Well, that didn't help. I got the MsiInstaller error when trying to update
this morning. This time a log file was created! The contents is below...
==============================
MSI (s) (A8:78) [08:06:57:796]: Final Patch Application Order:
MSI (s) (A8:78) [08:06:57:796]: {9AD8C4EE-808D-430C-BA88-6075B2053507} -
MSI (s) (A8:78) [08:06:57:796]: {46BE8A2F-A348-418A-BEA4-FFA98FF60E04} -
C:\DOCUME~1\Darren\LOCALS~1\Temp\IXP000.TMP\MPAS-F.msp
=== Logging started: 3/22/2006 8:06:57 ===
Action start 8:06:57: INSTALL.
Action start 8:06:57: AppSearch.
Action ended 8:06:57: AppSearch. Return value 0.
Action start 8:06:57: FindRelatedProducts.
Action ended 8:06:57: FindRelatedProducts. Return value 0.
Action start 8:06:57: ValidateProductID.
Action ended 8:06:57: ValidateProductID. Return value 1.
Action start 8:06:57: CostInitialize.
Action ended 8:06:57: CostInitialize. Return value 1.
Action start 8:06:57: FileCost.
Action ended 8:06:58: FileCost. Return value 0.
Action start 8:06:58: CostFinalize.
Action ended 8:06:58: CostFinalize. Return value 1.
Action start 8:06:58: InstallValidate.
Action ended 8:06:58: InstallValidate. Return value 1.
Action start 8:06:58: InstallInitialize.
Action ended 8:06:58: InstallInitialize. Return value 1.
Action start 8:06:58: ProcessComponents.
Action ended 8:06:58: ProcessComponents. Return value 1.
Action start 8:06:58: UnpublishComponents.
Action ended 8:06:58: UnpublishComponents. Return value 0.
Action start 8:06:58: UnpublishFeatures.
Action ended 8:06:58: UnpublishFeatures. Return value 1.
Action start 8:06:58: StopServices.
Action ended 8:06:58: StopServices. Return value 1.
Action start 8:06:58: DeleteServices.
Action ended 8:06:58: DeleteServices. Return value 1.
Action start 8:06:58: RemoveRegistryValues.
Action ended 8:06:58: RemoveRegistryValues. Return value 1.
Action start 8:06:58: RemoveShortcuts.
Action ended 8:06:58: RemoveShortcuts. Return value 0.
Action start 8:06:58: RemoveFiles.
Action ended 8:06:58: RemoveFiles. Return value 1.
Action start 8:06:58: RemoveFolders.
Action ended 8:06:58: RemoveFolders. Return value 0.
Action start 8:06:58: CreateFolders.
Action ended 8:06:58: CreateFolders. Return value 0.
Action start 8:06:58: InstallFiles.
Action ended 8:06:58: InstallFiles. Return value 1.
Action start 8:06:58: PatchFiles.
Action ended 8:06:58: PatchFiles. Return value 1.
Action start 8:06:58: CreateShortcuts.
Action ended 8:06:58: CreateShortcuts. Return value 0.
Action start 8:06:58: WriteRegistryValues.
Action ended 8:06:58: WriteRegistryValues. Return value 1.
Action start 8:06:58: InstallServices.
Action ended 8:06:58: InstallServices. Return value 1.
Action start 8:06:58: StartServices.
Action ended 8:06:58: StartServices. Return value 1.
Action start 8:06:58: ResolveSource.
Action ended 8:06:58: ResolveSource. Return value 1.
Action start 8:06:58: InstallSignaturesW_prep.
Action ended 8:06:58: InstallSignaturesW_prep. Return value 1.
Action start 8:06:58: InstallSignaturesW.
Action ended 8:06:58: InstallSignaturesW. Return value 1.
Action start 8:06:58: RegisterUser.
Action ended 8:06:58: RegisterUser. Return value 0.
Action start 8:06:58: RegisterProduct.
Action ended 8:06:58: RegisterProduct. Return value 1.
Action start 8:06:58: PublishComponents.
Action ended 8:06:58: PublishComponents. Return value 0.
Action start 8:06:58: PublishFeatures.
Action ended 8:06:58: PublishFeatures. Return value 1.
Action start 8:06:58: PublishProduct.
Action ended 8:06:58: PublishProduct. Return value 1.
Action start 8:06:58: InstallExecute.
INSTALL SIGNATURES: 'CustomActionData' property 'MPClient Location' is
C:\Program Files\Windows Defender\mpclient.dll.
INSTALL SIGNATURES: 'CustomActionData' property 'Feature' is 2.
INSTALL SIGNATURES: 'CustomActionData' property 'Signature Update Location'
is C:\WINDOWS\Temp\.
INSTALL SIGNATURES: ERROR: Signature Update Failed. HRESULT = 0x80070002
Action ended 8:06:58: InstallExecute. Return value 3.
Action ended 8:06:58: INSTALL. Return value 3.
Property(S): INSTALLDIR = C:\WINDOWS\Temp\
Property(S): UpgradeCode = {46EE7D19-452D-4507-AAB4-28BB033ACE44}
Property(S): MSPSRC9AD8C4EE808D430CBA886075B2053507 =
C:\WINDOWS\Installer\ada631.msp
Property(S): InstallSignaturesW = C:\Program Files\Windows
Defender\;2;C:\WINDOWS\Temp\;
Property(S): WindowsTempFolder = C:\WINDOWS\Temp\
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start
Menu\Programs\Administrative Tools\
Property(S): TARGETDIR = E:\
Property(S): AppDataFolder = C:\Documents and Settings\Darren\Application
Data\
Property(S): CommonAppDataFolder = C:\Documents and Settings\All
Users\Application Data\
Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
Property(S): FavoritesFolder = E:\My Documents\Favorites\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): LocalAppDataFolder = C:\Documents and Settings\Darren\Local
Settings\Application Data\
Property(S): MyPicturesFolder = E:\My Documents\My Pictures\
Property(S): PersonalFolder = E:\My Documents\
Property(S): ProgramMenuFolder = C:\Documents and Settings\All Users\Start
Menu\Programs\
Property(S): SendToFolder = C:\Documents and Settings\Darren\SendTo\
Property(S): StartMenuFolder = C:\Documents and Settings\All Users\Start Menu\
Property(S): StartupFolder = C:\Documents and Settings\All Users\Start
Menu\Programs\Startup\
Property(S): System16Folder = C:\WINDOWS\system\
Property(S): TempFolder = C:\DOCUME~1\Darren\LOCALS~1\Temp\
Property(S): TemplateFolder = C:\Documents and Settings\All Users\Templates\
Property(S): System64Folder = E:\
Property(S): ProgramFiles64Folder = E:\
Property(S): CommonFiles64Folder = E:\
Property(S): SystemFolder = C:\WINDOWS\system32\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): SourceDir = C:\Program Files\Windows Defender\
Property(S): ALLUSERSPROFILE = E:\
Property(S): USERPROFILE = E:\
Property(S): DriverFolder = C:\WINDOWS\system32\Drivers\
Property(S): InfFolder = C:\WINDOWS\Inf\
Property(S): Privileged = 1
Property(S): VersionNT = 501
Property(S): REINSTALL = Signatures
Property(S): Manufacturer = Microsoft Corporation
Property(S): ProductCode = {A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Windows Defender Signatures
Property(S): ProductVersion = 1.20.1350.3
Property(S): ALLUSERS = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): SecureCustomProperties = NEWERFOUND;OLDERFOUND
Property(S): PackageCode = {ADF22F07-2E34-49B9-AFE8-0E0FDEF8B447}
Property(S): ProductToBeRegistered = 1
Property(S): VersionDatabase = 200
Property(S): PRODUCTLANGUAGE = 1033
Property(S): CLIENTPROCESSID = 1632
Property(S): ProductState = 5
Property(S): MSPSRC46BE8A2FA348418ABEA4FFA98FF60E04 =
C:\WINDOWS\Installer\8365b.msp
Property(S): ServicePackLevelMinor = 0
Property(S): ServicePackLevel = 2
Property(S): MsiNTProductType = 1
Property(S): WindowsBuild = 2600
Property(S): WindowsVolume = C:\
Property(S): PATCHMediaSrcProp =
C:\DOCUME~1\Darren\LOCALS~1\Temp\IXP000.TMP\MPAS-F.msp
Property(S): VersionMsi = 3.01
Property(S): PATCHNEWPACKAGECODE = {4296772B-8FCF-4E08-B53B-9B21C2F50FB9}
Property(S): PATCHNEWSUMMARYSUBJECT = Signatures for protecting the system
against malwares (viruses, trojans, worms, spywares etc.)
Property(S): PATCHNEWSUMMARYCOMMENTS = This installer database contains the
logic and data required to install Windows Defender Signatures.
Property(S): PATCH = C:\DOCUME~1\Darren\LOCALS~1\Temp\IXP000.TMP\MPAS-F.msp
Property(S): CLIENTUILEVEL = 3
Property(S): CURRENTDIRECTORY = C:\DOCUME~1\Darren\LOCALS~1\Temp\IXP000.TMP
Property(S): RemoteAdminTS = 1
Property(S): NetHoodFolder = C:\Documents and Settings\Darren\NetHood\
Property(S): PrintHoodFolder = C:\Documents and Settings\Darren\PrintHood\
Property(S): RecentFolder = C:\Documents and Settings\Darren\Recent\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 1024
Property(S): VirtualMemory = 2268
Property(S): AdminUser = 1
Property(S): LogonUser = Darren
Property(S): UserSID = S-1-5-21-2025429265-1417001333-725345543-1003
Property(S): UserLanguageID = 1033
Property(S): ComputerName = DARREN-AN35N
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1280
Property(S): ScreenY = 1024
Property(S): CaptionHeight = 26
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 8:06:58
Property(S): Date = 3/22/2006
Property(S): MsiNetAssemblySupport = 2.0.50727.42
Property(S): MsiWin32AssemblySupport = 5.1.2600.2180
Property(S): RedirectedDllSupport = 2
Property(S): USERNAME = Darren
Property(S): Installed = 00:00:00
Property(S): DATABASE = C:\WINDOWS\Installer\ada627.msi
Property(S): OriginalDatabase = C:\WINDOWS\Installer\ada627.msi
Property(S): UILevel = 2
Property(S): QFEUpgrade = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = E:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
Property(S): SOURCEDIR = C:\Program Files\Windows Defender\
Property(S): SourcedirProduct = {A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
MSI (s) (A8:78) [08:06:58:906]: Product: Windows Defender Signatures -
Update '{46BE8A2F-A348-418A-BEA4-FFA98FF60E04}' could not be installed. Error
code 1603. Additional information is available in the log file
C:\DOCUME~1\Darren\LOCALS~1\Temp\MSI83457.LOG.
MSI (s) (A8:78) [08:06:58:953]: Product: Windows Defender Signatures --
Configuration failed.
=== Logging stopped: 3/22/2006 8:06:58 ===
Bill Sanderson said:
Interesting. Yours is not the first message I've seen which wonders about
registry cleaners and Windows Defender issues. However, I can say that I've
seen problems updating on machines that have never seen a registry
cleaner--not repeated problems, however.
--
Darren said:
Thanks Bill.
That workaround is what I've been using. It works great, but I have to do
it
each time there's an update. I know this is a beta, and I don't mind
putting
up with a few bugs, but the update issue should be top priority. Does
Microsoft know what's causing the problem yet? Why some machines have no
problems, but others do?
I have tried many things to get the updates working properly. Here's what
I
tried this morning...
First off, my second machine has no problems downloading and applying the
updates. I got to poking around in C:\Documents and Settings\All
Users\Application Data\Microsoft\Windows Defender\ and noticed the Windows
Defender Directory size was larger on the working machine. I shut down
MSASCui.exe and MsMpEng.exe on the machine having problems, then deleted
the
entire Windows Defender directory in C:\Documents and Settings\All
Users\Application Data\Microsoft\. I copied the Windows Defender directory
from the working machine over to the non-working machine. I rebooted and
the
update downloaded and installed without a hitch. This makes me think
something in that directory was corrupted or something. I guess I'll know
if
it's going to "stick" when the next update comes down the pike.
Another thing...
I use a registry cleaner and suspect it was deleting entries that may be
needed by Windows Defender. After a scan with RegSeeker, I found these
entries it wanted to remove...
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F58A70DBADD45F4F864B41C7A89C85C]
"90A2CC5A3D9ECE9429D33078B4DBC4C2"="C:\\WINDOWS\\Temp\\MpEngine.dll"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6CBE9564820E95542B0A5ADB7445A63C]
"90A2CC5A3D9ECE9429D33078B4DBC4C2"="C:\\WINDOWS\\Temp\\mpasdlta.vdm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CD126EF68D2F2C04E999E7C01DE38BAE]
"90A2CC5A3D9ECE9429D33078B4DBC4C2"="C:\\WINDOWS\\Temp\\mpasbase.vdm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup]
"ServicePackCachePath"="c:\\windows\\ServicePackFiles\\ServicePackCache"
[HKEY_LOCAL_MACHINE\Software\Classes\Installer\Patches\EE4C8DA9D808C034AB8806572B505370\SourceList\Net]
"1"="C:\\DOCUME~1\\Darren\\LOCALS~1\\Temp\\IXP000.TMP\\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Patches\EE4C8DA9D808C034AB8806572B505370\SourceList]
"LastUsedSource"="n;1;C:\\DOCUME~1\\Darren\\LOCALS~1\\Temp\\IXP000.TMP\\"
I'm thinking these entries may be needed for Windows Defender to update
properly. I let RegSeeker remove them, but I backed them up so I can merge
them back into the registry if I get an error on the next update. I just
have
to wait and see.
Bill Sanderson said:
Try the resolution steps in this KB article:
http://support.microsoft.com/?kbid=915105
--
I have this error in Event Viewer as well...
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version:
Update Source: Scheduled
Signature Type:
Update Type:
User: XXXXXXXX\XXXX
Current Engine Version:
Previous Engine Version: 1.1.1186.0
Error code: 0x80070002
Error description: The system cannot find the file specified.
