locked
Windows 7 not genuine RRS feed

  • Question

  • Purchased sony z series laptop with windows 7 professional in April 2012. Last two weeks I have warning message daily that my windows is not genuine. Please help.

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J

    Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=

    Windows Product ID: 00371-OEM-8992671-00014

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {2D565A2E-7380-4E16-9503-3A80D43766B6}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000009

    Build lab: 7601.win7sp1_gdr.130104-1431

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    File Mismatch: C:\Windows\system32\en-US\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\en-US\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\en-US\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\en-US\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{2D565A2E-7380-4E16-9503-3A80D43766B6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-1822645842-419186883-3694145649</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCZ21M9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R0173H5</Version><SMBIOSVersion major="2" minor="6"/><Date>20120521000000.000000+000</Date></BIOS><HWID>8F6A0D00018400FE</HWID><UserLCID>1809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00178-926-700014-02-2057-7601.0000-2522011

    Installation ID: 011992148612026084313461649896643266682415581665904251

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: 24X8J

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 19/02/2013 23:11:45

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x000000000000EF60

    Event Time Stamp: 2:19:2013 16:20

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    HWID Data-->

    HWID Hash Current: NAAAAAAAAAABAAIAAQACAAAABQABAAEA6GHoJV5NyuHOcFz3jGx8+8i02pKq8Wh1kMIucw==

    OEM Activation 1.0 Data-->

    N/A

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name            OEMID Value      OEMTableID Value

      APIC                                   Sony                     VAIO

      FACP                                  Sony                     VAIO

      HPET                                  Sony                     VAIO

      BOOT                                Sony                     VAIO

      MCFG                                Sony                     VAIO

      WDAT                                Sony                     VAIO

      TCPA                                  Sony                     VAIO

      ASF!                                   Sony                     VAIO

      SLIC                                   Sony                     VAIO

      SSDT                                  Sony                     VAIO

      SSDT                                  Sony                     VAIO

      ASPT                                  Sony                     VAIO

      SSDT                                  Sony                     VAIO

      SSDT                                  Sony                     VAIO

      SSDT                                  Sony                     VAIO

      SSDT                                  Sony                     VAIO


    • Edited by harysman Thursday, February 21, 2013 4:55 PM
    Thursday, February 21, 2013 4:49 PM

Answers

All replies

  • looks like you have vistalizator installed

    see this:

    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/6f6b1cb8-e84e-4c1f-a2ac-181a77d2f772

    Thursday, February 21, 2013 7:22 PM
    Answerer
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\UILanguages

    only one language installed, didn'help! Still have a problem

    Friday, February 22, 2013 5:17 PM
  • Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, February 22, 2013 9:22 PM
    Moderator
  • Sorry about the delay and thanks for further help!

    https://skydrive.live.com/#cid=79EBC5C1BDBF1CAB&id=79EBC5C1BDBF1CAB%21124

    scannow: windows resourse protection found corrupt files but was unable to fix some of them

    Wednesday, March 13, 2013 10:45 PM
  • No problem :)

    There are errors in the SFC report...

    	Line 9649: 2013-03-13 22:24:58, Info                  CSI    00000326 [SR] Repairing 9 components
    	Line 9650: 2013-03-13 22:24:58, Info                  CSI    00000327 [SR] Beginning Verify and Repair transaction
    	Line 9651: 2013-03-13 22:24:59, Info                  CSI    00000328 [SR] Cannot repair member file [l:22{11}]"msado20.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb20, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9652: 2013-03-13 22:24:59, Info                  CSI    00000329 [SR] Cannot repair member file [l:22{11}]"msado21.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb21, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9653: 2013-03-13 22:24:59, Info                  CSI    0000032a [SR] Cannot verify component files for Microsoft-Windows-TerminalServices-RDP-WinStationExtensions, Version = 6.1.7601.17828, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (FALSE)
    	Line 9654: 2013-03-13 22:24:59, Info                  CSI    0000032b [SR] Cannot verify component files for Microsoft-Windows-TerminalServices-RDP-WinStationExtensions-Binaries, Version = 6.1.7601.17828, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral, manifest is damaged (FALSE)
    	Line 9655: 2013-03-13 22:25:00, Info                  CSI    0000032c [SR] Cannot repair member file [l:22{11}]"msado25.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb25, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9656: 2013-03-13 22:25:00, Info                  CSI    0000032d [SR] Cannot repair member file [l:22{11}]"msado26.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb26, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9657: 2013-03-13 22:25:00, Info                  CSI    0000032e [SR] Repairing corrupted file [ml:76{38},l:74{37}]"\??\C:\Windows\SysWOW64\wdi\perftrack"\[l:92{46}]"wow64_Microsoft-Windows-IE-HTMLRendering.ptxml" from store
    	Line 9658: 2013-03-13 22:25:00, Info                  CSI    0000032f [SR] Cannot repair member file [l:22{11}]"msado26.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb26, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9659: 2013-03-13 22:25:00, Info                  CSI    00000330 [SR] This component was referenced by [l:156{78}]"Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.2698365-52_neutral_GDR"
    	Line 9660: 2013-03-13 22:25:00, Info                  CSI    00000331 [SR] Could not reproject corrupted file [ml:520{260},l:100{50}]"\??\C:\Program Files (x86)\Common Files\System\ado"\[l:22{11}]"msado26.tlb"; source file in store is also corrupted
    	Line 9661: 2013-03-13 22:25:00, Info                  CSI    00000332 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\Media"\[l:56{28}]"Windows Navigation Start.wav" from store
    	Line 9662: 2013-03-13 22:25:00, Info                  CSI    00000333 [SR] Cannot repair member file [l:22{11}]"msado21.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb21, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9663: 2013-03-13 22:25:00, Info                  CSI    00000334 [SR] This component was referenced by [l:156{78}]"Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.2698365-56_neutral_GDR"
    	Line 9664: 2013-03-13 22:25:00, Info                  CSI    00000335 [SR] Could not reproject corrupted file [ml:520{260},l:88{44}]"\??\C:\Program Files\Common Files\System\ado"\[l:22{11}]"msado21.tlb"; source file in store is also corrupted
    	Line 9665: 2013-03-13 22:25:00, Info                  CSI    00000336 [SR] Cannot repair member file [l:22{11}]"msado25.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb25, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9666: 2013-03-13 22:25:00, Info                  CSI    00000337 [SR] This component was referenced by [l:156{78}]"Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.2698365-54_neutral_GDR"
    	Line 9667: 2013-03-13 22:25:00, Info                  CSI    00000338 [SR] Could not reproject corrupted file [ml:520{260},l:100{50}]"\??\C:\Program Files (x86)\Common Files\System\ado"\[l:22{11}]"msado25.tlb"; source file in store is also corrupted
    	Line 9668: 2013-03-13 22:25:00, Info                  CSI    00000339 [SR] Cannot repair member file [l:22{11}]"msado20.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb20, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 9669: 2013-03-13 22:25:00, Info                  CSI    0000033a [SR] This component was referenced by [l:156{78}]"Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.2698365-58_neutral_GDR"
    	Line 9670: 2013-03-13 22:25:00, Info                  CSI    0000033b [SR] Could not reproject corrupted file [ml:520{260},l:88{44}]"\??\C:\Program Files\Common Files\System\ado"\[l:22{11}]"msado20.tlb"; source file in store is also corrupted
    	Line 9671: 2013-03-13 22:25:01, Info                  CSI    0000033c [SR] Repairing corrupted file [ml:520{260},l:74{37}]"\??\C:\Windows\System32\wdi\perftrack"\[l:80{40}]"Microsoft-Windows-IE-HTMLRendering.ptxml" from store
    	Line 9687: 2013-03-13 22:25:01, Info                  CSI    0000033e [SR] Repair complete
    

    I think that it would be a good idea to run the CheckSUR tool - it may find more errors, and may fix a couple of the ones that remain from above.

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, March 13, 2013 10:54 PM
    Moderator
  • Anything new on this??


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 17, 2013 11:39 AM
    Moderator
  • That's fixed a large number of errors - but left a number to be fixed.

    First priority is to correct the remaining errors from the CheckSUR, as they may interfere in fixing the SFC errors.

    Unavailable repair files:
    	servicing\packages\Package_37_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.mum
    	servicing\packages\Package_37_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat

    I've uploaded a file - hsmaa.zip - to my SkyDrive at  Noel's SkyDrive

    Please download and save it.

    Right-click on the downloaded file, and select Extract all…

    Extract to the default location - which will create a new folder  CWBFiles in the same place.

    Open this folder - there should be one folders inside it ( Packages)

     

    Copy the content of the Packages folder to the folder

    C:\Windows\Temp\CheckSur\Servicing\Packages

     

    Now run the CheckSUR tool again (it may take a while)

     

    Post the new CheckSUR.log file, and the CheckSUR.persist.log file.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 18, 2013 12:38 AM
    Moderator
  • Hi Noel, link to noels skydrive is not available

    Monday, March 18, 2013 2:22 PM
  • Sorry - my fault (I accidentally deleted the entire folder this morning)

    use this link instead -

    Noel's SkyDrive



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 18, 2013 2:36 PM
    Moderator
  • This item might not exist or is no longer available
    Monday, March 18, 2013 5:39 PM
  • Copied the wrong link! - duh! :(

    https://skydrive.live.com/?cid=936736bb8fceb92f&id=936736BB8FCEB92F%21796

    should work!!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 18, 2013 5:52 PM
    Moderator
  • That fixed the cat/mum error - but there remain these Payload files in the CheckSUR report.....

    Checking Component Store
    (f)	CSI Payload File Missing	0x00000000	msado20.tlb	amd64_microsoft-windows-m..do-backcompat-tlb20_31bf3856ad364e35_6.1.7601.17857_none_4914f84208d3047d	
    (f)	CSI Payload File Missing	0x00000000	msado25.tlb	x86_microsoft-windows-m..do-backcompat-tlb25_31bf3856ad364e35_6.1.7601.17857_none_ecc04d22509e1efc	
    (f)	CSI Payload File Missing	0x00000000	ieUnatt.exe	wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_9.4.8112.16447_none_ae454a81210dd55b	
    (f)	CSI Payload File Missing	0x00000000	msado21.tlb	amd64_microsoft-windows-m..do-backcompat-tlb21_31bf3856ad364e35_6.1.7601.17857_none_490a285608db206e	
    (f)	CSI Payload File Missing	0x00000000	msado26.tlb	x86_microsoft-windows-m..do-backcompat-tlb26_31bf3856ad364e35_6.1.7601.17857_none_ecb57d3650a63aed	
    (f)	CSI Payload File Missing	0x00000000	msado26.tlb	x86_microsoft-windows-m..do-backcompat-tlb26_31bf3856ad364e35_6.1.7601.22012_none_ed65306169a81f82	
    (f)	CSI Payload File Missing	0x00000000	msado25.tlb	x86_microsoft-windows-m..do-backcompat-tlb25_31bf3856ad364e35_6.1.7601.22012_none_ed70004d69a00391	
    (f)	CSI Payload File Missing	0x00000000	msado20.tlb	amd64_microsoft-windows-m..do-backcompat-tlb20_31bf3856ad364e35_6.1.7601.22012_none_49c4ab6d21d4e912	
    (f)	CSI Payload File Missing	0x00000000	mshtml.tlb	wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20554_none_92a2291542613f64	
    (f)	CSI Payload File Missing	0x00000000	mshtml.dll	wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20554_none_92a2291542613f64	
    (f)	CSI Payload File Missing	0x00000000	msado21.tlb	amd64_microsoft-windows-m..do-backcompat-tlb21_31bf3856ad364e35_6.1.7601.22012_none_49b9db8121dd0503	
    

    I'll get working on these first - they may require different treatment to the ones from the SFC report (and from the normal CheckSUR results)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 18, 2013 8:19 PM
    Moderator
  • Thanks!
    Monday, March 18, 2013 8:22 PM
  • I've uploaded a file - hsmab.zip - to my SkyDrive at Noel's SkyDrive

    Please download and save it.

    Right-click on the saved file and select Extract all...

    Change the target to C:\ and click on Extract

    Close all windows (it would be a good idea to print these instructions!)

    Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'

    Pick that

    You'll have to log in with your username and password.

    Pick the option to use a Command Prompt

    At the prompt type

    DIR C:\hsmab

    hit the enter key - if you get a 'Not Found' error try

    DIR D:\hsmab

    or

    DIR E:\hsmab

     

    The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

     

    XCOPY <drive>:\hsmab <drive>:\windows\winsxs /y /i /s /v /h

     

    (e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

     

    run the command (it should take almost no time) and when the prompt returns, type

    EXIT

    and hit the Enter key to exit Command
    Prompt - reboot to Normal Mode Windows.

    Now run SFC /SCANNOW in an
    Elevated Command Prompt

    then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

    Then run CheckSUR again, and post the new CheckSUR.log file.

     



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 18, 2013 9:01 PM
    Moderator
  • Thanks knocked a few on the head - and brought a couple more to light.

    From the CBS log

    Line 6752: 2013-03-18 21:42:32, Info CSI 00000310 [SR] Repairing 4 components Line 6753: 2013-03-18 21:42:32, Info CSI 00000311 [SR] Beginning Verify and Repair transaction Line 6754: 2013-03-18 21:42:32, Info CSI 00000312 [SR] Cannot repair member file [l:22{11}]"msado21.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb21, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing Line 6756: 2013-03-18 21:42:32, Info                  CSI    00000314 [SR] Cannot repair member file [l:22{11}]"msado21.tlb" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ADO-Backcompat-Tlb21, Version = 6.1.7601.17857, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

    Line 6778: 2013-03-18 21:42:32, Info CSI 0000031a [SR] Repair complete

    From the CheckSUR log

    Checking Component Store
    (f)	CSI Payload File Missing	0x00000000	msado21.tlb	amd64_microsoft-windows-m..do-backcompat-tlb21_31bf3856ad364e35_6.1.7601.17857_none_490a285608db206e	
    (f)	CSI Payload File Missing	0x00000000	msado21.tlb	amd64_microsoft-windows-m..do-backcompat-tlb21_31bf3856ad364e35_6.1.7601.22012_none_49b9db8121dd0503	
    
    Summary:
    Seconds executed: 272
     Found 4 errors
      CSI Payload File Missing Total count: 2
      CBS MUM Corrupt Total count: 2
    
    Unavailable repair files:
    	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

    I'll see what I can do about those now


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Monday, March 18, 2013 10:41 PM
    Moderator
  • If you don't object, I'd like to try something 'novel' - it shouldn't cause any trouble and if it works, it will make life a little easier for many :) (and for me!)

    I've uploaded a file - hsmac.zip - to my SkyDrive at Noel's SkyDrive

    Please download and save it.

    Right-click on the saved file and select Extract all...

    Change the target to C:\ and click on Extract

    Close all windows (it would be a good idea to print these
    instructions!)

    Now reboot to the Repair Environment - as soon as the machine restarts, start
    tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
    should be the option 'Repair my Computer'

    Pick that

    You'll have to log in with your username and password.

    Pick the option to use a Command Prompt

    At the prompt type

    DIR C:\hsmac

    hit the enter key - if you get a 'Not
    Found' error try

    DIR D:\hsmac

    or

    DIR E:\hsmac

     

    The drive letter in use when you find the folder will
    need to be substituted (for
    <drive>) into the following
    command...

     

    XCOPY <drive>:\hsmac  <drive>:\windows  /y /i /s /v /h

     

    (e.g. XCOPY P:\wfire P:\windows /y /i /s /v /h )

     

    run the command (it should take almost no time)and
    when the prompt returns, type

    EXIT

    and hit the Enter key to exit Command
    Prompt - reboot to Normal Mode Windows.


    Then run another CheckSUR report, and upload the results

    Now run SFC /SCANNOW in an Elevated Command Prompt
    then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

    (please note significant changes to the previous method)

     

    With luck, that'll kill two birds with one stone :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Monday, March 18, 2013 11:10 PM
    Moderator
  • Well, it killed one bird, at least :)

    The SFC is now clear - but the CheckSUR is unresolved.

    Please open the C:\hsmac\servicing\Packages folder and copy the content to the c:\Windows\Temp\CheckSUR\servicing\Packages folder

    Then run another CheckSUR, and we'll see what happens - post the new CheckSUR.log file


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, March 19, 2013 10:11 AM
    Moderator
  • new log files

    https://skydrive.live.com/?cid=79ebc5c1bdbf1cab#cid=79EBC5C1BDBF1CAB&id=79EBC5C1BDBF1CAB%21124

    Thanks for the help, I have to go to buss. trip again and I will be back 26/03 I hope we can solve the problem after Im back.

    Tuesday, March 19, 2013 11:59 AM
  • The CheckSUR is now clear :)

    Please run a new MGADiag report, and test Windows Updates - with any luck everything should work!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, March 19, 2013 12:12 PM
    Moderator
  • MGADiag report - where I can run this?
    Tuesday, March 19, 2013 12:15 PM
  • (you ran it originally for your first post :) )


    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     Once saved, run the tool.
    Click on the Continue button, which will produce the report.
     To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, March 19, 2013 1:39 PM
    Moderator
  • Any progress, Harysman?

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 24, 2013 2:26 PM
    Moderator
  • Sorry I was away, I still have a problem ''windows not genuine''

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
    Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
    Windows Product ID: 00371-OEM-8992671-00014
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {C52C2F8C-A022-4005-A612-5A037F78BBBA}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\en-US\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C52C2F8C-A022-4005-A612-5A037F78BBBA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-1822645842-419186883-3694145649</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCZ21M9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R0173H5</Version><SMBIOSVersion major="2" minor="6"/><Date>20120521000000.000000+000</Date></BIOS><HWID>8F6A0D00018400FE</HWID><UserLCID>1809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00178-926-700014-02-2057-7601.0000-2522011
    Installation ID: 012041021822088900098764200724154366835053055621525904
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 24X8J
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 28/03/2013 15:32:10

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 3:26:2013 16:38
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: PgAAAAEAAAABAAMAAgADAAAABgABAAEA6GHoJeZOXk3K4c5wrIhc9/xhjGxiPXz7yLTakvaIqvFodZDCLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      BOOT   Sony  VAIO
      MCFG   Sony  VAIO
      WDAT   Sony  VAIO
      TCPA   Sony  VAIO
      ASF!   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      ASPT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

    Thursday, March 28, 2013 3:33 PM
  • That's rather disappointing.

    Please run the following commands in an Elevated Command Prompt

     

    NET STOP CRYPTSVC
    REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD
    NET START CRYPTSVC

     

    once complete, leave the system alone for at least an hour to rebuild the database, then reboot, and run another MGADiag report.
    Note that this may delete your Update History - but all updates will remain installed, and can be viewed in the Installed Updates listing.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, March 28, 2013 5:36 PM
    Moderator
  • HAD PROBLE WITH RUNNING THIS COMMAND:  REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD

    POSTED THE SCREEN SHOT

    https://skydrive.live.com/?cid=79ebc5c1bdbf1cab#cid=79EBC5C1BDBF1CAB&id=79EBC5C1BDBF1CAB%21124

    Friday, March 29, 2013 8:33 PM
  • I have to admit I've never seen that error before!

    Please run the following commands...

    DIR C:\Windows\System32\cat*.*

    DIR C:\Windows\System32\cat*.* /AH

    ICACLS C:\Windows\System32

    post the results.

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, March 29, 2013 8:51 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Harry>DIR C:\Windows\System32\cat*.*
     Volume in drive C has no label.
     Volume Serial Number is F041-9655

     Directory of C:\Windows\System32

    18/03/2013  20:05    <DIR>          catroot
    29/03/2013  11:43    <DIR>          CATROOT2OLD
    14/07/2009  01:40           472,576 catsrv.dll
    14/07/2009  01:40            56,320 catsrvps.dll
    14/07/2009  01:40           525,824 catsrvut.dll
                   3 File(s)      1,054,720 bytes
                   2 Dir(s)  14,043,025,408 bytes free

    C:\Users\Harry>DIR C:\Windows\System32\cat*.* /AH
     Volume in drive C has no label.
     Volume Serial Number is F041-9655

     Directory of C:\Windows\System32

    File Not Found

    C:\Users\Harry>ICACLS C:\Windows\System32
    C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                        NT AUTHORITY\SYSTEM:(M)
                        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                        BUILTIN\Administrators:(M)
                        BUILTIN\Administrators:(OI)(CI)(IO)(F)
                        BUILTIN\Users:(RX)
                        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                        CREATOR OWNER:(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Harry>

    Friday, March 29, 2013 10:21 PM
  • so the folder is not being recreated at all!

    The permissions on the System32 folder look OK, so there's a problem with one of the services.

    The most likely candidate is the Cryptographic services.

    Please open an elevated command prompt, and run the following commands.

    SC QUERYEX CRYPTSVC

    dir c:\window\cryptsvc.dll

    post the results, along with the Windows Event logs...

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and attach to your reply.


     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, March 29, 2013 10:43 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Harry>SC QUERYEX CRYPTSVC

    SERVICE_NAME: CRYPTSVC
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 1816
            FLAGS              :

    C:\Users\Harry>dir c:\window\cryptsvc.dll
    The system cannot find the file specified.

    C:\Users\Harry>

    https://skydrive.live.com/?cid=79ebc5c1bdbf1cab#cid=79EBC5C1BDBF1CAB&id=79EBC5C1BDBF1CAB%21124

    Friday, March 29, 2013 11:49 PM
  • I can't believe I did that !

    the second command should have been

    DIR C:\Windows\crypstvc.dll /S

    (which should produce at least 2 results!)
    ... but it's irrelevant anyhow, as the service would not be running if the dll did not exist.

    The Event logs have a few errors :(

    The driver \Driver\WUDFRd failed to load for the device USB\VID_05AC&PID_12A2&MI_00\0.
    The following boot-start or system-start driver(s) failed to load: 
    cdrom
    The ScRegSetValueExW call failed for FailureActions with the following error: 
    Access is denied.
    An error was detected on device \Device\Harddisk4\DR6 during a paging operation.
    NTFS:The system failed to flush data to the transaction log. Corruption may occur.
    The program iTunes.exe version 11.0.2.26 stopped interacting with Windows and was closed
    Client application bug: DNSServiceResolve(2877957B26A1573C._appletv-v2._tcp.local.) active for over two minutes.

    There are also indications of corruption in your earlier CHKDSK run in December - almost all to do with the .mum and .cat files that we've already fixed.

    The first error appears to be related to an iPad

    the "ScRegSetValueExW call failed for FailureActions" error seems often to be related to AVG - or perhaps other AVs as well.

    What AV is currently installed, and what others have EVER been installed?

    The iTunes problem is accompanied by a large number of errors in the Bonjour service - you may want to consider uninstalling all Apple software for the duration. (check your licensing situation before doing so!)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, March 30, 2013 12:36 AM
    Moderator
  • Hi today morning when I turned on computer started to run several fixings, I will send new new MGADiag report

    I have only AVG Free 2013 this is the only AV used, of course last year it was AVG free 2012

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
    Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
    Windows Product ID: 00371-OEM-8992671-00014
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {C52C2F8C-A022-4005-A612-5A037F78BBBA}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\en-US\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C52C2F8C-A022-4005-A612-5A037F78BBBA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-1822645842-419186883-3694145649</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCZ21M9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R0173H5</Version><SMBIOSVersion major="2" minor="6"/><Date>20120521000000.000000+000</Date></BIOS><HWID>8F6A0D00018400FE</HWID><UserLCID>1809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00178-926-700014-02-2057-7601.0000-2522011
    Installation ID: 012041021822088900098764200724154366835053055621525904
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 24X8J
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 30/03/2013 12:51:59

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 3:26:2013 16:38
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: PgAAAAEAAAABAAMAAgADAAAABgABAAEA6GHoJeZOXk3K4c5wrIhc9/xhjGxiPXz7yLTakvaIqvFodZDCLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      BOOT   Sony  VAIO
      MCFG   Sony  VAIO
      WDAT   Sony  VAIO
      TCPA   Sony  VAIO
      ASF!   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      ASPT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

    Saturday, March 30, 2013 12:58 PM
  • There's something I'm not seeing here, I'm sure.

    Since it's a Sony, it almost certainly came with an AV pre-installed.- most likely Norton or McAfee.

    I think we'd better run the removal tools for both to be on the safe side....

    Download the McAfee removal tool from:

     

    http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

     

    Click Save, and save the file to a folder on your computer.

    Navigate to the folder where you saved the file.

    right-click on MCPR.exe and select 'Run as Administrator'  to run the removal tool.

     

    when complete, reboot.

     

    Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

     

    Close all other programs, then run the tool. When it's complete, reboot the machine  whether it asks for it or not.

     

    After the reboot, open an Elevated Command Prompt, and run the following command

     

    NETSH WINSOCK RESET

     

    You'll be advised to reboot - do so.

    then post another MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 6:05 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
    Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
    Windows Product ID: 00371-OEM-8992671-00014
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {C52C2F8C-A022-4005-A612-5A037F78BBBA}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\en-US\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C52C2F8C-A022-4005-A612-5A037F78BBBA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-1822645842-419186883-3694145649</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCZ21M9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R0173H5</Version><SMBIOSVersion major="2" minor="6"/><Date>20120521000000.000000+000</Date></BIOS><HWID>8F6A0D00018400FE</HWID><UserLCID>1809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00178-926-700014-02-2057-7601.0000-2522011
    Installation ID: 011992148612026084313461649896643266682415581665904251
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 24X8J
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 02/04/2013 20:42:36

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 4:2:2013 19:52
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: NAAAAAAAAAABAAIAAQACAAAABQABAAEA6GHoJV5NyuHOcFz3jGx8+8i02pKq8Wh1kMIucw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      BOOT   Sony  VAIO
      MCFG   Sony  VAIO
      WDAT   Sony  VAIO
      TCPA   Sony  VAIO
      ASF!   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      ASPT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

    Tuesday, April 2, 2013 7:44 PM
  • I think the time has come for me to admit defeat :(

    The only times we've seen these mismatches in the past has been when Vistalizator has been installed - but I'm quite prepared to believe there's other ways of getting them.

    I can only suggest a repair install, or direct contact with MS WGA support.

    WGA Support can be found here

    North America:
    http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
    Outside North America:

    http://support.microsoft.com/contactus/?ws=support#tab0

     

    Please let us know if (and how) MS manage to repair the problem without a repair
    install of the OS - it would be useful for future reference!    



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 9:15 PM
    Moderator
  • Thanks!
    Tuesday, April 2, 2013 9:43 PM
  • Sorry we couldn't resolve it here.

    If you have any follow-up questions, feel free to come back.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 9:58 PM
    Moderator