locked
Windows 7 Build 7601 This copy of windows is not genuine RRS feed

  • Question

  • On a 2 year old laptop pre-installed with windows 7 I am now getting the above message. I have tried to re-enter the activation key but this fails with error.

    I have tried the regedit as per instructions on http://support.microsoft.com/kb/2008385 no change

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x80072EE2
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:29:2012 19:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            AMD           ANT     
      SRAT            AMD           HAMMER  
      MSCT            OEMID         MSCTTBL
      HPET            PTLTD         HPETTBL
      MCFG            PTLTD           MCFG  
      TCPA            TOSCPL                
      SLIC            TOSCPL        TOSCPL00
      SSDT            PTLTD         POWERNOW

    Restore point is from August last year from backup on external HDD. Did try to restore but gave up after showing restoring registry for more than 2 hours. I do have a repair disc also created last year about the same time.

    I have a post within Microsoft Answers but having seen so many posts here hope that I may get a faster response from here.

    I am not fully PC literate but I am able to follow simple concise instructions.

    Saturday, February 18, 2012 3:28 PM

Answers

  • Hi

    Laptop failed on boot up this morning so I carried out a system restore using the image from August last year. All now appears ok, no longer getting the non genuine error I just have to reload a few progs and docs.

    Thanks for all your help


    Shirley King

    • Marked as answer by Darin Smith MS Tuesday, February 28, 2012 10:31 PM
    Sunday, February 26, 2012 1:00 PM

All replies

  • "scotsking" wrote in message news:a506481e-fba1-4108-98e3-e4fccaf2686f...

    On a 2 year old laptop pre-installed with windows 7 I am now getting the above message. I have tried to re-enter the activation key but this fails with error.

    I have tried the regedit as per instructions on http://support.microsoft.com/kb/2008385 no change

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003


    Other data-->
    SYSTEM/><BIOS/

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46


    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x80072EE2
    HealthStatus: 0x0000000000000000


     

    This is a tricky one – this error set is not often seen , and we’ve no real knowledge of its cause.
    The only known cure is currently a repair install t the least, and possibly a clean install.
     
    One definite cause for concern is that the MGADiag tool is unable to see any details at all about the make of the machine, or its BIOS  - which tends to indicate that the problem is either registry corruption, or a very overzealous Security program.
     
    What AV are you using currently? –what other security software are you suing?  - what other AV’s have EVER been installed on this PC? (including the one that was probably pre-installed).
     
    What software did you install or uninstall around the time the problem surfaced?
     
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 18, 2012 5:19 PM
    Moderator
  • AV is free offer Virgin Media Security version 9. & Microsoft Essentials.

    Spybot search & destroy

    Laptop came with McAffe orginally.

    Problem occured after a system hang and force re-boot. The system went through a CHKDISC when loaded message appeared.

    No software loaded at time of hang was just uploading from I-Tunes account (Podcast) and syncing I-pod.

    Last sofware loaded was I-Tunes update 28th Jan and jZip 17th Jan.

    Problem started about 8th/9th Feb.

    If I have do do repair install can you run through the process and will I lose any data.


    Shirley King

    Saturday, February 18, 2012 5:32 PM
  • "scotsking" wrote in message news:eee3a579-8f97-4780-a360-30502291eba1...

    AV is free offer Virgin Media Security version 9. & Microsoft Essentials.

    Spybot search & destroy

    Laptop came with McAffe orginally.

    Problem occured after a system hang and force re-boot. The system went through a CHKDISC when loaded message appeared.

    No software loaded at time of hang was just uploading from I-Tunes account (Podcast) and syncing I-pod.

    Last sofware loaded was I-Tunes update 28th Jan and jZip 17th Jan.

    Problem started about 8th/9th Feb.

    If I have do do repair install can you run through the process and will I lose any data.


    Shirley King

    Having two anti-virus programs active on your computer WILL cause problems – personally, I would uninstall the Virgin stuff, and leave MSE installed.
    You should also run the Removal tools for both McAfee and the Virgin/trend stuff.
    MCPR – McAfee Remover - MCPR - Support - McAfee
    Please also switch off Tea-Timer from Spybot, if it’s enabled, and then uninstall that.
     
    we’ll deal with a reinstall if we have to :)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 18, 2012 5:51 PM
    Moderator
  • Uninstalled Microsoft Security Essentials as loaded this by accident and I do like the current Virgin Media Security as it has a lot of additional features (Spyware, Identity Theft protection).

    Trend remover did not install correctly - uninstalled McAfee via add remove programs.

    Do you mean to fully uninstall Spybot or just the Tea-Timer? Not sure if running Tea Timer or how to turn it off


    Shirley King



    • Edited by scotsking Saturday, February 18, 2012 7:00 PM
    Saturday, February 18, 2012 6:05 PM
  • You MUST run the McAfee removal tool (MCPR) as well - or stuff gets left behind that interferes with other AV's

    What error did you get with the Trend removal utility? (Virgin may have a similar tool for their version - I've not looked closely)

    You should uninstall SpyBot completely for the moment - we'e trying to make life easier for the computer :)

    Onve complate, open an Admin Command Prompt window, and run the following command

    NETSH WINSOCK RESET

    and reboot.

    Please then run another MGADiag report so that we can see if anything has changed


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, February 18, 2012 7:11 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x80072EE2
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:29:2012 19:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            AMD           ANT     
      SRAT            AMD           HAMMER  
      MSCT            OEMID         MSCTTBL
      HPET            PTLTD         HPETTBL
      MCFG            PTLTD           MCFG  
      TCPA            TOSCPL                
      SLIC            TOSCPL        TOSCPL00
      SSDT            PTLTD         POWERNOW

    The Trend utility only showed 2 tabs not the five on the web site and when I did not take the restart option a message about the program not correctly installed came up. I did click the unisntall and restarted.

    Ran the MCPR tool and uninstalled spybot and Microsoft security essentials leaving only virgin media security ran the command NETSH WINSOCK RESET and rebooted.

    MGADiag report run after all of this done.


    Shirley King

    • Proposed as answer by joli22 Sunday, February 26, 2012 1:50 PM
    Saturday, February 18, 2012 7:50 PM
  • "scotsking" wrote in message news:0eb1c6f2-6b3b-49fd-9333-5d49780303ba...

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003


    Other data-->
    OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><



     

    The Trend utility only showed 2 tabs not the five on the web site and when I did not take the restart option a message about the program not correctly installed came up. I did click the unisntall and restarted.

    Ran the MCPR tool and uninstalled spybot and Microsoft security essentials leaving only virgin media security ran the command NETSH WINSOCK RESET and rebooted.

    MGADiag report run after all of this done.


    Shirley King

    No change in the report :(
    I suspect that you need to completely uninstall the Virgin Security and reinstall it.
    I can’t see any way that I can get to any help area in the Virgin site. I’m afraid you’ll have to do your own research there to see if they have a removal tool specific to that version, as I can see nothing on the Trend website that relates.
     
    Please download and install Malwarebytes Anti-Malware (free edition) from www.malwarebytes.org – update it but do NOT enable the Real-time Protection offer, as it will only complicate things.
    Run a full scan in your main account, and Quick scans in any other accounts on the computer.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 18, 2012 8:10 PM
    Moderator
  • I have not tried to remove Virgin security as I removed the Microsoft Security Essentials. So that leaves one Av software loaded.

    Currently running full scan of C & D


    Shirley King

    Saturday, February 18, 2012 8:24 PM
  • Finished Malware scan 2 files detected

    C:\Windows\Temp\TMP0000003E16972DB1EB123365 (Trojan.Dropper) -> Quarantined and deleted successfully.
    C:\Windows\Temp\TMP000000C34BB6262FD6084006 (Trojan.Dropper) -> Quarantined and deleted successfully.

    (end)


    Shirley King


    • Edited by scotsking Sunday, February 19, 2012 12:11 AM
    Sunday, February 19, 2012 12:01 AM
  • "scotsking" wrote in message news:24d1d5c5-3699-41ba-8de5-7dd872a95f3c...

    Finished Malware scan 2 files detected

    C:\Windows\Temp\TMP0000003E16972DB1EB123365 (Trojan.Dropper) -> Quarantined and deleted successfully.
    C:\Windows\Temp\TMP000000C34BB6262FD6084006 (Trojan.Dropper) -> Quarantined and deleted successfully.

    (end)


    Shirley King


     
     
    I was about to ask why you didn’t delete the files :)
    The fact that they were in the Temp folder means that they were probably the result of a malware install that wasn’t properly dealt with at the time.
     
    Apart from the WGA problem, are there any other current issues with the PC? – have you been getting Windows Updates OK (at least until the non-genuine notification started)?. Check your installed updates and see when the last one was installed, and your update history to see what’s there.
     
    Also – run the standard file system checks below.
     
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
    CHKDSK C: /R
    and hit the Enter key
    You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC

    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type

    SFC /SCANNOW

    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.

    run another MGADiag report, and post the results.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 12:53 AM
    Moderator
  • Hi

    Last Windows update 17th Jan (KB2585542). MSE updated 9th Feb

    Other than the non genuine message PC running fine. Will post again after CHKDSk has run


    Shirley King

    Sunday, February 19, 2012 10:05 AM
  • Hi MGADiag below

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x80072EE2
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:29:2012 19:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            AMD           ANT     
      SRAT            AMD           HAMMER  
      MSCT            OEMID         MSCTTBL
      HPET            PTLTD         HPETTBL
      MCFG            PTLTD           MCFG  
      TCPA            TOSCPL                
      SLIC            TOSCPL        TOSCPL00
      SSDT            PTLTD         POWERNOW

    SCANNOW result

    Verification 8% complete

    Windows Resource Protection found corrupt files but was unable to fix some of them.

    Details are inclouded in the CBS.Log


    Shirley King

    Sunday, February 19, 2012 12:14 PM
  • "scotsking" wrote in message news:76d23c76-a918-4fea-9b26-c21ce8b44f03...

    Hi MGADiag below



    SCANNOW result

    Verification 8% complete

    Windows Resource Protection found corrupt files but was unable to fix some of them.

    Details are inclouded in the CBS.Log


    Shirley King

    Did it never get to 100%?
     
    Please upload the CBS.log file to your public SkyDrive and post a link to it here – it may tell us something useful. (It’s C:\Windows\logs\CBS\CBS.log – you won’t be able to open it in anything as it’s locked, but you can copy it to the Desktop, and upload it from there)
     
    Please also download and install the CheckSUR tool - http://support.microsoft.com/kb/947821
    You’ll need the x64 version for WIn7
    when complete, upload the CheckSUR.log file as well.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 12:40 PM
    Moderator
  • Only tried once and 8% was all it said. I also realised I had not rebooted after SCANNOW so rebooted and recieved a numeber of error messages.

    "Catalyst control centre host application has stooped working. "

    Toshiba Flash cards

    and Virgin media security did not load.

    Rebboted agian and system went througha CHKDSC.

    On laod more errors WerFault.exe and again no Virgin media.

    Not sure what you mean about public SkyDrive?


    Shirley King

    Sunday, February 19, 2012 2:16 PM
  • "scotsking" wrote in message news:46da27d4-b3f4-4e68-a011-b1c7201da2d2...

    Only tried once and 8% was all it said. I also realised I had not rebooted after SCANNOW so rebooted and recieved a numeber of error messages.

    "Catalyst control centre host application has stooped working. "

    Toshiba Flash cards

    and Virgin media security did not load.

    Rebboted agian and system went througha CHKDSC.

    On laod more errors WerFault.exe and again no Virgin media.

    Not sure what you mean about public SkyDrive?


    Shirley King

     
    When you registered for a LiveID to access this site (or other MS sites), you automatically got 25GB of Cloud storage space to save stuff to :)
    If you have Windows Live Essentials installed, you can access that and upload files to a private are, or a public area, in the same way as you can on various other file-sharing sites.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 2:37 PM
    Moderator
  • Ok

    Found my skydrive BUT

    There's a temporary problem

    There's a temporary problem with the service. Please try again. If you continue to get this message, try again later.

    Also cannot download CheckSUR tool

    Message Optional Update delivery not working. It the offerd hotfix for windows KB9457821 failed on first 2 atempts. Currently on third try and installation stuck at 1/2


    Shirley King

    Sunday, February 19, 2012 2:48 PM
  • Hi again

    Have uploaded CBS log file to SkyDrive

    Still no joy with CheckSUR tool


    Shirley King

    Sunday, February 19, 2012 2:53 PM
  • "scotsking" wrote in message news:b0327cb7-0aa9-4ba4-bc55-0f49786cbd6e...

    Ok

    Found my skydrive BUT

    There's a temporary problem

    There's a temporary problem with the service. Please try again. If you continue to get this message, try again later.

    Also cannot download CheckSUR tool

    Message Optional Update delivery not working. It the offerd hotfix for windows KB9457821 failed on first 2 atempts. Currently on third try and installation stuck at 1/2


    Shirley King

    Ouch!

    I’ll have to see if I can get someone else involved here – my knowledge of how CheckSUR installs is limited even more than my knowledge of how to fix the problems it finds :(

    Meanwhile, please clarify - is the download failing, or the install?

    If it's the download, then you may have connectivity problems that we can do nothing about.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 3:00 PM
    Moderator
  • "scotsking" wrote in message news:8328a863-9039-4abe-a58c-35ee35738deb...

    Hi again

    Have uploaded CBS log file to SkyDrive

    Still no joy with CheckSUR tool


    Shirley King

     
    Please post a link to your SkyDrive – go to the page, and highlight the whole of the Address box at the top of your IE window, right-click on it and select Copy – then paste it in your response.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 3:02 PM
    Moderator
  • https://skydrive.live.com/?cid=5F5808041EA09522

    sorrt did not think of that

    No jooy with the CheckSUR tool


    Shirley King

    Sunday, February 19, 2012 3:10 PM
  • "scotsking" wrote in message news:8328a863-9039-4abe-a58c-35ee35738deb...

    Hi again

    Have uploaded CBS log file to SkyDrive

    Still no joy with CheckSUR tool


    Shirley King

     
    SFC failed with another 0x8007005 error -
    these are the relevant entries in the log, I think....
    2012-02-19 12:05:03, Error                 CSI    00000038@2012/2/19:12:05:03.506 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
    [gle=0x80004005]
    2012-02-19 12:05:09, Error                 CSI    00000039 (F) STATUS_OBJECT_NAME_NOT_FOUND #791242# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingDirectory(...)[gle=0xd0000034]
    2012-02-19 12:05:09, Error                 CSI    0000003a (F) STATUS_OBJECT_NAME_NOT_FOUND #791241# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingDirectory(flags = 0, da = (SYNCHRONIZE), oa = @0xb0d098->SIL_OBJECT_ATTRIBUTES {s:40; on:"amd64_microsoft-windows-browserservice_31bf3856ad364e35_6.1.7601.17514_none_d70f2c28b49dffae"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)
    [gle=0xd0000034]
     
     
    If I’m right, then there’s a good chance that even a repair install will fail – which means that you would be better off starting to back up all data to external media now, in preparation for a clean install (backups are never a bad idea anyhow <g>)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 3:41 PM
    Moderator
  • Hi

    Though we might be getting close to this, most of data has not changed from backup taken in August. Backing up e-mail and I-tunes library now.

    Had do another reboot has stuck in a loop windows expolorer not working. On reboot stoped the CHKdisc from running and booted up with no errors (save the windows not genuine).

    So ready to start when ever but have also included another MGADiag

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{ECD8EFB4-E9BE-4DC9-977D-0DB06E4FD335}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-82986773-1390687811-1382476131</SID><SYSTEM/><BIOS/><HWID>DA9D3907018400F6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x80072EE2
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:29:2012 19:39
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAeqikhl5dVPkWSBAz4vv8ixRh6kUeIA6oLlJ+KA==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            AMD           ANT     
      SRAT            AMD           HAMMER  
      MSCT            OEMID         MSCTTBL
      HPET            PTLTD         HPETTBL
      MCFG            PTLTD           MCFG  
      TCPA            TOSCPL                
      SLIC            TOSCPL        TOSCPL00
      SSDT            PTLTD         POWERNOW


    Shirley King

    Sunday, February 19, 2012 4:16 PM
  • "scotsking" wrote in message news:4dc9c0c1-bfeb-44b4-ba7d-41aa6c49eaef...

    Hi

    Though we might be getting close to this, most of data has not changed from backup taken in August. Backing up e-mail and I-tunes library now.

    Had do another reboot has stuck in a loop windows expolorer not working. On reboot stoped the CHKdisc from running and booted up with no errors (save the windows not genuine).

    So ready to start when ever but have also included another MGADiag

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003


    Shirley King

    I have an expert in reading these logs involved – if anyone can sort it, he can :)
    I’ll get back to you when I hear back from him (unless he decides to get directly involved!)
    Please continue your efforts to get the CheckSUR downloaded and installed – it may fix at least part of the problem.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 4:48 PM
    Moderator
  • Hi

    Not sure now but I thought that the download of  Hotfix for Windows (KB947821) did complete but I could find no program to run.

    That's all for today will log back on tomorrow evening after work and see if you have any more answers.


    Shirley King

    Sunday, February 19, 2012 10:47 PM
  • "scotsking" wrote in message news:68138dec-3d80-4ea9-a7e3-ebeeb595fc0f...

    Hi

    Not sure now but I thought that the download of  Hotfix for Windows (KB947821) did complete but I could find no program to run.

    That's all for today will log back on tomorrow evening after work and see if you have any more answers.


    Shirley King

    OK – I’ll be here  ( or in the pub<g>) – I’m still waiting for a response from the expert.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 19, 2012 11:04 PM
    Moderator
  • Hi

    Laptop went through chkdsc on boot. What's the plan :)


    Shirley King

    Monday, February 20, 2012 6:22 PM
  • "scotsking" wrote in message news:d86118a6-c281-4685-b0cf-e7bbcf0e122f...

    Hi

    Laptop went through chkdsc on boot. What's the plan :)


    Shirley King

    Ask me another :(
    I’ve heard nothing from my expert yet – give it another 24 hours, please
    Then the best thing to start with would be a Repair install.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 20, 2012 8:47 PM
    Moderator
  • Hi

    I do not have any Windows 7 discs, the lap top did not come with them. I have a created repair discs and the partioned drive that was set up for recovery.

    The linked site states that this option needs a Windows 7 disc.

    Help


    Shirley King

    Wednesday, February 22, 2012 6:23 PM
  • You can download the ISO file (a DVD disk image) from here -

    http://msft.digitalrivercontent.net/win/X17-58997.iso

     - which would probably be better for you than what you have.

    Use the Windows DVD ISO Burner to burn the disk - don't just copy it.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, February 22, 2012 6:49 PM
    Moderator
  • Hi

    I've downloaded the file but forgot to get a DVD-R to burn it to Doh.

    Have you had any news from your expert? Everything seems to be working fine at the moment, Lap top boots up


    Shirley King

    Saturday, February 25, 2012 2:44 PM
  • "scotsking" wrote in message news:c5ccca1d-6a22-42bc-84ed-caf78153de0f...

    Hi

    I've downloaded the file but forgot to get a DVD-R to burn it to Doh.

    Have you had any news from your expert? Everything seems to be working fine at the moment, Lap top boots up


    Shirley King

    Been there, done that :)
    No – it seems he’s not a well man at the moment, and very restricted at what he can do.
    Unfortunately I know of no-one else with the sort of knowledge he has.
    I’ve been learning a bit while you’ve been waiting ;) – so it may be worth trying a couple more things before we jump in at the deep end with a repair.
    Please open an Elevated Command Prompt window (1), and run the following commands.(2)
     
    ICACLS C:\Windows\System32\sppc.dll
    ICACLS C:\Windows\System32\slc.dll
    ICACLS C:\Windows\System32\slcext.dll
    ICACLS C:\Windows\System32\sppcomapi.dll
    ICACLS C:\Windows\System32\sppsvc.exe
    ICACLS C:\Windows\System32\SPPWMI.DLL
    ICACLS C:\Windows\System32\SPP.DLL
    ICACLS C:\Windows\System32\SLWGA.DLL
    REG QUERY HKU
    REG QUERY HKU\S-1-5-20
    REG QUERY HKU\S-1-5-20\Environment
    REG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
     
    Copy the whole output to your response(3) ;)
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 25, 2012 3:06 PM
    Moderator
  • Hi

    Sorry to hear about your expert hope he gets well soon. Thanks for your help so far. Learning a bit more about this tech stuf

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>ICACLS C:\Windows\System32\sppc.dll
    C:\Windows\System32\sppc.dll NT SERVICE\TrustedInstaller:(F)
                                 BUILTIN\Administrators:(RX)
                                 NT AUTHORITY\SYSTEM:(RX)
                                 BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\slc.dll
    C:\Windows\System32\slc.dll NT SERVICE\TrustedInstaller:(F)
                                BUILTIN\Administrators:(RX)
                                NT AUTHORITY\SYSTEM:(RX)
                                BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\slcext.dll
    C:\Windows\System32\slcext.dll NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\sppcomapi.dll
    C:\Windows\System32\sppcomapi.dll NT SERVICE\TrustedInstaller:(F)
                                      BUILTIN\Administrators:(RX)
                                      NT AUTHORITY\SYSTEM:(RX)
                                      BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\SPPWMI.DLL
    C:\Windows\System32\SPPWMI.DLL NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\SPP.DLL
    C:\Windows\System32\SPP.DLL NT SERVICE\TrustedInstaller:(F)
                                BUILTIN\Administrators:(RX)
                                NT AUTHORITY\SYSTEM:(RX)
                                BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\SLWGA.DLL
    C:\Windows\System32\SLWGA.DLL NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>REG QUERY HKU

    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000
    HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000_Classes
    HKEY_USERS\S-1-5-18

    C:\Windows\system32>REG QUERY HKU\S-1-5-20
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
    ProfileList\S-1-5-20
    ERROR: Invalid syntax.
    Type "REG QUERY /?" for usage.

    Shirley King


    • Edited by scotsking Saturday, February 25, 2012 3:28 PM
    Saturday, February 25, 2012 3:26 PM
  • "scotsking" wrote in message news:c1d52756-110d-4e57-aac4-f42c89f36a27...

    Hi

    Sorry to hear about your expert hope he gets well soon. Thanks for your help so far. Learning a bit more about this tech stuf


    C:\Windows\system32>REG QUERY HKU

    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000
    HKEY_USERS\S-1-5-21-82986773-1390687811-1382476131-1000_Classes
    HKEY_USERS\S-1-5-18

    C:\Windows\system32>REG QUERY HKU\S-1-5-20
    ERROR: The system was unable to find the specified registry key or value.


    C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
    ProfileList\S-1-5-20
    ERROR: Invalid syntax.
    Type "REG QUERY /?" for usage.

    Shirley King


     
     
    Bother – forgot to put quotes around the last one!
     
    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
     
    Sorry about that!
    This confirms that there are serious problems in the Registry – the entire Network Service account appears to have gone AWOL.
     
    This is the third case I’ve seen this week  - which possibly means that it’s the result of a new form of malware.
    It could also be the result of a botched attempt by an AV to clean up after a malware attack.
    When this first started, you were using the Virgin/Trend offering?
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 25, 2012 3:40 PM
    Moderator
  • Hi

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    \ProfileList\S-1-5-20"

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0

    Been using Virgin AV since it was offered for Windows 7 so about 20months. I know the current version 10 is Trend but I have version 9 so not sure if this is also trend. I cannot remember AV finding any problems recently and I do regular scans. There are 2 files still in quarantine from May & June 2011.

    Spybot did find some spyware which I cleaned off I had to run spybot as administrator to do this but I am sure the laptop was fine for a while after. I did reverse the removal but it made no difference. The spyware was located in iWinGames but I cannot remember what it was.

    Shirley


    Shirley King

    Saturday, February 25, 2012 3:53 PM
  • Hi

    Laptop failed on boot up this morning so I carried out a system restore using the image from August last year. All now appears ok, no longer getting the non genuine error I just have to reload a few progs and docs.

    Thanks for all your help


    Shirley King

    • Marked as answer by Darin Smith MS Tuesday, February 28, 2012 10:31 PM
    Sunday, February 26, 2012 1:00 PM
  • Hi again

    Is there anything else I should do I have noticed that there is only 38GB free of 116gb on the C drive and I did not think I had that much installed. Is there some old files that need to be deleted after the restore?


    Shirley King

    • Proposed as answer by joli22 Sunday, February 26, 2012 1:48 PM
    • Unproposed as answer by joli22 Sunday, February 26, 2012 1:49 PM
    Sunday, February 26, 2012 1:21 PM
  • "scotsking" wrote in message news:12c63630-1941-4d24-969a-26a0cab63a7d...

    Hi again

    Is there anything else I should do I have noticed that there is only 38GB free of 116gb on the C drive and I did not think I had that much installed. Is there some old files that need to be deleted after the restore?


    Shirley King

    There could be a fair amount in your various TEMP folders, and/or recycle bin – but windows would normally clear that.
    How much space is allocated to System Restore?
    Try using the Disk Cleanup tool – cleanmgr.exe.
    Please do NOT take the option to remove the Service Pack backups (just in case!), and it’s probably a good idea to leave any dump files alone as well.
    The following are safe to tick in Disk Cleanup
    Downloaded Program Files
    Temporary Internet Files
    Recycle Bin
    Temporary Files
    - see how much space that gets you.
    You can also clean up System files (i.e. System Restore)
    click on the More Options tab (after clicking the System Files option)
    and use the System Restore option to remove everything except your most recent Restore point. That may free up anything up to 15GB, depending on how many Restore points are there.
     
    Don’t be tempted to go round deleting folders at random – some are critical to the system, even if they’re not in the ‘usual places’ (e.g, a large C:\MSOCache folder – which is the Office backup, and needed if you ever  have to repair your Office installation).
     
    If you need more advice, post a question in the Answers forums, as they are probably better-qualified to advise than we are here. - http://answers.microsoft.com/en-us/windows
     
    HTH, and Good Luck with your ‘new’ install!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 26, 2012 1:57 PM
    Moderator