locked
1 ) Win 7 not genuine message - mfg (Lenovo) installed - Nov purchase / 2) Can not Troubleshoot RRS feed

  • Question

  • Receiving Daily Updates 

    Pre-installed by mfg

    Do not have disc

    Can not troubleshoot problems- error message

    Can not use system with User Account settings in Middle range, must leave at bottom, do not notify

    All Microsoft sites say go to manufacturer, Lenovo offers no support of installed product or hardware without payment

    Requesting Program Disc

    Requesting Instructions to reinstall or repair troubleshooting

    Have made previous requests to Microsoft for assistance with associated problems

    Microsoft Diagnostic shows genuine, Need instructions to remove message without interruption of use

    Will clean install resolve issues?

    Is Windows 7 still in bug mode? 

    Can I get help from Microsoft without payment? 

    Should I return machine and buy Macintosh?

    thank you

     

     Diagnostic Report (1.9.0019.0):

    -----------------------------------------

    WGA Data-->

    Validation Status: Genuine

    Validation Code: 0

     

    Cached Validation Code: 0x0

    Windows Product Key: *****-*****-JKHXW-D9W83-FJQKD

    Windows Product Key Hash: AYaBykmfTHUVW5whGaYMeVJn0/U=

    Windows Product ID: 00359-OEM-8992687-00249

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010300.0.0.003

    ID: {B0627624-5C55-46F8-9276-0C4FE2FD8AF0}(3)

    Is Admin: Yes

    TestCab: 0x0

    WGA Version: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Home Premium

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.100618-1621

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    WGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Professional Plus 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\MotherShip\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\wat\watux.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppuinotify.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slui.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcommdlg.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\drivers\spsys.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\drivers\spldr.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\en-us\user32.dll.mui[6.1.7600.16385]

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{B0627624-5C55-46F8-9276-0C4FE2FD8AF0}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FJQKD</PKey><PID>00359-OEM-8992687-00249</PID><PIDType>2</PIDType><SID>S-1-5-21-1762690002-1723359766-1538713923</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>IdeaCentre K320</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>5LKT42A</Version><SMBIOSVersion major="2" minor="6"/><Date>20100608000000.000000+000</Date></BIOS><HWID>09B93607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TC-03   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>34D4A1BCFDF5586</Val><Hash>odJVFpdtknrmceGaDpYiHb826L0=</Hash><Pid>89409-707-9849595-65641</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, HomePremium edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00359-00178-926-800249-02-1033-7600.0000-2402010

    Installation ID: 004303092962170920374070526195796313972373345126481642

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: FJQKD

    License Status: Licensed

    Remaining Windows rearm count: 1

    Trusted time: 1/23/2011 2:30:44 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: 0x00000000

    HealthStatus: 0x000000000001EFF0

    Event Time Stamp: 1:23:2011 14:27

    WAT Activex: Registered

    WAT Admin Service: Registered

     

    HWID Data-->

    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAln0mR1ToxMze975QykReOUwBdlY=

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC LENOVO TC-03   

      FACP LENOVO TC-03   

      HPET LENOVO TC-03   

      MCFG LENOVO TC-03   

      SSDT LENOVO TC-03   

      ASF! LENOVO TC-03   

      SLIC LENOVO TC-03   

      IMWL LENOVO TC-03   

     

    COMPUTER SPECS & CONFIG:

    MANUFACTURER LENOVO
    MANUFACTURER PART # 30191LU
    PRODUCT DESCRIPTION LENOVO K320 TOWER - 1TB
    TYPE PERSONAL COMPUTER
    FORM FACTOR TOWER
    APPROXIMATE DIMENSIONS (WXDXH) 7.1 IN X 17.3 IN X 15.4 IN
    APPROXIMATE WEIGHT 24.7 LBS
    LOCALIZATION ENGLISH
    PROCESSOR 1 X INTEL CORE I7 860 / 2.8 GHZ ( 3.46 GHZ ) ( QUAD-CORE )
    PROCESSOR MAIN FEATURES HYPER-THREADING TECHNOLOGY, INTEL EXTENDED MEMORY 64 TECHNOLOGY
    CACHE MEMORY 8 MB
    CACHE PER PROCESSOR 8 MB
    RAM 8 GB (INSTALLED) / 8 GB (MAX) - DDR3 SDRAM - NON-ECC - 1066 MHZ - PC3-8500
    STORAGE CONTROLLER SERIAL ATA ( SERIAL ATA-300 )
    HARD DRIVE 1 X 1 TB - STANDARD - SERIAL ATA-300
    OPTICAL STORAGE DVD-WRITER
    CARD READER 16 IN 1
    MONITOR NONE.
    GRAPHICS CONTROLLER PCI EXPRESS X16 - NVIDIA GEFORCE GT 320
    VIDEO MEMORY 1 GB
    AUDIO OUTPUT SOUND CARD
    NETWORKING NETWORK ADAPTER - ETHERNET, FAST ETHERNET, IEEE 802.11N
    POWER AC 120/230 V ( 50/60 HZ )
    OS PROVIDED MICROSOFT WINDOWS 7 HOME PREMIUM 64-BIT EDITION
    MICROSOFT OFFICE PRELOADED INCLUDES A PREINSTALLED IMAGE OF SELECT 2007 MICROSOFT OFFICE SUITES. PURCHASE A MEDIALESS LICENSE KIT (MLK) TO ACTIVATE THE SOFTWARE.

     

     

    Parts information Quantity
      CT AR9280 11N WLAN [1]
      Video Card ( Geforce GT 320 ) [1]
      AVC Z8UL06S001 95W CPU COOLER(R) [1]
      H57_mATX_F_GA@IH57_ALC888S_82579DC(R) [1]
      Primax LXH MODWUO(Pix) USB mice [1]
      TX GL826 long wire 4 CARD Reader (R) [1]
      Memory ( 2G ) [4]
      Sunrex LXH JME2207P (FN) PS2 Keyboard [1]
      JT ATC2 LX-320 Cwithsis(R) [1]
      TSST 16XTS-H653G SATA BlACK DVDRW [1]
      I C i7-860 2.8/1333/8/1156 95 B1 CPU(R) [1]
      Hitachi Jupiter HDS721010CLA332 1TBLHHDD [1]
      Acbel PC6001-EL6G ATX 280W Robust Power(R) [1
     

    ARE THESE PREVIOUS PROBLEMS RELATED TO CURRENT ONE?

    Description:
      Stopped working
     
    Problem signature:
      Problem Event Name: CLR20r3
      Problem Signature 01: iastoricon.exe
      Problem Signature 02: 9.6.0.1014
      Problem Signature 03: 4b8f2448
      Problem Signature 04: System.Xml
      Problem Signature 05: 2.0.0.0
      Problem Signature 06: 4a275e0f
      Problem Signature 07: 210a
      Problem Signature 08: 274
      Problem Signature 09: System.UnauthorizedAccess
      OS Version: 6.1.7600.2.0.0.768.3
      Locale ID: 1033
     
     
     
    Adobe flash error
    Problem signature:
      Problem Event Name: APPCRASH
      Application Name: FlashUtil10l_ActiveX.exe
      Application Version: 10.1.102.64
      Application Timestamp: 4cc0fe46
      Fault Module Name: FlashUtil10l_ActiveX.exe
      Fault Module Version: 10.1.102.64
      Fault Module Timestamp: 4cc0fe46
      Exception Code: c0000005
      Exception Offset: 0000215c
      OS Version: 6.1.7600.2.0.0.768.3
      Locale ID: 1033
      Additional Information 1: 0a9e
      Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
      Additional Information 3: 0a9e
      Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
     
    ---
    Mystfaith1, Dec 01 13:00 (PST):

    Tom
    Thanks for helping me with this. Not sure if malware or corrupted files.
    Conflicting info on Internet, Manufacturer tech says it is virus. No MBAM
    warnings.

    History:

    On start up
    Error message indicated that IAStorIcon.exe would not start. windows
    checking for solution

    Problem Event Name: CLR20r3
    Problem Signature 01: iastoricon.exe
    Problem Signature 02: 9.6.0.1014
    Problem Signature 03: 4b8f2448
    Problem Signature 04: System.Xml
    Problem Signature 05: 2.0.0.0
    Problem Signature 06: 4a275e0f
    Problem Signature 07: 210a
    Problem Signature 08: 274
    Problem Signature 09: System.UnauthorizedAccess
    OS Version: 6.1.7600.2.0.0.768.3
    Locale ID: 1033

    Adobe Flash installer error message appeared - Flash is most current
    version, was not attempting to install
    Adobe flash error
    Problem signature:
    Problem Event Name: APPCRASH
    Application Name: FlashUtil10l_ActiveX.exe
    Application Version: 10.1.102.64
    Application Timestamp: 4cc0fe46
    Fault Module Name: FlashUtil10l_ActiveX.exe
    Fault Module Version: 10.1.102.64
    Fault Module Timestamp: 4cc0fe46
    Exception Code: c0000005
    Exception Offset: 0000215c
    OS Version: 6.1.7600.2.0.0.768.3
    Locale ID: 1033
    Additional Information 1: 0a9e
    Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
    Additional Information 3: 0a9e
    Additional Information 4: 0a9e372d3b4ad19135b953a78882e789


    Settings.ini in use by another program
    Had Free Version of Malwarebytes Anti-Malware
    Had Mfg installed McAfee
    Had Eusing Registry Cleaner
    No alerts
    Ran scans nothing found
    System Restore would not work. Tried several dates
    Messages:
    You can not restore to that point, Restoration failed,
    Failed to extract files. Restore point damaged or deleted
    Tried to locate clean file for IAStorIcon.exe to repair
    Googled IastorIcon.exe which comes up as either Intel part or Virus.
    Computer is a month old. Called Lenovo whose rep said it was a removable
    virus- for $129
    Purchased Full Version of MBam - ran scan found nothing
    Files previously used after transfer from my xp laptop are either missing
    or not working.
    Microsoft Starter pre installed is not shown in all applications list.
    Word and Excel files will open
    Many desktop icons are gone
    Can not download many replacements. Access to internet was blocked.
    example:
    Legacy Family Tree Program would not open- error message is disc or
    network error. Would not allow me to download new copy and reinstall.
    Ran Scannow and then Chkdsk
    Chkdsk was clean
    Scannow came up with corruptions.
    "Resource Protection is corrupt. Unable to fix all"
    directed to CBS log then windir\logs\cbs\cbs.log
    Did search could not find match
    Following instructions on social.answers.Microsoft.com, Tried Technet
    link. Unchecked all boxes referring to IastorIcon, machine would not reboot.
    Startup Repair page which appears to be part of the new system appeared.
    When computer rebooted, error messages were returned to desktop. I have never
    seen start up repair page before but this is my first time using Windows
    7. Not sure if valid page or reinstallation by virus program.

    Would not allow me to download from safer network link "This webpage is
    not available.

    The webpage at http://www.safer-networking.org/en/ownmirrors1/index.html
    might be temporarily down or it may have moved permanently to a new web
    address."
    Following information found on Legacy site, lowered User Account Control
    (UAC) to "no notification"

    Results:
    Error messages disappeared
    Allowed to download clean copy of program

    Returned UAC to default:
    Unable to open Legacy program
    Legacy icon gone
    Unable to play old game on drive that had previously worked. message:
    "unable to start graphics engine due to improper system load."

    Lowered UAC
    Reinstalled all drivers with 1 failure- keyboard driver

    Successfully downloaded microsoft suggested file from safer-networking
    which was a spy bots detector
    created back up registry
    found 47 problems, removed

    ran MBAM - still no problems found

    Went to Intel site
    Attempted to download drivers.
    Link would not work
    Could not download drivers.
    No error message, checked task manager to see if browser was responding

    Task manager showed no activity
    IAStorIcon shown in processes - I ended
    Switched from Google Chrome to IE8
    Reinstalled Java
    Link was activated

    downloaded Driver Utility
    downloaded hard drive info and updated drivers

    Bottom line
    Without UAC activated:
    Windows programs appeared in all programs under start bar
    No error message
    Game graphics work
    legacy program accessible

    Reset UAC to default
    Error Messages reappeared:
    Settings.ini in use by another program
    IAstorIcon looking for solution
    Adobe Flash Installer not available.

    Still have internet access via wireless connection shows unknown connection
    Hardwire connection no longer found

    What have I missed?
    Can computer operate safely without User Account Controls in place with
    MBAM, Spybot search, Eusing registry cleaner, mcafee antivirus in place?

    Windows Defender is disabled. Should it be activated and something else
    turned off?

    Is there a conflict of files causing problem rather than a malware or
    spyware?


    Intel System Identification Utility Reference Number: 0024 0287
    Date Created: Tuesday, November 30, 2010 5:16:55 PM
    BASIC


    SYSTEM INFORMATION Computer Manufacturer LENOVO Computer Model To be
    filled by O.E.M. Operating System (O/S) Microsoft Windows 7 Home Premium
    Edition Operating System Build (O/S) (build 7600), 64-bit Operating System
    (version) 6.1.7600 System RAM 7.9 GB CD or DVD Device TSSTcorp CDDVDW
    TS-H653G System Hard Drive Overview System Total Storage size: 906.3 GB
    Local Disk C: 906.3 GB Used space: 83.5 GB Free Space: 822.8 GB
    GRAPHICS INFORMATION Graphics Product NVIDIA GeForce GT 320 Video Memory 4.0
    GB MOTHERBOARD INFORMATION Manufacturer not detected Model To be
    filled by O.E.M. AA Number not detected BIOS Vendor LENOVO BIOS Version
    5LKT42A BIOS Release Date 09/23/09 System Memory 7.9 GB Sound Card NVIDIA
    High Definition Audio PROCESSOR INFORMATION Manufacturer GenuineIntel
    Model _Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz_
    (http://www.intel.com/p/en_US/support/) Intel Processor analysis tools _Intel Processor analysis
    tools _ (http://www.intel.com/support/processors/sb/CS-015477.htm) CPU Speed
    2.79 GHz Link to Processor Specification _Link to Processor Specification_
    (http://ark.intel.com/) WIRED NETWORKING INFORMATION Wired
    Networking Product _Intel(R) 82578DC based Network Controller(OEM)_
    (http://www.intel.com/support/network/adapter/pro100/sb/CS-025637.htm) Driver Version
    11.2.19.0 Intel PROSet Version not detected WIRELESS NETWORKING INFORMATION
    Wireless Networking Product not detected Driver Version not detected
    Intel PROSet/Wireless Version
    ----
    _Graphics Driver _
    (http://svc.systemrequirementslab.com/iduu/iduu.aspx?app=multi#)

    Product Detected NVIDIA GeForce GT 320 Current Driver Installed
    8.16.0011.9067 This device is unknown or unsupported. Please contact the
    manufacturer for possible updates. _More information>>_
    (http://www.intel.com/support/iduufaq.htm)


    _Intel Chipset Software Installation Utility (Chipset INF) _
    (http://svc.systemrequirementslab.com/iduu/iduu.aspx?app=multi#)

    Product Detected _Intel® 5, 4, 3, 900 Series Chipsets_
    (http://www.intel.com/p/en_US/support/highlights/chpsts/inf) Current Version Installed
    9.1.1.1019 This version is valid.

     


    _Audio Driver for Intel Desktop Board _
    (http://svc.systemrequirementslab.com/iduu/iduu.aspx?app=multi#)

    Product Detected NVIDIA High Definition Audio Current Driver
    Installed 1.0.0.58 This device is unknown or unsupported. Please contact the
    manufacturer for possible updates. _More information>>_
    (http://www.intel.com/support/iduufaq.htm)



    _Wireless Networking _
    (http://svc.systemrequirementslab.com/iduu/iduu.aspx?app=multi#)

    Product Detected 11a/b/g/n Wireless LAN Adapter Current Driver
    Installed 8.0.0.238 This device is unknown or unsupported. Please contact the
    manufacturer for possible updates. _More information>>_
    (http://www.intel.com/support/iduufaq.htm)



    _Wired Networking _
    (http://svc.systemrequirementslab.com/iduu/iduu.aspx?app=multi#) (Newer Driver Available)

    Product Detected _Intel(R) 82578DC based Network Controller(OEM) _
    (http://www.intel.com/support/network/adapter/pro100/sb/CS-025637.htm)
    Current Driver Installed 11.2.19.0 Newer Driver Available: 11.6.92.0
    _Download Now _ (http://downloadmirror.intel.com/18713/eng/PROWinx64.exe)
    File Size: 27.467 MB Download Time: Time @56Kbps:66.9 mins. _Driver
    Description & Driver Documentation _
    (http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&amp;DwnldID=18713)

     

     

     

     

     

     

     

     

     

    Description:
    Stopped working

    Problem signature:
    Problem Event Name: CLR20r3
    Problem Signature 01: iastoricon.exe
    Problem Signature 02: 9.6.0.1014
    Problem Signature 03: 4b8f2448
    Problem Signature 04: System.Xml
    Problem Signature 05: 2.0.0.0
    Problem Signature 06: 4a275e0f
    Problem Signature 07: 210a
    Problem Signature 08: 274
    Problem Signature 09: System.UnauthorizedAccess
    OS Version: 6.1.7600.2.0.0.768.3
    Locale ID: 1033



    Adobe flash error
    Problem signature:
    Problem Event Name: APPCRASH
    Application Name: FlashUtil10l_ActiveX.exe
    Application Version: 10.1.102.64
    Application Timestamp: 4cc0fe46
    Fault Module Name: FlashUtil10l_ActiveX.exe
    Fault Module Version: 10.1.102.64
    Fault Module Timestamp: 4cc0fe46
    Exception Code: c0000005
    Exception Offset: 0000215c
    OS Version: 6.1.7600.2.0.0.768.3
    Locale ID: 1033
    Additional Information 1: 0a9e
    Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
    Additional Information 3: 0a9e
    Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

     

    Sunday, January 23, 2011 10:55 PM

Answers

  • File Scan Data-->

    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\wat\watux.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppuinotify.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slui.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcommdlg.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\drivers\spsys.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\drivers\spldr.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\en-us\user32.dll.mui[6.1.7600.16385]


    Hello D Matrix GrannE,

     While I can't tell for sure if the issue is Malware related or not, what I can tell you is there are a number of files that are either corrupt or have been otherwise modified in some way.  This could be cause by Malware but it could also be caused by other things.

     If there is a question of malware, the first thing I would suggest is to run multiple Anti-Virus/Anti-Malware scans (preferably using multiple different programs) before you try the below troubleshooting steps. 

     

    To fix the issue we need to fix the problem files. To do this we will try Repairing the files, Reverting to a point in time when the files were not damaged and/or replace the file with known-good copies.

    a. System Scan. The scan will look for bad Windows files and will attempt to repair them, if possible.

    1) Click the Start Button
    2) Type: cmd.exe
    3) Right-click the cmd.exe file and select 'Run as Administrator'
    4) In the CMD window, type: sfc /scannow
    5) Reboot and see if that resolves the issue.


    b. Repairing Windows using System Restore:

    1) Click the Start button
    2) In the Start Search field, type: System Restore and hit “Enter”
    3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
    4) Click the "Next" button.
    5) Reboot and see if that resolves the issue.

     

    c. Replace files with known-good copies:

    For this you will need to find a PC running Windows 7 (ensure that it is in good working order). Find and copy the files (listed above) from that known-good Windows 7, transfer them to your PC and replace the bad files with these good copies.

    It is also possible to extract the files from a Windows install disk, but I don't have instructions on how to do this. One of the community members may be able to provide instructions.

     

    Lastly, if none of these fixes the issue, I would suggest contacting Microsoft Assisted support (at one of the below URLs) for further assistance.

    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

     

    Thank you,


    Darin MS
    Monday, January 24, 2011 7:30 PM

All replies

  • File Scan Data-->

    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\wat\watux.exe[7.1.7600.16395]

    File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slc.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slcext.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppuinotify.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\slui.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppcommdlg.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7600.16385]

    File Mismatch: C:\windows\system32\drivers\spsys.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\drivers\spldr.sys[6.1.7127.0]

    File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7600.16385]

    File Mismatch: C:\windows\system32\en-us\user32.dll.mui[6.1.7600.16385]


    Hello D Matrix GrannE,

     While I can't tell for sure if the issue is Malware related or not, what I can tell you is there are a number of files that are either corrupt or have been otherwise modified in some way.  This could be cause by Malware but it could also be caused by other things.

     If there is a question of malware, the first thing I would suggest is to run multiple Anti-Virus/Anti-Malware scans (preferably using multiple different programs) before you try the below troubleshooting steps. 

     

    To fix the issue we need to fix the problem files. To do this we will try Repairing the files, Reverting to a point in time when the files were not damaged and/or replace the file with known-good copies.

    a. System Scan. The scan will look for bad Windows files and will attempt to repair them, if possible.

    1) Click the Start Button
    2) Type: cmd.exe
    3) Right-click the cmd.exe file and select 'Run as Administrator'
    4) In the CMD window, type: sfc /scannow
    5) Reboot and see if that resolves the issue.


    b. Repairing Windows using System Restore:

    1) Click the Start button
    2) In the Start Search field, type: System Restore and hit “Enter”
    3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
    4) Click the "Next" button.
    5) Reboot and see if that resolves the issue.

     

    c. Replace files with known-good copies:

    For this you will need to find a PC running Windows 7 (ensure that it is in good working order). Find and copy the files (listed above) from that known-good Windows 7, transfer them to your PC and replace the bad files with these good copies.

    It is also possible to extract the files from a Windows install disk, but I don't have instructions on how to do this. One of the community members may be able to provide instructions.

     

    Lastly, if none of these fixes the issue, I would suggest contacting Microsoft Assisted support (at one of the below URLs) for further assistance.

    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

     

    Thank you,


    Darin MS
    Monday, January 24, 2011 7:30 PM
  • Thanks for the help. will try suggestions 1 and 2 and update here. 

    Do not know anyone running Windows 7. Everyone still on XP.

    Mfg partitioned and is supposed to have copy on my computer.  Might try clean install. 


    Dee Evans
    Tuesday, January 25, 2011 10:23 AM
  • "Darin Smith MS" wrote in message news:b146e2a8-1d39-437e-b1fb-d61ce08b834a...

    It is also possible to extract the files from a Windows install disk, but I don't have instructions on how to do this. One of the community members may be able to provide instructions.

     

    Thank you,


    Darin MS

    AFAIK, Darin, there's no MS-supported way to do this, so I suspect that your rules of engagement prohibit your from using the link - but if you're interested anyhow, have a look here.
     
    It may or may not also work with OEM Recovery disks - I'll have to play and find out <g>
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, January 25, 2011 11:21 AM
    Moderator
  • Windows Resource Protection Corrupt Unable to Fix is result of scannow. 

     

    Ran CBS report and received 1,566 pages, all dated today.

    Going to System Restore. 


    Dee Evans
    Tuesday, January 25, 2011 11:55 AM
  • "Noel D Paton" wrote in message news:d48be192-1bfd-47e6-8478-67fa44af9a4f...
    "Darin Smith MS" wrote in message news:b146e2a8-1d39-437e-b1fb-d61ce08b834a...

    It is also possible to extract the files from a Windows install disk, but I don't have instructions on how to do this. One of the community members may be able to provide instructions.

     

    Thank you,


    Darin MS

    AFAIK, Darin, there's no MS-supported way to do this, so I suspect that your rules of engagement prohibit your from using the link - but if you're interested anyhow, have a look here.
     
    It may or may not also work with OEM Recovery disks - I'll have to play and find out <g>
     
     
    Acer recovery disks are not exactly unreadable - but since the image is broken into 50MB 'pages', it's going to be an impossible task to search anything for a meaningful result. :(
    I'll have another go with an HP disk later.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, January 25, 2011 9:20 PM
    Moderator
  • "D Matrix GrannE" wrote in message news:28572ead-d91e-4086-ab89-8ae339f6f532...

    Windows Resource Protection Corrupt Unable to Fix is result of scannow. 

     

    Ran CBS report and received 1,566 pages, all dated today.

    Going to System Restore. 


    Dee Evans

    That bad?
    I suspect that your best option is a clean reinstall, using the OEM's recovery system - make sure that you back up your data to an external drive first!
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, January 25, 2011 9:22 PM
    Moderator
  • i HAVE BEEN BACKING UP FILES BUT SINCE I DO NOT TRUST THE QUALITY OR VALIDITY, I AM IN THE PROCESS OF SAVING FILES TO DISC. 

    TRIED SYSTEM RESTORE AND IT WOULD NOT GO BACK FURTHER THAN 10 DAYS. 

    THANKS FOR ADVICE, I WILL BE UPDATING AT THE NEXT STAGE.

    D


    Dee Evans
    Wednesday, January 26, 2011 8:35 AM
  • Went with Clean Install from mfg partition.

    Darin and Noel:

    Thank You Both for Everything

    Ran Back Up Disc before any other activity

    Ran Scannow. - No Integrity Violations-

    Troubleshooter appears to be working.

    Any advice to protect myself from future problems?

    Reinstalling Malwarebytes Anti-Malware Full Pkg

    System came with McAfee Security. Is this causing conflict. Should I disable?

    While doing research on problem, came across reference that Microsoft automatic update code KB971033 was causing the problem with not genuine message. How do I not let it be loaded to my machine in the future?

     


    Dee Evans
    Friday, January 28, 2011 12:36 PM
  • "D Matrix GrannE" wrote in message news:243617db-b3b4-4b94-bb39-55a7c63ff4ac...

    Reinstalling Malwarebytes Anti-Malware Full Pkg

    System came with McAfee Security. Is this causing conflict. Should I disable?

    While doing research on problem, came across reference that Microsoft automatic update code KB971033 was causing the problem with not genuine message. How do I not let it be loaded to my machine in the future?

     


    Dee Evans

    Personally, I'd get rid of McAfee as soon as possible, completely - run the MCPRT tool to get rid of any traces left, then reboot, and install MSE.
    I have great problems believing any of the hype that the major AV companies put out regarding their software, and totally disagree with the idea that 'Security Suites' are better than standalone products.
    As far as I'm aware MSE and MBAM can co-exist - but you'd need to check their forums for certainty. Running MBAM as a scanner certainly has no effect on any decent AV that I've seen - but if you run it in resident mode, it may well start arguing with an AV about possession of files, and the machine could come to a grinding halt. As I say, check for advice in the MBAM forums, and in the AV forums for whatever AV you go with.
     
    WRT the 971033 update (the WAT update)- the ONLY systems it causes problems with are the non-genuine ones! (which is what it's designed to do). Note that a non-genuine machine isn't necessarily one that is a counterfeit - it is one that fails any of a number of tests. Those tests include checks on system files, and on various other things such as the presence of Activation Hacks (Loaders) designed to bypass activation restrictions.
    On a system with a Genuine OS, and genuine software installed there is no good reason not to install the update - and some good reasons to install it.
    Would you have known that your system was suffering from corruption, if you hadn't had the update installed?
    Probably, in your particular case - the update itself was one of the systems affected by the corruption, but it was still able to report the date and time it found out about the offence:)
    Many people don't know that they've bought counterfeit software - and the WAT  update attempts to alert them to its presence.
    I recommend that you install it.
     
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, January 28, 2011 1:20 PM
    Moderator