none
0x8007005

    Question

  • My laptop has started acting funny over the past week. When it shuts down it immediately restarts again, and when I try to make it sleep it immediately wakes up again.

    This coincided with my Norton 360 going haywire so I uninstalled it. And now windows defender also will not start up error: Error Code 0x800106ba Application failed to initialize.

    I tried to run through the manual windows defender fix step 3 (http://support.microsoft.com/kb/931849) it fails at the 2nd file name with the error "The module "wuaueng.dll" was loaded but the call to DllRegisterServer failed with error code 0x80070005.

    Further searching led me to try the MGADiag.exe program with the following results:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-4GV68-6D8JB-G6MF9
    Windows Product Key Hash: Ua+OBZ1y48sKA/bWkfKXiuCrOjY=
    Windows Product ID: 89578-OEM-7332157-00203
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {2A9ADF3A-BF59-43A7-B952-CB09051017E9}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.110617-0336
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6001.18000

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2A9ADF3A-BF59-43A7-B952-CB09051017E9}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-G6MF9</PKey><PID>89578-OEM-7332157-00203</PID><PIDType>2</PIDType><SID>S-1-5-21-2167516405-432262055-2529671017</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-CR21Z_R</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R1121Q0</Version><SMBIOSVersion major="2" minor="4"/><Date>20080602000000.000000+000</Date></BIOS><HWID>0F323507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>A67655C26B4070A</Val><Hash>wrZmDT9uhFBi/Ak7TihZTOinuiI=</Hash><Pid>81602-901-3377582-68286</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89578-00146-321-500203-02-2057-6000.0000-2972007
    Installation ID: 311572164200989182942695563320900874775192061604642221
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: G6MF9
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: OgAAAAIAAgABAAEAAgABAAAABQABAAEAJJQwVV4jo40aBPyQ8p+Uq43v8vTWOZWmbLgcdqxW6uQqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  VAIO
      FACP   Sony  VAIO
      HPET   Sony  VAIO
      BOOT   Sony  VAIO
      MCFG   Sony  VAIO
      APIC   Sony  VAIO
      SLIC   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO
      SSDT   Sony  VAIO

     

    ----------------------

    Note it also looks like my computer is unable to run any of the fixit programs from MS support centre. Please help!


    Prior to uninstalling Norton 360 I ran the norton bootable recovery disc but no viruses showed up. I've also run Microsoft security essentials scan, malicious software removal tool quick scan and am running Malware Bytes but nothing has shown up.

    It's driving me crazy - especially the inability of the computer to shut down without pulling the battery. I can't help but think it's all linked together.

     

    Thanks and regards


    • Edited by KrsAbz Wednesday, November 2, 2011 3:27 PM
    Wednesday, November 2, 2011 3:25 PM

Answers

  • "KrsAbz" wrote in message news:eacf1daf-ac45-4fde-a5c2-39e3244d15d2...

    Thanks for response Noel.

    I ran the validation and it's passed by the looks of it.

    Norton was on the computer from the start and no other AV has ever been installed. Last week just after the inability to shut down started I got blue screen and Norton told me it had failed and Norton needed to uninstall and reinstall itself. So I ran the program and it reinstalled it. Then since then it's not been there. I used the Norton Removal Tool to remove - ran it twice in fact because I read that on the Norton Forums. Norton was removed prior to installing MSE.

    I'd tried system restores also to try and get the computer back to a state where it shut down properly with no joy.

    In the meantime - while MSE has been running, it's picked up a virus called "HTML/Allaple.A" which I've cleaned but computer still won't shut down normally.

     

    Try Malwarebytes Anti-Malware (www.malwarebytes.org) install and update it but do NOT run the realtime protection.
    See what it find in a full system scan while in Safe Mode – then run another in Normal Mode.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, November 8, 2011 10:59 PM
    Wednesday, November 2, 2011 9:33 PM
    Moderator
  • "KrsAbz" wrote in message news:350ced95-b349-4f6d-bdee-d4aa04836024...

    Ok - that picked up anohter wee trojan.

     

    My computer can now go to sleep, but is still restarting after I shut down.

     

    I reckon a registry entry has been changed by the viruses - but not sure how to find out which one :-(

    A distinct possibility – unless your AV is kept up-to-date and functional things can slip in under the net and then escape detection later.
    If I was you, I’d try one of the specialist anti-malware forums – or use MS’s own malware service (which is free) – or just flatten and rebuild.
    for MS’s service, start here (keep notes on everything!)
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, November 7, 2011 10:18 AM
    Moderator

All replies

  • "KrsAbz" wrote in message news:8827853c-520e-461f-bdf1-00c8d1abb4ac...

    My laptop has started acting funny over the past week. When it shuts down it immediately restarts again, and when I try to make it sleep it immediately wakes up again.

    This coincided with my Norton 360 going haywire so I uninstalled it. And now windows defender also will not start up error: Error Code 0x800106ba Application failed to initialize.

    I tried to run through the manual windows defender fix step 3 (http://support.microsoft.com/kb/931849) it fails at the 2nd file name with the error "The module "wuaueng.dll" was loaded but the call to DllRegisterServer failed with error code 0x80070005.

    Further searching led me to try the MGADiag.exe program with the following results:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-4GV68-6D8JB-G6MF9
    Windows Product Key Hash: Ua+OBZ1y48sKA/bWkfKXiuCrOjY=
    Windows Product ID: 89578-OEM-7332157-00203
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_SLP channel
    Partial Product Key: G6MF9
    License Status: Licensed

     

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000


    Prior to uninstalling Norton 360 I ran the norton bootable recovery disc but no viruses showed up. I've also run Microsoft security essentials scan, malicious software removal tool quick scan and am running Malware Bytes but nothing has shown up.

     

    Thanks and regards


     
     
     
    Norton again!
     
    OK – let’s start from the beginning, rather than the end.
     
    There is only one minor problem with your MGADiag report – it looks as if you’ve never validated the install (which isn’t necessary)
    Please go to www.microsoft.com/genuine/validate and see what happens – if it passes, you’ll be offered MSE and IE9.
    If it fails, go to the diagnostics page – www.microsoft.com/genuine/diag and see what it has to say about various settings.
     
    As far as Norton goes – was this installed on the machine from the start, or has any other AV EVER been installed? If so, which one (even if only a trial, unactivated, provided by the manufacturer)
    When you installed Norton 360, was the previous AV (if any) still current?
    When you uninstalled Norton 360 – did you also use the Norton Removal Tool to get rid of the dregs of Norton?
    When you installed MSE, had you previously uninstalled (and run the removal tool) Norton?
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, November 2, 2011 4:09 PM
    Moderator
  • Thanks for response Noel.

    I ran the validation and it's passed by the looks of it.

    Norton was on the computer from the start and no other AV has ever been installed. Last week just after the inability to shut down started I got blue screen and Norton told me it had failed and Norton needed to uninstall and reinstall itself. So I ran the program and it reinstalled it. Then since then it's not been there. I used the Norton Removal Tool to remove - ran it twice in fact because I read that on the Norton Forums. Norton was removed prior to installing MSE.

    I'd tried system restores also to try and get the computer back to a state where it shut down properly with no joy.

    In the meantime - while MSE has been running, it's picked up a virus called "HTML/Allaple.A" which I've cleaned but computer still won't shut down normally.

     

    Wednesday, November 2, 2011 8:41 PM
  • "KrsAbz" wrote in message news:eacf1daf-ac45-4fde-a5c2-39e3244d15d2...

    Thanks for response Noel.

    I ran the validation and it's passed by the looks of it.

    Norton was on the computer from the start and no other AV has ever been installed. Last week just after the inability to shut down started I got blue screen and Norton told me it had failed and Norton needed to uninstall and reinstall itself. So I ran the program and it reinstalled it. Then since then it's not been there. I used the Norton Removal Tool to remove - ran it twice in fact because I read that on the Norton Forums. Norton was removed prior to installing MSE.

    I'd tried system restores also to try and get the computer back to a state where it shut down properly with no joy.

    In the meantime - while MSE has been running, it's picked up a virus called "HTML/Allaple.A" which I've cleaned but computer still won't shut down normally.

     

    Try Malwarebytes Anti-Malware (www.malwarebytes.org) install and update it but do NOT run the realtime protection.
    See what it find in a full system scan while in Safe Mode – then run another in Normal Mode.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, November 8, 2011 10:59 PM
    Wednesday, November 2, 2011 9:33 PM
    Moderator
  • Ok - that picked up anohter wee trojan.

     

    My computer can now go to sleep, but is still restarting after I shut down.

     

    I reckon a registry entry has been changed by the viruses - but not sure how to find out which one :-(

    Sunday, November 6, 2011 8:18 PM
  • "KrsAbz" wrote in message news:350ced95-b349-4f6d-bdee-d4aa04836024...

    Ok - that picked up anohter wee trojan.

     

    My computer can now go to sleep, but is still restarting after I shut down.

     

    I reckon a registry entry has been changed by the viruses - but not sure how to find out which one :-(

    A distinct possibility – unless your AV is kept up-to-date and functional things can slip in under the net and then escape detection later.
    If I was you, I’d try one of the specialist anti-malware forums – or use MS’s own malware service (which is free) – or just flatten and rebuild.
    for MS’s service, start here (keep notes on everything!)
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, November 7, 2011 10:18 AM
    Moderator
  • Thanks for all the help and advice Noel!

    Tuesday, November 8, 2011 7:21 AM
  • "KrsAbz" wrote in message news:f292bed8-d0f4-4b48-926f-d265d9365cdd...

    Thanks for all the help and advice Noel!

    You’re welcome – good luck.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, November 8, 2011 9:41 AM
    Moderator
  • An update (and hoefully this will help someone else with the same problem).

    While running some scans recommended by an anti-malware forum - I noticed there were still Norton files and folders lurking my system - despite running the Norton removal tool a total of 4 times, twice in safe mode and twice in normal mode.

    I ran a search for Norton and deleted anything that norton had left behind... including hidden folders and files norton had stored in a "Public" folder.

    Hey presto - computer working normally again - and cooling fan even seems to be running alot less now.

    So in effect - Norton 360 was a piece of malingering malware!

    At least a week of running fixes and tinkering has got my computer running the fastest it has ever done since I ever bl00dy subscribed to bl00dy Norton 360 4 years ago!

    Wednesday, November 9, 2011 1:42 PM
  • "KrsAbz" wrote in message news:51414ab2-5827-483f-b004-a6c33515f0c5...

    An update (and hoefully this will help someone else with the same problem).

    While running some scans recommended by an anti-malware forum - I noticed there were still Norton files and folders lurking my system - despite running the Norton removal tool a total of 4 times, twice in safe mode and twice in normal mode.

    I ran a search for Norton and deleted anything that norton had left behind... including hidden folders and files norton had stored in a "Public" folder.

    Hey presto - computer working normally again - and cooling fan even seems to be running alot less now.

    So in effect - Norton 360 was a piece of malingering malware!

    At least a week of running fixes and tinkering has got my computer running the fastest it has ever done since I ever bl00dy subscribed to bl00dy Norton 360 4 years ago!

    Ah – the Joys of Norton! I remember it well :)
    I stopped using anything from that stable in 2000 when it totally screwed my nice clean new installation of ME, despite it claiming that it was specially written for ME.
    I waged a war on it for three years – and achieved at least partial success.
     
    It’s still the most intrusive, misbegotten SOB of a piece of software, but at least it tends to uninstall properly.
     
    Enjoy your new-found speed and freedoms!
     
    Just make sure that you’ve installed a decent AV in its place :)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, November 9, 2011 10:23 PM
    Moderator