actived, but still get infomation: this computer is not running genuine widnows

All replies

• 

  

  1

  Sign in to vote

  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

  Please run a full CHKDSK and SFC scan....

   

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  CHKDSK C: /R

   

  and hit the Enter key.

  You will be told that the drive is locked,

  and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

   

  The CHKDSK will take a few hours depending on the size of the drive, so be patient!

   

  After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

  then run the SFC.

   

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  SFC /SCANNOW

   

  and hit the Enter key

   

  Wait for the scan to finish - make a note of any error messages - and then reboot.

   

   

  Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

   

  Post a new MGADiag report with details of any error messages encountered.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, May 29, 2013 11:52 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thank Noel.

  My Disk is about 400GB. And it is not possible to wait for a long time to run CHDSK.

  I am not sure is that the possible reason since I changed hard disk to take place the old broken one?

  Wednesday, May 29, 2013 4:17 PM
• 

  

  1

  Sign in to vote

  I was sure I'd responded to this earlier...

  How did you transfer data, or do the install to the new disk?

  You can use the less thorough CHKDSK /F command - which scans only the known files for errors - rather than the /R, but you should be able to run the /R overnight  on a 400GB disk without too much problem.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, May 29, 2013 11:21 PM

  Moderator
• 

  

  0

  Sign in to vote

  I just did the install to the new disk and copy some profile to the new one.

  I will do CHKDSK /F during the weekend. Thanks

  Thursday, May 30, 2013 2:05 PM
• 

  

  0

  Sign in to vote

  Hi Noel,

  I ran the CHKDSK /R which was good. Then I ran SFS /scannow get the below information after finished: 

  Windows Resource Protection found corrupt files but was unable to fix some of them.

  This is a link for CBS.log,

  https://skydrive.live.com/redir?resid=2001E51168E6858F!367&authkey=!ABOGLHL5p_4Cauc

  MGADiag report:

  Diagnostic Report (1.9.0027.0):

  -----------------------------------------

  Windows Validation Data-->

   

  Validation Code: 0x8004FE22

  Cached Online Validation Code: N/A, hr = 0xc004f012

  Windows Product Key: *****-*****-KY2G9-4VCWT-FVQ7Q

  Windows Product Key Hash: mSNK8Wa/OxDULZUuHlARXJgkwpk=

  Windows Product ID: 00371-OEM-9313685-80433

  Windows Product ID Type: 8

  Windows License Type: COA SLP

  Windows OS version: 6.1.7601.2.00010100.1.0.048

  ID: {56AA16EA-B32A-48AD-8336-F71D959F2E9E}(3)

  Is Admin: Yes

  TestCab: 0x0

  LegitcheckControl ActiveX: N/A, hr = 0x80070002

  Signed By: N/A, hr = 0x80070002

  Product Name: Windows 7 Professional

  Architecture: 0x00000009

  Build lab: 7601.win7sp1_gdr.130318-1533

  TTS Error:

  Validation Diagnostic:

  Resolution Status: N/A

   

  Vista WgaER Data-->

  ThreatID(s): N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

   

  Windows XP Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  File Exists: No

  Version: N/A, hr = 0x80070002

  WgaTray.exe Signed By: N/A, hr = 0x80070002

  WgaLogon.dll Signed By: N/A, hr = 0x80070002

   

  OGA Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  OGAExec.exe Signed By: N/A, hr = 0x80070002

  OGAAddin.dll Signed By: N/A, hr = 0x80070002

   

  OGA Data-->

  Office Status: 109 N/A

  OGA Version: N/A, 0x80070002

  Signed By: N/A, hr = 0x80070002

  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

   

  Browser Data-->

  Proxy settings: N/A

  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

  Download signed ActiveX controls: Prompt

  Download unsigned ActiveX controls: Disabled

  Run ActiveX controls and plug-ins: Allowed

  Initialize and script ActiveX controls not marked as safe: Disabled

  Allow scripting of Internet Explorer Webbrowser control: Disabled

  Active scripting: Allowed

  Script ActiveX controls marked as safe for scripting: Allowed

   

  File Scan Data-->

   

  Other data-->

  Office Details: <GenuineResults><MachineData><UGUID>{A734DF2E-DA6B-401F-82CB-261D42DD3678}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVQ7Q</PKey><PID>00371-OEM-9313685-80433</PID><PIDType>8</PIDType><SID>S-1-5-21-2344023676-722399576-3260884735</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 460</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20111017000000.000000+000</Date></BIOS><HWID>01E83907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

   

  Spsys.log Content: 0x80070002

   

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

   

  Name: Windows(R) 7, Professional edition

  Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel

  Activation ID: da22eadd-46dc-4056-a287-f5041c852470

  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

  Extended PID: 00371-00186-136-880433-02-1033-7601.0000-1502013

  Installation ID: 020741178403759326178666306243682270254451188912836171

  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

  Partial Product Key: FVQ7Q

  License Status: Licensed

  Remaining Windows rearm count: 3

  Trusted time: 6/3/2013 8:06:01 AM

   

  Windows Activation Technologies-->

  HrOffline: 0x8004FE22

  HrOnline: N/A

  HealthStatus: 0x0000000000004000

  Event Time Stamp: 6:3:2013 07:50

  ActiveX: Registered, Version: 7.1.7600.16395

  Admin Service: Registered, Version: 7.1.7600.16395

  HealthStatus Bitmask Output:

  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

   

   

  HWID Data-->

  HWID Hash Current: MgAAAAIAAAABAAIAAQADAAAAAQABAAEA6GGK7HcWFAcInAItUh4izRrsbGigUeaxLnM=

   

  OEM Activation 1.0 Data-->

  N/A

   

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

  OEMID and OEMTableID Consistent: yes

  BIOS Information:

    ACPI Table Name           OEMID Value     OEMTableID Value

    APIC                                    DELL                       FX09  

    FACP                                   DELL                       FX09  

    HPET                                    DELL                       FX09

    MCFG                                 DELL                       FX09

    SSDT                                    AMICPU                               PROC

    SLIC                                      DELL                       FX09  

    OSFR                                   DELL                       FX09  

   

   

  Monday, June 3, 2013 12:44 PM
• 

  

  1

  Sign in to vote

  At leasr we know which files need repair now :)

  Line 22179: 2013-06-03 08:02:57, Info                  CSI    00000317 [SR] Repairing 3 components
  	Line 22180: 2013-06-03 08:02:57, Info                  CSI    00000318 [SR] Beginning Verify and Repair transaction
  	Line 22184: 2013-06-03 08:02:57, Info                  CSI    0000031a [SR] Cannot repair member file [l:20{10}]"IEHost.dll" of IEHost, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_MSIL (8), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 22187: 2013-06-03 08:02:57, Info                  CSI    0000031c [SR] Cannot repair member file [l:28{14}]"sppcommdlg.dll" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 22190: 2013-06-03 08:02:58, Info                  CSI    0000031e [SR] Cannot repair member file [l:14{7}]"sud.dll" of Microsoft-Windows-sud, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  

  I'll work  up a repair protocol, and post it later today.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Friday, June 7, 2013 10:14 AM
  • Marked as answer by Noel D PatonModerator Tuesday, June 25, 2013 8:57 PM

  Wednesday, June 5, 2013 6:58 AM

  Moderator
• 

  

  1

  Sign in to vote

  I've uploaded a file - lsfaa.zip - to my SkyDrive at Noel's SkyDrive
  
  Please download and save it.

  Right-click on the saved file and select Extract all...
  
  Change the target to C:\ and click on Extract
  
  Close all windows (it would be a good idea to print these
  instructions!)
  
  Now reboot to the Repair Environment - as soon as the machine restarts, start
  tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
  should be the option 'Repair my Computer'
  
  Pick that
  
  You'll have to log in with your username and password.

  Pick the option to use a Command Prompt
  
  At the prompt type
  
  DIR C:\lsfaa
  
  hit the enter key - if you get a 'Not Found' error try
  
  DIR D:\lsfaa
  
  or
  
  DIR E:\lsfaa

   

  The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

   

  XCOPY <drive>:\lsfaa <drive>:\windows\winsxs /y /i /s /v /h

   

  (e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

   

  run the command (it should take almost no time) and when the prompt returns, type
  
  EXIT
  
  and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

  Now run SFC /SCANNOW in an Elevated Command Prompt
  
  then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

  Also run a new MGADiag report, and post the result.

   

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, June 5, 2013 8:48 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  the CBS log file link is https://skydrive.live.com/#cid=2001E51168E6858F

  And below is the GADiag report,

  Diagnostic Report (1.9.0027.0):

  -----------------------------------------

  Windows Validation Data-->

   

  Validation Code: 0

  Cached Online Validation Code: N/A, hr = 0xc004f012

  Windows Product Key: *****-*****-KY2G9-4VCWT-FVQ7Q

  Windows Product Key Hash: mSNK8Wa/OxDULZUuHlARXJgkwpk=

  Windows Product ID: 00371-OEM-9313685-80433

  Windows Product ID Type: 8

  Windows License Type: COA SLP

  Windows OS version: 6.1.7601.2.00010100.1.0.048

  ID: {5238C41E-11F3-4FD8-BB64-14385224B40E}(1)

  Is Admin: Yes

  TestCab: 0x0

  LegitcheckControl ActiveX: N/A, hr = 0x80070002

  Signed By: N/A, hr = 0x80070002

  Product Name: Windows 7 Professional

  Architecture: 0x00000009

  Build lab: 7601.win7sp1_gdr.130318-1533

  TTS Error:

  Validation Diagnostic:

  Resolution Status: N/A

   

  Vista WgaER Data-->

  ThreatID(s): N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

   

  Windows XP Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  File Exists: No

  Version: N/A, hr = 0x80070002

  WgaTray.exe Signed By: N/A, hr = 0x80070002

  WgaLogon.dll Signed By: N/A, hr = 0x80070002

   

  OGA Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  OGAExec.exe Signed By: N/A, hr = 0x80070002

  OGAAddin.dll Signed By: N/A, hr = 0x80070002

   

  OGA Data-->

  Office Status: 109 N/A

  OGA Version: N/A, 0x80070002

  Signed By: N/A, hr = 0x80070002

  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

   

  Browser Data-->

  Proxy settings: N/A

  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

  Download signed ActiveX controls: Prompt

  Download unsigned ActiveX controls: Disabled

  Run ActiveX controls and plug-ins: Allowed

  Initialize and script ActiveX controls not marked as safe: Disabled

  Allow scripting of Internet Explorer Webbrowser control: Disabled

  Active scripting: Allowed

  Script ActiveX controls marked as safe for scripting: Allowed

   

  File Scan Data-->

   

  Other data-->

  Office Details: <GenuineResults><MachineData><UGUID>{5238C41E-11F3-4FD8-BB64-14385224B40E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVQ7Q</PKey><PID>00371-OEM-9313685-80433</PID><PIDType>8</PIDType><SID>S-1-5-21-2344023676-722399576-3260884735</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 460</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20111017000000.000000+000</Date></BIOS><HWID>01E83907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

   

  Spsys.log Content: 0x80070002

   

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

   

  Name: Windows(R) 7, Professional edition

  Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel

  Activation ID: da22eadd-46dc-4056-a287-f5041c852470

  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

  Extended PID: 00371-00186-136-880433-02-1033-7601.0000-1502013

  Installation ID: 020741178403759326178666306243682270254451188912836171

  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

  Partial Product Key: FVQ7Q

  License Status: Licensed

  Remaining Windows rearm count: 3

  Trusted time: 6/6/2013 12:47:42 PM

   

  Windows Activation Technologies-->

  HrOffline: 0x00000000

  HrOnline: 0x00000000

  HealthStatus: 0x0000000000000000

  Event Time Stamp: 6:3:2013 07:50

  ActiveX: Registered, Version: 7.1.7600.16395

  Admin Service: Registered, Version: 7.1.7600.16395

  HealthStatus Bitmask Output:

   

   

  HWID Data-->

  HWID Hash Current: MgAAAAIAAAABAAIAAQADAAAAAQABAAEA6GGK7HcWFAcInAItUh4izRrsbGigUeaxLnM=

   

  OEM Activation 1.0 Data-->

  N/A

   

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

  OEMID and OEMTableID Consistent: yes

  BIOS Information:

    ACPI Table Name           OEMID Value     OEMTableID Value

    APIC                                    DELL                       FX09  

    FACP                                   DELL                       FX09  

    HPET                                    DELL                       FX09

    MCFG                                 DELL                       FX09

    SSDT                                    AMICPU                               PROC

    SLIC                                      DELL                       FX09  

    OSFR                                   DELL                       FX09  

   

   Thank you!
  

  Thursday, June 6, 2013 5:34 PM
• 

  

  0

  Sign in to vote

  You don't appear to have shared the file you uploaded - I can't see it.

  Having said that, it looks to me as if your validation problem is cured, so the patch must have worked :)

  Good Luck

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Friday, June 7, 2013 10:13 AM

  Moderator
• 

  

  0

  Sign in to vote

  Sorry about that. The file link is

  https://skydrive.live.com/redir?resid=2001E51168E6858F!369&authkey=!ACvKGlc7X79keDA

  So far no more pop up window shows "This computer is not running genuine windows".

  Thanks greatly

  Friday, June 7, 2013 12:58 PM
• 

  

  1

  Sign in to vote

  There appears to be another corrupted file...

  12:41:46, Info                  CSI    00000304 [SR] Repairing 1 components
  	Line 33438: 2013-06-06 12:41:46, Info                  CSI    00000305 [SR] Beginning Verify and Repair transaction
  	Line 33442: 2013-06-06 12:41:46, Info                  CSI    00000307 [SR] Cannot repair member file [l:20{10}]"System.dll" of NetFx-System, Version = 6.1.7601.17966, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  

  This is a little worrying, as it could be an indicator of either malware, or a failing hard drive.

  I'll see what I can do to post a fix later - but it may be a while.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Friday, June 7, 2013 3:20 PM

  Moderator
• 

  

  0

  Sign in to vote

  I've uploaded a file - lsfab.zip - to my SkyDrive at Noel's SkyDrive
  
  Please download and save it.

  Right-click on the saved file and select Extract all...
  
  Change the target to C:\ and click on Extract
  
  Close all windows (it would be a good idea to print these
  instructions!)
  
  Now reboot to the Repair Environment - as soon as the machine restarts, start
  tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
  should be the option 'Repair my Computer'
  
  Pick that
  
  You'll have to log in with your username and password.

  Pick the option to use a Command Prompt
  
  At the prompt type
  
  DIR C:\lsfab
  
  hit the enter key - if you get a 'Not
  Found' error try
  
  DIR D:\lsfab
  
  or
  
  DIR E:\lsfab

   

  The drive letter in use when you find the folder will
  need to be substituted (for<drive>) into the following
  command...

   

  XCOPY <drive>:\lsfab  <drive>:\windows\winsxs /y /i /s /v /h

   

  (e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

   

  run the command (it should take almost no time) and when the prompt returns, type
  
  EXIT
  
  and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

  Now run SFC /SCANNOW in an Elevated Command Prompt
  
  then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

  Also run a new MGADiag report, and post the result.

   

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Saturday, June 8, 2013 10:24 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  After running SFC /scannow, I didn't get any file corrupted report.

  The new CBS.log file link is

  https://skydrive.live.com/redir?resid=2001E51168E6858F!371&authkey=!AKxLFgi6MNKemZE

  And Diagnostic report is

  Diagnostic Report (1.9.0027.0):

  -----------------------------------------

  Windows Validation Data-->

   

  Validation Code: 0

  Cached Online Validation Code: 0x0

  Windows Product Key: *****-*****-KY2G9-4VCWT-FVQ7Q

  Windows Product Key Hash: mSNK8Wa/OxDULZUuHlARXJgkwpk=

  Windows Product ID: 00371-OEM-9313685-80433

  Windows Product ID Type: 8

  Windows License Type: COA SLP

  Windows OS version: 6.1.7601.2.00010100.1.0.048

  ID: {5238C41E-11F3-4FD8-BB64-14385224B40E}(3)

  Is Admin: Yes

  TestCab: 0x0

  LegitcheckControl ActiveX: N/A, hr = 0x80070002

  Signed By: N/A, hr = 0x80070002

  Product Name: Windows 7 Professional

  Architecture: 0x00000009

  Build lab: 7601.win7sp1_gdr.130318-1533

  TTS Error:

  Validation Diagnostic:

  Resolution Status: N/A

   

  Vista WgaER Data-->

  ThreatID(s): N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

   

  Windows XP Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  File Exists: No

  Version: N/A, hr = 0x80070002

  WgaTray.exe Signed By: N/A, hr = 0x80070002

  WgaLogon.dll Signed By: N/A, hr = 0x80070002

   

  OGA Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  OGAExec.exe Signed By: N/A, hr = 0x80070002

  OGAAddin.dll Signed By: N/A, hr = 0x80070002

   

  OGA Data-->

  Office Status: 109 N/A

  OGA Version: N/A, 0x80070002

  Signed By: N/A, hr = 0x80070002

  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

   

  Browser Data-->

  Proxy settings: N/A

  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

  Download signed ActiveX controls: Prompt

  Download unsigned ActiveX controls: Disabled

  Run ActiveX controls and plug-ins: Allowed

  Initialize and script ActiveX controls not marked as safe: Disabled

  Allow scripting of Internet Explorer Webbrowser control: Disabled

  Active scripting: Allowed

  Script ActiveX controls marked as safe for scripting: Allowed

   

  File Scan Data-->

   

  Other data-->

  Office Details: <GenuineResults><MachineData><UGUID>{5238C41E-11F3-4FD8-BB64-14385224B40E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVQ7Q</PKey><PID>00371-OEM-9313685-80433</PID><PIDType>8</PIDType><SID>S-1-5-21-2344023676-722399576-3260884735</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 460</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20111017000000.000000+000</Date></BIOS><HWID>01E83907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

   

  Spsys.log Content: 0x80070002

   

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

   

  Name: Windows(R) 7, Professional edition

  Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel

  Activation ID: da22eadd-46dc-4056-a287-f5041c852470

  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

  Extended PID: 00371-00186-136-880433-02-1033-7601.0000-1502013

  Installation ID: 020741178403759326178666306243682270254451188912836171

  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

  Partial Product Key: FVQ7Q

  License Status: Licensed

  Remaining Windows rearm count: 3

  Trusted time: 6/13/2013 9:12:50 AM

   

  Windows Activation Technologies-->

  HrOffline: 0x00000000

  HrOnline: 0x00000000

  HealthStatus: 0x0000000000000000

  Event Time Stamp: 6:6:2013 14:06

  ActiveX: Registered, Version: 7.1.7600.16395

  Admin Service: Registered, Version: 7.1.7600.16395

  HealthStatus Bitmask Output:

   

   

  HWID Data-->

  HWID Hash Current: MgAAAAIAAAABAAIAAQADAAAAAQABAAEA6GGK7HcWFAcInAItUh4izRrsbGigUeaxLnM=

   

  OEM Activation 1.0 Data-->

  N/A

   

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

  OEMID and OEMTableID Consistent: yes

  BIOS Information:

    ACPI Table Name           OEMID Value     OEMTableID Value

    APIC                                    DELL                       FX09  

    FACP                                   DELL                       FX09  

    HPET                                    DELL                       FX09

    MCFG                                 DELL                       FX09

    SSDT                                    AMICPU                               PROC

    SLIC                                      DELL                       FX09  

    OSFR                                   DELL                       FX09  

  Thanks!

  
  

  • Edited by little snowflake Thursday, June 13, 2013 2:13 PM

  Thursday, June 13, 2013 1:26 PM
• 

  

  0

  Sign in to vote

  The MGADiag report looks fine now :)

  Are you still seeing other problems??

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Friday, June 14, 2013 8:33 PM

  Moderator
• 

  

  0

  Sign in to vote

  So far no more problem showing. Does that mean all files fixed?

  I really really appreciate what you did for us.

  Thank a lot again.

  Monday, June 17, 2013 1:23 PM
• 

  

  0

  Sign in to vote

  With any luck, it means that your problems have gone :)

  Good luck!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Monday, June 17, 2013 10:34 PM

  Moderator
• 

  

  0

  Sign in to vote

  I am afraid I need your help again.

  From yesterday, my client's computer went to BlackScreen and reboot automatically. the information I got is,

  Problem signature:

    Problem Event Name:        BlueScreen

    OS Version:                6.1.7601.2.1.0.256.48

    Locale ID:                    1033

   

  Additional information about the problem:

    BCCode:                      1a

    BCP1:                          0000000000041790

    BCP2:                          FFFFFA8003380220

    BCP3:                          000000000000FFFF

    BCP4:                          0000000000000000

    OS Version:                6_1_7601

    Service Pack:              1_0

    Product:                      256_1

   

  Files that help describe the problem:

    C:\Windows\Minidump\061813-22136-01.dmp

    C:\Users\machharc.INTERDEV\AppData\Local\Temp\WER-70559-0.sysdata.xml

   

  Read our privacy statement online:

    http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

   

  If the online privacy statement is not available, please read our privacy statement offline:

    C:\Windows\system32\en-US\erofflps.txt

   

  Two files link are here:

  061813-22136-01.dmp

  https://skydrive.live.com/redir?resid=2001E51168E6858F!372&authkey=!ADYkfQmI2z7ae3I

  WER-70559-0.sysdata.xml

  https://skydrive.live.com/redir?resid=2001E51168E6858F!373&authkey=!AId7VodiMw9NmBU

  My client windows did update for windows 2013 this two days.Could it be an issue?

  
  

  • Edited by little snowflake Tuesday, June 18, 2013 12:42 PM

  Tuesday, June 18, 2013 12:22 PM
• 

  

  1

  Sign in to vote

  BCCode 1a crashes are usually caused by bad RAM, or faulty drivers.

  This is not the proper place to begin attempting to troubleshoot such problems, so I suggest that you go to a more appropriate forum..

  either

  http://answers.microsoft.com/en-us/windows/forum/windows_7-system

  or

  http://www.sevenforums.com/bsod-help-support/

  should be able to help.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, June 18, 2013 1:01 PM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks. I will ask for help from there:)

  Tuesday, June 18, 2013 1:18 PM