issues with windows 7 not genuine

All Replies

• Monday, May 14, 2012 10:29 PM

   

   
  

  0
  also can only open in safe mode !
  • Reply
  • Quote

   
• Tuesday, May 15, 2012 2:22 AM

  Answerer

   

   
  

  0
  Run chkdsk to check the hard drive for errors.

  ---

  Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.

  • Reply
  • Quote

   
• Tuesday, May 15, 2012 3:03 AM

   

   
  

  0

  Run chkdsk to check the hard drive for errors.

  ---

  Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.

  did that .. still same problem.  If i open via f8 and choose start from last known good boot (advanced) my laptop boots ok .  If i then reboot and attempt to boot as normal and not via safe mode , as above I get pink screen and message telling that windows not genuine . Only 
  

  • Edited by Ticktock2001 Tuesday, May 15, 2012 3:14 AM
  •  
  • Reply
  • Quote

   
• Tuesday, May 15, 2012 9:01 AM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:24178641-4d8e-4e6b-8278-e0990463d7df...

  Run chkdsk to check the hard drive for errors.

  ---

  Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.

  did that .. still same problem.  If i open via f8 and choose start from last known good boot (advanced) my laptop boots ok ..  If i then reboot and attempt to boot as normal and not via safe mode , as above I get pink screen and message telling that windows not genuine . Only
  

   

   

  Try a Clean Boot startup, then run SFC /SCANNOW from an elevated Command Prompt.

  http://support.microsoft.com/kb/929135

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 1:34 AM

   

   
  

  0

  "Ticktock2001" wrote in message news:24178641-4d8e-4e6b-8278-e0990463d7df...

  Run chkdsk to check the hard drive for errors.

  ---

  Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.

  did that .. still same problem.  If i open via f8 and choose start from last known good boot (advanced) my laptop boots ok ..  If i then reboot and attempt to boot as normal and not via safe mode , as above I get pink screen and message telling that windows not genuine . Only
  

   

   

  Try a Clean Boot startup, then run SFC /SCANNOW from an elevated Command Prompt.

  http://support.microsoft.com/kb/929135

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Hi Noel, followed instruction in link above and starting with Clean boot. On restart I got a bank screen with message in bottom right corner "Windows 7 Build 7601 This copy of windows is not genuine.  So I then restarted via f8 and selected "Last known good configuration".. opened ok and then ran sfc/scannow as admin.  After a few minutes at 40% I got message.." Windows Resource Protections could not perform requested operation" !!!
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 8:53 AM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:4c163c49-e7e8-46bd-b462-3b7e7945a13f...

  Hi Noel, followed instruction in link above and starting with Clean boot. On restart I got a bank screen with message in bottom right corner "Windows 7 Build 7601 This copy of windows is not genuine.  So I then restarted via f8 and selected "Last known good configuration".. opened ok and then ran sfc/scannow as admin.  After a few minutes at 40% I got message.." Windows Resource Protections could not perform requested operation" !!!

   

  try the steps in this post - http://answers.microsoft.com/en-us/windows/forum/windows_7-system/sfcscannow-message-could-not-perform-requested/ba0e2211-bbc9-4ba6-9d19-c546bfb17785

  from Gaurav Prakash

   

  You can copy teh CBS.log file to your desktop, and then upload it to your public SkyDrive for analysis - post a link here.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 9:55 AM

   

   
  

  0

  access denied  to cbs.log file 

  sample of sfcdetails...

  012-05-16 11:15:40, Info                  CSI    0000013d [SR] Beginning Verify and Repair transaction
  2012-05-16 11:15:47, Info                  CSI    0000013f [SR] Verify complete
  2012-05-16 11:15:48, Info                  CSI    00000140 [SR] Verifying 100 (0x0000000000000064) components
  2012-05-16 11:15:48, Info                  CSI    00000141 [SR] Beginning Verify and Repair transaction
  2012-05-16 11:30:02, Info                  CSI    00000009 [SR] Verifying 100 (0x0000000000000064) components
  2012-05-16 11:30:02, Info                  CSI    0000000a [SR] Beginning Verify and Repair transaction
  2012-05-16 11:30:04, Info                  CSI    0000000c [SR] Verify complete
  2012-05-16 11:30:06, Info                  CSI    0000000d [SR] Verifying 100 (0x0000000000000064) components
  2012-05-16 11:30:06, Info                  CSI    0000000e [SR] Beginning Verify and Repair transaction
  2012-05-16 11:30:08, Info                  CSI    00000010 [SR] Verify complete
  2012-05-16 11:30:10, Info                  CSI    00000011 [SR] Verifying 100 (0x0000000000000064) components
  2012-05-16 11:30:10, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
  2012-05-16 11:30:14, Info                  CSI    00000014 [SR] Verify complete
  2012-05-16 11:30:16, Info                  CSI    00000015 [SR] Verifying 100 (0x0000000000000064) components
  2012-05-16 11:30:16, Info                  CSI    00000016 [SR] Beginning Verif
  
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:07 AM

   

   
  

  0

  sorry try here   sfcdetails.txt (file://JACK-HP/Users/jack/SkyDrive/Public/sfcdetails.txt)
  

  sfcdetails.txt (file://JACK-HP/Users/jack/SkyDrive/Public/sfcdetails.txt)
  

  • Edited by Ticktock2001 Wednesday, May 16, 2012 10:08 AM
  •  
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:24 AM

  Moderator

   

   
  

  0

  Nope - that's a local file on your computer's hard disk.

  I need the link to your Public folder on your Skydrive - start here.... http://skydrive.live.com - to which you've uploaded your file.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:34 AM

   

   
  

  0
  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!129&parid=B0DA361B74825376!128&authkey=!ANWS2MGgFMbG1XM  
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 11:06 AM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:56d49edf-705d-470a-8fb4-d7a3ead1b132...

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!129&parid=B0DA361B74825376!128&authkey=!ANWS2MGgFMbG1XM 

   

  There appear to be no errors found there - or at least none in the report extract (did you run SFC twice?)

  I'd probably better see the full CBS.log file - it has a lot more detail which may point to what's causing its failure.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:09 PM

   

   
  

  0

  "Ticktock2001" wrote in message news:56d49edf-705d-470a-8fb4-d7a3ead1b132...

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!129&parid=B0DA361B74825376!128&authkey=!ANWS2MGgFMbG1XM 

   

  There appear to be no errors found there - or at least none in the report extract (did you run SFC twice?)

  I'd probably better see the full CBS.log file - it has a lot more detail which may point to what's causing its failure.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Noel,  dont think i ran it twice ...  link to fully copy of log file

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!157&parid=B0DA361B74825376!132&authkey=!ALDGcTX_PW9pqOM

  
  

  • Edited by Ticktock2001 Wednesday, May 16, 2012 10:10 PM
  •  
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:20 PM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:6630c1d1-0347-486f-aa8e-4510d92d1883...

  Noel,  dont think i ran it twice ...  link to fully copy of log file

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!157&parid=B0DA361B74825376!132&authkey=!ALDGcTX_PW9pqOM

  
  

   

   

  I can still only see the old extracted file there?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 10:39 PM

   

   
  

  0

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!159&parid=B0DA361B74825376!132&authkey=!AE6fgoUmZ6aXDZI

  sorry hope this is the correct one

  • Edited by Ticktock2001 Wednesday, May 16, 2012 10:40 PM
  •  
  • Reply
  • Quote

   
• Wednesday, May 16, 2012 11:55 PM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:95905554-dad3-4a50-9345-56aff1eaf348...

  https://skydrive.live.com/redir.aspx?cid=b0da361b74825376&resid=B0DA361B74825376!159&parid=B0DA361B74825376!132&authkey=!AE6fgoUmZ6aXDZI

  sorry hope this is the correct one

  Yep :)

  the critical errors seem to be these ones  - but I haven't yet managed to event start to attempt to work out WTH they mean!

   

  Line 6373: 2012-05-16 11:30:19, Error                 CBS    Failed to shred identity: Microsoft-Windows-InternetExplorer-LanguagePack [HRESULT = 0x80070057 - E_INVALIDARG]

  Line 7952: 2012-05-16 11:36:46, Error                 CSI    00000142 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #2868985# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 77c ("\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll"), evt = 0, apcr = NULL, apcc = NULL, iosb = @0xa8d0f0, data = {l:0 b:}, byteoffset = 655360 (0x00000000000a0000), key = (null))

  Line 7952: 2012-05-16 11:36:46, Error                 CSI    00000142 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #2868985# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 77c ("\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll"), evt = 0, apcr = NULL, apcc = NULL, iosb = @0xa8d0f0, data = {l:0 b:}, byteoffset = 655360 (0x00000000000a0000), key = (null))

  Line 7954: 2012-05-16 11:36:46, Error                 CSI    00000143@2012/5/16:01:36:46.063 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error c0000185 [Error,Facility=(system),Code=389 (0x0185)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)

  Line 7954: 2012-05-16 11:36:46, Error                 CSI    00000143@2012/5/16:01:36:46.063 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error c0000185 [Error,Facility=(system),Code=389 (0x0185)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)

  Line 7954: 2012-05-16 11:36:46, Error                 CSI    00000143@2012/5/16:01:36:46.063 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error c0000185 [Error,Facility=(system),Code=389 (0x0185)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)

  Line 7956: 2012-05-16 11:37:07, Error                 CSI    00000144 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #2868984# from Windows::Rtl::SystemImplementation::CFile_IRtlFileTearoff::ReadFile(Flags = 3, Buffer = {l:0 ml:65536 b:}, Offset = 655360 (0x00000000000a0000), Disposition = 0)[gle=0xd0000185]

  Line 7956: 2012-05-16 11:37:07, Error                 CSI    00000144 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #2868984# from Windows::Rtl::SystemImplementation::CFile_IRtlFileTearoff::ReadFile(Flags = 3, Buffer = {l:0 ml:65536 b:}, Offset = 655360 (0x00000000000a0000), Disposition = 0)[gle=0xd0000185]

   

   

  While I try and work out what they mean, please run the following commands from an Elevated command prompt, and post the results....

   

  DIR C:\Windows\ntsystem.cpp /s

  DIR C:\Windows\sppobjs.dll /s

  ICACLS C:\Windows\System32\ntsystem.cpp

  ICACLS C:\Windows\System32\sppobjs.dll

   

  Here are some instructions to maike life easier
  :)

  1) To open an Elevated Command Prompt Window
  (the CP window), click on Start, All Programs, Accessories – then right-click on
  Command Prompt, and select Run as Administrator. Accept the UAC
  prompt.

  2) To run the commands easier, highlight the
  block of commands, and right-click on the highlight – select Copy. In the CP
  Windows, click on the black/white icon at top left – select Paste. The commands
  will run but may not complete the last command, so hit the Enter Key
  once.

  3) To copy the results... click on the
  Black/White icon in the top left, and select Edit... 'Select All', and hit the
  Enter key - then use Ctrl+V or r-click+Paste to paste it into your
  response.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • Reply
  • Quote

   
• Thursday, May 17, 2012 12:27 AM

   

   
  

  0
  DIR C:\Windows\ntsystem.cpp /s

  DIR C:\Windows\sppobjs.dll /s

  ICACLS C:\Windows\System32\ntsystem.cpp

  ICACLS C:\Windows\System32\sppobjs.dll

   

  Microsoft Windows [Version 6.1.7601]
  

  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>DIR C:\Windows\ntsystem.cpp /s
   Volume in drive C has no label.
   Volume Serial Number is 6AB7-9DE7
  File Not Found
  
  C:\Windows\system32>DIR C:\Windows\sppobjs.dll /s
   Volume in drive C has no label.
   Volume Serial Number is 6AB7-9DE7
  
   Directory of C:\Windows\System32
  
  20/11/2010  23:27         1,082,880 sppobjs.dll
                 1 File(s)      1,082,880 bytes
  
   Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_3
  1bf3856ad364e35_6.1.7600.16385_none_1f05c4e4a00e66f1
  
  14/07/2009  11:41         1,082,880 sppobjs.dll
                 1 File(s)      1,082,880 bytes
  
   Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_3
  1bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b
  
  20/11/2010  23:27         1,082,880 sppobjs.dll
                 1 File(s)      1,082,880 bytes
  
       Total Files Listed:
                 3 File(s)      3,248,640 bytes
                 0 Dir(s)  125,670,961,152 bytes free
  
  C:\Windows\system32>ICACLS C:\Windows\System32\ntsystem.cpp
  C:\Windows\System32\ntsystem.cpp: The system cannot find the file specified.
  Successfully processed 0 files; Failed processing 1 files
  
  C:\Windows\system32>ICACLS C:\Windows\System32\sppobjs.dll
  C:\Windows\System32\sppobjs.dll NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)
  
  Successfully processed 1 files; Failed processing 0 files
  
  C:\Windows\system32>
  
  • Reply
  • Quote

   
• Thursday, May 17, 2012 12:45 AM

  Moderator

   

   
  

  0
  That all looks normal - I need some sleep (and to do some work) before I try and work out what the SFC log means.
  back tomorrow

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote

   
• Thursday, May 17, 2012 5:02 AM

   

   
  

  0

  That all looks normal - I need some sleep (and to do some work) before I try and work out what the SFC log means.
  back tomorrow

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  thanks for the help to date
  • Reply
  • Quote

   
• Thursday, May 17, 2012 4:20 PM

  Moderator

   

   
  

  0
  "Ticktock2001" wrote in message news:caa9cf51-d830-4c7c-bad4-97be294e5cc1...

  That all looks normal - I need some sleep (and to do some work) before I try and work out what the SFC log means.
  back tomorrow

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  thanks for the help to date

   

  No problem!

   

  Let's try running SFC from a Repair Environment boot - it may allow access to files that otherwise would be inaccessible.

   

  reboot the computer, and tap the F8 key until  you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one.

  Log into your normal account

  you'll get a set of options - pick the Command Prompt one

  At the command prompt, type

  DIR D:\

  - if we're lucky this will bring up a listing of your normal C: drive contents, including the Program Files folder(s) and the Windows folder.

   

  If not, try E:\   (etc. until you get the right letter)

   

  then type the following command

  sfc /scannow /OFFBOOTDIR=<drive:\> /OFFWINDIR=<drive>:\Windows

  where <drive> is the letter you found above.

   

  Wait for the command to complete.

  (make a note of the response!)

  once it has, type

  EXIT

  and the pick the option to reboot.

   

  post another MGADiag report

   

   

   

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Marked As Answer by Darin Smith MSOwner Wednesday, May 23, 2012 7:58 PM
  •  
  • Reply
  • Quote

   
• Wednesday, May 23, 2012 7:58 PM

  Owner

   

   
  

  0

  No further reply from the Original Poster.

  Issue is assumed to be resolved.

  ---

  Darin MS

  • Reply
  • Quote