total Wait wait Waits Event Waits Timeouts Time (s) (ms) /txn ---------------------------- ------------ ---------- ---------- ------ -------- db file sequential read 2,255,519 0 10,374 5 6.2 PL/SQL lock timer 13,010 13,003 10,085 775 0.0 latch free 261,042 55,202 5,591 21 0.7 buffer busy waits 381,101 0 2,244 6 1.1 db file parallel write 703,144 0 1,142 2 1.9 LGWR wait on LNS 1,943,337 3,507 984 1 5.4 LGWR-LNS wait on channel 795,292 3,506 981 1 2.2 LNS wait on SENDREQ 352,719 0 832 2 1.0 direct path read 89,263 0 351 4 0.2 log file sync 26,078 2 301 12 0.1 LGWR wait for redo copy 225,228 457 250 1 0.6 enqueue 9,742 0 64 7 0.0 db file scattered read 54,410 0 60 1 0.1 library cache pin 529 0 59 111 0.0 inactive session 60 60 59 977 0.0 log file sequential read 8,505 0 50 6 0.0 async disk IO 17,970 0 41 2 0.0 log file switch completion 973 0 39 40 0.0 control file sequential read 59,062 0 35 1 0.2 library cache load lock 114 0 10 84 0.0 log file parallel write 352,205 0 9 0 1.0 LNS wait on LGWR 2,619,701 0 8 0 7.2 control file parallel write 4,431 0 5 1 0.0 log buffer space 11 0 3 300 0.0 db file parallel read 239 0 2 8 0.0 process startup 37 0 1 24 0.0 wait list latch free 52 0 1 13 0.0 buffer deadlock 206 206 0 1 0.0 ARCH wait on SENDREQ 43 0 0 5 0.0 direct path write 10,377 0 0 0 0.0 library cache lock 1 0 0 179 0.0 row cache lock 6 0 0 16 0.0 log file single write 34 0 0 2 0.0 SQL*Net more data to client 2,265 0 0 0 0.0 local write wait 1 0 0 21 0.0 SQL*Net break/reset to clien 25 0 0 1 0.0 db file single write 3 0 0 3 0.0 SQL*Net message from client 57,311 0 165,393 2886 0.2 pipe get 91,560 2,334 7,523 82 0.3 jobq slave wait 782 770 2,280 2915 0.0 SQL*Net message to client 57,343 0 0 0 0.2 SQL*Net more data from clien 255 0 0 0 0.0 ------------------------------------------------------------- Background Wait Events for DB: CTP Instance: CTPO Snaps: 196615 -196622 -> ordered by wait time desc, waits desc (idle events last) Avg Total Wait wait Waits Event Waits Timeouts Time (s) (ms) /txn ---------------------------- ------------ ---------- ---------- ------ -------- db file parallel write 703,148 0 1,142 2 1.9 LGWR wait on LNS 1,943,340 3,507 984 1 5.4 LGWR-LNS wait on channel 795,293 3,506 981 1 2.2 LNS wait on SENDREQ 352,720 0 832 2 1.0 LGWR wait for redo copy 225,228 457 250 1 0.6 log file sequential read 8,505 0 50 6 0.0 async disk IO 16,789 0 38 2 0.0 latch free 2,655 85 26 10 0.0 log file parallel write 352,206 0 9 0 1.0 LNS wait on LGWR 2,619,702 0 8 0 7.2 control file sequential read 12,133 0 7 1 0.0 control file parallel write 4,425 0 5 1 0.0 db file scattered read 307 0 3 10 0.0 db file sequential read 274 0 1 2 0.0 direct path read 24,738 0 0 0 0.1 ARCH wait on SENDREQ 43 0 0 5 0.0 enqueue 45 0 0 2 0.0 log file single write 34 0 0 2 0.0 rdbms ipc reply 129 0 0 0 0.0 direct path write 10,258 0 0 0 0.0 wait list latch free 3 0 0 10 0.0 buffer busy waits 2 0 0 0 0.0 rdbms ipc message 2,173,078 2,976 30,391 14 6.0 pmon timer 868 862 2,528 2913 0.0 smon timer 64 0 2,461 38446 0.0 ------------------------------------------------------------- SQL ordered by Gets for DB: CTP Instance: CTPO Snaps: 196615 -196622 -> End Buffer Gets Threshold: 10000 -> Note that resources reported for PL/SQL includes the resources used by all SQL statements called within the PL/SQL code. As individual SQL statements are also reported, it is possible and valid for the summed total % to exceed 100 . . . . SQL ordered by Parse Calls for DB: CTP Instance: CTPO Snaps: 196615 -196622 -> End Parse Calls Threshold: 1000 % Total Parse Calls Executions Parses Hash Value ------------ ------------ -------- ---------- 70,187 70,186 59.96 3286148528 select c.name, u.name from con$ c, cdef$ cd, user$ u where c.co n# = cd.con# and cd.enabled = :1 and c.owner# = u.user# 8,686 8,686 7.42 3716207873 update seq$ set increment$=:2,minvalue=:3,maxvalue=:4,cycle#=:5, order$=:6,cache=:7,highwater=:8,audit$=:9,flags=:10 where obj#=: 1
Published by: Pavol Babel June 21, 2011 23:37
Published by: Pavol Babel June 21, 2011 23:46
Published by: Pavol Babel on June 22, 2011 17:22Pavol Babel wrote:
We have AIX 5 L (5.3) server with 8 power 6 CORES 4200 MHz (hyperthreading enabled, so 16 CPU virtual) and database Oracle 9.2.0.8 (migration to 11 GR 2 will next year occur). Database is part of the configuration of dataguard with 1 expectation of maximum availability mode database.In the following report statspack (I na not paste entire file, just gerenal information, wait events, statistics, locks and TOP SQL by analysis of calls) we have:
- analysis count (total) 117 058
- TOP SQL by parsed (this is recursive SQL, hv = 3286148528) 70 187
Load Profile ~~~~~~~~~~~~ Per Second Per Transaction --------------- --------------- Redo size: 3,312,111.10 23,670.00 Logical reads: 233,724.40 1,670.31 Block changes: 18,297.28 130.76 Physical reads: 1,102.05 7.88 Physical writes: 1,716.01 12.26 User calls: 27.51 0.20 Parses: 45.14 0.32 Hard parses: 0.13 0.00 Sorts: 3,665.77 26.20 Logons: 0.10 0.00 Executes: 42,748.58 305.50 Transactions: 139.93 - analysis count (total) 117 058
-
Update Acrobat virus infection?
I left Adobe Updater do its thing; It was an update to Acrobat. After a few seconds, AVG has warned x86\adobe\acrobat 9.0\xtras\adobepdf\printinf64.exe program files was a virus. AVG stopped the process and quarantined the file, so no damage seems to be done.
Does anyone have a warning of viruses of the last update? I'm very attentive to what I download and where, and always do a manual scan before running or unzip anything. If this infection is the result of the negligence of the user, I would be hard pressed to know how.
Antivirus in general flags Adobe install files and those of many other manufacturers. If you are not sure if you have a download play, go to the Adobe.com site > downloads > updates and download the updates for a manual installation. So make sure that you are logged on as administrator and disable your antivirus during installation. Most antivirus programs have a kind of break to control precisely for this reason. Once installation is complete, turn on your antivirus. Analyze the system if you like right here and before launching Acrobat.
-
Problem with SBT and PARALLELISM
Hello
I 10.2.0.4 SE on Linux x 86. I do only backups of disk and after I run RMAN I got this error
RMAN retention policy apply to the order
RMAN retention policy is set to 7 days recovery window
using channel ORA_DISK_1
RMAN-06908: WARNING: operation will not work in parallel on assigned channels
RMAN-06909: WARNING: parallelism require Enterprise Edition
output channel: ORA_DISK_1
RMAN-00571: ===========================================================
RMAN-00569: = ERROR MESSAGE STACK FOLLOWS =.
RMAN-00571: ===========================================================
RMAN-03002: failure of the delete command at 17/02/2010 16:26:31
ORA-19554: error device allocation, type of device: SBT_TAPE device name:
ORA-27211: unable to load the media management library
Additional information: 9
so... backup is finished on the drive, but it seems that RMAN is to try to assign channels in parallel which I did not need and it is only the functionality of Enterprise Edition still (mine is StandardEdition). Second thing, is he trying to return the SBT_TAPE device, but I need more, I just want the disk.
Here are rman show all
RMAN > show all.
RMAN configuration parameters are:
CONFIGURE REDUNDANCY 1 RETENTION STRATEGY;
CONFIGURE BACKUP OPTIMIZATION
SET UP DEFAULT DISK DEVICE TYPE; # by default
CONFIGURE CONTROLFILE AUTOBACKUP ON;
CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO "%F" # by default
CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE SBT_TAPE TO "%F" # by default
SET UP THE DEVICE TYPE DISK BACKUP FOR PARALLELISM BACKUPSET TABLET 1 TYPE;
SET UP THE DEVICE TYPE 'SBT_TAPE' TYPE OF BACKUP FOR PARALLELISM BACKUPSET TABLET 1.
CONFIGURE BACKUP OF DATA TO DISK FILE TYPE DEVICE TO 1; # by default
CONFIGURE BACKUP COPIES OF DATA FILE FOR DEVICE TYPE SBT_TAPE TO 1; # by default
CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE DISK TO 1; # by default
CONFIGURE BACKUP ARCHIVELOG FOR DEVICE TYPE SBT_TAPE TO 1; # by default
CONFIGURE CHANNEL DEVICE TYPE DISK MAXPIECESIZE 2 G;
CONFIGURE CHANNEL DEVICE TYPE 'SBT_TAPE' MAXPIECESIZE 2 G;
CONFIGURE MAXSETSIZE TO UNLIMITED; # by default
CONFIGURE ENCRYPTION OF DATABASE # by default
CONFIGURE THE ENCRYPTION ALGORITHM "AES128"; # by default
CONFIGURE THE NONE ARCHIVELOG DELETION POLICY; # by default
CONFIGURE SNAPSHOT CONTROLFILE NAME TO ' / u01/oracle/product/10.2.0/db_1/dbs/snapcf_MSF.f'; # by default
How to get rid of SBT and PARALLELISM?Hi mishomor,
You must clear all your configurations of rman default no SBT_TAPE.
(CONFIGURE DEVICE TYPE 'SBT_TAPE' CLEAR;)
CONFIGURE CHANNEL DEVICE TYPE 'SBT_TAPE' CLEAR ;)Also then parallel channel is not allowed as a configuration or in an execution block.
Can you post the output of show all (after set it up... clear) and after (the part of rman of) a backup of scripts as suggested by Hermant?
Kind regards
Tycho
Your library cache issue relates to your 42 000 executions per second, not your 45 analysis per second.
Looks like you need to find a way to keep some run very frequently statements in a pinned - what is in your Top SQL by executions, and state how it is called the pl/SQL? I wouldn't hire me what anyone at the moment, but cursor_space_for_time setting to true may be relevant to your case.
Concerning
Jonathan Lewis
Maybe you are looking for
-
Synchronization of the sides and the game account without messing up my files
I heard there are problems with iTunes game screwing popular music libraries by downloading different versions of songs while they had previously charged. I don't want that to happen to me, but I like the feature that allows me to sync my ratings and
-
Firefox7 has disabled my Roboform & said that it is now incompatible with Firefox7. I downloaded Roboform Lite which is suppost to work, but I can't find anywhere on your browser page. If this cannot be resolved how to get back to firefox6?Thank you
-
Get help continuous update error code 0CX80001FE
Hello I hope someone can help me. A week ago, I had to uninstall Bitdefender Security and Microsoft Security Essentials in order to download, and the new version of Bitdefender Security 2013. Once I uninstalled them both, I re-installed Microsoft Sec
-
I have a configured netmonitor that monitors the 200 + windows servers. I'm trying to figure out how to hide individual servers on this list. Thus, for example, we want to do now. on a server in the list. I can't blackout agent because then all ho
-
I can't detect my MW600 with windows8
I have connected to my phone and now I want to pair it with my laptop but it is undetectable!