"File hash does not match stored value"

[WSUSUpdateAdmin]

Hi!

So I'm thinking I'll continue running the Generator with "Verification" checked and the Installer with "Verification" unchecked. Any red flags with that approach?

You can do it that way, of course.

Nevertheless, the fact that the download part ("UpdateGenerator") runs fine with verification, whereas the installation part ("UpdateInstaller") does not (at your side) lets me suppose that a patch file is corrupt, maybe because of a damaged optical drive/medium or damaged flash drive.
In the installation log file (%SystemRoot%\wsusofflineupdate.log) and in the command window, the installation process will tell you which file fails the hash verification, if you switch on "Verify installation packages".

Regards
Torsten Wittrock

[si_updates]

I searched my machine from root for the installation log file (wsusofflineupdate.log) and I couldn't find it. I also searched for wsus*.log, just for fun, which also came up empty... I suspect this is strange behaviour? I should note that I find download.log in \wsusoffline\log (the Generator's log, I assume?) I'll check the command window next time I run the Installer to see what's causing the hash crash.

[rednaxela]

You are right, the download.log in \log\ is from the UpdateGenerator.

The wsusofflineupdate.log (from the UpdateInstaller) is normally stored in the \windows\ dir (on your system drive), maybe a cleaning-tool (e.g. CCleaner or ClearProg) deletes this log files.

[si_updates]

Thanks, rednaxela. I'll have another look. I haven't run CCleaner since I've started this thread, so I don't think that's it...

But I do have some exciting news!!! I just ran UpdateInstaller with 'verification', and it completed successfully!!! There is one interesting line in the command window output: Warning: Hash files ..\md\hashes-wddefs-x64-glb.txt and ..\md\hashes-wddefs.txt not found.. It's about 2/3 of the way through the following:

Code: Select all

Starting WSUS Offline Update (v. 7.3) at 13:56:52.95...
Checking user's privileges...
Determining system's properties...
Determining DirectX main version...
Found OS caption: Microsoft Windows 7 Professional
Found Microsoft Windows version: 6.1.7601 (w61 x64 enu sp1)
Checking medium content...
Medium build date: 06/03/2012
Medium supports Microsoft Windows (w61 x64 glb).
Checking Windows Service Pack version...
Checking Windows Update Agent version...
Checking Windows Installer version...
Checking Windows Script Host version...
Checking Internet Explorer version...
Checking Root Certificates' version...
Installing most recent Update for Root Certificates...
Verifying integrity of ..\win\glb\rootsupd.exe...
hashdeep64.exe: Audit passed
Installing ..\win\glb\rootsupd.exe...
Checking C++ Runtime Libraries' installation state...
Checking DirectX version...
Checking Microsoft Security Essentials installation state...
Determining Microsoft Security Essentials definition file version...
Installing Microsoft Security Essentials definition file...
Verifying integrity of ..\msse\x64-glb\mpam-fex64.exe...
hashdeep64.exe: Audit passed
Installing ..\msse\x64-glb\mpam-fex64.exe...
Checking Windows Defender installation state...
Determining Windows Defender definition file version...
Installing Windows Defender definition file...
Verifying integrity of ..\wddefs\x64-glb\mpas-feX64.exe...
Warning: Hash files ..\md\hashes-wddefs-x64-glb.txt and ..\md\hashes-wddefs.txt not found.
Installing ..\wddefs\x64-glb\mpas-feX64.exe...
Checking state of service 'automatic updates'...
Verifying integrity of Windows Update catalog file...
hashdeep64.exe: Audit passed
14:00:20.45 - Listing ids of missing updates (please be patient, this will take a while)...
14:01:44.35 - Done.
Listing ids of installed updates...
Listing update files...
Warning: Update kb2626806 (id: 38c26f99-06db-4526-bb02-598e68b314c5) not found.
Info: Skipping update kb890830 (Malicious Software Removal Tool) due to matching black list entry.
Warning: Update kb2668562 (id: a372984e-8ff9-40b1-b9da-d958219d2440) not found.

Any missing update was either black listed or not found.

Ending WSUS Offline Update at 14:01:50.91...

Z:\cmd>

Come to think of it, 'wddefs' does look familiar... I wonder if that's where it was hanging up before. Not quite sure why it's working now, but it does make me happy!!! I'll see if it works on another machine or two and get back to you.
Edit: I've run the Installer with 'verification' on another machine and it worked! Here's hoping it's fixed.

[WSUSUpdateAdmin]

Hi!

To get rid of your remaining warning during installation, you now may re-run "UpdateGenerator" (the download part) with both "Include Windows Defender definitions" and "Verify downloaded updates" options checked.
This will download the most recent Windows Defender definitions and create the missing ...\client\md\hashes-wddefs.txt file.

Regards
Torsten Wittrock

[si_updates]

Interestingly enough, I just ran it on an XP machine (my earlier successes have been with 7) and I didn't get the 'wddefs' warning. Not that I'm complaining; just an observation. But, yes, the next time I run the Generator I'll make sure Defender is included.

I think that's it for now. Thanks again for the help and patience.

Paul

[si_updates]

The wsusofflineupdate.log (from the UpdateInstaller) is normally stored in the \windows\ dir (on your system drive).

Thanks rednaxela--that's where I finally found the log file! Here's an example of a failed Installer run:

Code: Select all

Mon 05/03/2012 14:01:15.44 - Info: Starting WSUS Offline Update (v. 7.3) on GROUP2 (user: Admin)
Mon 05/03/2012 14:01:15.44 - Info: Option /updatercerts detected
Mon 05/03/2012 14:01:15.46 - Info: Option /updatecpp detected
Mon 05/03/2012 14:01:15.48 - Info: Option /updatedx detected
Mon 05/03/2012 14:01:15.50 - Info: Option /verify detected
Mon 05/03/2012 14:01:23.77 - Info: Found OS caption 'Microsoft Windows 7 Professional '
Mon 05/03/2012 14:01:23.78 - Info: Found Microsoft Windows version 6.1.7601 (w61 x64 enu sp1)
Mon 05/03/2012 14:01:23.78 - Info: Found Windows Update Agent version 7.5.7601.17514
Mon 05/03/2012 14:01:23.78 - Info: Found Windows Installer version 5.0.7601.17514
Mon 05/03/2012 14:01:23.78 - Info: Found Windows Script Host version 5.8.7601.16978
Mon 05/03/2012 14:01:23.79 - Info: Found Internet Explorer version 9.0.8112.16421
Mon 05/03/2012 14:01:23.79 - Info: Found Root Certificates' version 0.0.0.0
Mon 05/03/2012 14:01:23.79 - Info: Found Microsoft Data Access Components version 6.1.7601.17514
Mon 05/03/2012 14:01:23.79 - Info: Found Microsoft DirectX main version 11
Mon 05/03/2012 14:01:23.80 - Info: Found Microsoft DirectX core version 9.0c (4.09.00.0904)
Mon 05/03/2012 14:01:23.80 - Info: Found Windows Media Player version 12.0.7601.17514
Mon 05/03/2012 14:01:23.80 - Info: Found Terminal Services Client version 6.1.7601.17514
Mon 05/03/2012 14:01:23.80 - Info: Found Microsoft .NET Framework 3.5 version 3.5.30729.5420
Mon 05/03/2012 14:01:23.81 - Info: Found Microsoft .NET Framework 4 version 0.0.0
Mon 05/03/2012 14:01:23.81 - Info: Found Microsoft Security Essentials definitions version 1.121.805.0
Mon 05/03/2012 14:01:23.81 - Info: Found Windows Defender definitions version 1.81.1898.0
Mon 05/03/2012 14:01:23.81 - Info: Found Windows PowerShell version 2.0
Mon 05/03/2012 14:01:23.82 - Info: Found Microsoft Office 2010 Word version 14.0.6024.1000 (o2k10 x86 enu sp1)
Mon 05/03/2012 14:01:23.82 - Info: Medium build date: 05/03/2012
Mon 05/03/2012 14:01:23.83 - Info: Medium supports Microsoft Windows (w61 x64 glb)
Mon 05/03/2012 14:01:23.83 - Info: Medium supports Microsoft Office (o2k10 enu)
Mon 05/03/2012 14:01:24.93 - Info: Installed ..\win\glb\rootsupd.exe
Mon 05/03/2012 14:01:25.05 - Warning: Hash files ..\md\hashes-wddefs-x64-glb.txt and ..\md\hashes-wddefs.txt not found
Mon 05/03/2012 14:01:31.72 - Info: Installed ..\wddefs\x64-glb\mpas-feX64.exe
Mon 05/03/2012 14:01:31.73 - Info: Detected state of service 'automatic updates': Running (start mode: Auto)
Mon 05/03/2012 14:01:32.19 - Error: File hash does not match stored value (file: ..\wsus\wsusscn2.cab)
Mon 05/03/2012 14:01:32.19 - Info: Ending WSUS Offline Update

The problem, as you can see, is "Error: File hash does not match stored value (file: ..\wsus\wsusscn2.cab)."
Here's an example of one of the recent Installer runs that has worked:

Code: Select all

Tue 06/03/2012 16:00:03.76 - Info: Starting WSUS Offline Update (v. 7.3) on GROUP2 (user: Admin)
Tue 06/03/2012 16:00:03.78 - Info: Option /updatercerts detected
Tue 06/03/2012 16:00:03.93 - Info: Option /updatecpp detected
Tue 06/03/2012 16:00:04.08 - Info: Option /updatedx detected
Tue 06/03/2012 16:00:04.23 - Info: Option /verify detected
Tue 06/03/2012 16:00:13.85 - Info: Found OS caption 'Microsoft Windows 7 Professional '
Tue 06/03/2012 16:00:13.85 - Info: Found Microsoft Windows version 6.1.7601 (w61 x64 enu sp1)
Tue 06/03/2012 16:00:13.86 - Info: Found Windows Update Agent version 7.5.7601.17514
Tue 06/03/2012 16:00:13.87 - Info: Found Windows Installer version 5.0.7601.17514
Tue 06/03/2012 16:00:13.87 - Info: Found Windows Script Host version 5.8.7601.16978
Tue 06/03/2012 16:00:13.88 - Info: Found Internet Explorer version 9.0.8112.16421
Tue 06/03/2012 16:00:13.89 - Info: Found Root Certificates' version 0.0.0.0
Tue 06/03/2012 16:00:13.89 - Info: Found Microsoft Data Access Components version 6.1.7601.17514
Tue 06/03/2012 16:00:13.90 - Info: Found Microsoft DirectX main version 11
Tue 06/03/2012 16:00:13.91 - Info: Found Microsoft DirectX core version 9.0c (4.09.00.0904)
Tue 06/03/2012 16:00:13.91 - Info: Found Windows Media Player version 12.0.7601.17514
Tue 06/03/2012 16:00:13.92 - Info: Found Terminal Services Client version 6.1.7601.17514
Tue 06/03/2012 16:00:13.93 - Info: Found Microsoft .NET Framework 3.5 version 3.5.30729.5420
Tue 06/03/2012 16:00:13.93 - Info: Found Microsoft .NET Framework 4 version 0.0.0
Tue 06/03/2012 16:00:13.94 - Info: Found Microsoft Security Essentials definitions version 1.121.945.0
Tue 06/03/2012 16:00:13.95 - Info: Found Windows Defender definitions version 1.81.1898.0
Tue 06/03/2012 16:00:13.95 - Info: Found Windows PowerShell version 2.0
Tue 06/03/2012 16:00:13.97 - Info: Found Microsoft Office 2010 Word version 14.0.6024.1000 (o2k10 x86 enu sp1)
Tue 06/03/2012 16:00:13.99 - Info: Medium build date: 06/03/2012
Tue 06/03/2012 16:00:14.00 - Info: Medium supports Microsoft Windows (w61 x64 glb)
Tue 06/03/2012 16:00:14.02 - Info: Medium supports Microsoft Office (o2k10 enu)
Tue 06/03/2012 16:00:16.71 - Info: Installed ..\win\glb\rootsupd.exe
Tue 06/03/2012 16:00:17.53 - Warning: Hash files ..\md\hashes-wddefs-x64-glb.txt and ..\md\hashes-wddefs.txt not found
Tue 06/03/2012 16:00:24.81 - Info: Installed ..\wddefs\x64-glb\mpas-feX64.exe
Tue 06/03/2012 16:00:24.99 - Info: Detected state of service 'automatic updates': Running (start mode: Auto)
Tue 06/03/2012 16:01:11.63 - Info: Skipped update kb890830 (Malicious Software Removal Tool) due to matching black list entry
Tue 06/03/2012 16:01:11.71 - Info: Any missing update was either black listed or not found
Tue 06/03/2012 16:01:11.76 - Info: Ending WSUS Offline Update

Maybe someone can see what has changed between the two runs??? If not, that's OK. It is working and that's what I'm after. Just posting this in case it helps anyone down the road.