update (kb2665364) failed error code 8e5e03fe

모든 응답

• 2012년 3월 23일 금요일 오후 1:50

  중재자

   

   
  

  0
  "brawny62" wrote in message news:a7564455-3158-4c7c-92e2-269d8132821b...

   

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-H9K4M-DV32X-8X2XD
  Windows Product Key Hash: hIy5Kq09q7qZt8Eky8OoVdeQhnI=
  Windows Product ID: 00359-OEM-8992687-00261
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  

  Other data-->
  SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>Z1-7596</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.0B2</Version><SMBIOSVersion major="2" minor="5"/><Date>20101020000000.000000+000</Date></BIOS

   

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Partial Product Key: 8X2XD
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 3/23/2012 9:10:11 AM

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0000000000000040
  Event Time Stamp: 3:22:2012 16:28
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

  
  HWID Data-->
  HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAHKL40SgNEDNU8vQWIKUuwHQi6kWIlIZWji4=

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
   
    SLIC   zt grp  ztsys122
  

  
  ...any suggestions on how i can fix this?

  That looks suspiciously like a Retail motherboard with a dummy OEM SLIC table?

  What is the make and model of PC? did the OS come pre-installed?

   

  Your immediate problem is caused by the Tampered file highlighted above - the fact that it's not also listed as a File Mismatch probably means that there are permission problems with it, or one of the associated files.

  open an Elevated Command Prompt window, and run the following commands

   

  ICACLS C:\Windows\System32\sppcext.* /T

  ICACLS C:\Windows\SysWOW64\sppcext.* /T

   

  Copy and paste the results to your response.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • 응답
  • 인용

   
• 2012년 3월 26일 월요일 오후 1:29

   

   
  

  0

  noel, thanks for the help again...

  my computer is a ZT systems pc.  bought from costco.  yes, the4 os did come pre-installed.  i had a similar problem several months ago where we figured out that silverlight was causing the errors.  anyway, the results to the above commands are as follows...

  results for (system32\sppcext.dll)...

  nt service\trustedinstaller:<f>

  builtin\administrators:<rx>

  nt authority\system:<rx>

  builtin\users:<rx>

  results for (system32\sppcext.dll.mui)...

  nt service\trustedinstaller:<f>

  builtin\administrators:<rx>

  nt authority\system:<rx>

  builtin\users:<rx>

  c:\windows\system32\logfiles\wmi\rtbackup\sppcext.*:access is denied.  successfully processed 2 files; failed processing 1 files

  everything was the same for the (wow64) command except for ... successfully processed 2 files; failed processing 1 files

  also, is there an 'easy' way to cut/paste the results form the command prompt to this threat?(ive been re-typing everything)

  thansk

  joe

  • 응답
  • 인용

   
• 2012년 3월 26일 월요일 오후 6:18

  중재자

   

   
  

  0
  "brawny62" wrote in message news:0779fa09-4ffc-4c80-852f-92487f170f41...

  noel, thanks for the help again...

  my computer is a ZT systems pc.  bought from costco.  yes, the4 os did come pre-installed.  i had a similar problem several months ago where we figured out that silverlight was causing the errors.  anyway, the results to the above commands are as follows...

   

  also, is there an 'easy' way to cut/paste the results form the command prompt to this threat?(ive been re-typing everything)

  thansk

  joe

   

   

  Heh - sorry, I was obviously assuming more knowledge on your part than you have....

  ......

  to copy the results... click on the Black/White icon in the top left of the Command Prompt window, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response

  ........

   

  All the results you've posted above look correct (well done!) - unfortunately, they don't tell us anything that we didn't already know.

   

  I do detest these subcontract installations (which is what you seem to have) - they appear to be very 'dodgy' in terms of their provenance, but they are legit, so far as I can tell.

   

   

  The chances are that your previous problems were NOT caused by Silverlight 0 there's nothing it that that could actually cause a problem, unless it triggered something in an AV/Firewall.

   

  What AV are you using?

  What Firewall are you using?

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  • 응답
  • 인용

   
• 2012년 3월 27일 화요일 오후 12:42

   

   
  

  0

  ...no problem, i usually know enough about everything to get me in trouble..anyway, ...thanks for the info on the 'cut-n-paste' thing:):):)

  as far as the av... i use AVG free edition.  i have is set to update and run on a nightly basis.  also, the last time i had issues on this computer (i have a home network set up and this is the 'main pc'), you had suggested to download and run 'malewarebytes'.  i have been updating and running this periodically since ive had this issue.  malwarebytes has only found 3 warnings the first time i ran the program.

  as far as firewall, i am using the windows firewall installed on windows 7. 

  lastly, not sure if any of this makes a differance, but...i believe the night that these updates were downloading and installing (03/14), we had a power-outage.  would this cause something to 'become corrupt' if the system shut down in the middle of this download/update process? also, the 'not running genuine windows' error message is back again. 

  ..should i try to 'uninstall' the updates that were installed on 03/14, then try to update again?

  thansk

  joe

  • 응답
  • 인용

   
• 2012년 3월 27일 화요일 오후 1:16

  중재자

   

   
  

  0
  "brawny62" wrote in message news:b208cef2-c65d-482f-b719-f6ff4863d2d0...

  ...no problem, i usually know enough about everything to get me in trouble..anyway, ...thanks for the info on the 'cut-n-paste' thing:):):)

  as far as the av... i use AVG free edition.  i have is set to update and run on a nightly basis.  also, the last time i had issues on this computer (i have a home network set up and this is the 'main pc'), you had suggested to download and run 'malewarebytes'.  i have been updating and running this periodically since ive had this issue.  malwarebytes has only found 3 warnings the first time i ran the program.

  as far as firewall, i am using the windows firewall installed on windows 7.

  lastly, not sure if any of this makes a differance, but...i believe the night that these updates were downloading and installing (03/14), we had a power-outage.  would this cause something to 'become corrupt' if the system shut down in the middle of this download/update process? also, the 'not running genuine windows' error message is back again. 

  ..should i try to 'uninstall' the updates that were installed on 03/14, then try to update again?

  thansk

  joe

   

   

  Ah - let's try a couple of things first...

  running CHKDSK and SFC

  
  

  
  

  type in the Search box
  CMD.EXE
  right-click on the only file that is found
  Select Run as
  Administrator
  - the Elevated Command Prompt window should pop up
  At the
  Command prompt, type
  CHKDSK C: /R
  and hit the Enter key
  You will be
  told that the drive is locked, and the CHKDSK will run at he next boot - hit the
  Y key, and then reboot. The chkdsk will take a few hours depending on the size
  of the drive, so be patient!
  
  After the CHKDSK has run, Windows should
  boot normally (possibly after a second auto-reboot) - then run the
  SFC
  
  SFC -System File Checker - Instructions
  Click on the Start
  button
  type in the Search box
  CMD.EXE
  right-click on the only file that
  is found
  Select Run as Administrator
  - the Elevated Command Prompt window
  should pop up
  At the Command prompt, type
  
  SFC /SCANNOW
  
  and hit
  the Enter key
  Wait for the scan to finish - make a note of any error messages
  - and then reboot.
  
  run another MGADiag report, and post the
  results.

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • 답변으로 표시됨 Darin Smith MSOwner 2012년 4월 2일 월요일 오후 6:16
  • 답변으로 표시 취소됨 Carey FrischMVP 2012년 4월 13일 금요일 오전 2:21
  •  
  • 응답
  • 인용

   
• 2012년 4월 13일 금요일 오전 1:23

   

   
  

  0

  ok... i finally was able to perform the above checks...

  durring the first 'chkdsk c:/r' , there were 2 'bad clusters' that windows 'replaced'.  i then re-booted, and ran the 'sfc/scannow'.  the results were 'windows resource protection did not find any integrity violations.  i ran another mgadiag report, which is as follows...

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-H9K4M-DV32X-8X2XD
  Windows Product Key Hash: hIy5Kq09q7qZt8Eky8OoVdeQhnI=
  Windows Product ID: 00359-OEM-8992687-00261
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {0926AF8E-A767-4635-A9F2-331B83B44EEA}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.111118-2330
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Standard Edition 2003 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{0926AF8E-A767-4635-A9F2-331B83B44EEA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8X2XD</PKey><PID>00359-OEM-8992687-00261</PID><PIDType>2</PIDType><SID>S-1-5-21-2361103782-4087395841-156628325</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>Z1-7596</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.0B2</Version><SMBIOSVersion major="2" minor="5"/><Date>20101020000000.000000+000</Date></BIOS><HWID>C2CB3F07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>zt grp</OEMID><OEMTableID>ztsys122</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>9D15E7DA279C862</Val><Hash>5axQd5vYnGGFogGMzeHG1yLct2Q=</Hash><Pid>70141-049-2051067-56320</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00178-926-800261-02-1033-7601.0000-3152011
  Installation ID: 019876465493848415943535673403206056634221383136886126
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 8X2XD
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 4/12/2012 9:16:57 PM

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0000000000000020
  Event Time Stamp: 4:7:2012 07:38
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

  
  HWID Data-->
  HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAHKL40SgNEDNU8vQWIKUuwHQi6kWIlIZWji4=

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   7596Z1  A7596100
    FACP   7596Z1  A7596100
    SRAT   AMD     FAM_F_10
    HPET   7596Z1  OEMHPET
    MCFG   7596Z1  OEMMCFG
    SLIC   zt grp  ztsys122
    OEMB   7596Z1  A7596100
    SSDT   A M I   POWERNOW

  thanks

  • 응답
  • 인용

   
• 2012년 4월 13일 금요일 오후 8:08

  중재자

   

   
  

  0
  "brawny62" wrote in message news:3ebc4628-6802-4c14-a14b-6902379f9255...

  ok... i finally was able to perform the above checks...

  durring the first 'chkdsk c:/r' , there were 2 'bad clusters' that windows 'replaced'.  i then re-booted, and ran the 'sfc/scannow'.  the results were 'windows resource protection did not find any integrity violations.  i ran another mgadiag report, which is as follows...

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-H9K4M-DV32X-8X2XD
  Windows Product Key Hash: hIy5Kq09q7qZt8Eky8OoVdeQhnI=
  Windows Product ID: 00359-OEM-8992687-00261
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  

  Other data-->
  SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>Z1-7596</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.0B2</Version><SMBIOSVersion major="2" minor="5"/><Date>20101020000000.000000+000</Date></BIOS

   

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Partial Product Key: 8X2XD
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 4/12/2012 9:16:57 PM

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  

   

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
    SLIC   zt grp  ztsys122
    OEMB   7596Z1  A7596100
    SSDT   A M I   POWERNOW

  thanks

   

   

  Bad clusters on a hard drive are signs that the disk may be failing - back up your data to external storage NOW, just in case.

   

  You should then download the disk test utility from the HD manufacturer's website, create the CD from it, and then boot from the CD to test the hard drive properly. This will attempt to check every sector on the drive, and can cause the drive to fail, if it is on the way out. See what the results of the short test are first - then use the long test. You may be offered  a repair option at the end, if so, take it, but then run another long scan afterwards.

  If you have a large hard drive, the long test can take upwards of 4 hours - so I would suggest running it overnight.

   

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • 답변으로 표시됨 Darin Smith MSOwner 2012년 4월 16일 월요일 오후 7:14
  •  
  • 응답
  • 인용

   
• 2012년 4월 16일 월요일 오후 7:14

  소유자

   

   
  

  0

  No further reply from the Original Poster.

  Issue is assumed to be resolved.

  ---

  Darin MS

  • 응답
  • 인용