locked
Windows 7 Not Genuine After Years Of Being Fine RRS feed

  • Question

  • The computer is a custom built one i made, and it is an oem version. I turned it on to find it saying that windwows is not genuine and that i might be a victim of fraud. Please Help!!!

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:6:2013 21:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007001f

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    Friday, March 29, 2013 8:08 PM

Answers

All replies

  • Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Strange error that!

    Please check Device Manager - in the toolbar, click on View, then Show Hidden Devices.

    Do any devices show flagged with red or yellow marks?

    If so, which?

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, March 30, 2013 1:21 AM
    Moderator
  • I have had no errors doing either scan or in device manager. The only thing that has changed is that I have a normal background with no watermark writing saying windows isnt genuine. And im not getting messages telling me to activate, but it still isnt activated. Here is the CBS log: http://sdrv.ms/X3Bi1h (sorry not aloud links yet) and Here is the new results:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:6:2013 21:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007001f

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    And could this have anything to do with my problem:

    http://sdrv.ms/YQGYip (again sorry about no links)

    Saturday, March 30, 2013 12:18 PM
  • Retail motherboards do not have SLIC tables :)

    Your SFC shows that there are problems with some Manifest files -

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, March 30, 2013 12:54 PM
    Moderator
  • Here is the results: http://sdrv.ms/YRcHKr

    The reason I don't link it is because I haven't been a member long enough so it doesn't let me.

    Saturday, March 30, 2013 2:48 PM
  • Here is the results: http://sdrv.ms/YRcHKr

    The reason I don't link it is because I haven't been a member long enough so it doesn't let me.

    Saturday, March 30, 2013 8:32 PM
  • Even though Windows doesn't appear to be activated, even though in some ways it does seem to be. I am still able to get optional update from windows update, is that normal for a non activated windows?
    Saturday, March 30, 2013 9:50 PM
  • Your CheckSUR report shows these results...

    Unavailable repair files:
    	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    	servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum
    	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    	servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat
    
    (w)	Unable to get system volume info	0x0000001F	\\?\ide#disksamsung_hd103sj_________________________1aj10001#5&24186e0c&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}	\\.\C:	CreateFile failed
    
    

    That last one may be a major concern, while the first two are about normal when you have IE10 installed (MS is working on a fix - more later about that)

    Are you dual-booting with Linux? the only other reference to that error I can find is in such a case.

    I'll post a fix protocol for the remaining error later.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 10:08 AM
    Moderator
  • No i'm not dual-booting with any operating system. So I don't know what could cause this.
    • Edited by NiNJaOwNeD Sunday, March 31, 2013 11:42 AM
    Sunday, March 31, 2013 11:42 AM
  • Perhaps it's a permissions thing....

    Please open a Command Prompt window, and run the following command

    ICACLS C:\

    ICACLS C:


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 1:18 PM
    Moderator
  • Here are the results:

    C:\ BUILTIN\Administrators:(F)
        BUILTIN\Administrators:(OI)(CI)(IO)(F)
        NT AUTHORITY\SYSTEM:(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
        NT AUTHORITY\Authenticated Users:(AD)
        Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

    Successfully processed 1 files; Failed processing 0 files

    Sunday, March 31, 2013 1:41 PM
  • That's only partial results - please post both....

    ICACLS C:\

    ICACLS C:

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 1:58 PM
    Moderator
  • Sorry, here are both results:

    C:\Users\Dan>ICACLS C:\
    C:\ BUILTIN\Administrators:(F)
        BUILTIN\Administrators:(OI)(CI)(IO)(F)
        NT AUTHORITY\SYSTEM:(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
        NT AUTHORITY\Authenticated Users:(AD)
        Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>
    C:\Users\Dan>ICACLS C:
    C: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
       BUILTIN\Administrators:(OI)(CI)(F)
       DE-PC\Dan:(OI)(CI)(F)
       DE-PC\HomeUsers:(RX)
       DE-PC\Dan:(RX)

    Successfully processed 1 files; Failed processing 0 files

    Sunday, March 31, 2013 2:12 PM
  • Hmmm - checking the results here, it's one of the few cases I know of where the ICACLS returns different results depending on which user it's run as.

    Please repeat, making sure that you run the Command Prompt window as Elevated (see instruction #1) (

    Tip: the title bar should show 'Adminstrators:Command Prompt' )


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 2:46 PM
    Moderator
  • I am the only user on this pc, and it is the administrator. I did the test again and got the same results:

    C:\ BUILTIN\Administrators:(F)
        BUILTIN\Administrators:(OI)(CI)(IO)(F)
        NT AUTHORITY\SYSTEM:(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
        NT AUTHORITY\Authenticated Users:(AD)
        Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>
    C:\Users\Dan>ICACLS C:
    C: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
       BUILTIN\Administrators:(OI)(CI)(F)
       DE-PC\Dan:(OI)(CI)(F)
       DE-PC\HomeUsers:(RX)
       DE-PC\Dan:(RX)

    Successfully processed 1 files; Failed processing 0 files

    Sunday, March 31, 2013 4:09 PM
  • This may need some fairly major surgery, then.

    The C: result is showing three different users - two Standard users, and an Admin, I suspect. (I think these can be ignored, at least for the moment)

    The C:\ results are missing the essential error for the TrustedInstaller service, and has the wrong entries for other users as well.

    The result is likely to be unpredictability in behaviour in anything that needs access to the basic drive, such as Windows Update, and the MGADiag report.

     

    We need to take ownership, and apply corrected permissions.

    Open an Elevated Command Prompt, and run the following commands

    TAKEOWN /F C:\  /A
    ICACLS   C:\   /grant "NT SERVICE\TrustedInstaller":(F)
    ICACLS   C:\   /grant "NT SERVICE\TrustedInstaller":(CI)(IO)(F)
    ICACLS   C:\   /grant:r Users:(RX)
    ICACLS   C:\  /grant Users:(OI)(CI)(IO)(GR,GE)
    ICACLS  C:\ /grant "CREATOR OWNER":(OI)(CI)(IO)(F)
    ICACLS C:\
     
    .
    

    Post the results - do NOT reboot until I get back to you

     

     

     

     

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 5:03 PM
    Moderator
  • I do have three users under C:/Users one is mine (administrator), public and a windows media center user.  Here are the results of the command:

    C:\Users\Dan>TAKEOWN /F C:\  /A

    SUCCESS: The file (or folder): "C:\" now owned by the administrators group.

    C:\Users\Dan>ICACLS   C:\   /grant "NT SERVICE\TrustedInstaller":(F)
    processed file: C:\
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>ICACLS   C:\   /grant "NT SERVICE\TrustedInstaller":(CI)(IO)(F)
    processed file: C:\
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>ICACLS   C:\   /grant:r Users:(RX)
    processed file: C:\
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>ICACLS   C:\  /grant Users:(OI)(CI)(IO)(GR,GE)
    processed file: C:\
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>ICACLS  C:\ /grant "CREATOR OWNER":(OI)(CI)(IO)(F)
    processed file: C:\
    Successfully processed 1 files; Failed processing 0 files


    Sunday, March 31, 2013 5:20 PM
  • So far, so good - the last command didn't run??

    reboot, and run another MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 5:28 PM
    Moderator
  • Nothing seems to have changed:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:6:2013 22:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007001f

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 


    Sunday, March 31, 2013 5:45 PM
  • Please run the CheckSUR tool again - we'll see if that's changed.

    please post both the CheckSUR.log and CheckSUR.persist.log files when complete.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 5:52 PM
    Moderator
  •  

    I don't think the results have changed if I remember correctly.

    Here is the CheckSUR.persist.log:

    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 18.0
    2013-03-31 19:04

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages
    (f) CBS MUM Missing 0x00000002 servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum

    Checking Component Store

    Summary:
    Seconds executed: 572
     Found 3 errors
      CBS MUM Missing Total count: 1
      CBS MUM Corrupt Total count: 2

    Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat

    (w) Unable to get system volume info 0x0000001F \\?\ide#disksamsung_hd103sj_________________________1aj10001#5&24186e0c&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} \\.\C: CreateFile failed

    And here is the CheckSUR.log:

    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 18.0
    2013-03-31 19:04

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages
    (f) CBS MUM Missing 0x00000002 servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum

    Checking Component Store

    Summary:
    Seconds executed: 572
     Found 3 errors
      CBS MUM Missing Total count: 1
      CBS MUM Corrupt Total count: 2

    Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat

    (w) Unable to get system volume info 0x0000001F \\?\ide#disksamsung_hd103sj_________________________1aj10001#5&24186e0c&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} \\.\C: CreateFile failed


    • Edited by NiNJaOwNeD Sunday, March 31, 2013 6:25 PM
    Sunday, March 31, 2013 6:22 PM
  • OK - let's check the current permissions then, in case things didn't go as expected.....

    Please run the following commands in an Elevated Command Prompt, and post the results.

    ICACLS C:

    ICACLS C:\


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 6:34 PM
    Moderator
  • Here we go:

    C:\Users\Dan>ICACLS C:
    C: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
       BUILTIN\Administrators:(OI)(CI)(F)
       DE-PC\Dan:(OI)(CI)(F)
       DE-PC\HomeUsers:(RX)
       DE-PC\Dan:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Dan>
    C:\Users\Dan>ICACLS C:\
    C:\ BUILTIN\Users:(RX)
        NT SERVICE\TrustedInstaller:(F)
        BUILTIN\Administrators:(F)
        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
        CREATOR OWNER:(OI)(CI)(IO)(F)
        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
        BUILTIN\Administrators:(OI)(CI)(IO)(F)
        NT AUTHORITY\SYSTEM:(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
        NT AUTHORITY\Authenticated Users:(AD)
        Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

    Successfully processed 1 files; Failed processing 0 files

    Sunday, March 31, 2013 7:46 PM
  • My fault - we need to apply the same permissions to the C: entry rather than the C:\ entry....

    Please run the following commands in an Elevated Command Prompt, and post the results....

    TAKEOWN /F C: /A ICACLS C: /grant "NT SERVICE\TrustedInstaller":(F) ICACLS C: /grant "NT SERVICE\TrustedInstaller":(CI)(IO)(F) ICACLS C: /grant:r Users:(RX) ICACLS C: /grant Users:(OI)(CI)(IO)(GR,GE) ICACLS C: /grant "CREATOR OWNER":(OI)(CI)(IO)(F) ICACLS C: ICACLS C:\ /remove "NT SERVICE\TrustedInstaller" ICALCS C:\ /remove Users ICACLS C:\ /grant Users:(OI)(CI)(RX) ICACLS C:\


    Then reboot and run another MGADiag report.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 8:39 PM
    Moderator
  • Here are the results of the commands, I will reboot now then post results:


    C:\Users\Dan>TAKEOWN /F C:  /A

    SUCCESS: The file (or folder): "C:\Users\Dan" now owned by the administrators gr
    oup.

    C:\Users\Dan>ICACLS   C:   /grant "NT SERVICE\TrustedInstaller":(F)

    Sunday, March 31, 2013 9:37 PM
  • Here are the results of the test:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:6:2013 22:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007001f

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    Sunday, March 31, 2013 9:44 PM
  • Still no change! :(

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and attach to your reply.



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 31, 2013 10:12 PM
    Moderator
  • Here are the files: http://sdrv.ms/YpTHGy

    Just wondering, could you give me a list of the services needed to be running at start up so windows can activate, just want to check that they are all running correctly. And I was also wondering, that when I try to activate windows, it says that a device attached to the system is not functioning correctly, do you reckon this could be linked to logs saying it couldn't get details from the C: drive, just a thought.


    • Edited by NiNJaOwNeD Monday, April 1, 2013 7:57 AM
    Monday, April 1, 2013 7:11 AM
  • The best reference I know of is at http://www.blackviper.com/

    Devices are potentially either hardware or software- e.g. the SPLDR service depends on the SPLDR device, which is a software construct, and the SPPSVC service depends on the SPLDR service.

    ...which reminds me of something!

    Please attempt validation at www.microsoft.com/genuine/validate using Internet Explorer - what happens?

    Please post a new MGADiag report, as that should change the WAT area, and give us more data to play with.

    (now to read the logs!)

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, April 1, 2013 9:22 AM
    Moderator
  • Looking through the logs, there are a number of failure points....

    In no particular order....

    The SPTD driver is failing to load - this usually belongs to Daemon Tools, and these should be uninstalled, as they are known to cause problems in Win7.

    You appear to have Microsoft Fax installed and attempting to start at every boot - and it's failing. I suggest that you use the option in Windows features to uninstall/disable it.

    FIFA online 2 is having activation context problems - perhaps best addressed in the EA forums.

    Guitar Hero 3 crashed yesterday, as did Explorer.

    Even MGADiag managed to hang - so there's something deeply amiss somewhere! This seems to have been caused by a hang with the WDIServiceHost service

    Bluetooth seems to be having a bit of a hard time starting?

    The User Mode Driver Framework drivers seem to be having problems with the iPhone connection?

    The VMNetBridge form VMware is having problems - you'll need to check Event Viewer on your machine to see if it says anything more

    WLAN Extensibility ir reporting an error code 126 - which may mean that a file is missing, but according to reports doesn't affect the usability.

    "The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available."

    NETLOGON appears to be set as an automatic service - change the startup type to Manual

    "The Net.Msmq Listener Adapter service depends the following service: msmq. This service might not be installed."

    "The Net.Pipe Listener Adapter service depends the following service: was. This service might not be installed."

    "The Net.Tcp Listener Adapter service depends the following service: was. This service might not be installed."

    Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
     	Feature: Network Inspection System
     	Error Code: 0x80070420
     	Error description: An instance of the service is already running. 
     	Reason: The system is missing updates that are required for running Network Inspection System.  Install the required updates and restart the computer.

    -I would suggest more drastic treatment - run an offline Anti-Virus scan, first (such as Windows DefenderOffline), then uninstall and reinstall MSE.

    "A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service."

    "The Superfetch service terminated with the following error: A device attached to the system is not functioning."

    (that one may be the root of your problem)

    "The Portable Device Enumerator Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion."

    ...and that's about it!

    The SuperFetch error is the one that needs to be tracked more than the others, I suspect. My feeling is that it's related to the WDISystemHost error, since that times out at the same point.

    Please open a command prompt, and run the following commands

    SC QUERYEX WDISYSTEMHOST

    SC QC WDISYSTEMHOST

    post the results


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, April 1, 2013 10:31 AM
    Moderator
  • Here are the results of the commands:

    C:\Users\Dan>SC QUERYEX WDISYSTEMHOST

    SERVICE_NAME: WDISYSTEMHOST
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 1  STOPPED
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 0
            FLAGS              :

    C:\Users\Dan>
    C:\Users\Dan>SC QC WDISYSTEMHOST
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: WDISYSTEMHOST
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Diagnostic System Host
            DEPENDENCIES       :
            SERVICE_START_NAME : LocalSystem


    Monday, April 1, 2013 2:24 PM
  • Hmmm the default startup for WDISystemHost is Manual - I wonder why it's different here?

    Please run the following command in an Elevated Command Prompt, and reboot.

    SC CONFIG WDISystemHost start= demand

    reboot, then wait 15 minutes, and run another MGADiag report and post the results, together with a new set of Event logs.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.



    Monday, April 1, 2013 2:47 PM
    Moderator
  • Here are the logs: http://sdrv.ms/14IYhDx

    And here are the results from the test:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): A device attached to the system is not functioning. 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:6:2013 22:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007001f

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    Monday, April 1, 2013 7:00 PM
  • That seems to have cured the WDISystemHost errors

    Now we nee to address the Microsoft Fax errors.

    Unless you actually use it, the best thing to do is to turn the feature off from

    Control Panel > Programs and Features > Turn Windows Features off and on

    find the entry for it there, and untick it - click OK, and exit

    reboot and check Event Viewer again.

    GlovePIE and PIEFree appear to be giving problems on this boot - and I don't recall seeing them before?

    There seem to be a number of Java-based games present - you need to check that you have ONLY the latest version of Java installed, so check the Programs & Features listing while you're there, and uninstall all older versions of Java,and post back with your current-installed version numbers


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, April 1, 2013 8:33 PM
    Moderator
  • I would like to turn windows features on and off but there aren't any, look: http://sdrv.ms/14AF1aP

    As for GlovePIE and PIEFree, they are the same program, with different names, but sometimes they do crash.


    • Edited by NiNJaOwNeD Monday, April 1, 2013 8:58 PM
    Monday, April 1, 2013 8:58 PM
  • Hmmm -

    Maybe we'd better fix the CheckSUR errors that we can, first!

    I've uploaded a file - nodaa.zip - to my SkyDrive at  Noel's SkyDrive

    Please download and save it.

    Right-click on the downloaded file, and select Extract all…

    Extract to the default location - which will create a new folder  nodaa in the same place.

    Open this folder - there should be one folder inside it (Packages)

     

    Copy the content of the Packages folder to the folder

    C:\Windows\Temp\CheckSur\Servicing\Packages

      

    Now run the CheckSUR tool again (it may take a while)

     

    Post the new CheckSUR.log file, and the CheckSUR.persist.log file.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, April 1, 2013 10:12 PM
    Moderator
  • Here is the CheckSUR.log:

    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 18.0
    2013-04-02 08:27

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages
    (f) CBS MUM Missing 0x00000002 servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum
    (fix) CBS MUM Missing CBS File Replaced Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-7601-x64-clientcab4.cab.
    (fix) CBS Paired File CBS File also Replaced Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-7601-x64-clientcab4.cab.

    Checking Component Store

    Summary:
    Seconds executed: 877
     Found 3 errors
     Fixed 1 errors
      CBS MUM Missing Total count: 1
      Fixed: CBS MUM Missing.  Total count: 1
      CBS MUM Corrupt Total count: 2
      Fixed: CBS Paired File.  Total count: 1

    Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

    (w) Unable to get system volume info 0x0000001F \\?\ide#disksamsung_hd103sj_________________________1aj10001#5&24186e0c&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} \\.\C: CreateFile failed

    And here is the CheckSUR.persist.log:

    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 18.0
    2013-04-02 08:27

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages
    (f) CBS MUM Missing 0x00000002 servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum
    (fix) CBS MUM Missing CBS File Replaced Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-7601-x64-clientcab4.cab.
    (fix) CBS Paired File CBS File also Replaced Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-7601-x64-clientcab4.cab.

    Checking Component Store

    Summary:
    Seconds executed: 877
     Found 3 errors
     Fixed 1 errors
      CBS MUM Missing Total count: 1
      Fixed: CBS MUM Missing.  Total count: 1
      CBS MUM Corrupt Total count: 2
      Fixed: CBS Paired File.  Total count: 1

    Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

    (w) Unable to get system volume info 0x0000001F \\?\ide#disksamsung_hd103sj_________________________1aj10001#5&24186e0c&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} \\.\C: CreateFile failed

    Tuesday, April 2, 2013 8:10 AM
  • Good - that's fixed the file we needed,

    It made no change to that last error though :(

    I think this is caused by a corrupted System Volume Information folder - in which case the system may be hosed, since that folder contains a lot more (and more important) data  in it than was the case in XP. :(

    All I can suggest is resetting System Restore to see if that clears the error - if not, then a repair install may be indicated as a minimum, and possibly a clean install.

     I'm going to ask an expert in CheckSUR if they can assist, or at least point me in the right direction.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 9:02 AM
    Moderator
  • Preliminary advice is to try a driver update for the storage system....

    See if these drivers will install....

    Installing the Intel Rapid Storage Drivers

    try downloading and installing them from here - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=21730

     

    (you want the iata_enu.exe download)

     

    Once complete, please reboot twice, then post another MGADiag report.   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    • Marked as answer by NiNJaOwNeD Tuesday, April 2, 2013 5:31 PM
    Tuesday, April 2, 2013 9:41 AM
    Moderator
  • It's fixed windows is now genuine thank you so much, I downloaded tthe Intel Rapid Storage Driver and now its fixed:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00174-030-904620-02-2057-7600.0000-1322012
    Installation ID: 014251150821738252683490683555912010176861109784224036
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: VGXVY
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 02/04/2013 18:30:03

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0002000000000000
    Event Time Stamp: 2:6:2013 22:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppuinotify


    HWID Data-->
    HWID Hash Current: QAAAAAIAAwABAAEAAQADAAAABgABAAEAonYsMHcWNs8kW+JfmLJIJDyVxJaNiJDhBNadC6z5coq+QZ3vza1cXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    

    Tuesday, April 2, 2013 5:31 PM
  • I hate to say this, but there's some work to do yet :)

    The SPPUINOTIFY service is showing as being tampered.

    Let's check that - because the data appears to be rather old.

    Please attempt validation at www.microsoft.com/genuine/validate using Internet Explorer - what happens?

    run another MGADiag report, and post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 5:36 PM
    Moderator
  • Chrome and Internet Explorer say that windows is genuine:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-J4962-XR6FQ-VGXVY
    Windows Product Key Hash: 7tmsLAa7iX15mKRfoP1UkSNSf/w=
    Windows Product ID: 00359-OEM-8703091-04620
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A1A42F-9FE9-47E7-BF51-BB371A6B729C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VGXVY</PKey><PID>00359-OEM-8703091-04620</PID><PIDType>3</PIDType><SID>S-1-5-21-1451724040-926792148-26456261</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>H55M-UD2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20100212000000.000000+000</Date></BIOS><HWID>1F903007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65447</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00174-030-904620-02-2057-7600.0000-1322012
    Installation ID: 014251150821738252683490683555912010176861109784224036
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: VGXVY
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 02/04/2013 20:18:54

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:2:2013 20:18
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: QAAAAAIAAwABAAEAAQADAAAABgABAAEAonYsMHcWNs8kW+JfmLJIJDyVxJaNiJDhBNadC6z5coq+QZ3vza1cXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC GBT   GBTUACPI
      FACP GBT   GBTUACPI
      HPET GBT   GBTUACPI
      MCFG GBT   GBTUACPI
      EUDS GBT  
      TAMG GBT   GBT   B0
      SSDT INTEL PPM RCM 

    Tuesday, April 2, 2013 7:19 PM
  • GREAT!

    now, just for peace-of-mind, please run another CheckSUR scan and post the new CheckSUR.log file - with any luck it will be clear.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 7:39 PM
    Moderator
  • Here is the log:

    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 18.0
    2013-04-02 21:13

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name
    (f) CBS MUM Corrupt 0x00000000 servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~10.2.9200.16437.mum does not match the actual file name

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages

    Checking Component Store

    Summary:
    Seconds executed: 585
     Found 2 errors
      CBS MUM Corrupt Total count: 2

    Unavailable repair files:
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat

    Tuesday, April 2, 2013 8:25 PM
  • Great! - that only has the 'expected' errors from an IE10 install (MS is working on it!)

    Good luck - and thanks for bearing with me.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 9:06 PM
    Moderator
  • You have been amazing and really helpful, thank you!
    Tuesday, April 2, 2013 9:20 PM