Error 0x80072EFE means the connection to the update or Store server started and then dropped before the data finished arriving. The usual suspects are a proxy or security product interfering with the traffic, a wrong system clock, bad DNS or a damaged network stack. Work from the cheapest test, the clock and a different network, toward the winhttp and winsock resets.
Key takeaways
- The code is a network symptom (the connection was cut mid-transfer), not a sign that Windows files are broken.
- Try another network, such as a phone hotspot, early: it tells you whether the PC or the connection is at fault.
- Stale proxy settings and third-party firewalls or VPNs are the most common local causes.
- Correct date, time and time zone matter because encrypted connections fail on a wrong clock.
- Resetting winhttp and winsock is quick, but it removes custom network settings and can disconnect VPN or security-suite network filters, so note them first.
What the message is telling you
The text "The connection with the server was terminated abnormally" belongs to the Windows internet client layer, WinINet and WinHTTP. Windows Update, the Microsoft Store and some installers use these to talk to Microsoft. Error 0x80072EFE is raised when the server connection was opened and then closed in a way the client did not expect. In plain terms, something between your PC and the server interrupted the conversation.
That something might be on the PC: a security product inspecting encrypted traffic, a proxy that no longer exists, a corrupted network stack. It might also be outside: a router with a flaky firmware, an ISP that resets long connections, a school or office filter blocking certain hosts. The aim is to work out which side.
Where it shows up
- Windows Update: Settings shows "We couldn't connect to the update service" or an update fails to download with this code in the history.
- Microsoft Store: an app page loads blank, or an install stops at the start with a "Try again" prompt.
- Older Windows 7 or 8 machines: the code was common when updates failed to check, often tied to outdated components. Those versions are no longer supported, so this guide focuses on Windows 10 and 11.
- Standalone installers: setup tools that download components at run time report the same code.
Likely causes and where to start
| Cause | Clue | Go to |
|---|---|---|
| Wrong date, time or time zone | Clock is off by hours or days, often after a dead CMOS battery | Clock check |
| Stale proxy configuration | Proxy turned on in Settings, or left by old software | Proxy reset |
| Security software scanning HTTPS | Works with the antivirus paused | Security software test |
| VPN or filter on the network | Works from another network only | Network isolation test |
| DNS trouble | Some sites load, Microsoft hosts do not, or loading is slow | DNS steps |
| Damaged Winsock catalog | Other apps show network errors too | netsh resets |
| Update service components out of step | Network is fine, only Windows Update fails | Update component reset |
Fast tests that save time
First, find out whether the internet is truly fine. Open a browser and load a few different sites, including one that uses https. If nothing loads, fix the connection first and ignore the Windows error for now.
Second, move the PC to another network. A phone hotspot is ideal. If the update or Store works there, your PC is fine and the problem sits in the router, the ISP path, a firewall appliance or a filter on the usual network. If it still fails on the hotspot, the cause is on the PC.
Third, restart the router and the PC. It sounds basic, but half-open connections and stuck DNS caches are cleared by it more often than people expect.
Check the clock and the time zone
Encrypted connections depend on certificates that are valid for a date range. If your clock is wrong, Microsoft servers can look expired or not yet valid, and the connection is dropped. Go to Settings, Time and language, Date and time. Turn on Set time automatically and Set time zone automatically, and press Sync now. If the time keeps resetting after each power-off, the small motherboard battery is probably dead, and replacing it prevents repeated failures.
Reset the proxy that Windows services use
Windows services do not always follow the same proxy settings as your browser. WinHTTP has its own, and it can retain an address from software you removed long ago. Look first at Settings, Network and internet, Proxy, and turn off Use a proxy server unless your workplace requires it. Then view and clear the WinHTTP setting from an elevated Command Prompt:
netsh winhttp show proxy
netsh winhttp reset proxy
If the first command lists a server that you do not recognise, resetting is exactly what you want. If you are on a company network that uses a proxy on purpose, ask your administrator before changing it, because the reset would remove the required entry.
Take security software out of the picture
Many antivirus and internet security suites inspect HTTPS traffic through a local filter. A bug or an outdated component in that filter can cut the connection mid-transfer, which is a precise match for this error. Pause the web protection or the firewall of the third-party product for ten minutes and try Windows Update or the Store again. If it now works, update the security product, or look in its settings for an option such as scanning encrypted connections and turn that off. Do not leave the PC unprotected: turn the protection back on afterwards. Windows Security stays active on its own when you pause a separate product, so it is safe to test.
The same logic applies to a VPN. Disconnect it, test again, and if the error is gone, switch the VPN protocol or server, or allow Windows Update through its split tunnelling settings.
Not sure what is wrong? Get a diagnosis first.
Our certified tech can connect remotely, check your software, drivers and backups, and tell you honestly whether the problem needs a hands-on repair.
DNS and the network stack
Clear the resolver cache, release the address, and renew it:
ipconfig /flushdns
ipconfig /release
ipconfig /renew
If the connection looks slow or only certain hosts fail, try a different DNS provider in the adapter settings. In Settings, Network and internet, choose your connection, edit the DNS server assignment, and enter a public resolver that you trust. Test after the change. If everything works with it, your router or ISP DNS was the weak link.
Next, reset the Winsock catalog and the TCP/IP stack. These commands rebuild the layers that applications use to open connections:
netsh winsock reset
netsh int ip reset
Restart the PC after running them. They remove manually set static IPs and some custom adapter settings, so write those down first if you use any. Windows 11 also has Settings, Network and internet, Advanced network settings, Network reset, which does a wider job and reinstalls adapters. Use it last, because it removes saved VPN profiles and similar entries.
If only Windows Update fails
When the browser works on the same network, the proxy and DNS are clean, and the Store is fine, the update client itself may be out of step. Run the built-in troubleshooter from Settings, System, Troubleshoot, Other troubleshooters, Windows Update (if your build still lists it). If that does not help, stop the update services, clear the download cache, and start them again:
net stop wuauserv
net stop bits
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
net start bits
net start wuauserv
Windows rebuilds the folder automatically. The update history list in Settings may appear empty afterwards; that is normal. If a .old folder already exists from a previous attempt, delete or rename it first. Run a check for updates again. Then, if component damage is suspected, DISM and sfc come next:
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow
Our broader guide to stuck or failing Windows Update covers more of this ground, and the page for error 0x80070005 explains the permission-type failures that sometimes appear in the same history list.
Router and network equipment
If the hotspot test showed the PC working elsewhere, give the home or office network some attention. Restart the router, update its firmware, and check whether a parental control, content filter or DNS filtering feature is turned on. Some mesh systems also drop long encrypted sessions. In an office, ask the person who manages the firewall whether Microsoft update and Store hosts are filtered or inspected. A rule that terminates large downloads produces exactly this symptom.
Store-specific steps
For the Store, run wsreset from the Start menu search or the Run box. A blank window opens, closes after a bit, and the Store restarts with a clean cache. Signing out of the Store and back in is another quick test. Make sure that the Microsoft Store Install Service is running in services.msc, and set to Manual or Automatic.
What to avoid
- Do not download update packages from unofficial sites. A "fix" that replaces update files from a random source is a bigger risk than the error.
- Do not disable the firewall and leave it off. Pause it only for a short test.
- Do not edit the registry's internet settings based on forum snippets you do not fully understand.
- Do not run several resets at once. Change one thing, test, then move on, so you learn what worked.
- Do not install third-party "network repair" tools. Everything they do can be done with the built-in commands above.
- Do not skip the clock check. A wrong date is dull, but it causes many connection errors.
When to bring in a technician
- The error continues on a different network after all the steps above.
- The PC is on a managed work network and you are unsure about proxy or filter rules.
- Several apps show network failures, not just Windows Update or the Store.
- You suspect malware, for instance because browser homepages or DNS entries keep changing.
- DISM or sfc report damage that they cannot repair.
This is a good case for a remote session: a technician can look at the proxy, the security product settings, the services and the update logs together, which takes far less time than trial and error. See how it works on our remote repair page and Windows support. If the update problem comes with a different code, try the guide for 0x800f081f.
Keeping update connections reliable
- Leave Set time automatically switched on, and replace a dead motherboard battery.
- Keep your security software updated, and prefer products that handle Windows Update traffic gracefully.
- Remove proxy and VPN software you no longer use, since leftovers often keep settings behind.
- Restart the router occasionally and keep its firmware current.
- Do not stop the update services or disable the Store for "performance" reasons.
- Run updates on a stable connection, and avoid starting large downloads while on a shaky Wi-Fi signal.
FAQ
What does 0x80072EFE mean in simple terms?
The connection to the update or Store server was cut off while data was moving. It points to a network or interception problem, not to a faulty Windows file.
Can antivirus cause 0x80072EFE?
Yes. Products that scan encrypted traffic can interrupt the connection. Pausing web protection briefly shows if that is the cause.
Why does Windows Update work on my phone hotspot but not at home?
Then the PC is fine. The router, the ISP path, DNS or a filter on your home network is dropping the connection.
Will netsh winsock reset delete my files?
No. It rebuilds network settings. You may lose custom static IP or adapter configuration, so note those first.
Does the date and time really matter?
Yes. Secure connections rely on certificate dates, and a clock that is far off makes servers look invalid, so the connection is dropped.
Is the Store error the same as the Update error?
The code is the same family of network failure and the early checks are the same. The last steps differ: wsreset for the Store, cache and service steps for Windows Update.
Should I use a different DNS server?
It is worth a test. If the error disappears with another resolver, your router or ISP DNS was the cause.
Can this be fixed remotely?
In most cases, yes, provided the PC has some working internet access for the session. A technician can inspect proxy, services and security settings together.
