Answered by:
Windows 7 is suddenly showing as "not genuine"

Question
-
Hi I built my own computer and it has been running perfect with windows 7 ultimate for 7 months or so. Suddenly today I turn it on and my windows 7 is showing as no longer genuine. I am looking at the other threads on the topic and can't seem to get them to work with my situation. So I thought somebody might be able to help me more specifically.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0x80070005
Windows Product Key: *****-*****-PPVRB-RR6K3-7TXKP
Windows Product Key Hash: ICJnBx2/cwxxmsaWcgYd/6c0Q+A=
Windows Product ID: 00426-437-2485817-85450
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {248822CD-1E1F-463D-9CBC-42F7D1BFD3A0}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Phil\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{248822CD-1E1F-463D-9CBC-42F7D1BFD3A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7TXKP</PKey><PID>00426-437-2485817-85450</PID><PIDType>5</PIDType><SID>S-1-5-21-1913982025-2138464988-2083861702</SID><SYSTEM/><BIOS/><HWID>81793B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
Error: 0x46
Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000002000
Event Time Stamp: 8:30:2012 10:53
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
HWID Data-->
HWID Hash Current: OgAAAAIABAABAAIAAQABAAAAAwABAAEAHKImUXcW4i3aATihYjRK3U5jSIGwedbAmvmTj3avESMucw==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
SSDT AMICPU PROC
AAFT ALASKA OEMAAFT
- Edited by phodge89 Monday, October 8, 2012 4:06 AM misspelled genuine
Monday, October 8, 2012 2:31 AM
Answers
-
Ive decided to just go with a clean install. Hopefully it wont happen again
Thank you for all you help
- Proposed as answer by Noel D PatonModerator Sunday, October 14, 2012 9:45 AM
- Marked as answer by Noel D PatonModerator Sunday, October 21, 2012 8:46 PM
Friday, October 12, 2012 6:01 PM
All replies
-
You have a tampered file - and it looks as if you may have attempted a repair install?
First, please uninstall and reinstall the KB971033 update....
Close all open windows.
Open an Elevated Command Prompt window, and type the following command
wusa /uninstall /kb:971033
and hit the Enter key
Accept the warnings/confirmations, and wait for it to complete
copy and paste the output (if any) from the command prompt window to a reply here,
Reboot
reinstall the update from http://support.microsoft.com/kb/971033
Reboot
Post a new MGADiag report, and we'll see if it shows anything new.
run another MGADiag report, and post it.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, October 8, 2012 11:54 AMModerator -
When I run
wusa /uninstall /kb:971033
in an elevated comand prompt window I am getting an error
"Windows Update Standalone Installer"
Installer encounterd an error: 0x800f0900.
I did try to do a system restore to the oldest one available (i think it was two days ago) and it failed.
Monday, October 8, 2012 5:43 PM -
OK - we need to dig a little deeper, then...
Open an Elevated
Command Prompt, and run the following commandssc sdshow plugplay REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S
Copy and paste the results to your reply
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, October 8, 2012 6:20 PMModerator -
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>wusa/uninstall/kb:971033
C:\Windows\system32>wusa /uninstall /kb:971033
C:\Windows\system32>wusa /uninstall /kb:971033
C:\Windows\system32>wusa /uninstall /kb:971033
C:\Windows\system32>wusa /uninstall /kb:971033
C:\Windows\system32>wusa /uninstall /KB:971033
C:\Windows\system32>sc sdshow plugplay
D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\ProfileList\S-1-5-18" /S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-18
Flags REG_DWORD 0xc
State REG_DWORD 0x0
RefCount REG_DWORD 0x1
Sid REG_BINARY 010100000000000512000000
ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprof
ile
C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\ProfileList\S-1-5-19" /S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-19
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\LocalService
Flags REG_DWORD 0x0
State REG_DWORD 0x0
C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\ProfileList\S-1-5-20" /S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
ProfileImagePath REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkServi
ce
Flags REG_DWORD 0x0
State REG_DWORD 0x0
C:\Windows\system32>Monday, October 8, 2012 7:38 PM -
OK _ that eliminates the quick solutions :(
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Copy the CBS.log file created to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.
Post a new MGADiag report with details of any error messages encountered.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, October 8, 2012 8:19 PMModerator -
the Check Disk scan ran with seemingly no errors
When i run the SFC /SCANNOW
I get the error
Windows Resource Protection could not start the repair service
Monday, October 8, 2012 8:44 PM -
This is often caused by the Trusted Installer service not running properly (which would also account for the problems with installing/uninstalling)
Please run the following commands, and post the results
NET START TRUSTEDINSTALLER
sc qc trustedinstaller
sc queryex trustedinstaller
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, October 8, 2012 9:18 PMModerator -
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>SFC /SCANNOW
Windows Resource Protection could not start the repair service.
C:\Windows\system32>SFC /SCANNOW
Windows Resource Protection could not start the repair service.
C:\Windows\system32>NET START TRUSTEDINSTALLER
The Windows Modules Installer service is starting.
The Windows Modules Installer service was started successfully.
C:\Windows\system32>sc qc trustedinstaller
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: trustedinstaller
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\servicing\TrustedInstaller.exe
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : Windows Modules Installer
DEPENDENCIES :
SERVICE_START_NAME : localSystem
C:\Windows\system32>sc queryex trustedinstaller
SERVICE_NAME: trustedinstaller
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 4104
FLAGS :
C:\Windows\system32>Monday, October 8, 2012 9:20 PM -
Please run the following commands and post the results....
REG QUERY HKCR\AppID\TrustedInstaller.exe REG QUERY HKCR\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED} REG QUERY HKCR\Wow6432Node\AppID\TrustedInstaller.exe REG QUERY HKCR\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED} REG QUERY HKLM\SYSTEM\CurrentControlSet\Control REG QUERY HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, October 8, 2012 9:37 PMModerator -
C:\Windows\system32>REG QUERY HKCR\AppID\TrustedInstaller.exe
HKEY_CLASSES_ROOT\AppID\TrustedInstaller.exe
AppID REG_SZ {752073A2-23F2-4396-85F0-8FDB879ED0ED}
C:\Windows\system32>REG QUERY HKCR\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
HKEY_CLASSES_ROOT\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
(Default) REG_SZ Trusted Installer Service
AccessPermission REG_BINARY 010004808400000094000000000000001400000002
00700005000000000014000700000001010000000000050A00000000001400030000000101000000
00000512000000000018000300000001020000000000052000000020020000000014000300000001
01000000000005040000000000140003000000010100000000000506000000010200000000000520
0000002002000001020000000000052000000020020000
LaunchPermission REG_BINARY 01000480700000008C000000000000001400000002
005C0004000000000014000B000000010100000000000512000000000018000B0000000102000000
0000052000000020020000000014000B000000010100000000000504000000000014000B00000001
0100000000000506000000010500000000000515000000A05F841F5E2E6B49CE120303F401000001
0500000000000515000000A05F841F5E2E6B49CE120303F4010000
LocalService REG_SZ TrustedInstaller
C:\Windows\system32>REG QUERY HKCR\Wow6432Node\AppID\TrustedInstaller.exe
HKEY_CLASSES_ROOT\Wow6432Node\AppID\TrustedInstaller.exe
AppID REG_SZ {752073A2-23F2-4396-85F0-8FDB879ED0ED}
C:\Windows\system32>REG QUERY HKCR\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8F
DB879ED0ED}
HKEY_CLASSES_ROOT\Wow6432Node\AppID\{752073A2-23F2-4396-85F0-8FDB879ED0ED}
(Default) REG_SZ Trusted Installer Service
AccessPermission REG_BINARY 010004808400000094000000000000001400000002
00700005000000000014000700000001010000000000050A00000000001400030000000101000000
00000512000000000018000300000001020000000000052000000020020000000014000300000001
01000000000005040000000000140003000000010100000000000506000000010200000000000520
0000002002000001020000000000052000000020020000
LaunchPermission REG_BINARY 01000480700000008C000000000000001400000002
005C0004000000000014000B000000010100000000000512000000000018000B0000000102000000
0000052000000020020000000014000B000000010100000000000504000000000014000B00000001
0100000000000506000000010500000000000515000000A05F841F5E2E6B49CE120303F401000001
0500000000000515000000A05F841F5E2E6B49CE120303F4010000
LocalService REG_SZ TrustedInstaller
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
PreshutdownOrder REG_MULTI_SZ wuauserv\0gpsvc\0trustedinstaller
WaitToKillServiceTimeout REG_SZ 12000
CurrentUser REG_SZ USERNAME
BootDriverFlags REG_DWORD 0x0
ServiceControlManagerExtension REG_EXPAND_SZ %systemroot%\system32\sce
xt.dll
SystemStartOptions REG_SZ NOEXECUTE=OPTIN
SystemBootDevice REG_SZ multi(0)disk(0)rdisk(1)partition(1)
FirmwareBootDevice REG_SZ multi(0)disk(0)rdisk(0)partition(1)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ACPI
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\AGP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\AppID
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Arbiters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CMF
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CoDeviceInstallers
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\COM Name Arbiter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceOverrides
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Diagnostics
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Els
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Errata
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystemUtilities
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GroupOrderList
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\HAL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\IDConfigDB
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LsaExtensionConfig
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LsaInformation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaCategories
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaDRM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaInterfaces
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaSets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaTypes
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MobilePC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MPDEV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MSDTC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetDiagFx
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetTrace
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NodeInterfaces
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PCW
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PnP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\RtlQueryRegistryConfig
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ScsiPort
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceProvider
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SNMP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SQMServiceList
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Srp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SrpExtensionConfig
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StillImage
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Storage
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemResources
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TabletPC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\usbflags
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\usbstor
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VAN
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\wcncsvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Wdf
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WDI
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WinInit
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winlogon
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemInformation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Winresume
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\TrustedInst
aller
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TrustedInstaller
BlockTime REG_DWORD 0x2a30
BlockTimeIncrement REG_DWORD 0x384
PreshutdownTimeout REG_DWORD 0x36ee80
DisplayName REG_SZ @%SystemRoot%\servicing\TrustedInstaller.exe,-100
Group REG_SZ ProfSvc_Group
ImagePath REG_EXPAND_SZ %SystemRoot%\servicing\TrustedInstaller.exe
Description REG_SZ @%SystemRoot%\servicing\TrustedInstaller.exe,-101
ObjectName REG_SZ localSystem
ErrorControl REG_DWORD 0x1
Start REG_DWORD 0x3
Type REG_DWORD 0x10
ServiceSidType REG_DWORD 0x1
FailureActions REG_BINARY 84030000000000000000000003000000140000000100
0000C0D4010001000000E09304000000000000000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TrustedInstaller\Security
C:\Windows\system32>Monday, October 8, 2012 9:41 PM -
That all looks normal.
I'm not honestly sure where to go next :(
Let's have a look at the Event logs....
Open Event Viewer
In the left column, expand the Windows logs
Highlight the Application entry and right-click on it
Select 'Save All Events as...'
enter 'Application' in the File name box, and save the file to the Desktop
Repeat for the System log
Now close Event Viewer
On the desktop, highlight the two new files, and right-click - select 'Sent to..'
> Compressed file
Accept the default - this will create the zip file on the desktop.
You can then attach the file you your reply.Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Tuesday, October 9, 2012 10:10 PMModerator -
Thanks for working through this all with me. hopefully we'll find something
i cant figure out how to attach it to a reply.
https://www.dropbox.com/s/3mgxj1d2tddijlm/Application.zip
this should be a link to the file.
Wednesday, October 10, 2012 12:47 AM -
Thes forums don't allow attachments :( - and I seem to have forgotten that in my last reply ( I also work a numer of other forums, which do allow attachments - gets confusing sometimes!)
Open an Elevated
Command Prompt, and run the following commandssc sdshow plugplay REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S
Copy and paste the results to your reply
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Wednesday, October 10, 2012 8:12 AM Code box
Wednesday, October 10, 2012 8:10 AMModerator -
Ive decided to just go with a clean install. Hopefully it wont happen again
Thank you for all you help
- Proposed as answer by Noel D PatonModerator Sunday, October 14, 2012 9:45 AM
- Marked as answer by Noel D PatonModerator Sunday, October 21, 2012 8:46 PM
Friday, October 12, 2012 6:01 PM -
Sorry about the delayed response - ISP problems.
I would expect a Repair Install to work as well - but certainly a clean install should solve the problem.
Good Luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, October 14, 2012 9:47 AMModerator