none
Windows 7 Validation Issue RRS feed

  • Question

  • Hi, I keep getting the validation issue and it's really slowing down my computer. I've been told to run MGADiag and copy paste the results, but it won't even run. It's been not responding for the last 10 minutes.

    All help appreciated!

    EDIT: It just took a long time but I got the report!

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-D96PV-T9B9D-M8X2Q
    Windows Product Key Hash: Fq/JsPUI1NdT6veDtiDB8N1RQUs=
    Windows Product ID: 00359-OEM-8992687-00246
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {42B4C0E7-A082-48B8-A44A-E7FF02930900}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{42B4C0E7-A082-48B8-A44A-E7FF02930900}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-M8X2Q</PKey><PID>00359-OEM-8992687-00246</PID><PIDType>2</PIDType><SID>S-1-5-21-2200541064-674919060-1287110327</SID><SYSTEM><Manufacturer>Micro-Star International Co., Ltd.</Manufacturer><Model>GE70 0NC</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>E1756IMS.10A</Version><SMBIOSVersion major="2" minor="7"/><Date>20120517000000.000000+000</Date></BIOS><HWID>24F93807018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI_NB</OEMID><OEMTableID>MEGABOOK</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>94436407C3F2586</Val><Hash>Nh+O7p+E5Ha5+8Lxn9JfFULj9GM=</Hash><Pid>89388-707-9845457-65089</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800246-02-1033-7601.0000-1292012
    Installation ID: 019165341811936926964960217960424651189192401155973352
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: M8X2Q
    License Status: Notification
    Notification Reason: 0xD0000006.
    Remaining Windows rearm count: 1
    Trusted time: 3/3/2013 12:57:27 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2012 15:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEAAQABAAQAAAABAAAABAABAAEAln1ICgx71oo8PQ63rinOcFhDYKtcmVJhPv5KXpZj

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC MSI_NB MEGABOOK
      FACP MSI_NB MEGABOOK
      HPET MSI_NB MEGABOOK
      MCFG MSI_NB MEGABOOK
      SLIC MSI_NB MEGABOOK
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl

    • Edited by FreeQinC Sunday, March 3, 2013 8:59 PM
    Sunday, March 3, 2013 8:55 PM

Answers

  • Your disk has a bad sector - and may be in the early stages of failing.

    Back up your data to external media NOW, and make plans for replacing the hard drive.

    From the Event log it appears that you have only run CHKDSK /F rather than /R, before

    Once you have your data backed up, please run CHKDSK C: /R to fully test the drive.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, April 3, 2013 3:40 PM
    Moderator

All replies

  • Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, March 3, 2013 9:10 PM
    Moderator
  • Hi, update!

    I managed to complete the first part but the second part gave me this error:

    Windows Resource Protection could not perform the requested operation.

    Here is another MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-D96PV-T9B9D-M8X2Q
    Windows Product Key Hash: Fq/JsPUI1NdT6veDtiDB8N1RQUs=
    Windows Product ID: 00359-OEM-8992687-00246
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {42B4C0E7-A082-48B8-A44A-E7FF02930900}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{42B4C0E7-A082-48B8-A44A-E7FF02930900}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-M8X2Q</PKey><PID>00359-OEM-8992687-00246</PID><PIDType>2</PIDType><SID>S-1-5-21-2200541064-674919060-1287110327</SID><SYSTEM><Manufacturer>Micro-Star International Co., Ltd.</Manufacturer><Model>GE70 0NC</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>E1756IMS.10A</Version><SMBIOSVersion major="2" minor="7"/><Date>20120517000000.000000+000</Date></BIOS><HWID>24F93807018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI_NB</OEMID><OEMTableID>MEGABOOK</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>94436407C3F2586</Val><Hash>Nh+O7p+E5Ha5+8Lxn9JfFULj9GM=</Hash><Pid>89388-707-9845457-65089</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800246-02-1033-7601.0000-1292012
    Installation ID: 019165341811936926964960217960424651189192401155973352
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: M8X2Q
    License Status: Notification
    Notification Reason: 0xD0000006.
    Remaining Windows rearm count: 1
    Trusted time: 3/4/2013 11:27:47 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2012 15:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEAAQABAAQAAAABAAAABAABAAEAln1ICgx71oo8PQ63rinOcFhDYKtcmVJhPv5KXpZj

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC MSI_NB MEGABOOK
      FACP MSI_NB MEGABOOK
      HPET MSI_NB MEGABOOK
      MCFG MSI_NB MEGABOOK
      SLIC MSI_NB MEGABOOK
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl

    Thanks

    -Jesse

    Monday, March 4, 2013 7:33 PM
  • That may give us a clue as to what's wrong....

    Please try the following, and then run the SFC /SCANNOW again....

    Open Windows
    Explorer (Computer)

    Navigate to the C:\Windows folder

    Find the System32 sub-folder and right-click on it select Properties

     

    Clear the 'blob'
    from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.

    Click on Apply.

     

    Make sure that the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.

     

    Accept the Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.

     

    Wait for it to finish - it could take a couple of minutes.

    (the 'blob will reappear if you check it - don't worry about it!)

     

    OK out, and exit Windows Explorer.

     

    Reboot twice

     

    then try the SFC again



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 4, 2013 8:25 PM
    Moderator
  • Hi, sorry I have not replied in a long time.

    Here is what I get now:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Jesse>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 9% complete.

    Windows Resource Protection could not perform the requested operation.

    C:\Users\Jesse>

    Thursday, March 28, 2013 9:15 AM
  • Please post your CBS.log file (C:\Windows\logs\CBS\CBS.log) and then try an offline scan....

     

    Reboot the computer, and tap the F8 key until you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one.

     

    Log into your normal account.

    You'll get a set of options - pick the Command Prompt one.

    At the command prompt, type  DIR C:\

    - if we're lucky this will bring up a listing of your normal C: drive contents, including the Program Files folder(s) and the Windows folder.

    If not, try D:\ or E:\ (etc. until you get the right letter)

    then type the following command

     

    sfc /scannow /OFFBOOTDIR=<drive>:\ /OFFWINDIR=<drive>:\Windows

     

    where <drive> is the letter you found above.

    (example - sfc   /scannow    /OFFBOOTDIR=P:\    /OFFWINDIR=P:\Windows)

     

    Wait for the command to complete. (make a note of the response!).

     

    Once it has, type  EXIT and the pick the option to reboot.

     

    Post another MGADiag report   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, March 28, 2013 10:04 AM
    Moderator
  • Here's the CBS Log: 

    https://dl.dropbox.com/u/45233510/CBS.log

    (For some reason when i try to copy paste it here it just freezes and crashes my browser, maybe too many lines).

    I'll be proceeding with the offline scan soon.

    Tuesday, April 2, 2013 5:25 AM
  • When I tried to sfc /scannow, I received an error telling me it couldn't complete the repair.

    Here is the MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-D96PV-T9B9D-M8X2Q
    Windows Product Key Hash: Fq/JsPUI1NdT6veDtiDB8N1RQUs=
    Windows Product ID: 00359-OEM-8992687-00246
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {42B4C0E7-A082-48B8-A44A-E7FF02930900}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-b063_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{42B4C0E7-A082-48B8-A44A-E7FF02930900}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-M8X2Q</PKey><PID>00359-OEM-8992687-00246</PID><PIDType>2</PIDType><SID>S-1-5-21-2200541064-674919060-1287110327</SID><SYSTEM><Manufacturer>Micro-Star International Co., Ltd.</Manufacturer><Model>GE70 0NC</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>E1756IMS.10A</Version><SMBIOSVersion major="2" minor="7"/><Date>20120517000000.000000+000</Date></BIOS><HWID>24553A07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI_NB</OEMID><OEMTableID>MEGABOOK</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>94436407C3F2586</Val><Hash>Nh+O7p+E5Ha5+8Lxn9JfFULj9GM=</Hash><Pid>89388-707-9845457-65089</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800246-02-1033-7601.0000-1292012
    Installation ID: 007941249465872120331164230990137066831986219845608675
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: M8X2Q
    License Status: Notification
    Notification Reason: 0xD0000006.
    Remaining Windows rearm count: 1
    Trusted time: 4/1/2013 10:41:07 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2012 16:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEAAQABAAQAAAABAAAABAABAAEAln1ICgx71oo8PVhDDreuKc5wYKtcmVJhPv5KXpZj

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC MSI_NB MEGABOOK
      FACP MSI_NB MEGABOOK
      HPET MSI_NB MEGABOOK
      MCFG MSI_NB MEGABOOK
      SLIC MSI_NB MEGABOOK
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl

    Tuesday, April 2, 2013 5:43 AM
  • It's not possible to post more than about 60000 characters into a post here - and the CBS.log can be up to 40MB!

    The log you posted at dropbox contained no useful data, so we'll have to look at the archives as well.

    Please copy the entire C:\Windows\Logs\CBS folder to your desktop, then compress it, and upload it to dropbox - I'll be able to grab it and look at the whole thing, then.

    Please also run the following commands in a Command Prompt window, and post the results.

    ICACLS C:\Windows\System32\sppwinob.dll

    ATTRIB C:\Windows\System32\sppwinob.dll

    DIR C:\Windows\sppwinob.dll /S

    The last could take a couple of minutes to complete - please wait for the prompt to return before copying and pasting the results to your reply.

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 9:26 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\System32>ICACLS C:\Windows/System32/sppwinob.dll
    C:\Windows/System32/sppwinob.dll: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files

    C:\Windows\System32>ATTRIB C:\Windows\System32\sppwinob.dll
    File not found - C:\Windows\System32\sppwinob.dll

    C:\Windows\System32>DIR C:\Windows\sppwinob.dll /S
     Volume in drive C is OS_Install
     Volume Serial Number is 7831-50D7

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..-spp-plugin-windows_3
    1bf3856ad364e35_6.1.7601.17514_none_6fe02fb8134de429

    11/20/2010  08:23 PM           418,816 sppwinob.dll
                   1 File(s)        418,816 bytes

         Total Files Listed:
                   1 File(s)        418,816 bytes
                   0 Dir(s)  42,641,489,920 bytes free

    Also here is the dropbox:

    https://dl.dropbox.com/u/45233510/CBS.rar

    Thanks

    Tuesday, April 2, 2013 9:48 AM
  • Found it...

    The SFC failed with the following error

    2013-03-28 02:13:42, Error                 CSI    0000005e (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #963106# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 6d4 ("\Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-b..g-shell-homepremium_31bf3856ad364e35_6.1.7600.16385_none_9c05526173da9e18\shellbrd.dll"), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x1a2cd20, data = {l:0 b:}, byteoffset = 1572864 (0x0000000000180000), key = (null))
    [gle=0xd0000185]
    2013-03-28 02:13:42, Error                 CSI    0000005f@2013/3/28:09:13:42.542 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error c0000185 [Error,Facility=(system),Code=389 (0x0185)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)
    [gle=0x80004005]
    2013-03-28 02:13:46, Error                 CSI    00000060 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #963105# from Windows::Rtl::SystemImplementation::CFile_IRtlFileTearoff::ReadFile(Flags = 3, Buffer = {l:0 ml:65536 b:}, Offset = 1572864 (0x0000000000180000), Disposition = 0)[gle=0xd0000185]
    2013-03-28 02:23:50, Info                  CBS    Reboot mark refs incremented to: 1
    2013-03-28 02:23:50, Info                  CBS    Scavenge: Starts
    2013-03-28 02:23:50, Info                  CSI    00000061@2013/3/28:09:23:50.217 CSI Transaction @0x1d20f80 initialized for deployment engine {d16d444c-56d8-11d5-882d-0080c847b195} with flags 00000002 and client id [10]"TI6.0_0:0/"
    
    

    That coupled with the sppwinob.dll error, and we have some fairly major file corruption.

    Let's see if there's also registry corruption...

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 10:15 AM
    Moderator
  • Here's a zipped file of all the updated CBS files including the CheckSUR

    https://dl.dropbox.com/u/45233510/CBS.rar

    Tuesday, April 2, 2013 11:00 PM
  • Nothing in the CheckSUR log (which is good, in a way!)

    I'll post a fix for the known errors in a few minutes - we'll have to see how well they work before attempting anything 'clever'!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 11:10 PM
    Moderator
  • I've uploaded a file - fqcaa.zip - to my SkyDrive at Noel's SkyDrive

    Please download and save it.

    Right-click on the saved file and select Extract all...

    Change the target to C:\ and click on Extract

    Close all windows (it would be a good idea to print these
    instructions!)

    Now reboot to the Repair Environment - as soon as the machine restarts, start
    tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
    should be the option 'Repair my Computer'

    Pick that

    You'll have to log in with your username and password.

    Pick the option to use a Command Prompt

    At the prompt type

    DIR C:\fqcaa

    hit the enter key - if you get a 'Not
    Found' error try

    DIR D:\fqcaa

    or

    DIR E:\fqcaa

     

    The drive letter in use when you find the folder will
    need to be substituted (for
    <drive>) into the following
    command...

     

    XCOPY <drive>:\fqcaa  <drive>:\windows\winsxs /y /i /s /v /h

     

    (e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

     

    run the command (it should take almost no time)and
    when the prompt returns, type

    EXIT

    and hit the Enter key to exit Command
    Prompt - reboot to Normal Mode Windows.

    Now run SFC /SCANNOW in an
    Elevated Command Prompt

    then reboot and upload the new CBS.log file to your DropBox folder, and post a new link

    Also run a new MGADiag report, and post the result.

     



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 2, 2013 11:18 PM
    Moderator
  • New Results:

    CBS: 

    https://dl.dropbox.com/u/45233510/CBS.log

    SFC:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Jesse>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 15% complete.

    Windows Resource Protection could not perform the requested operation.

    C:\Users\Jesse>

    MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-D96PV-T9B9D-M8X2Q
    Windows Product Key Hash: Fq/JsPUI1NdT6veDtiDB8N1RQUs=
    Windows Product ID: 00359-OEM-8992687-00246
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {42B4C0E7-A082-48B8-A44A-E7FF02930900}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130104-1431
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{42B4C0E7-A082-48B8-A44A-E7FF02930900}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-M8X2Q</PKey><PID>00359-OEM-8992687-00246</PID><PIDType>2</PIDType><SID>S-1-5-21-2200541064-674919060-1287110327</SID><SYSTEM><Manufacturer>Micro-Star International Co., Ltd.</Manufacturer><Model>GE70 0NC</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>E1756IMS.10A</Version><SMBIOSVersion major="2" minor="7"/><Date>20120517000000.000000+000</Date></BIOS><HWID>24553A07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI_NB</OEMID><OEMTableID>MEGABOOK</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>94436407C3F2586</Val><Hash>Nh+O7p+E5Ha5+8Lxn9JfFULj9GM=</Hash><Pid>89388-707-9845457-65089</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800246-02-1033-7601.0000-1292012
    Installation ID: 007941249465872120331164230990137066831986219845608675
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: M8X2Q
    License Status: Licensed
    Remaining Windows rearm count: 1
    Trusted time: 4/2/2013 9:35:14 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2012 16:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEAAQABAAQAAAABAAAABAABAAEAln1ICgx71oo8PVhDDreuKc5wYKtcmVJhPv5KXpZj

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC MSI_NB MEGABOOK
      FACP MSI_NB MEGABOOK
      HPET MSI_NB MEGABOOK
      MCFG MSI_NB MEGABOOK
      SLIC MSI_NB MEGABOOK
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl
      SSDT SataRe SataTabl

    Wednesday, April 3, 2013 4:38 AM
  • That's fixed the immediate problem of activation - but your still have major system problems

    The SFC scan is now failing at.

    2013-04-02 21:25:15, Error                 CSI    0000007f (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #1226602# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile(h = 5b4 ("\Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-diskcopy_31bf3856ad364e35_6.1.7600.16385_none_c3a5f657b0658d75\diskcopy.dll"), evt = 0, apcr = NULL, apcc = NULL, iosb = @0x137cf10, data = {l:0 b:}, byteoffset = 65536 (0x0000000000010000), key = (null))
    [gle=0xd0000185]
    2013-04-02 21:25:15, Error                 CSI    00000080@2013/4/3:04:25:15.065 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2155): Error c0000185 [Error,Facility=(system),Code=389 (0x0185)] originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysReadFile expression: (null)
    [gle=0x80004005]
    2013-04-02 21:25:37, Error                 CSI    00000081 (F) c0000185 [Error,Facility=(system),Code=389 (0x0185)] #1226601# from Windows::Rtl::SystemImplementation::CFile_IRtlFileTearoff::ReadFile(Flags = 3, Buffer = {l:0 ml:65536 b:}, Offset = 65536 (0x0000000000010000), Disposition = 0)[gle=0xd0000185]
    

    I'm uncertain how to proceed - this could be a sign that there are a large number of 'missing' files, or it could be just the one file missing. Normally, and SFC scan will complete, and produce a list of errors encountered, but it seems that some critical files are affected that are preventing this process.

    Fixing this one file at a time could take us till Christmas - and still end up without a fully-functional system.

    Give me a while to do some research - but I would suggest that you start thinking in terms of at least a repair install of the operating system.

    In the meantime, please copy the C:\Windows\System32\winevt\logs\Application.evtx file to your desktop, compress it, and upload it to your SkyDrive or other favoured fileshare site, and post a link. so that I can take a look.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, April 3, 2013 7:18 AM
    Moderator
  • Thank you so much for your help and patience! 

    Here is the compressed Application.evtx file:

    https://dl.dropbox.com/u/45233510/Application.rar

    Wednesday, April 3, 2013 3:30 PM
  • Your disk has a bad sector - and may be in the early stages of failing.

    Back up your data to external media NOW, and make plans for replacing the hard drive.

    From the Event log it appears that you have only run CHKDSK /F rather than /R, before

    Once you have your data backed up, please run CHKDSK C: /R to fully test the drive.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, April 3, 2013 3:40 PM
    Moderator
  • Hi, I was trying to backup my disk and got this error around 60%

    https://dl.dropbox.com/u/45233510/problem.png

    would you happen to have any advice on how to change my settings to successfully backup my computer?

    Thursday, April 4, 2013 5:05 AM
  • That re-inforces my  warning :)

    Personally in this sort of situation, I'd make a data backup using copy/paste, or robocopy (which has logging options, so at least you can see where the backup broke!), rather than using Windows Backup.

    Chances are that any system backup will break - so the data export is the most important thing, as that may be unrecoverable in the event of disk failure.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, April 4, 2013 6:48 AM
    Moderator
  • Hi,

    By data backup using copy/paste, do you mean I simply copy paste the entire drive's contents onto my external harddrive? 

    Thanks

    Friday, April 5, 2013 7:37 PM
  • Effectively, yes - but only the data folders.

    Windows folders are likely to have too may files in use to be backed up in such a way, and will error out frequently.

    You could use the Windows Easy Transfer mechanism to do the job - but some people find this unreliable.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, April 5, 2013 8:02 PM
    Moderator