Answered by:
Windows 7 Build 7601 This copy of windows is not genuine

Question
-
On a 2 year old laptop pre-installed with windows 7 I am now getting the above message. I have tried to re-enter the activation key but this fails with error.
I have tried the regedit as per instructions on http://support.microsoft.com/kb/2008385 no change
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
Event Time Stamp: 1:29:2012 19:39
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP AMD ANT
SRAT AMD HAMMER
MSCT OEMID MSCTTBL
HPET PTLTD HPETTBL
MCFG PTLTD MCFG
TCPA TOSCPL
SLIC TOSCPL TOSCPL00
SSDT PTLTD POWERNOW
Restore point is from August last year from backup on external HDD. Did try to restore but gave up after showing restoring registry for more than 2 hours. I do have a repair disc also created last year about the same time.I have a post within Microsoft Answers but having seen so many posts here hope that I may get a faster response from here.
I am not fully PC literate but I am able to follow simple concise instructions.
Saturday, February 18, 2012 3:28 PM
Answers
-
Hi
Laptop failed on boot up this morning so I carried out a system restore using the image from August last year. All now appears ok, no longer getting the non genuine error I just have to reload a few progs and docs.
Thanks for all your help
Shirley King
- Marked as answer by Darin Smith MS Tuesday, February 28, 2012 10:31 PM
Sunday, February 26, 2012 1:00 PM
All replies
-
"scotsking" wrote in message news:a506481e-fba1-4108-98e3-e4fccaf2686f...
On a 2 year old laptop pre-installed with windows 7 I am now getting the above message. I have tried to re-enter the activation key but this fails with error.
I have tried the regedit as per instructions on http://support.microsoft.com/kb/2008385 no change
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
Other data-->
SYSTEM/><BIOS/
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
This is a tricky one – this error set is not often seen , and we’ve no real knowledge of its cause.The only known cure is currently a repair install t the least, and possibly a clean install.One definite cause for concern is that the MGADiag tool is unable to see any details at all about the make of the machine, or its BIOS - which tends to indicate that the problem is either registry corruption, or a very overzealous Security program.What AV are you using currently? –what other security software are you suing? - what other AV’s have EVER been installed on this PC? (including the one that was probably pre-installed).What software did you install or uninstall around the time the problem surfaced?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 18, 2012 5:19 PMModerator -
AV is free offer Virgin Media Security version 9. & Microsoft Essentials.
Spybot search & destroy
Laptop came with McAffe orginally.
Problem occured after a system hang and force re-boot. The system went through a CHKDISC when loaded message appeared.
No software loaded at time of hang was just uploading from I-Tunes account (Podcast) and syncing I-pod.
Last sofware loaded was I-Tunes update 28th Jan and jZip 17th Jan.
Problem started about 8th/9th Feb.
If I have do do repair install can you run through the process and will I lose any data.
Shirley King
Saturday, February 18, 2012 5:32 PM -
"scotsking" wrote in message news:eee3a579-8f97-4780-a360-30502291eba1...
AV is free offer Virgin Media Security version 9. & Microsoft Essentials.
Spybot search & destroy
Laptop came with McAffe orginally.
Problem occured after a system hang and force re-boot. The system went through a CHKDISC when loaded message appeared.
No software loaded at time of hang was just uploading from I-Tunes account (Podcast) and syncing I-pod.
Last sofware loaded was I-Tunes update 28th Jan and jZip 17th Jan.
Problem started about 8th/9th Feb.
If I have do do repair install can you run through the process and will I lose any data.
Shirley King
Having two anti-virus programs active on your computer WILL cause problems – personally, I would uninstall the Virgin stuff, and leave MSE installed.You should also run the Removal tools for both McAfee and the Virgin/trend stuff.MCPR – McAfee Remover - MCPR - Support - McAfeeTrend Micro remover - http://esupport.trendmicro.com/solution/en-us/1036064.aspx#vista7Please also switch off Tea-Timer from Spybot, if it’s enabled, and then uninstall that.we’ll deal with a reinstall if we have to :)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 18, 2012 5:51 PMModerator -
Uninstalled Microsoft Security Essentials as loaded this by accident and I do like the current Virgin Media Security as it has a lot of additional features (Spyware, Identity Theft protection).
Trend remover did not install correctly - uninstalled McAfee via add remove programs.
Do you mean to fully uninstall Spybot or just the Tea-Timer? Not sure if running Tea Timer or how to turn it off
Shirley King
- Edited by scotsking Saturday, February 18, 2012 7:00 PM
Saturday, February 18, 2012 6:05 PM -
You MUST run the McAfee removal tool (MCPR) as well - or stuff gets left behind that interferes with other AV's
What error did you get with the Trend removal utility? (Virgin may have a similar tool for their version - I've not looked closely)
You should uninstall SpyBot completely for the moment - we'e trying to make life easier for the computer :)
Onve complate, open an Admin Command Prompt window, and run the following command
NETSH WINSOCK RESET
and reboot.
Please then run another MGADiag report so that we can see if anything has changed
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Saturday, February 18, 2012 7:11 PMModerator -
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
Event Time Stamp: 1:29:2012 19:39
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP AMD ANT
SRAT AMD HAMMER
MSCT OEMID MSCTTBL
HPET PTLTD HPETTBL
MCFG PTLTD MCFG
TCPA TOSCPL
SLIC TOSCPL TOSCPL00
SSDT PTLTD POWERNOW
The Trend utility only showed 2 tabs not the five on the web site and when I did not take the restart option a message about the program not correctly installed came up. I did click the unisntall and restarted.
Ran the MCPR tool and uninstalled spybot and Microsoft security essentials leaving only virgin media security ran the command NETSH WINSOCK RESET and rebooted.
MGADiag report run after all of this done.
Shirley King
- Proposed as answer by joli22 Sunday, February 26, 2012 1:50 PM
Saturday, February 18, 2012 7:50 PM -
"scotsking" wrote in message news:0eb1c6f2-6b3b-49fd-9333-5d49780303ba...
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
Other data-->
OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><
The Trend utility only showed 2 tabs not the five on the web site and when I did not take the restart option a message about the program not correctly installed came up. I did click the unisntall and restarted.
Ran the MCPR tool and uninstalled spybot and Microsoft security essentials leaving only virgin media security ran the command NETSH WINSOCK RESET and rebooted.
MGADiag report run after all of this done.
Shirley King
No change in the report :(I suspect that you need to completely uninstall the Virgin Security and reinstall it.I can’t see any way that I can get to any help area in the Virgin site. I’m afraid you’ll have to do your own research there to see if they have a removal tool specific to that version, as I can see nothing on the Trend website that relates.Please download and install Malwarebytes Anti-Malware (free edition) from www.malwarebytes.org – update it but do NOT enable the Real-time Protection offer, as it will only complicate things.Run a full scan in your main account, and Quick scans in any other accounts on the computer.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 18, 2012 8:10 PMModerator -
I have not tried to remove Virgin security as I removed the Microsoft Security Essentials. So that leaves one Av software loaded.
Currently running full scan of C & D
Shirley King
Saturday, February 18, 2012 8:24 PM -
Finished Malware scan 2 files detected
C:\Windows\Temp\TMP0000003E16972DB1EB123365 (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\Temp\TMP000000C34BB6262FD6084006 (Trojan.Dropper) -> Quarantined and deleted successfully.
(end)
Shirley King
- Edited by scotsking Sunday, February 19, 2012 12:11 AM
Sunday, February 19, 2012 12:01 AM -
"scotsking" wrote in message news:24d1d5c5-3699-41ba-8de5-7dd872a95f3c...
Finished Malware scan 2 files detected
C:\Windows\Temp\TMP0000003E16972DB1EB123365 (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\Temp\TMP000000C34BB6262FD6084006 (Trojan.Dropper) -> Quarantined and deleted successfully.
(end)
Shirley King
I was about to ask why you didn’t delete the files :)The fact that they were in the Temp folder means that they were probably the result of a malware install that wasn’t properly dealt with at the time.Apart from the WGA problem, are there any other current issues with the PC? – have you been getting Windows Updates OK (at least until the non-genuine notification started)?. Check your installed updates and see when the last one was installed, and your update history to see what’s there.Also – run the standard file system checks below.Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key
You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC
SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
run another MGADiag report, and post the results.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 12:53 AMModerator -
Hi
Last Windows update 17th Jan (KB2585542). MSE updated 9th Feb
Other than the non genuine message PC running fine. Will post again after CHKDSk has run
Shirley King
Sunday, February 19, 2012 10:05 AM -
Hi MGADiag below
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
Event Time Stamp: 1:29:2012 19:39
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP AMD ANT
SRAT AMD HAMMER
MSCT OEMID MSCTTBL
HPET PTLTD HPETTBL
MCFG PTLTD MCFG
TCPA TOSCPL
SLIC TOSCPL TOSCPL00
SSDT PTLTD POWERNOW
SCANNOW resultVerification 8% complete
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are inclouded in the CBS.Log
Shirley King
Sunday, February 19, 2012 12:14 PM -
"scotsking" wrote in message news:76d23c76-a918-4fea-9b26-c21ce8b44f03...
Hi MGADiag below
SCANNOW resultVerification 8% complete
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are inclouded in the CBS.Log
Shirley King
Did it never get to 100%?Please upload the CBS.log file to your public SkyDrive and post a link to it here – it may tell us something useful. (It’s C:\Windows\logs\CBS\CBS.log – you won’t be able to open it in anything as it’s locked, but you can copy it to the Desktop, and upload it from there)Please also download and install the CheckSUR tool - http://support.microsoft.com/kb/947821You’ll need the x64 version for WIn7when complete, upload the CheckSUR.log file as well.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 12:40 PMModerator -
Only tried once and 8% was all it said. I also realised I had not rebooted after SCANNOW so rebooted and recieved a numeber of error messages.
"Catalyst control centre host application has stooped working. "
Toshiba Flash cards
and Virgin media security did not load.
Rebboted agian and system went througha CHKDSC.
On laod more errors WerFault.exe and again no Virgin media.
Not sure what you mean about public SkyDrive?
Shirley King
Sunday, February 19, 2012 2:16 PM -
"scotsking" wrote in message news:46da27d4-b3f4-4e68-a011-b1c7201da2d2...
Only tried once and 8% was all it said. I also realised I had not rebooted after SCANNOW so rebooted and recieved a numeber of error messages.
"Catalyst control centre host application has stooped working. "
Toshiba Flash cards
and Virgin media security did not load.
Rebboted agian and system went througha CHKDSC.
On laod more errors WerFault.exe and again no Virgin media.
Not sure what you mean about public SkyDrive?
Shirley King
When you registered for a LiveID to access this site (or other MS sites), you automatically got 25GB of Cloud storage space to save stuff to :)If you have Windows Live Essentials installed, you can access that and upload files to a private are, or a public area, in the same way as you can on various other file-sharing sites.Look here for details.... www.skydrive.live.com and http://explore.live.com/windows-live-skydrive-help-center
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 2:37 PMModerator -
Ok
Found my skydrive BUT
There's a temporary problem
There's a temporary problem with the service. Please try again. If you continue to get this message, try again later.
Also cannot download CheckSUR tool
Message Optional Update delivery not working. It the offerd hotfix for windows KB9457821 failed on first 2 atempts. Currently on third try and installation stuck at 1/2
Shirley King
Sunday, February 19, 2012 2:48 PM -
Hi again
Have uploaded CBS log file to SkyDrive
Still no joy with CheckSUR tool
Shirley King
Sunday, February 19, 2012 2:53 PM -
"scotsking" wrote in message news:b0327cb7-0aa9-4ba4-bc55-0f49786cbd6e...
Ok
Found my skydrive BUT
There's a temporary problem
There's a temporary problem with the service. Please try again. If you continue to get this message, try again later.
Also cannot download CheckSUR tool
Message Optional Update delivery not working. It the offerd hotfix for windows KB9457821 failed on first 2 atempts. Currently on third try and installation stuck at 1/2
Shirley King
Ouch!I’ll have to see if I can get someone else involved here – my knowledge of how CheckSUR installs is limited even more than my knowledge of how to fix the problems it finds :(
Meanwhile, please clarify - is the download failing, or the install?
If it's the download, then you may have connectivity problems that we can do nothing about.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Edited by Noel D PatonModerator Sunday, February 19, 2012 3:22 PM request extra info
Sunday, February 19, 2012 3:00 PMModerator -
"scotsking" wrote in message news:8328a863-9039-4abe-a58c-35ee35738deb...
Hi again
Have uploaded CBS log file to SkyDrive
Still no joy with CheckSUR tool
Shirley King
Please post a link to your SkyDrive – go to the page, and highlight the whole of the Address box at the top of your IE window, right-click on it and select Copy – then paste it in your response.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 3:02 PMModerator -
https://skydrive.live.com/?cid=5F5808041EA09522
sorrt did not think of that
No jooy with the CheckSUR tool
Shirley King
Sunday, February 19, 2012 3:10 PM -
"scotsking" wrote in message news:8328a863-9039-4abe-a58c-35ee35738deb...
Hi again
Have uploaded CBS log file to SkyDrive
Still no joy with CheckSUR tool
Shirley King
SFC failed with another 0x8007005 error -these are the relevant entries in the log, I think....2012-02-19 12:05:03, Error CSI 00000038@2012/2/19:12:05:03.506 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)[gle=0x80004005]2012-02-19 12:05:09, Error CSI 00000039 (F) STATUS_OBJECT_NAME_NOT_FOUND #791242# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingDirectory(...)[gle=0xd0000034]2012-02-19 12:05:09, Error CSI 0000003a (F) STATUS_OBJECT_NAME_NOT_FOUND #791241# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingDirectory(flags = 0, da = (SYNCHRONIZE), oa = @0xb0d098->SIL_OBJECT_ATTRIBUTES {s:40; on:"amd64_microsoft-windows-browserservice_31bf3856ad364e35_6.1.7601.17514_none_d70f2c28b49dffae"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)[gle=0xd0000034]If I’m right, then there’s a good chance that even a repair install will fail – which means that you would be better off starting to back up all data to external media now, in preparation for a clean install (backups are never a bad idea anyhow <g>)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 3:41 PMModerator -
Hi
Though we might be getting close to this, most of data has not changed from backup taken in August. Backing up e-mail and I-tunes library now.
Had do another reboot has stuck in a loop windows expolorer not working. On reboot stoped the CHKdisc from running and booted up with no errors (save the windows not genuine).
So ready to start when ever but have also included another MGADiag
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE2
HealthStatus: 0x0000000000000000
Event Time Stamp: 1:29:2012 19:39
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP AMD ANT
SRAT AMD HAMMER
MSCT OEMID MSCTTBL
HPET PTLTD HPETTBL
MCFG PTLTD MCFG
TCPA TOSCPL
SLIC TOSCPL TOSCPL00
SSDT PTLTD POWERNOW
Shirley King
Sunday, February 19, 2012 4:16 PM -
"scotsking" wrote in message news:4dc9c0c1-bfeb-44b4-ba7d-41aa6c49eaef...
Hi
Though we might be getting close to this, most of data has not changed from backup taken in August. Backing up e-mail and I-tunes library now.
Had do another reboot has stuck in a loop windows expolorer not working. On reboot stoped the CHKdisc from running and booted up with no errors (save the windows not genuine).
So ready to start when ever but have also included another MGADiag
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
Shirley King
I have an expert in reading these logs involved – if anyone can sort it, he can :)I’ll get back to you when I hear back from him (unless he decides to get directly involved!)Please continue your efforts to get the CheckSUR downloaded and installed – it may fix at least part of the problem.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 4:48 PMModerator -
Hi
Not sure now but I thought that the download of Hotfix for Windows (KB947821) did complete but I could find no program to run.
That's all for today will log back on tomorrow evening after work and see if you have any more answers.
Shirley King
Sunday, February 19, 2012 10:47 PM -
"scotsking" wrote in message news:68138dec-3d80-4ea9-a7e3-ebeeb595fc0f...
Hi
Not sure now but I thought that the download of Hotfix for Windows (KB947821) did complete but I could find no program to run.
That's all for today will log back on tomorrow evening after work and see if you have any more answers.
Shirley King
OK – I’ll be here ( or in the pub<g>) – I’m still waiting for a response from the expert.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 19, 2012 11:04 PMModerator -
Hi
Laptop went through chkdsc on boot. What's the plan :)
Shirley King
Monday, February 20, 2012 6:22 PM -
"scotsking" wrote in message news:d86118a6-c281-4685-b0cf-e7bbcf0e122f...
Hi
Laptop went through chkdsc on boot. What's the plan :)
Shirley King
Ask me another :(I’ve heard nothing from my expert yet – give it another 24 hours, pleaseThen the best thing to start with would be a Repair install.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, February 20, 2012 8:47 PMModerator -
Hi
I do not have any Windows 7 discs, the lap top did not come with them. I have a created repair discs and the partioned drive that was set up for recovery.
The linked site states that this option needs a Windows 7 disc.
Help
Shirley King
Wednesday, February 22, 2012 6:23 PM -
You can download the ISO file (a DVD disk image) from here -
http://msft.digitalrivercontent.net/win/X17-58997.iso
- which would probably be better for you than what you have.
Use the Windows DVD ISO Burner to burn the disk - don't just copy it.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Wednesday, February 22, 2012 6:49 PMModerator -
Hi
I've downloaded the file but forgot to get a DVD-R to burn it to Doh.
Have you had any news from your expert? Everything seems to be working fine at the moment, Lap top boots up
Shirley King
Saturday, February 25, 2012 2:44 PM -
"scotsking" wrote in message news:c5ccca1d-6a22-42bc-84ed-caf78153de0f...
Hi
I've downloaded the file but forgot to get a DVD-R to burn it to Doh.
Have you had any news from your expert? Everything seems to be working fine at the moment, Lap top boots up
Shirley King
Been there, done that :)No – it seems he’s not a well man at the moment, and very restricted at what he can do.Unfortunately I know of no-one else with the sort of knowledge he has.I’ve been learning a bit while you’ve been waiting ;) – so it may be worth trying a couple more things before we jump in at the deep end with a repair.Please open an Elevated Command Prompt window (1), and run the following commands.(2)ICACLS C:\Windows\System32\sppc.dllICACLS C:\Windows\System32\slc.dllICACLS C:\Windows\System32\slcext.dllICACLS C:\Windows\System32\sppcomapi.dllICACLS C:\Windows\System32\sppsvc.exeICACLS C:\Windows\System32\SPPWMI.DLLICACLS C:\Windows\System32\SPP.DLLICACLS C:\Windows\System32\SLWGA.DLLREG QUERY HKUREG QUERY HKU\S-1-5-20REG QUERY HKU\S-1-5-20\EnvironmentREG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20Copy the whole output to your response(3) ;)
1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 25, 2012 3:06 PMModerator -
Hi
Sorry to hear about your expert hope he gets well soon. Thanks for your help so far. Learning a bit more about this tech stuf
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>ICACLS C:\Windows\System32\sppc.dll
C:\Windows\System32\sppc.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\slc.dll
C:\Windows\System32\slc.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\slcext.dll
C:\Windows\System32\slcext.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\sppcomapi.dll
C:\Windows\System32\sppcomapi.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\sppsvc.exe
C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\SPPWMI.DLL
C:\Windows\System32\SPPWMI.DLL NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\SPP.DLL
C:\Windows\System32\SPP.DLL NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\System32\SLWGA.DLL
C:\Windows\System32\SLWGA.DLL NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>REG QUERY HKU
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000
HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000_Classes
HKEY_USERS\S-1-5-18
C:\Windows\system32>REG QUERY HKU\S-1-5-20
ERROR: The system was unable to find the specified registry key or value.
C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment
ERROR: The system was unable to find the specified registry key or value.
C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
ProfileList\S-1-5-20
ERROR: Invalid syntax.
Type "REG QUERY /?" for usage.
Shirley King
- Edited by scotsking Saturday, February 25, 2012 3:28 PM
Saturday, February 25, 2012 3:26 PM -
"scotsking" wrote in message news:c1d52756-110d-4e57-aac4-f42c89f36a27...
Hi
Sorry to hear about your expert hope he gets well soon. Thanks for your help so far. Learning a bit more about this tech stuf
C:\Windows\system32>REG QUERY HKU
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000
HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000_Classes
HKEY_USERS\S-1-5-18
C:\Windows\system32>REG QUERY HKU\S-1-5-20
ERROR: The system was unable to find the specified registry key or value.
C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment
ERROR: The system was unable to find the specified registry key or value.
C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
ProfileList\S-1-5-20
ERROR: Invalid syntax.
Type "REG QUERY /?" for usage.
Shirley King
Bother – forgot to put quotes around the last one!REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"Sorry about that!This confirms that there are serious problems in the Registry – the entire Network Service account appears to have gone AWOL.This is the third case I’ve seen this week - which possibly means that it’s the result of a new form of malware.It could also be the result of a botched attempt by an AV to clean up after a malware attack.When this first started, you were using the Virgin/Trend offering?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 25, 2012 3:40 PMModerator -
Hi
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\ProfileList\S-1-5-20"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkServi
ce
Flags REG_DWORD 0x0
State REG_DWORD 0x0
Been using Virgin AV since it was offered for Windows 7 so about 20months. I know the current version 10 is Trend but I have version 9 so not sure if this is also trend. I cannot remember AV finding any problems recently and I do regular scans. There are 2 files still in quarantine from May & June 2011.
Spybot did find some spyware which I cleaned off I had to run spybot as administrator to do this but I am sure the laptop was fine for a while after. I did reverse the removal but it made no difference. The spyware was located in iWinGames but I cannot remember what it was.
Shirley
Shirley King
Saturday, February 25, 2012 3:53 PM -
Hi
Laptop failed on boot up this morning so I carried out a system restore using the image from August last year. All now appears ok, no longer getting the non genuine error I just have to reload a few progs and docs.
Thanks for all your help
Shirley King
- Marked as answer by Darin Smith MS Tuesday, February 28, 2012 10:31 PM
Sunday, February 26, 2012 1:00 PM -
Hi again
Is there anything else I should do I have noticed that there is only 38GB free of 116gb on the C drive and I did not think I had that much installed. Is there some old files that need to be deleted after the restore?
Shirley King
Sunday, February 26, 2012 1:21 PM -
"scotsking" wrote in message news:12c63630-1941-4d24-969a-26a0cab63a7d...
Hi again
Is there anything else I should do I have noticed that there is only 38GB free of 116gb on the C drive and I did not think I had that much installed. Is there some old files that need to be deleted after the restore?
Shirley King
There could be a fair amount in your various TEMP folders, and/or recycle bin – but windows would normally clear that.How much space is allocated to System Restore?Try using the Disk Cleanup tool – cleanmgr.exe.Please do NOT take the option to remove the Service Pack backups (just in case!), and it’s probably a good idea to leave any dump files alone as well.The following are safe to tick in Disk CleanupDownloaded Program FilesTemporary Internet FilesRecycle BinTemporary Files- see how much space that gets you.You can also clean up System files (i.e. System Restore)click on the More Options tab (after clicking the System Files option)and use the System Restore option to remove everything except your most recent Restore point. That may free up anything up to 15GB, depending on how many Restore points are there.Don’t be tempted to go round deleting folders at random – some are critical to the system, even if they’re not in the ‘usual places’ (e.g, a large C:\MSOCache folder – which is the Office backup, and needed if you ever have to repair your Office installation).If you need more advice, post a question in the Answers forums, as they are probably better-qualified to advise than we are here. - http://answers.microsoft.com/en-us/windowsHTH, and Good Luck with your ‘new’ install!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 26, 2012 1:57 PMModerator