Remove From My Forums

Build 6002 not genuine

Question
0

Sign in to vote

I have tried slui etc 3 and 4 but just get sent around in circles. I have tried MGADiag with the following result
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
Windows Product ID: 89578-OEM-7359803-46732
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.101014-0432
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6002.16398

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: 100
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office FrontPage 2003 - 100 Genuine
Microsoft Office Small Business Edition 2003 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401 </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM

What should i do now?

Wednesday, November 28, 2012 5:36 AM

Answers

0

Sign in to vote
There have been a few such cases lately, but we're not having much success pinning down the cause of the problem :(

Essentially, the problem is that the licensing system isn't able to properly evaulate the license because of file corruption.

Have you had a virus problem recently?

Please start with this...

Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.

You will be told that the drive is locked,

and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

then run the SFC.

SFC -System File Checker - Instructions

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

Post a new MGADiag report with details of any error messages encountered.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Tuesday, March 19, 2013 11:09 AM
- Marked as answer by Noel D PatonModerator Tuesday, March 26, 2013 10:04 AM
Wednesday, November 28, 2012 9:11 AM

Moderator

All replies

0

Sign in to vote
There have been a few such cases lately, but we're not having much success pinning down the cause of the problem :(

Essentially, the problem is that the licensing system isn't able to properly evaulate the license because of file corruption.

Have you had a virus problem recently?

Please start with this...

Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.

You will be told that the drive is locked,

and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

then run the SFC.

SFC -System File Checker - Instructions

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

Post a new MGADiag report with details of any error messages encountered.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Tuesday, March 19, 2013 11:09 AM
- Marked as answer by Noel D PatonModerator Tuesday, March 26, 2013 10:04 AM
Wednesday, November 28, 2012 9:11 AM

Moderator
0

Sign in to vote
Thanks for your prompt response.

I have not had a virus problem with this machine - it has always had a virus checker.

The problem arose on installing Service Pack 3. Everytime it now starts it runs through the stage 3 of installation on the initial blue screen before windows boots giving me the black screen and the message about the copy not being genuine - although it is.

I tried the above routine and saw the Chkdsk command briefly on the screen in large text but then Windows took over after a few seconds and continued with the installation of stage 3. Chkdsk to my understanding did not continue to run. I checked taskmanager and have no sign of Chkdsk.

Will try SFC now
- Marked as answer by Vic Westleigh Thursday, November 29, 2012 3:40 AM
- Unmarked as answer by Noel D PatonModerator Thursday, November 29, 2012 7:03 AM
Thursday, November 29, 2012 3:24 AM
0

Sign in to vote

For Chkdsk Results

Click Start - Control Panel (and select Classic view in the left hand pane) choose Administrative Tools then Event Viewer then look at both the Application and System logs (under Windows Logs) for entries.

Look for EventID is 7 and Source is Disk
Look for EventID is 52 and Source is Disk
Look for EventID is 55 and Source is NTFS
Look for EventID is 1001 and Source is Autochk
Look for EventID is 1001 and Source is Winlogon

Look for EventID is 1001 and Source is WinInit

Look for EventID is 1001 and Source is Chkdsk
Look for EventID is 26212 and Source is Chkdsk

Double click the entry for details on that entry.

P.S. 7 and 55 are the auto repair codes where windows repairs disk errors silently on the fly. 52 is the SMART warning.

--
.
--

"Vic Westleigh" wrote in message news:0494b073-f44b-4dd6-9b46-16ecd5845208...

Thanks for your prompt response.

I have not had a virus problem with this machine - it has always had a virus checker.

The problem arose on installing Service Pack 3. Everytime it now starts it runs through the stage 3 of installation on the initial blue screen before windows boots giving me the black screen and the message about the copy not being genuine - although it is.

I tried the above routine and saw the Chkdsk command briefly on the screen in large text but then Windows took over after a few seconds and continued with the installation of stage 3. Chkdsk to my understanding did not continue to run. I checked taskmanager and have no sign of Chkdsk.

Will try SFC now

Thursday, November 29, 2012 3:34 AM
0

Sign in to vote
The CBS.log zipped file is now on my skydrive. <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21107&authkey=AMbRmNwUTl0lCFg" width="98" height="120" frameborder="0" scrolling="no"></iframe>

It gave an error message "Windows Resource Protection could not start the repair service."

MGADiag report coming next.
- Marked as answer by Vic Westleigh Thursday, November 29, 2012 3:41 AM
- Unmarked as answer by Noel D PatonModerator Thursday, November 29, 2012 7:03 AM
Thursday, November 29, 2012 3:36 AM
0

Sign in to vote
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
Windows Product ID: 89578-OEM-7359803-46732
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.101014-0432
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6002.16398

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: 100
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office FrontPage 2003 - 100 Genuine
Microsoft Office Small Business Edition 2003 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401 </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM
- Marked as answer by Vic Westleigh Thursday, November 29, 2012 3:41 AM
- Unmarked as answer by Noel D PatonModerator Thursday, November 29, 2012 7:03 AM
Thursday, November 29, 2012 3:37 AM
0

Sign in to vote

No sign of any Chkdsk results.

Thursday, November 29, 2012 3:58 AM
0

Sign in to vote

Run Chkdsk

In Computer right click your drives and choose Properties, then Tools tab,
then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
take overnight.

--
.
--

"Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
No sign of any Chkdsk results.

Thursday, November 29, 2012 4:13 AM
0

Sign in to vote

I've untagged your responses as 'Answers' - the tag is intended to be for the post(s) which actually solves your problem, rather than anything else.

There are no signs of the SFC scan having run, in your CBS.log file.

Perhaps another tool would help....

Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821

(you'll need to look in the details for Method 2)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and upload it to your public SkyDrive so I can take a look - post a link in your reply.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Thursday, November 29, 2012 7:10 AM

Moderator

To check only the correct event logs.

Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul

Start "" "%userprofile%\desktop\DiskEvents.html"

--
.
--

"DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...

Run Chkdsk

In Computer right click your drives and choose Properties, then Tools tab,
then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
take overnight.

--

--

"Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
No sign of any Chkdsk results.

Thursday, November 29, 2012 8:47 AM

Left one out.

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32 _NTLogEvent where EventIDentifier=130 and sourcename='NTFS') get /format:HForm >nul

Start "" "%userprofile%\desktop\DiskEvents.html"

--
.
--

"DavidMCandy" wrote in message news:529c3810-4ea0-4159-b8d5-953c63eaa179...

To check only the correct event logs.

Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.
wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul

Start "" "%userprofile%\desktop\DiskEvents.html"
--

--

"DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...

Run Chkdsk

In Computer right click your drives and choose Properties, then Tools tab,
then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
take overnight.

--

--

"Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
No sign of any Chkdsk results.

Thursday, November 29, 2012 8:58 AM

Here's a full command list to paste.

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=130 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=131 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=132 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=133 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul

Start "" "%userprofile%\desktop\DiskEvents.html"

--
.
--

"DavidMCandy" wrote in message news:529c3810-4ea0-4159-b8d5-953c63eaa179...

To check only the correct event logs.

Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.
wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul

wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul

Start "" "%userprofile%\desktop\DiskEvents.html"
--

--

"DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...

Run Chkdsk

In Computer right click your drives and choose Properties, then Tools tab,
then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
take overnight.

--

--

"Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
No sign of any Chkdsk results.

Thursday, November 29, 2012 9:03 AM

0

Sign in to vote

Here is the link to the CheckSUR.log file

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21109&authkey=ALNnENFosU0_rEc" width="98" height="120" frameborder="0" scrolling="no"></iframe>

and here is the link to the other file

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21108&authkey=AGTJrZ_XHTqvOU8" width="98" height="120" frameborder="0" scrolling="no"></iframe>

Saturday, December 1, 2012 4:34 AM
0

Sign in to vote

CheckSUR gives the system a clean bill of health, as far as it can (it only attempts to check a defined area - mostly related to Windows Update, but incidentally covering other areas as well.)

Perhaps if we look directly at the Event Logs, it'll help?

Please open Event Viewer

In the left pane, navigate to Windows Logs\Application

right-click on the entry there, and select Save all events as... and save as Appevents.evtx
navigate to Windows Logs\System
right-click on the entry there, and select Save all events as... and save as Sysevents.evtx

Zip and upload both files to your Public folder on SkyDrive, and post a link.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Saturday, December 1, 2012 8:16 AM

Moderator
0

Sign in to vote

Here are the links to the files

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21110&authkey=AEjLbS0me4JCjKE" width="98" height="120" frameborder="0" scrolling="no"></iframe>

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21111&authkey=AAOYQgf9-M418Bo" width="98" height="120" frameborder="0" scrolling="no"></iframe>

thanks for trying.

Tuesday, December 4, 2012 12:27 AM
0

Sign in to vote

Your logs show that the Windows Modules Installer services are being blocked from starting.

This is outside my competence, so I've asked for someone else to have a look and see if they can recommend something for you.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Tuesday, December 4, 2012 9:20 AM

Moderator
0

Sign in to vote

Try this tool that I've just come across.....

Please download http://kb.eset-la.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe and save it to your desktop.

Double-click ServicesRepair.exe

If security notifications appear, click

Continue or Run and then click Yes when asked if you want to proceed.

Once the tool has finished, you will be prompted to restart your computer.

Click Yes to restart.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Saturday, December 8, 2012 8:21 PM

Moderator
0

Sign in to vote

Any progress, Vic?

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Wednesday, December 12, 2012 6:40 PM

Moderator
0

Sign in to vote

Hi Noel,

Ran the ServicesRepair.exe program but no apparent change in the situation. Still the black screen with the message "Build 6002 This copy of Windows is not genuine".

Sunday, December 16, 2012 12:36 AM
0

Sign in to vote

Please post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Sunday, December 16, 2012 7:54 PM

Moderator
0

Sign in to vote

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Invalid License
Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
Windows Product ID: 89578-OEM-7359803-46732
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.101014-0432
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6002.16398

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: 100
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office FrontPage 2003 - 100 Genuine
Microsoft Office Small Business Edition 2003 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401 </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM

Monday, December 17, 2012 4:09 AM
0

Sign in to vote

Please open Event Viewer

Navigate in the left pane to the Windows Logs

right-click on teh Application entry, and select Save all events as - save as Apps.evtx

repeat for teh System log - save as Sys.evtx

Upload both files to your public Skydrive,and post a link.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Tuesday, December 18, 2012 10:08 AM

Moderator
0

Sign in to vote

Here they are

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21112&authkey=AN4d14eVqYJO8VA" width="98" height="120" frameborder="0" scrolling="no"></iframe>

<iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21113&authkey=ABYHd_p8OvzAxa8" width="98" height="120" frameborder="0" scrolling="no"></iframe>

Vic

Thursday, December 20, 2012 11:04 PM
0

Sign in to vote

Your problem is that the TrustedInstaller service is crashing regularly - but I haven't been able to find out why as yet.

It does look as if perhaps there are driver problems - fdPHost and netman are throwing errors in DCOM - but I have no honest idea how to cure that :(

I'll ask someone else to have a look and see if they can come up with some suggestions.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Friday, December 21, 2012 10:33 AM

Moderator
0

Sign in to vote

Check the SMART values for the hard drive using
SpeedFan (click on the "online analysis" button located on the
"S.M.A.R.T." tab, and post the results to sky drive).

SpeedFan:
Monitors internal temperatures and has an online drive health analysis feature (SMART tab) for hard drives.
It will display your drives model number and compares your drive with other drives of the same make and model.
http://www.almico.com/speedfan.php

===================================================

HD Tune:
Provides drive info and has an option (error scan tab ) to test your drive.
http://www.hdtune.com/

Also install the free version of HD Tune, click on the "Error Scan" tab and run a
"Full" (not a Quick) scan, this may take a while depending on the
speed and size of your drive.

J W Stuart: http://www.pagestart.com

Never be afraid to ask. This forum has some of the best people in the world available to help.

Saturday, December 22, 2012 8:16 PM
0

Sign in to vote

(Thanks, Jim!)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Saturday, December 22, 2012 8:20 PM

Moderator
0

Sign in to vote

Vic?

Any progress??

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

Wednesday, January 9, 2013 11:04 AM

Moderator
0

Sign in to vote

Had no luck so far. The Error scan gave no errors.

Is it time for me to go to the darkside and buy a Mac?

Thursday, January 10, 2013 1:34 AM
0

Sign in to vote

Did you run SFC scannow

Click on Start/All programs/Accessories then
Right click on Command Prompt option and select 'Run as administrator'.
(or "Safe Mode" open a Command prompt)
At the command prompt enter: SFC /SCANNOW

Windows 7 - SFC SCANNOW Command - System File Checker
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7
http://support.microsoft.com/kb/929833

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program generates in Windows Vista:
http://support.microsoft.com/kb/928228

J W Stuart: http://www.pagestart.com
Never be afraid to ask. This forum has some of the best people in the world available to help.

Thursday, January 10, 2013 2:40 AM
0

Sign in to vote

Got the message "Windows Resource Protection could not start the repair service."

Friday, January 11, 2013 1:49 AM
0

Sign in to vote

See the following article: http://www.winhelponline.com/blog/fix-for-error-windows-resource-protection-could-not-start-the-repair-service-when-running-sfc-in-vista/

J W Stuart: http://www.pagestart.com

Never be afraid to ask. This forum has some of the best people in the world available to help.

Friday, January 11, 2013 3:18 PM
0

Sign in to vote
...and if Jim's link doesn't fix the problem, please open an Elevated Command Prompt, and run the following commands...

SC QC TRUSTEDINSTALLER SC QUERYEX TRUSTEDINSTALLER NET START TRUSTEDINSTALLER SC QUERYEX EVENTLOG SC QUERYEX EVENTSYSTEM

post the results.....

(just a reminder)

Here are some instructions to make life easier :)

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.
Friday, January 11, 2013 3:42 PM

Moderator
0

Sign in to vote

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Deeble>SC QC TRUSTEDINSTALLER
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: TRUSTEDINSTALLER
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\servicing\TrustedInstaller.exe
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : Windows Modules Installer
DEPENDENCIES :
SERVICE_START_NAME : localSystem

C:\Users\Deeble>SC QUERYEX TRUSTEDINSTALLER

SERVICE_NAME: TRUSTEDINSTALLER
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1067 (0x42b)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\Deeble>NET START TRUSTEDINSTALLER
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

C:\Users\Deeble>SC QUERYEX EVENTLOG

SERVICE_NAME: EVENTLOG
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 1152
FLAGS :

C:\Users\Deeble>SC QUERYEX EVENTSYSTEM

SERVICE_NAME: EVENTSYSTEM
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 1700
FLAGS :

C:\Users\Deeble>

Wednesday, January 16, 2013 3:55 AM
0

Sign in to vote

I followed the instructions and then:-
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Deeble>SFC /SCANNOW

Windows Resource Protection could not start the repair service.

C:\Users\Deeble>

Wednesday, January 16, 2013 3:59 AM
0

Sign in to vote
Those look normal - please open an Elevated Command Prompt, and run the following command

VSSADMIN LIST WRITERS

wait until the prompt returns, and check the output - do you get anything other than 'Stable/no error' responses?

How many responses do you get?

(no need to post the results, unless you get any with errors)

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.
- Edited by Noel D PatonModerator Wednesday, January 16, 2013 10:47 AM include 'stable'
Wednesday, January 16, 2013 10:46 AM

Moderator
0

Sign in to vote

I got 8 responses

No errors.

Vic

Sunday, January 27, 2013 1:42 AM
0

Sign in to vote

Something's possibly wrong there - I get 12 responses.

Please run the command again, and this time copy the results to your reply.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Sunday, January 27, 2013 2:06 AM

Moderator
0

Sign in to vote

Any progress on this, Vic??

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Wednesday, February 27, 2013 9:48 AM

Moderator

Answered by:

Build 6002 not genuine

Question

Answers

All replies