Service Pack 4 Install Failure

  • Thread starter CHANGE USERNAME TO westes
  • Start date
C

CHANGE USERNAME TO westes

On one of my machines I get a failure installing Windows 2000 Service Pack
4. The svcpack.log file reads as follows right before the failure:


Starting process: C:\WINNT\system32\msmqprop.exe /u
***

Return Code = 4294967295
***

Starting process: C:\WINNT\system32\wzcsetup.exe /i /P
***

Return Code = 2148467211
***

DoInstallation:RunInfProcesses for ProcessesToRun Failed
***

Service Pack 4 Setup encountered an error: An error in updating your system
has occurred.
***

Failed Deleting C:\WINNT\system32\msiinst.tmp 2
***

VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem29.cat

***

An error in updating your system has occurred.

Select 'OK' to undo the changes that have been made, or select 'Cancel' to
quit. If you select 'Cancel', your system will be left in a partially
updated state and may not work correctly.
***


What would cause this and how do I correct it?
 
D

David H. Lipman

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
5) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave






| On one of my machines I get a failure installing Windows 2000 Service Pack
| 4. The svcpack.log file reads as follows right before the failure:
|
|
| Starting process: C:\WINNT\system32\msmqprop.exe /u
| ***
|
| Return Code = 4294967295
| ***
|
| Starting process: C:\WINNT\system32\wzcsetup.exe /i /P
| ***
|
| Return Code = 2148467211
| ***
|
| DoInstallation:RunInfProcesses for ProcessesToRun Failed
| ***
|
| Service Pack 4 Setup encountered an error: An error in updating your system
| has occurred.
| ***
|
| Failed Deleting C:\WINNT\system32\msiinst.tmp 2
| ***
|
| VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem29.cat
|
| ***
|
| An error in updating your system has occurred.
|
| Select 'OK' to undo the changes that have been made, or select 'Cancel' to
| quit. If you select 'Cancel', your system will be left in a partially
| updated state and may not work correctly.
| ***
|
|
| What would cause this and how do I correct it?
|
| --
| Will
| westes AT earthbroadcast.com
|
|
 
C

CHANGE USERNAME TO westes

Before I spend the next 1/2 of my life on a wild goose chase, is there
anything specifically in the failure log I suspected that makes you think it
is a virus or adware?
 
D

David H. Lipman

Are you expecting to die real soon because it won't take that long -- really ;-)

It is more or less a hunch and gut feeling.

Dave



| Before I spend the next 1/2 of my life on a wild goose chase, is there
| anything specifically in the failure log I suspected that makes you think it
| is a virus or adware?
|
| --
| Will
| westes AT earthbroadcast.com
|
|
| | > 1) Download the following three items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE
| > http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download sysclean.com and place it in that directory.
| > Dowload the signature files (pattern files) by obtaining the ZIP file.
| > For example; lpt186.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same
| directory as
| > sysclean.com.
| >
| > 2) If you are using WinME or WinXP, disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 3) Reboot your PC into Safe Mode
| > 4) Using both the Trend Sysclean utility and Adaware, perform a Full
| Scan of your
| > platform and clean/delete any infectors/parasites found.
| > 5) Restart your PC and perform a "final" Full Scan of your platform
| using both the
| > Trend Sysclean utility and Adaware
| > 6) If you are using WinME or WinXP,Re-enable System Restore and
| re-apply any
| > System Restore preferences, (e.g. HD space to use suggested
| 400 ~ 600MB),
| > 7) Reboot your PC.
| > 8) If you are using WinME or WinXP, create a new Restore point
| > 9) Please report back your results
| >
| > Dave
| >
| >
| >
| >
| >
| >
| message
| > | > | On one of my machines I get a failure installing Windows 2000 Service
| Pack
| > | 4. The svcpack.log file reads as follows right before the failure:
| > |
| > |
| > | Starting process: C:\WINNT\system32\msmqprop.exe /u
| > | ***
| > |
| > | Return Code = 4294967295
| > | ***
| > |
| > | Starting process: C:\WINNT\system32\wzcsetup.exe /i /P
| > | ***
| > |
| > | Return Code = 2148467211
| > | ***
| > |
| > | DoInstallation:RunInfProcesses for ProcessesToRun Failed
| > | ***
| > |
| > | Service Pack 4 Setup encountered an error: An error in updating your
| system
| > | has occurred.
| > | ***
| > |
| > | Failed Deleting C:\WINNT\system32\msiinst.tmp 2
| > | ***
| > |
| > | VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem29.cat
| > |
| > | ***
| > |
| > | An error in updating your system has occurred.
| > |
| > | Select 'OK' to undo the changes that have been made, or select 'Cancel'
| to
| > | quit. If you select 'Cancel', your system will be left in a partially
| > | updated state and may not work correctly.
| > | ***
| > |
| > |
| > | What would cause this and how do I correct it?
| > |
| > | --
| > | Will
| > | westes AT earthbroadcast.com
| > |
| > |
| >
| >
|
|
 
C

CHANGE USERNAME TO westes

David H. Lipman said:
Are you expecting to die real soon because it won't take that long -- really ;-)

It is more or less a hunch and gut feeling.

Dave



| Before I spend the next 1/2 of my life on a wild goose chase, is there
| anything specifically in the failure log I suspected that makes you think it
| is a virus or adware?
|
| --
| Will
| westes AT earthbroadcast.com
|
|
| | > 1) Download the following three items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE
| > http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download sysclean.com and place it in that directory.
| > Dowload the signature files (pattern files) by obtaining the ZIP file.
| > For example; lpt186.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same
| directory as
| > sysclean.com.
| >
| > 2) If you are using WinME or WinXP, disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 3) Reboot your PC into Safe Mode
| > 4) Using both the Trend Sysclean utility and Adaware, perform a Full
| Scan of your
| > platform and clean/delete any infectors/parasites found.
| > 5) Restart your PC and perform a "final" Full Scan of your platform
| using both the
| > Trend Sysclean utility and Adaware
| > 6) If you are using WinME or WinXP,Re-enable System Restore and
| re-apply any
| > System Restore preferences, (e.g. HD space to use suggested
| 400 ~ 600MB),
| > 7) Reboot your PC.
| > 8) If you are using WinME or WinXP, create a new Restore point
| > 9) Please report back your results
| >
| > Dave
| >
| >
| >
| >
| >
| >
| message
| > | > | On one of my machines I get a failure installing Windows 2000 Service
| Pack
| > | 4. The svcpack.log file reads as follows right before the failure:
| > |
| > |
| > | Starting process: C:\WINNT\system32\msmqprop.exe /u
| > | ***
| > |
| > | Return Code = 4294967295
| > | ***
| > |
| > | Starting process: C:\WINNT\system32\wzcsetup.exe /i /P
| > | ***
| > |
| > | Return Code = 2148467211
| > | ***
| > |
| > | DoInstallation:RunInfProcesses for ProcessesToRun Failed
| > | ***
| > |
| > | Service Pack 4 Setup encountered an error: An error in updating your
| system
| > | has occurred.
| > | ***
| > |
| > | Failed Deleting C:\WINNT\system32\msiinst.tmp 2
| > | ***
| > |
| > | VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem29.cat
| > |
| > | ***
| > |
| > | An error in updating your system has occurred.
| > |
| > | Select 'OK' to undo the changes that have been made, or select 'Cancel'
| to
| > | quit. If you select 'Cancel', your system will be left in a partially
| > | updated state and may not work correctly.
| > | ***
| > |
| > |
| > | What would cause this and how do I correct it?
| > |
| > | --
| > | Will
| > | westes AT earthbroadcast.com
| > |
| > |
| >
| >
|
|
 
C

CHANGE USERNAME TO westes

I ran Virus Scan and it found one virus in my Recent directory that looked
to be three years old, but the computer wasn't infected with it. I ran
VirusScan a second time and it signaled all clear.

If you really think it is necessary I can try Adaware.
 
E

Enkidu

On one of my machines I get a failure installing Windows 2000 Service Pack
4. The svcpack.log file reads as follows right before the failure:
Mmm, I'd try a check disk. Also, was the SP from CD? If so, I'd see if
another copy would work.

Cheers,

Cliff
 
C

CHANGE USERNAME TO westes

SP4 was from disk. Checkdisk shows no error. The CD works fine, and I
used it on an adjacent machine at the same time.
 
D

David H. Lipman

Since you DID have an infector, I would suggest an Adaware SE scan.

Dave




| I ran Virus Scan and it found one virus in my Recent directory that looked
| to be three years old, but the computer wasn't infected with it. I ran
| VirusScan a second time and it signaled all clear.
|
| If you really think it is necessary I can try Adaware.
|
| --
| Will
| westes AT earthbroadcast.com
|
|
| | > Are you expecting to die real soon because it won't take that long --
| really ;-)
| >
| > It is more or less a hunch and gut feeling.
| >
| > Dave
| >
| >
| >
| message
| > | > | Before I spend the next 1/2 of my life on a wild goose chase, is there
| > | anything specifically in the failure log I suspected that makes you
| think it
| > | is a virus or adware?
| > |
| > | --
| > | Will
| > | westes AT earthbroadcast.com
| > |
| > |
| > | | > | > 1) Download the following three items...
| > | >
| > | > Trend Sysclean Package
| > | > http://www.trendmicro.com/download/dcs.asp
| > | >
| > | > Latest Trend signature files.
| > | > http://www.trendmicro.com/download/pattern.asp
| > | >
| > | > Adaware SE
| > | > http://www.lavasoftusa.com/
| > | >
| > | > Create a directory.
| > | > On drive "C:\"
| > | > (e.g., "c:\New Folder")
| > | > or the desktop
| > | > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| > | >
| > | > Download sysclean.com and place it in that directory.
| > | > Dowload the signature files (pattern files) by obtaining the ZIP file.
| > | > For example; lpt186.zip
| > | >
| > | > Extract the contents of the ZIP file and place the contents in the
| same
| > | directory as
| > | > sysclean.com.
| > | >
| > | > 2) If you are using WinME or WinXP, disable System Restore
| > | >
| http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > | > 3) Reboot your PC into Safe Mode
| > | > 4) Using both the Trend Sysclean utility and Adaware, perform a
| Full
| > | Scan of your
| > | > platform and clean/delete any infectors/parasites found.
| > | > 5) Restart your PC and perform a "final" Full Scan of your
| platform
| > | using both the
| > | > Trend Sysclean utility and Adaware
| > | > 6) If you are using WinME or WinXP,Re-enable System Restore and
| > | re-apply any
| > | > System Restore preferences, (e.g. HD space to use
| suggested
| > | 400 ~ 600MB),
| > | > 7) Reboot your PC.
| > | > 8) If you are using WinME or WinXP, create a new Restore point
| > | > 9) Please report back your results
| > | >
| > | > Dave
| > | >
| > | >
| > | >
| > | >
| > | >
| > | >
| in
| > | message
| > | > | > | > | On one of my machines I get a failure installing Windows 2000
| Service
| > | Pack
| > | > | 4. The svcpack.log file reads as follows right before the failure:
| > | > |
| > | > |
| > | > | Starting process: C:\WINNT\system32\msmqprop.exe /u
| > | > | ***
| > | > |
| > | > | Return Code = 4294967295
| > | > | ***
| > | > |
| > | > | Starting process: C:\WINNT\system32\wzcsetup.exe /i /P
| > | > | ***
| > | > |
| > | > | Return Code = 2148467211
| > | > | ***
| > | > |
| > | > | DoInstallation:RunInfProcesses for ProcessesToRun Failed
| > | > | ***
| > | > |
| > | > | Service Pack 4 Setup encountered an error: An error in updating
| your
| > | system
| > | > | has occurred.
| > | > | ***
| > | > |
| > | > | Failed Deleting C:\WINNT\system32\msiinst.tmp 2
| > | > | ***
| > | > |
| > | > | VerifySize: Unable to verify size: Source = NULL: c:\winnt\oem29.cat
| > | > |
| > | > | ***
| > | > |
| > | > | An error in updating your system has occurred.
| > | > |
| > | > | Select 'OK' to undo the changes that have been made, or select
| 'Cancel'
| > | to
| > | > | quit. If you select 'Cancel', your system will be left in a
| partially
| > | > | updated state and may not work correctly.
| > | > | ***
| > | > |
| > | > |
| > | > | What would cause this and how do I correct it?
| > | > |
| > | > | --
| > | > | Will
| > | > | westes AT earthbroadcast.com
| > | > |
| > | > |
| > | >
| > | >
| > |
| > |
| >
| >
|
|
 
C

CHANGE USERNAME TO westes

I had a three year old infector I had deliberately set aside in an area
where I put suspect mail, but I wasn't infected.

In any case, the last time I had a SP4 failure, one of the MSVPs asked for
the failure log, read the fail line, and immediately identified a hotfix I
needed to apply to remove that error. After I did that hotfix, everything
worked. I suspect a similar sequence is what will fix this problem this
time.
 
D

David H. Lipman

If it was on the PC, you were infected. If you weren't infected, it would *never* been on
the computer and all remnants should have been removed at that time.

On the 100's of desktops and notebooks I have installed Win2k SP4, I have had zero failures.

Dave




| I had a three year old infector I had deliberately set aside in an area
| where I put suspect mail, but I wasn't infected.
|
| In any case, the last time I had a SP4 failure, one of the MSVPs asked for
| the failure log, read the fail line, and immediately identified a hotfix I
| needed to apply to remove that error. After I did that hotfix, everything
| worked. I suspect a similar sequence is what will fix this problem this
| time.
|
| --
| Will
| westes AT earthbroadcast.com
|
|
| | > Since you DID have an infector, I would suggest an Adaware SE scan.
|
|
 
C

CHANGE USERNAME TO westes

Dave, I physically isolated the binary that creates the infection into a
manually created subdirectory that holds suspect files. I never executed
that binary. Trust me I know what I am doing with such things.

The virus application did NOT find an *infection* on the computer. The
virus application found a binary that was capable of creating an infection
on the computer. And it was there by my intent, not as an accident.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top