locked
Windows 7 is suddenly showing as "not genuine" RRS feed

  • Question

  • Hi I built my own computer and it has been running perfect with windows 7 ultimate for 7 months or so.  Suddenly today I turn it on and my windows 7 is showing as no longer genuine.  I am looking at the other threads on the topic and can't seem to get them to work with my situation.  So I thought somebody might be able to help me more specifically.  

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-PPVRB-RR6K3-7TXKP
    Windows Product Key Hash: ICJnBx2/cwxxmsaWcgYd/6c0Q+A=
    Windows Product ID: 00426-437-2485817-85450
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {248822CD-1E1F-463D-9CBC-42F7D1BFD3A0}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Phil\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{248822CD-1E1F-463D-9CBC-42F7D1BFD3A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7TXKP</PKey><PID>00426-437-2485817-85450</PID><PIDType>5</PIDType><SID>S-1-5-21-1913982025-2138464988-2083861702</SID><SYSTEM/><BIOS/><HWID>81793B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46 

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000002000
    Event Time Stamp: 8:30:2012 10:53
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui


    HWID Data-->
    HWID Hash Current: OgAAAAIABAABAAIAAQABAAAAAwABAAEAHKImUXcW4i3aATihYjRK3U5jSIGwedbAmvmTj3avESMucw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ALASKA A M I
      FACP ALASKA A M I
      HPET ALASKA A M I
      MCFG ALASKA A M I
      SSDT AMICPU PROC
      AAFT ALASKA OEMAAFT 


    • Edited by phodge89 Monday, October 8, 2012 4:06 AM misspelled genuine
    Monday, October 8, 2012 2:31 AM

Answers

  • Ive decided to just go with a clean install. Hopefully it wont happen again

    Thank you for all you help

    Friday, October 12, 2012 6:01 PM

All replies

  • You have a tampered file - and it looks as if you may have attempted a repair install?

    First, please uninstall and reinstall the KB971033 update....

    Close all open windows.

    Open an Elevated Command Prompt window, and type the following command

     

    wusa /uninstall /kb:971033

     

    and hit the Enter key

    Accept the warnings/confirmations, and wait for it to complete

     

    copy and paste the output (if any) from the command prompt window to a reply here,

    Reboot

     

    reinstall the update from http://support.microsoft.com/kb/971033

    Reboot

     

    Post a new MGADiag report, and we'll see if it shows anything new.

    run another MGADiag report, and post it.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, October 8, 2012 11:54 AM
    Moderator
  • When I run 

    wusa /uninstall /kb:971033

    in an elevated comand prompt window I am getting an error

    "Windows Update Standalone Installer"

    Installer encounterd an error: 0x800f0900.

    I did try to do a system restore to the oldest one available (i think it was two days ago) and it failed.  

    Monday, October 8, 2012 5:43 PM
  • OK - we need to dig a little deeper, then...

    Open an Elevated
    Command Prompt, and run the following commands

    sc sdshow plugplay
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S

    Copy and paste the results to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, October 8, 2012 6:20 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>wusa/uninstall/kb:971033

    C:\Windows\system32>wusa /uninstall /kb:971033

    C:\Windows\system32>wusa /uninstall /kb:971033

    C:\Windows\system32>wusa /uninstall /kb:971033

    C:\Windows\system32>wusa /uninstall /kb:971033

    C:\Windows\system32>wusa /uninstall /KB:971033

    C:\Windows\system32>sc sdshow plugplay

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
    RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

    C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
    CurrentVersion\ProfileList\S-1-5-18" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-18
        Flags    REG_DWORD    0xc
        State    REG_DWORD    0x0
        RefCount    REG_DWORD    0x1
        Sid    REG_BINARY    010100000000000512000000
        ProfileImagePath    REG_EXPAND_SZ    %systemroot%\system32\config\systemprof
    ile


    C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
    CurrentVersion\ProfileList\S-1-5-19" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-19
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\LocalService

        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
    CurrentVersion\ProfileList\S-1-5-20" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Windows\system32>
    Monday, October 8, 2012 7:38 PM
  • OK _ that eliminates the quick solutions :(

     

    Please run a full CHKDSK and SFC scan....

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

     At the Command prompt, type

     CHKDSK C: /R

     and hit the Enter key.

     

     You will be told that the drive is locked,

     and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     The CHKDSK will take a few hours depending on the size  of the drive, so be patient!

     After the CHKDSK has run, Windows should boot normally  (possibly after a second auto-reboot) -

     

    then run the SFC.

     

     SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     At the Command prompt, type

     SFC /SCANNOW

     and hit the Enter key

     

     Wait for the scan to finish - make a note of any error messages - and then reboot.

     Copy the CBS.log file created to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, October 8, 2012 8:19 PM
    Moderator
  • the Check Disk scan ran with seemingly no errors

    When i run the SFC /SCANNOW 

    I get the error

    Windows Resource Protection could not start the repair service

    Monday, October 8, 2012 8:44 PM
  • This is often caused by the Trusted Installer service not running properly (which would also account for the problems with installing/uninstalling)

    Please run the following commands, and post the results

    NET START TRUSTEDINSTALLER

    sc qc trustedinstaller

    sc queryex trustedinstaller


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, October 8, 2012 9:18 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>SFC /SCANNOW

    Windows Resource Protection could not start the repair service.

    C:\Windows\system32>SFC /SCANNOW

    Windows Resource Protection could not start the repair service.

    C:\Windows\system32>NET START TRUSTEDINSTALLER
    The Windows Modules Installer service is starting.
    The Windows Modules Installer service was started successfully.


    C:\Windows\system32>sc qc trustedinstaller
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: trustedinstaller
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 3   DEMAND_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\servicing\TrustedInstaller.exe
            LOAD_ORDER_GROUP   : ProfSvc_Group
            TAG                : 0
            DISPLAY_NAME       : Windows Modules Installer
            DEPENDENCIES       :
            SERVICE_START_NAME : localSystem

    C:\Windows\system32>sc queryex trustedinstaller

    SERVICE_NAME: trustedinstaller
            TYPE               : 10  WIN32_OWN_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 4104
            FLAGS              :

    C:\Windows\system32>

    Monday, October 8, 2012 9:20 PM
  • Please run the following commands and post the results....

    REG QUERY HKCR\AppID\TrustedInstaller.exe
    REG QUERY HKCR\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
    REG QUERY HKCR\Wow6432Node\AppID\TrustedInstaller.exe
    REG QUERY HKCR\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
    REG QUERY HKLM\SYSTEM\CurrentControlSet\Control
    REG QUERY HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, October 8, 2012 9:37 PM
    Moderator

  • C:\Windows\system32>REG QUERY HKCR\AppID\TrustedInstaller.exe

    HKEY_CLASSES_ROOT\AppID\TrustedInstaller.exe
        AppID    REG_SZ    {752073A2-23F2-4396-85F0-8FDB879ED0ED}


    C:\Windows\system32>REG QUERY HKCR\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}

    HKEY_CLASSES_ROOT\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
        (Default)    REG_SZ    Trusted Installer Service
        AccessPermission    REG_BINARY    010004808400000094000000000000001400000002
    00700005000000000014000700000001010000000000050A00000000001400030000000101000000
    00000512000000000018000300000001020000000000052000000020020000000014000300000001
    01000000000005040000000000140003000000010100000000000506000000010200000000000520
    0000002002000001020000000000052000000020020000
        LaunchPermission    REG_BINARY    01000480700000008C000000000000001400000002
    005C0004000000000014000B000000010100000000000512000000000018000B0000000102000000
    0000052000000020020000000014000B000000010100000000000504000000000014000B00000001
    0100000000000506000000010500000000000515000000A05F841F5E2E6B49CE120303F401000001
    0500000000000515000000A05F841F5E2E6B49CE120303F4010000
        LocalService    REG_SZ    TrustedInstaller


    C:\Windows\system32>REG QUERY HKCR\Wow6432Node\AppID\TrustedInstaller.exe

    HKEY_CLASSES_ROOT\Wow6432Node\AppID\TrustedInstaller.exe
        AppID    REG_SZ    {752073A2-23F2-4396-85F0-8FDB879ED0ED}


    C:\Windows\system32>REG QUERY HKCR\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8F
    DB879ED0ED}

    HKEY_CLASSES_ROOT\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
        (Default)    REG_SZ    Trusted Installer Service
        AccessPermission    REG_BINARY    010004808400000094000000000000001400000002
    00700005000000000014000700000001010000000000050A00000000001400030000000101000000
    00000512000000000018000300000001020000000000052000000020020000000014000300000001
    01000000000005040000000000140003000000010100000000000506000000010200000000000520
    0000002002000001020000000000052000000020020000
        LaunchPermission    REG_BINARY    01000480700000008C000000000000001400000002
    005C0004000000000014000B000000010100000000000512000000000018000B0000000102000000
    0000052000000020020000000014000B000000010100000000000504000000000014000B00000001
    0100000000000506000000010500000000000515000000A05F841F5E2E6B49CE120303F401000001
    0500000000000515000000A05F841F5E2E6B49CE120303F4010000
        LocalService    REG_SZ    TrustedInstaller


    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Control

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
        PreshutdownOrder    REG_MULTI_SZ    wuauserv\0gpsvc\0trustedinstaller
        WaitToKillServiceTimeout    REG_SZ    12000
        CurrentUser    REG_SZ    USERNAME
        BootDriverFlags    REG_DWORD    0x0
        ServiceControlManagerExtension    REG_EXPAND_SZ    %systemroot%\system32\sce
    xt.dll
        SystemStartOptions    REG_SZ     NOEXECUTE=OPTIN
        SystemBootDevice    REG_SZ    multi(0)disk(0)rdisk(1)partition(1)
        FirmwareBootDevice    REG_SZ    multi(0)disk(0)rdisk(0)partition(1)

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ACPI
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\AGP
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\AppID
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Arbiters
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CMF
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CoDeviceInstallers
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\COM Name Arbiter
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceOverrides
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Diagnostics
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Els
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Errata
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystemUtilities
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GroupOrderList
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\HAL
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\IDConfigDB
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LsaExtensionConfig
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LsaInformation
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaCategories
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaDRM
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaInterfaces
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaSets
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaTypes
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MobilePC
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MPDEV
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MSDTC
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetDiagFx
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetTrace
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NodeInterfaces
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PCW
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PnP
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\RtlQueryRegistryConfig
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ScsiPort
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceProvider
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SNMP
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SQMServiceList
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Srp
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SrpExtensionConfig
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Storage
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemResources
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TabletPC
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\usbflags
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\usbstor
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VAN
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\wcncsvc
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Wdf
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WDI
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WinInit
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemInformation
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winresume

    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\TrustedInst
    aller

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TrustedInstaller
        BlockTime    REG_DWORD    0x2a30
        BlockTimeIncrement    REG_DWORD    0x384
        PreshutdownTimeout    REG_DWORD    0x36ee80
        DisplayName    REG_SZ    @%SystemRoot%\servicing\TrustedInstaller.exe,-100
        Group    REG_SZ    ProfSvc_Group
        ImagePath    REG_EXPAND_SZ    %SystemRoot%\servicing\TrustedInstaller.exe
        Description    REG_SZ    @%SystemRoot%\servicing\TrustedInstaller.exe,-101
        ObjectName    REG_SZ    localSystem
        ErrorControl    REG_DWORD    0x1
        Start    REG_DWORD    0x3
        Type    REG_DWORD    0x10
        ServiceSidType    REG_DWORD    0x1
        FailureActions    REG_BINARY    84030000000000000000000003000000140000000100
    0000C0D4010001000000E09304000000000000000000

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TrustedInstaller\Security

    C:\Windows\system32>
    Monday, October 8, 2012 9:41 PM
  • That all looks normal.

    I'm not honestly sure where to go next :(

    Let's have a look at the Event logs....

    Open Event Viewer
    In the left column, expand the Windows logs
    Highlight the Application entry and right-click on it
    Select 'Save All Events as...'

    enter 'Application' in the File name box, and save the file to the Desktop

    Repeat for the System log

    Now close Event Viewer

    On  the desktop, highlight the two new files, and right-click - select 'Sent to..'
    > Compressed file
    Accept the default - this will create the zip file on  the desktop.
    You can then attach the file you your reply.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, October 9, 2012 10:10 PM
    Moderator
  • Thanks for working through this all with me.  hopefully we'll find something

    i cant figure out how to attach it to a reply.

    https://www.dropbox.com/s/3mgxj1d2tddijlm/Application.zip

    this should be a link to the file.

    Wednesday, October 10, 2012 12:47 AM
  • Thes forums  don't allow attachments :(  - and I seem to have forgotten that in my last reply ( I also work a numer of other forums, which do allow attachments - gets confusing sometimes!)

    Open an Elevated
    Command Prompt, and run the following commands

    sc sdshow plugplay
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S

    Copy and paste the results to your reply



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Wednesday, October 10, 2012 8:10 AM
    Moderator
  • Ive decided to just go with a clean install. Hopefully it wont happen again

    Thank you for all you help

    Friday, October 12, 2012 6:01 PM
  • Sorry about the delayed response - ISP problems.

    I would expect a Repair Install to work as well - but certainly a clean install should solve the problem.

    Good Luck


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, October 14, 2012 9:47 AM
    Moderator