locked
Windows 7 Home Premium Genuine Error RRS feed

  • Question

  • Hi .,

    I have been using Dell laptop from the past 2 years. From Last 2 weeks i am receiving Error popup  saying "You are not using Microsoft Genuine S/W . . .. " resolve now. Recently my Laptop got crashed while doing critical updates then I reset the system to previous restore point and stopped completely the system updates. Now i am facing this problem . below i have pasted the Logs from MGAD tool.

    I ran Chkdsk -- no errors

    I gave sfc /scannow  -- Stuck at 18%

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {F3AA666E-213F-43CB-B798-4917B42205FD}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.120830-0334
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F3AA666E-213F-43CB-B798-4917B42205FD}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-1048543637-3433628577-1839513964</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio 1558</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20110330000000.000000+000</Date></BIOS><HWID>70BB3607018400FC</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-16393-7600.0000-0012013
    Installation ID: 014091864496420071797373744421490851548926125474127443
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 02-01-2013 21:16:41

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 12:29:2012 10:40
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEA6GGKfmgNVPW+c+7Dmoi2/3J/2mBcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      SPCR            PTLTD         $UCRTBL$
      SLIC            DELL          QA09   
      OSFR            DELL          DELL    
      ASF!              CETP            CETP
      SSDT            PmRef        CpuPm

    Thanks in advance.


    • Edited by Bbites Wednesday, January 2, 2013 4:45 PM
    Wednesday, January 2, 2013 4:08 PM

Answers

  • You'd still need a functioning DVD player to reinstall the OS.

    It may not be the HDD that's the problem - merely the filesystem.

    replace the DVD player first, then worry about the rest


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, January 7, 2013 3:13 PM
    Moderator

All replies

  • To confirm that the WGA  problem is what I think it is, please run the following commands in an Elevated Command Prompt window and post the results.

    REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

    REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S              

     

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

    As for your problem running SFC, that's a different story, and you should think about running both CHKDSK and SFC from a Repair Environment boot....

     

    Your best option in that case is to run the CHKDSK and SFC in offline mode from a Recovery Environment boot.

     

    Reboot the computer, and tap the F8 key until you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one.

     

    Log into your normal account.

    You'll get a set of options - pick the Command Prompt one.

    At the command prompt, type  DIR C:\

    - if we're lucky this will bring up a listing of your normal C: drive contents, including the Program Files folder(s) and the Windows folder.

    If not, try D:\ or E:\ (etc. until you get the right letter)

    then type the following command

     

    CHKDSK <drive>: /R

     

    and wait for it to complete - it could take a few hours, depending on the size of the drive.

     

    Once complete, type  

     

    sfc /scannow /OFFBOOTDIR=<drive>:\ /OFFWINDIR=<drive>:\Windows

     

    where <drive> is the letter you found above.

     

    Wait for the command to complete. (make a note of the response!).

     

    Once it has, type  EXIT and the pick the option to reboot.

     

    Post another MGADiag report   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, January 2, 2013 6:16 PM
    Moderator
  • Just did the first part .. Here is the result

    Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE57495
    7-4077-4AD6-8658-327C2C86C5AA} /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658
    -327C2C86C5AA}\1.0
        (Default)    REG_SZ    SPPUI 1.0 Type Library

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658
    -327C2C86C5AA}\1.0\0

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658
    -327C2C86C5AA}\1.0\0\win32
        (Default)    REG_EXPAND_SZ    %SystemRoot%\System32\slui.exe

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658
    -327C2C86C5AA}\1.0\FLAGS
        (Default)    REG_SZ    0


    C:\Windows\system32>
    C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-
    8658-327C2C86C5AA} /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5A
    A}\1.0
        (Default)    REG_SZ    SPPUI 1.0 Type Library

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5A
    A}\1.0\0

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5A
    A}\1.0\0\win32
        (Default)    REG_EXPAND_SZ    %SystemRoot%\System32\slui.exe

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5A
    A}\1.0\FLAGS
        (Default)    REG_SZ    0


    C:\Windows\system32>

    Wednesday, January 2, 2013 6:44 PM
  • That looks (unexpectedly) normal.

    We'll have to wait for the other results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, January 2, 2013 7:11 PM
    Moderator
  • I tried " Reboot the computer, and tap the F8 key until you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one. "

    but i am getting the error " Windows Failed to start . A recent H/W or S/W change might be the cause "  and showed me two options

    -> Launch Start Up Repair (Recommended)

    -> Start windows normally

    selected first one but keeps loading the same screen ..if i select second, taking me to the home screen.

    Wednesday, January 2, 2013 7:43 PM
  • Odd - it seems that the boot-finished bit in the registry isn't being set properly

    It's not a problem I've come across before - what happens if you use a Clean Boot and then try accessing the menu?
    http://support.microsoft.com/kb/929135


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Wednesday, January 2, 2013 8:05 PM
    Moderator
  • With clean boot also its same behaviour . not able to launch "Repair ur computer".
    Wednesday, January 2, 2013 8:26 PM
  • OK - open an Elevated Command Prompt and run the following commands (one at a time)

    DIR C:\Windows /AR /S

    DIR C:\Windows\System32 /AR /S

    Note how many files and directories are quoted in the summary at the end of each, and post that (there could be thousands, so we don't want the list!). The commands could take a minute or two to run, so be patient.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, January 2, 2013 8:46 PM
    Moderator
  • here is the summary

    DIR C:\Windows /AR /S   --
            Total Files Listed:
                 493 File(s)  1,317,007,751 bytes
                 171 Dir(s)  45,640,966,144 bytes free
                
    DIR C:\Windows\System32 /AR /S
            Total Files Listed:
                2 File(s)     20,304,900 bytes
                3 Dir(s)  45,641,490,432 bytes free   

    Thursday, January 3, 2013 3:37 PM
  • There's something odd about the Windows results - ....

    Open Windows
    Explorer (Computer)

    Navigate to the C:\Windows folder

    right-click on it

    select Properties

     

    Clear the 'blob'
    from the 'Read-only (Only applies to files in
    folder)
    ' box by clicking on it until it's plain white.

    Click on Apply.

     

    Make sure that
    the radio button for 'Apply changes to this
    folder, subfolders and files
    ' is set, and click OK.

     

    Accept the
    Administrator prompt. After a couple of seconds, you'll be told there is an
    error - click on the 'Ignore all' button.

     

    Wait for it to
    finish - it could take a couple of minutes.

     

    OK out, and exit Windows Explorer.

     

    Reboot twice, and run another MGADiag report.



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, January 3, 2013 10:01 PM
    Moderator
  • Here is the report

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {F3AA666E-213F-43CB-B798-4917B42205FD}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.120830-0334
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F3AA666E-213F-43CB-B798-4917B42205FD}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-1048543637-3433628577-1839513964</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio 1558</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20110330000000.000000+000</Date></BIOS><HWID>70BB3607018400FC</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-16393-7600.0000-0012013
    Installation ID: 014091864496420071797373744421490851548926125474127443
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 04-01-2013 20:54:02

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 12:29:2012 10:40
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEA6GGKfmgNVPW+c+7Dmoi2/3J/2mBcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      SPCR            PTLTD         $UCRTBL$
      SLIC            DELL          QA09   
      OSFR            DELL          DELL    
      ASF!              CETP            CETP
      SSDT            PmRef        CpuPm

    Friday, January 4, 2013 3:25 PM
  • OK - we'll have to do the file checks the hard way, for the moment....

    Please open an Elevated Command Prompt, and run the following commands.

    DIR C:\Windows\slui.* /S

    ICACLS C:\Windows\system32\Slui.* /T

    ATTRIB C:\Windows\Slui.* /S

    DEL C:\Windows\Prefetch\slui.* /S

    post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, January 4, 2013 5:40 PM
    Moderator
  • Here is the result

    Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\slui.* /S
     Volume in drive C is OS
     Volume Serial Number is 4273-CBC2

     Directory of C:\Windows\System32

    14-07-2009  07:09           349,696 slui.exe
                   1 File(s)        349,696 bytes

     Directory of C:\Windows\System32\en-US

    14-07-2009  07:55            11,264 slui.exe.mui
                   1 File(s)         11,264 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..ty-spp-ux.resources_3
    1bf3856ad364e35_6.1.7600.16385_en-us_54dae2e5153375ce

    14-07-2009  07:55            11,264 slui.exe.mui
                   1 File(s)         11,264 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856
    ad364e35_6.1.7600.16385_none_b7b69062b883381f

    14-07-2009  07:09           349,696 slui.exe
                   1 File(s)        349,696 bytes

         Total Files Listed:
                   4 File(s)        721,920 bytes
                   0 Dir(s)  45,537,128,448 bytes free



    C:\Windows\system32>ICACLS C:\Windows\system32\Slui.* /T
    C:\Windows\system32\slui.exe NT SERVICE\TrustedInstaller:(F)
                                 BUILTIN\Administrators:(RX)
                                 NT AUTHORITY\SYSTEM:(RX)
                                 BUILTIN\Users:(RX)

    C:\Windows\system32\en-US\slui.exe.mui NT SERVICE\TrustedInstaller:(F)
                                           BUILTIN\Administrators:(RX)
                                           NT AUTHORITY\SYSTEM:(RX)
                                           BUILTIN\Users:(RX)

    C:\Windows\system32\LogFiles\WMI\RtBackup\Slui.*: Access is denied.
    Successfully processed 2 files; Failed processing 1 files


    C:\Windows\system32>ATTRIB C:\Windows\Slui.* /S
    A            C:\Windows\System32\en-US\slui.exe.mui
    A            C:\Windows\System32\slui.exe
    A            C:\Windows\winsxs\amd64_microsoft-windows-s..ty-spp-ux.resources_31
    bf3856ad364e35_6.1.7600.16385_en-us_54dae2e5153375ce\slui.exe.mui
    A            C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856a
    d364e35_6.1.7600.16385_none_b7b69062b883381f\slui.exe


    C:\Windows\system32>DEL C:\Windows\Prefetch\slui.* /S
    Could Not Find C:\Windows\Prefetch\slui.*

    C:\Windows\system32>


    Friday, January 4, 2013 5:46 PM
  • To quote MS -

    "Because the failover mechanism relies on the Windows boot manager and Windows boot loader, some failures will render Windows RE inaccessible. In the following scenarios, the user must use bootable Windows RE media to recover the computer.

    • Corrupt disk metadata in the master boot record (MBR), partition table, or boot sector of a Windows RE partition.
    • Missing or corrupt boot manager.
    • Missing or corrupt boot configuration data."

    So the question is - do you have a bootable Win7 DVD?

    If not, I suggest that you download the SP1 Refresh for your language and edition from the links on these pages...

     

    Heidoc -Microsoft DR Download links

     

    The links are for downloads from the Digital River servers run for MS, so are about as safe as you can get :)

     

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk Image Burner, or (better still) your favourite burning application at the slowest speed possible.

     

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image' option from your app - or you'll end up with a useless coaster :)

     

    Then boot with the DVD, and access the Repair options from there - open the Command prompt option, and follow the instructions for the offline scan from there.

    If necessary, you then also have the SP1 disk handy for a repair/upgrade install :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, January 4, 2013 6:53 PM
    Moderator
  • Hi .,

    I have the Windows CD but the problem is my DVD player stopped working :(.

    I ran Dell diagnosis tool .. i got the error 2000-0146 on Hard Drive 0 .. i guess the hard disk gone bad.  but still everything works fine only the problem now getting Windows is not genuine popup.  is there any work around !!!!!


    • Edited by Bbites Saturday, January 5, 2013 8:34 AM
    Saturday, January 5, 2013 8:30 AM
  • How do you know the player is faulty, and not the software driving it?

    If you have any bootable DVD (or CD - but that tests a different laser), test it with that and see.

    Check in your Event Viewer windows application logs - look for Wininit events, and you should find the results of your latest CHKDSK. What does it say?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, January 5, 2013 9:05 AM
    Moderator
  •  when i insert the windows DVD and try to boot it from DVD (from the boot options menu) it directly takes me to the home screen.

    I have used the "MicrosoftFixit.dvd.MATSKB.Run.exe" and "MicrosoftFixit.dvd.RNP.160280798272308285.1.1.Run.exe" to repair the DVD but no use . Its not able to read the data . if i click on "DVD Drive Icon " it ejects the DVD and shows popup " Please insert DVD" ....

    Wininit Events (only one wininit event):

    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          10-09-2012 21:30:46
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      Puru
    Description:
    Fault bucket X64_0xF4_36b1_IMAGE_wininit.exe, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1:
    P2:
    P3:
    P4:
    P5:
    P6:
    P7:
    P8:
    P9:
    P10:

    Attached files:
    C:\WINDOWS\Minidump\091012-16707-01.dmp
    C:\Users\Dell\AppData\Local\Temp\WER-45115-0.sysdata.xml
    C:\Users\Dell\AppData\Local\Temp\WERD94D.tmp.WERInternalMetadata.xml

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_0f762876

    Analysis symbol: X64_0xF4_36b1_IMAGE_wininit.exe
    Rechecking for solution: 0
    Report Id: 091012-16707-01
    Report Status: 0
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-09-10T16:00:46.000000000Z" />
        <EventRecordID>4680</EventRecordID>
        <Channel>Application</Channel>
        <Computer>Puru</Computer>
        <Security />
      </System>
      <EventData>
        <Data>X64_0xF4_36b1_IMAGE_wininit.exe</Data>
        <Data>0</Data>
        <Data>BlueScreen</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
    C:\WINDOWS\Minidump\091012-16707-01.dmp
    C:\Users\Dell\AppData\Local\Temp\WER-45115-0.sysdata.xml
    C:\Users\Dell\AppData\Local\Temp\WERD94D.tmp.WERInternalMetadata.xml</Data>
        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_0f762876</Data>
        <Data>X64_0xF4_36b1_IMAGE_wininit.exe</Data>
        <Data>0</Data>
        <Data>091012-16707-01</Data>
        <Data>0</Data>
      </EventData>
    </Event>

    Here is the CHKDSK logs :

    Log Name:      Application
    Source:        Chkdsk
    Date:          30-12-2012 12:13:53
    Event ID:      26212
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      Puru
    Description:
    Chkdsk was executed in read-only mode on a volume snapshot.  

    Checking file system on C:
    The type of the file system is NTFS.
    Volume label is OS.

    WARNING!  F parameter not specified.
    Running CHKDSK in read-only mode.

    CHKDSK is verifying files (stage 1 of 3)...
      155648 file records processed.                                         

    File verification completed.
      296 large file records processed.                                   

      0 bad file records processed.                                     

      0 EA records processed.                                           

      44 reparse records processed.                                      

    CHKDSK is verifying indexes (stage 2 of 3)...
      212618 index entries processed.                                        

    Index verification completed.
      0 unindexed files scanned.                                        

      0 unindexed files recovered.                                      

    CHKDSK is verifying security descriptors (stage 3 of 3)...
      155648 file SDs/SIDs processed.                                        

    Cleaning up 493 unused index entries from index $SII of file 0x9.
    Cleaning up 493 unused index entries from index $SDH of file 0x9.
    Cleaning up 493 unused security descriptors.
    Security descriptor verification completed.
      28486 data files processed.                                           

    CHKDSK is verifying Usn Journal...
      36912216 USN bytes processed.                                            

    Usn Journal verification completed.
    Windows has checked the file system and found no problems.

      81461247 KB total disk space.
      36516564 KB in 112359 files.
         66180 KB in 28487 indexes.
             0 KB in bad sectors.
        261471 KB in use by the system.
         65536 KB occupied by the log file.
      44617032 KB available on disk.

          4096 bytes in each allocation unit.
      20365311 total allocation units on disk.
      11154258 allocation units available on disk.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Chkdsk" />
        <EventID Qualifiers="0">26212</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-12-30T06:43:53.000000000Z" />
        <EventRecordID>10816</EventRecordID>
        <Channel>Application</Channel>
        <Computer>Puru</Computer>
        <Security />
      </System>
      <EventData>
        <Data>

    Checking file system on C:
    The type of the file system is NTFS.
    Volume label is OS.

    WARNING!  F parameter not specified.
    Running CHKDSK in read-only mode.

    CHKDSK is verifying files (stage 1 of 3)...
      155648 file records processed.                                         

    File verification completed.
      296 large file records processed.                                   

      0 bad file records processed.                                     

      0 EA records processed.                                           

      44 reparse records processed.                                      

    CHKDSK is verifying indexes (stage 2 of 3)...
      212618 index entries processed.                                        

    Index verification completed.
      0 unindexed files scanned.                                        

      0 unindexed files recovered.                                      

    CHKDSK is verifying security descriptors (stage 3 of 3)...
      155648 file SDs/SIDs processed.                                        

    Cleaning up 493 unused index entries from index $SII of file 0x9.
    Cleaning up 493 unused index entries from index $SDH of file 0x9.
    Cleaning up 493 unused security descriptors.
    Security descriptor verification completed.
      28486 data files processed.                                           

    CHKDSK is verifying Usn Journal...
      36912216 USN bytes processed.                                            

    Usn Journal verification completed.
    Windows has checked the file system and found no problems.

      81461247 KB total disk space.
      36516564 KB in 112359 files.
         66180 KB in 28487 indexes.
             0 KB in bad sectors.
        261471 KB in use by the system.
         65536 KB occupied by the log file.
      44617032 KB available on disk.

          4096 bytes in each allocation unit.
      20365311 total allocation units on disk.
      11154258 allocation units available on disk.
    </Data>
        <Binary>006002003926020015DA030000000000440100002C0000000000000000000000</Binary>
      </EventData>
    </Event>

    Saturday, January 5, 2013 9:42 AM
  • That CHKDSK was run in read-only mode - which doesn't change anything, and doesn't see everything.

    Please run a full CHKDSK, and post back with the new Wininit report generated by it.

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated
    Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, January 5, 2013 9:48 AM
    Moderator
  • Hi.,

    CHKDSK C: /R got stuck @16% on stage 4 for more than 16 hours .. So I forcibly stopped it by hitting the power button and I checked for the chkdsk event logs but there are no event logs registered related to chkdsk and wininit messages.

    Sunday, January 6, 2013 7:24 AM
  • Not a good sign :(

     

    Your best option in that case is to run the CHKDSK and SFC in offline mode from a Recovery Environment boot.

     

    Reboot the computer, and tap the F8 key until you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one.

     

    Log into your normal account.

    You'll get a set of options - pick the Command Prompt one.

    At the command prompt, type  DIR C:\

    - if we're lucky this will bring up a listing of your normal C: drive contents, including the Program Files folder(s) and the Windows folder.

    If not, try D:\ or E:\ (etc. until you get the right letter)

    then type the following command

     

    CHKDSK <drive>: /R

     

    and wait for it to complete - it could take a few hours, depending on the size of the drive.

     

    Once complete, type  

     

    sfc /scannow /OFFBOOTDIR=<drive>:\ /OFFWINDIR=<drive>:\Windows

     

    where <drive> is the letter you found above.

     

    Wait for the command to complete. (make a note of the response!).

     

    Once it has, type  EXIT and the pick the option to reboot.

     

    Post another MGADiag report   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, January 6, 2013 9:20 AM
    Moderator
  • I am not able to go into "Repair your computer " mode .  i am getting the error " Windows Failed to start . A recent H/W or S/W change might be the cause "  and showed me two options

    -> Launch Start Up Repair (Recommended)

    -> Start windows normally

    selected first one but keeps loading the same screen ..if i select second, taking me to the home screen.

    Sunday, January 6, 2013 10:53 AM
  • That doesn't bode well.

    I don't think there's  a lot we can do without access to a DVD, as the way around that is to boot from a Windows 7 disk and run the repair options from that.

    Please check that your BIOS boot order is set to boot from the DVD first, and try booting from the DVD.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, January 6, 2013 11:25 AM
    Moderator
  • I guess the only option available is i have to replace the HDD :( . Anyhow Thank you Noel for your patience and timely response :) .

    Monday, January 7, 2013 3:04 PM
  • You'd still need a functioning DVD player to reinstall the OS.

    It may not be the HDD that's the problem - merely the filesystem.

    replace the DVD player first, then worry about the rest


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, January 7, 2013 3:13 PM
    Moderator