locked
Windows is not genuine RRS feed

  • Question

  • Windows 7 was pre-installed on Sony Vaio laptop. Had issues with booting up. Ran chkdsk and it found and fixed some bad clusters. It boots up now, but getting the "windows is not genuine" message.

    Here is the report from MGADiag. Thanks for the help.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-VGV87-C7XPK-CGKHQ
    Windows Product Key Hash: sdEjrEJjW0FuXAhegYxl8GAkBYg=
    Windows Product ID: 00359-OEM-8992687-00016
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {72A57E26-A0C2-45C2-A8B4-C8209294B7EA}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{72A57E26-A0C2-45C2-A8B4-C8209294B7EA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-CGKHQ</PKey><PID>00359-OEM-8992687-00016</PID><PIDType>2</PIDType><SID>S-1-5-21-3224608522-2333411871-1943847130</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA21FX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0270Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100505000000.000000+000</Date></BIOS><HWID>6D4F3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800016-02-1033-7600.0000-1252010
    Installation ID: 009746601996364224776390692374488711463443931611669262
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: CGKHQ
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 6/16/2012 10:33:55 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000400
    Event Time Stamp: 6:13:2012 09:30
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui


    HWID Data-->
    HWID Hash Current: MgAAAAEAAwABAAEAAAABAAAAAwABAAEA6GHK0y7lUsce7vpF8AVGKlhLpkUWrUJLXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      MCFG   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

    Saturday, June 16, 2012 3:44 PM

Answers

  • George - thanks for the eagle-eyes! I hadn't noticed.

    It possibly means nothing except registry corruption, maybe caused by malware, but......

    rvc1234

    You have a major problem with your hard drive - back up your data now, or you may lose it all.

    Once backed up you can try running the HD manufacturer's test utility to detect and possibly fix teh bad sectors showing in the CHKDSK report - but you would be best to prepare for  a new hard drive and a clean install.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, June 18, 2012 5:18 PM
    Moderator

All replies

  • "rvc1234" wrote in message news:5f85d10e-63e9-4dc3-b14b-c02173bbcae1...

    Windows 7 was pre-installed on Sony Vaio laptop. Had issues with booting up. Ran chkdsk and it found and fixed some bad clusters. It boots up now, but getting the "windows is not genuine" message.

    Here is the report from MGADiag. Thanks for the help.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-VGV87-C7XPK-CGKHQ
    Windows Product Key Hash: sdEjrEJjW0FuXAhegYxl8GAkBYg=
    Windows Product ID: 00359-OEM-8992687-00016
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003


    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA21FX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0270Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100505000000.000000+000</Date></BIOS

     

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Partial Product Key: CGKHQ
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 6/16/2012 10:33:55 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000400
    Event Time Stamp: 6:13:2012 09:30
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

     

     
     
    Your problem is the file mismatch and tamper highlighted above.
     
    Please check file integrity as follows.
    Please run a full CHKDSK and SFC scan.... 
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
    CHKDSK C: /R
    and hit the Enter key.
     
    You will be told that the drive is locked,
    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.
     
     
    The chkdsk will take a few hours depending on the size
    of the drive, so be patient!
     
    After the CHKDSK has run, Windows should boot normally
    (possibly after a second auto-reboot) - then run the SFC
     
    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
     
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
     
    SFC /SCANNOW
     
    and hit the Enter key
     
    Wait for the scan to finish - make a note of any error messages - and then reboot.
    Post an MGADiag report with details of any error messages encountered.     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 17, 2012 11:50 AM
    Moderator
  • Ran chkdsk and SFC. kdsk found a bad cluster in Norton virus definition file and the following message from SFC.

    --------------

    C:\Windows\system32>sfc /scannow

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.

    Verification 100% complete.

    Windows Resource Protection found corrupt files but was unable to fix some of th

    em.

    Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example

    C:\Windows\Logs\CBS\CBS.log

    ---------------------

    The CBS.log file has messgaes like this...

    2012-06-18 08:19:25, Info                  CBS    Failed to internally open pack

    age. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]

    2012-06-18 08:19:25, Info                  CBS    Session: 30231892_4222602873 i

    nitialized by client WindowsUpdateAgent.

    2012-06-18 08:19:25, Info                  CBS    Failed to internally open pack

    age. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]

    2012-06-18 08:19:25, Info                  CBS    Session: 30231892_4222602874

    ----------

    Rebooted and ran MGADIAG and here is the output...looks like it has the same issue.

    Appreciate any suggestions. Thanks.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-VGV87-C7XPK-CGKHQ
    Windows Product Key Hash: sdEjrEJjW0FuXAhegYxl8GAkBYg=
    Windows Product ID: 00359-OEM-8992687-00016
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.2.0.000
    ID: {72A57E26-A0C2-45C2-A8B4-C8209294B7EA}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Microsoft Windows XP
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{72A57E26-A0C2-45C2-A8B4-C8209294B7EA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.2.0.000</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-CGKHQ</PKey><PID>00359-OEM-8992687-00016</PID><PIDType>2</PIDType><SID>S-1-5-21-3224608522-2333411871-1943847130</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA21FX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0270Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100505000000.000000+000</Date></BIOS><HWID>6D4F3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800016-02-1033-7600.0000-1252010
    Installation ID: 009746601996364224776390692374488711463443931611669262
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: CGKHQ
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 6/18/2012 8:45:12 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000400
    Event Time Stamp: 6:13:2012 09:30
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui


    HWID Data-->
    HWID Hash Current: MgAAAAEAAwABAAEAAAABAAAAAwABAAEA6GHK0y7lUsce7vpF8AVGKlhLpkUWrUJLXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      MCFG   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

    Monday, June 18, 2012 1:46 PM
  • "rvc1234" wrote in message news:4359edc2-121e-4ee9-bd4c-ef62fa32777a...

    Ran chkdsk and SFC. kdsk found a bad cluster in Norton virus definition file and the following message from SFC.

    Verification 100% complete.

    Windows Resource Protection found corrupt files but was unable to fix some of th

     

    ----------

    Rebooted and ran MGADIAG and here is the output...looks like it has the same issue.

    Appreciate any suggestions. Thanks.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-VGV87-C7XPK-CGKHQ
    Windows Product Key Hash: sdEjrEJjW0FuXAhegYxl8GAkBYg=
    Windows Product ID: 00359-OEM-8992687-00016
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.2.0.000

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA21FX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0270Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100505000000.000000+000</Date></BIOS

     

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Partial Product Key: CGKHQ
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 6/18/2012 8:45:12 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000400
    Event Time Stamp: 6:13:2012 09:30
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

     
     
    Bad cluster or bad sector?
    please post the CHKDSK report - from Event Viewer, Windows Application logs, source Wininit.
     
    Please also upload a copy of your CBS.log file to your SkyDrive or other favoured fileshare site, and post a link to it.
     
    Please run the following commands from an elevated Command Prompt window, and post the results..
     
    DIR C:\Windows\sppuinotify.* /S
    ICACLS C:\Windows\System32\sppuinotify.dll
     
    Here are some instructions to make life easier :)
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, June 18, 2012 2:25 PM
    Moderator
  • Noel, I don't know if it is relevant but this appeared in the last report. seems odd:

    Product Name: Microsoft Windows XP

    Monday, June 18, 2012 3:58 PM
    Answerer
  • chkdsk report:

    Checking file system on C:

    The type of the file system is NTFS.

    A disk check has been scheduled.

    Windows will now check the disk.                        

    CHKDSK is verifying files (stage 1 of 5)...

      225280 file records processed.                                          File verification completed.

      491 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              51 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 5)...

      292458 index entries processed.                                         Index verification completed.

      0 unindexed files scanned.                                           0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 5)...

      225280 file SDs/SIDs processed.                                         Cleaning up 37 unused index entries from index $SII of file 0x9.

    Cleaning up 37 unused index entries from index $SDH of file 0x9.

    Cleaning up 37 unused security descriptors.

    Security descriptor verification completed.

      33590 data files processed.                                            CHKDSK is verifying Usn Journal...

      33717136 USN bytes processed.                                             Usn Journal verification completed.

    CHKDSK is verifying file data (stage 4 of 5)...

    Read failure with status 0xc0000185 at offset 0x2ab46f000 for 0x10000 bytes.

    Read failure with status 0xc0000185 at offset 0x2ab471000 for 0x1000 bytes.

    Windows replaced bad clusters in file 1770

    of name \PROGRA~3\Norton\{0C55C~1\N360_5~1.29\DEFINI~1\VIRUSD~1\20120616.009\troj_v.idx.

      225264 files processed.                                                 File data verification completed.

    CHKDSK is verifying free space (stage 5 of 5)...

      59274597 free clusters processed.                                         Free space verification is complete.

    Adding 1 bad clusters to the Bad Clusters File.

    Correcting errors in the Volume Bitmap.

    Windows has made corrections to the file system.

    301803863 KB total disk space.

      64262716 KB in 165764 files.

        106268 KB in 33591 indexes.

           588 KB in bad sectors.

        335903 KB in use by the system.

         65536 KB occupied by the log file.

    237098388 KB available on disk.

          4096 bytes in each allocation unit.

      75450965 total allocation units on disk.

      59274597 allocation units available on disk.

    Internal Info:

    00 70 03 00 c6 0a 03 00 4f b3 05 00 00 00 00 00  .p......O.......

    fc 0c 00 00 33 00 00 00 00 00 00 00 00 00 00 00  ....3...........

    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

    Windows has finished checking your disk.

    Please wait while your computer restarts.

    ---------------------

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\sppuinotify.* /S
    Volume in drive C has no label.
    Volume Serial Number is B42C-A073

    Directory of C:\Windows\System32

    07/13/2009  08:41 PM            65,536 sppuinotify.dll
                   1 File(s)         65,536 bytes

    Directory of C:\Windows\System32\en-US

    05/05/2010  11:06 PM             3,072 sppuinotify.dll.mui
                   1 File(s)          3,072 bytes

    Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..ty-spp-ux.resources_3
    1bf3856ad364e35_6.1.7600.16385_en-us_54dae2e5153375ce

    05/05/2010  11:06 PM             3,072 sppuinotify.dll.mui
                   1 File(s)          3,072 bytes

    Directory of C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856
    ad364e35_6.1.7600.16385_none_b7b69062b883381f

    07/13/2009  08:41 PM            65,536 sppuinotify.dll
                   1 File(s)         65,536 bytes

    Directory of C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856
    ad364e35_6.1.7601.17514_none_b9e7a42ab571bbb9

    07/13/2009  08:41 PM            65,536 sppuinotify.dll
                   1 File(s)         65,536 bytes

         Total Files Listed:
                   5 File(s)        202,752 bytes
                   0 Dir(s)  242,609,565,696 bytes free

    C:\Windows\system32>
    C:\Windows\system32>ICACLS C:\Windows\System32\sppuinotify.dll
    C:\Windows\System32\sppuinotify.dll NT SERVICE\TrustedInstaller:(F)
                                        BUILTIN\Administrators:(RX)
                                        NT AUTHORITY\SYSTEM:(RX)
                                        BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>

    ----------------------------------

    CBS LOG file:

    https://skydrive.live.com/redir?resid=3A504E54DA432C9!161&authkey=!AGpDV2wIBap40lE

    Monday, June 18, 2012 4:02 PM
  • George - thanks for the eagle-eyes! I hadn't noticed.

    It possibly means nothing except registry corruption, maybe caused by malware, but......

    rvc1234

    You have a major problem with your hard drive - back up your data now, or you may lose it all.

    Once backed up you can try running the HD manufacturer's test utility to detect and possibly fix teh bad sectors showing in the CHKDSK report - but you would be best to prepare for  a new hard drive and a clean install.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, June 18, 2012 5:18 PM
    Moderator
  • ok, thanks for your time!
    Monday, June 18, 2012 9:14 PM
  • "rvc1234" wrote in message news:da2dd0ae-8885-4635-9557-8c0b2e29b336...
    ok, thanks for your time!
     
    You're welcome - good luck,

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, June 18, 2012 9:25 PM
    Moderator