Windows Update error 0x80070006

windows 10windows updatewindows-10-v1607

I've noticed that my Windows 10 is no longer updating itself. When I run the Settings app and issue an update command, this message appears.

There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80070006)

Of course, standalone updates install well. I have also been able to run a manual update from PowerShell and get Windows 10 to build 14393.970. Plus, Windows Defender keeps updating itself, so updating in general is possible.

I have tried running Microsoft Windows Update Troubleshooter. (The latest version from Microsoft website.) Nothing happened. I have also tried an equivalent from tenforums.com. Not only did it not fix my problem, it broke Windows Defender too. (System Restore came to rescue.)

Best Answer

I have had this issue on my work PC and found that errors reporting an invalid handle can arise from Windows Update running in its own process.

You can try checking if Windows Update is running in its own process, and if it is, set it to share and reboot.

To check if it is in its own process, you can run sc query wuauserv in an elevated command prompt, and check what TYPE is reported. For example, one that is is set to run as its own process will look like this:

Microsoft Windows [Version 10.0.14393]
(c) 2016 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sc query wuauserv

SERVICE_NAME: wuauserv
        TYPE               : 10  WIN32_OWN_PROCESS
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

To set it to shared (as it should be), run sc config wuauserv type= share, then reboot your PC (reboot is necessary because of some issue with SIDs not being correct without bringing down the shared process).

Once done, Windows Update should be working (provided there is nothing else wrong with it) and running sc query wuauserv should return a TYPE of 20 WIN32_SHARE_PROCESS.

Possible solution

Open an administrator command prompt. Run sfc /scannow. If Windows Update files are damaged, this should fix them.

If you encounter an error with System File Checker

I've seen cases where sfc doesn't fix this, often but not always related to a recent malware infestation. If it can't fix a file, it will tell you that it could not repair the errors it found. If you get a message like this: CD to an easy-to-access directory like "%userprofile%\Desktop", then run findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >sfcdetails.txt to pull the log events for the sfc scan and add the contents of the sfcdetails.txt to your question.

Note that if you look in the sfcdetails.txt file you may find a line like the following:

Cannot repair member file [l:14{7}]"url.dll" of Microsoft-Windows-IE-WinsockAutodialStub, Version = 6.0.5752.0, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeN

In this example, the problem is with "url.dll". You can try using Windows Search to find the newest backup copy of the file and replace it yourself. However some files, like TrustedInstaller.EXE are set so that they can only be modified by certain system processes, so you will either have to replace the file from a bootable linux disc OR reinstall. Some files will throw a fit later on if the permissions aren't correct, so if you have to use a linux boot disc to replace the file, I recommend backing up everything as soon as possible, because it may fail again eventually. If you have the time and a recent backup, I recommend doing an "in-place upgrade" reinstall by running setup from the Windows 7 disc while Windows is already running. If that doesn't work the only remaining option may be a clean reinstall.

If your log shows problems with the TrustedInstaller.exe file, you will need a linux boot disk to replace the bad copy with a good one from one of the hotfix backup folders, because Windows will only let TrustedInstaller.exe be modified by itself.

Edit: Since SFC found no problems

Since I've never actually seen a persistent issue with Windows Update that didn't cause SFC to report errors as well, I'm not sure if the following steps will help. I've done a bit more looking around and have found the following possible resolutions:

Firewall

If you are using a third-party firewall, try temporarily disabling it, then trying to update again. If it succeeds, you will need to find the setting in your firewall that is blocking Windows Update. The easiest way to fix this is to completely uninstall your firewall, then reinstall it.

Infection

Usually in my experience, malware infections interfere with Windows Update by corrupting Windows Update files. Since this isn't the case, it is still possible that malware is blocking updates any number of alternate methods, such as DLL injection or blocking the connection. A common technique malware uses is to change your proxy settings to use a program installed on your computer as a proxy.

To check this, click start, typing configure proxy settings, then hit enter. Click LAN settings. If the proxy server address is set to localhost, 127.0.0.1, or ::1, uncheck the "Use proxy server" checkbox, click OK, then OK on the "Internet Properties" dialog, then try again.

-- Note: many web accelerators will set a proxy server like this, which is not a malware infection, but may still interfere with Windows Update. If you are using a web accelerator, uninstall it.

You should also run a full virus scan. Also, do a scan with Spybot Search&Destroy (you don't need to worry about any tracking cookies it tells you about unless you are paranoid about advertisers and your privacy, but it is a good idea to remove them anyway).

Built-in troubleshooter

If a virus and spyware scan returns nothing, and your firewall isn't the culprit, you can run the built-in troubleshooter to try to find another solution. Click the Action Center icon in the Notification Area
Notification Area icon
then click "Open Action Center".

Click "Troubleshooting"
Troubleshooting Icon
then "System and Security"
System and Security icon

Click "Windows Update" then follow the directions on the screen. alt text

Windows – Cannot install Windows 8.1 Update Kb2919355. Windows Update Error 80073712

Error 80073712 = ERROR_SXS_COMPONENT_STORE_CORRUPT

I debugged this the last days several times. The fix is to run those 2 commands from a cmd, started as admin:

32Bit Windows:

dism /online /remove-package /packagename:Package_for_KB2919355~31bf3856ad364e35~x86~~6.3.1.14

dism /online /cleanup-image /startcomponentcleanup

64Bit:

dism /online /remove-package /packagename:Package_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14

dism /online /cleanup-image /startcomponentcleanup

reboot and try to install the Updates again.

When it still fails, you can use the new Refresh/Reset feature (which removes all desktop applications but repairs the Windows Core) or the old InPlace Upgrade to repair Windows completely. This also keeps all desktop applications.