none
Build 6002 not genuine

    Question

  • I have tried slui etc 3 and 4 but just get sent around in circles. I have tried MGADiag with the following result 

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
    Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
    Windows Product ID: 89578-OEM-7359803-46732
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: 100
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office FrontPage 2003 - 100 Genuine
    Microsoft Office Small Business Edition 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC A_M_I_ OEMAPIC 
      FACP A_M_I_ OEMFACP 
      HPET A_M_I_ OEMHPET 
      MCFG A_M_I_ OEMMCFG 
      OEMB A_M_I_ AMI_OEM 

    What should i do now?

    Wednesday, November 28, 2012 5:36 AM

Answers

  • There have been a few such cases lately, but we're not having much success pinning down the cause of the problem :(

    Essentially, the problem is that the licensing system isn't able to properly evaulate the license because of file corruption.

    Have you had a virus problem recently?

    Please start with this...

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, November 28, 2012 9:11 AM
    Moderator

All replies

  • There have been a few such cases lately, but we're not having much success pinning down the cause of the problem :(

    Essentially, the problem is that the licensing system isn't able to properly evaulate the license because of file corruption.

    Have you had a virus problem recently?

    Please start with this...

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, November 28, 2012 9:11 AM
    Moderator
  • Thanks for your prompt response.

    I have not had a virus problem with this machine - it has always had a virus checker.

    The problem arose on installing Service Pack 3. Everytime it now starts it runs through the stage 3 of installation on the initial blue screen before windows boots giving me the black screen and the message about the copy not being genuine - although it is.

    I tried the above routine and saw the Chkdsk command briefly on the screen in large text but then Windows took over after a few seconds and continued with the installation of stage 3. Chkdsk to my understanding did not continue to run. I checked taskmanager and have no sign of Chkdsk.

    Will try SFC now

    Thursday, November 29, 2012 3:24 AM
  • For Chkdsk Results
    Click Start - Control Panel (and select Classic view in the left hand pane) choose Administrative Tools then Event Viewer then look at both the Application and System logs (under Windows Logs) for entries.
     
    Look for EventID is 7 and Source is Disk
    Look for EventID is 52 and Source is Disk
    Look for EventID is 55 and Source is NTFS
    Look for EventID is 1001 and Source is Autochk
    Look for EventID is 1001 and Source is Winlogon
    Look for EventID is 1001 and Source is WinInit
    Look for EventID is 1001 and Source is Chkdsk
    Look for EventID is 26212 and Source is Chkdsk
     
    Double click the entry for details on that entry.
     
    P.S. 7 and 55 are the auto repair codes where windows repairs disk errors silently on the fly. 52 is the SMART warning.

    --
    .
    --
    "Vic Westleigh" wrote in message news:0494b073-f44b-4dd6-9b46-16ecd5845208...

    Thanks for your prompt response.

    I have not had a virus problem with this machine - it has always had a virus checker.

    The problem arose on installing Service Pack 3. Everytime it now starts it runs through the stage 3 of installation on the initial blue screen before windows boots giving me the black screen and the message about the copy not being genuine - although it is.

    I tried the above routine and saw the Chkdsk command briefly on the screen in large text but then Windows took over after a few seconds and continued with the installation of stage 3. Chkdsk to my understanding did not continue to run. I checked taskmanager and have no sign of Chkdsk.

    Will try SFC now

    Thursday, November 29, 2012 3:34 AM
  • The CBS.log zipped file is now on my skydrive. <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21107&authkey=AMbRmNwUTl0lCFg" width="98" height="120" frameborder="0" scrolling="no"></iframe> 

    It gave an error message "Windows Resource Protection could not start the repair service."

    MGADiag report coming next.

    Thursday, November 29, 2012 3:36 AM
  • MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
    Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
    Windows Product ID: 89578-OEM-7359803-46732
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: 100
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office FrontPage 2003 - 100 Genuine
    Microsoft Office Small Business Edition 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC A_M_I_ OEMAPIC 
      FACP A_M_I_ OEMFACP 
      HPET A_M_I_ OEMHPET 
      MCFG A_M_I_ OEMMCFG 
      OEMB A_M_I_ AMI_OEM 

    Thursday, November 29, 2012 3:37 AM
  • No sign of any Chkdsk results.
    Thursday, November 29, 2012 3:58 AM
  • Run Chkdsk
    In Computer right click your drives and choose Properties, then Tools tab,
    then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
    take overnight.

    --
    .
    --
    "Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
    No sign of any Chkdsk results.
    Thursday, November 29, 2012 4:13 AM
  • I've untagged your responses as 'Answers' - the tag is intended to be for the post(s) which actually solves your problem, rather than anything else.

    There are no signs of the SFC scan having run, in your CBS.log file.

    Perhaps another tool would help....

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Method 2)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your public SkyDrive so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, November 29, 2012 7:10 AM
    Moderator
  • To check only the correct event logs.
     
    Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul
    
    Start "" "%userprofile%\desktop\DiskEvents.html"
     

    --
    .
    --
    "DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...
    Run Chkdsk
    In Computer right click your drives and choose Properties, then Tools tab,
    then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
    take overnight.

    --

    --
    "Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
    No sign of any Chkdsk results.
    Thursday, November 29, 2012 8:47 AM
  • Left one out.

    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32 _NTLogEvent where EventIDentifier=130 and sourcename='NTFS') get /format:HForm >nul
    Start "" "%userprofile%\desktop\DiskEvents.html"

    --
    .
    --
    "DavidMCandy" wrote in message news:529c3810-4ea0-4159-b8d5-953c63eaa179...
    To check only the correct event logs.
     
    Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul
    
    Start "" "%userprofile%\desktop\DiskEvents.html"
     

    --

    --
    "DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...
    Run Chkdsk
    In Computer right click your drives and choose Properties, then Tools tab,
    then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
    take overnight.

    --

    --
    "Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
    No sign of any Chkdsk results.
    Thursday, November 29, 2012 8:58 AM
  • Here's a full command list to paste.

    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=130 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=131 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=132 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=133 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul
    
    Start "" "%userprofile%\desktop\DiskEvents.html"

    --
    .
    --
    "DavidMCandy" wrote in message news:529c3810-4ea0-4159-b8d5-953c63eaa179...
    To check only the correct event logs.
     
    Click Start - All Programs - Accessories - Right click Command Prompt and choose Run As Administrator. Copy the following lines then right click in the Command Prompt window and choose Paste. You may need to press Enter after the last line.
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=7 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=52 and sourcename='Disk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=55 and sourcename='NTFS') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='AutoChk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinLogon') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='WinInit') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=1001 and sourcename='ChkDsk') get /format:HForm >nul
    
    wmic /append:"%userprofile%\desktop\DiskEvents.html" PATH Win32_NTLogEvent where  (EventIDentifier=26212 and sourcename='ChkDsk') get /format:HForm >nul
    
    Start "" "%userprofile%\desktop\DiskEvents.html"
     

    --

    --
    "DavidMCandy" wrote in message news:a450c128-d7eb-4a1e-a6e1-65ad0fca7a02...
    Run Chkdsk
    In Computer right click your drives and choose Properties, then Tools tab,
    then click Check Now. Tick BOTH checkboxes then Start. Reboot. This will
    take overnight.

    --

    --
    "Vic Westleigh" wrote in message news:d8d2e28f-650a-4b21-b305-449b06086a56...
    No sign of any Chkdsk results.
    Thursday, November 29, 2012 9:03 AM
  • Here is the link to the CheckSUR.log file

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21109&authkey=ALNnENFosU0_rEc" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    and here is the link to the other file

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21108&authkey=AGTJrZ_XHTqvOU8" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    Saturday, December 1, 2012 4:34 AM
  • CheckSUR gives the system a clean bill of health, as far as it can (it only attempts to check a defined area - mostly related to Windows Update, but incidentally covering other areas as well.)

    Perhaps if we look directly at the Event Logs, it'll help?

    Please open Event Viewer

    In the left pane, navigate to  Windows Logs\Application

    right-click on the entry there, and select Save all events as...  and save as Appevents.evtx

    navigate to  Windows Logs\System

    right-click on the entry there, and select Save all events as...  and save as Sysevents.evtx

    Zip and upload both files to your Public folder on SkyDrive, and post a link. 


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, December 1, 2012 8:16 AM
    Moderator
  • Here are the links to the files

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21110&authkey=AEjLbS0me4JCjKE" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21111&authkey=AAOYQgf9-M418Bo" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    thanks for trying.

    Tuesday, December 4, 2012 12:27 AM
  • Your logs show that the Windows Modules Installer services are being blocked from starting.

    This is outside my competence, so I've asked for someone else to have a look and see if they can recommend something for you.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, December 4, 2012 9:20 AM
    Moderator
  • Try this tool that I've just come across.....

     

    Please download http://kb.eset-la.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe and save it to your desktop.

    Double-click ServicesRepair.exe

    If security notifications appear, click

    Continue or Run and then click Yes when asked if you want to proceed.

    Once the tool has finished, you will be prompted to restart your computer.

    Click Yes to restart.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, December 8, 2012 8:21 PM
    Moderator
  • Any progress, Vic?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, December 12, 2012 6:40 PM
    Moderator
  • Hi Noel,

    Ran the ServicesRepair.exe program but no apparent change in the situation. Still the black screen with the message  "Build 6002 This copy of Windows is not genuine".

    Sunday, December 16, 2012 12:36 AM
  • Please post a new MGADiag report.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, December 16, 2012 7:54 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7RG3J-V9HVQ-QTGQ2
    Windows Product Key Hash: S6G85cT55pM5PQvH8WKM1QfVQ6g=
    Windows Product ID: 89578-OEM-7359803-46732
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {599E9146-AF78-48E5-9368-CC4B8D73F2BB}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: 100
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office FrontPage 2003 - 100 Genuine
    Microsoft Office Small Business Edition 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Deeble\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{599E9146-AF78-48E5-9368-CC4B8D73F2BB}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-QTGQ2</PKey><PID>89578-OEM-7359803-46732</PID><PIDType>3</PIDType><SID>S-1-5-21-1887840542-50215006-557013126</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0401   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080515000000.000000+000</Date></BIOS><HWID>C6313507018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Eastern Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>89AAB1FC5BE95E2</Val><Hash>dUcrzehSHeNEq0Gr2jEbSsyLE+c=</Hash><Pid>72079-753-2613574-55413</Pid><PidType>1</PidType></Product><Product GUID="{91CA0409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business Edition 2003</Name><Ver>11</Ver><Val>66E85201861AF6E</Val><Hash>RuElO3YcZE3gdClCzpE698gl3Ow=</Hash><Pid>70160-OEM-5695145-03496</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="17" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAQABAAAAAgABAAEAJJQQXZrYmJNa/6p2SOSEjsCS8vRe8fjerFYqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC A_M_I_ OEMAPIC 
      FACP A_M_I_ OEMFACP 
      HPET A_M_I_ OEMHPET 
      MCFG A_M_I_ OEMMCFG 
      OEMB A_M_I_ AMI_OEM 

    Monday, December 17, 2012 4:09 AM
  • Please open Event Viewer

    Navigate in the left pane to the Windows Logs

    right-click on teh Application entry, and select Save all events as - save as Apps.evtx

    repeat for teh  System log - save as Sys.evtx

    Upload both files to your public Skydrive,and post a link.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, December 18, 2012 10:08 AM
    Moderator
  • Here they are

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21112&authkey=AN4d14eVqYJO8VA" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    <iframe src="https://skydrive.live.com/embed?cid=719D65C8052D88E6&resid=719D65C8052D88E6%21113&authkey=ABYHd_p8OvzAxa8" width="98" height="120" frameborder="0" scrolling="no"></iframe>

    Vic

    Thursday, December 20, 2012 11:04 PM
  • Your problem is that the TrustedInstaller service is crashing regularly - but I haven't been able to find out why as yet.

    It does look as if perhaps there are driver problems - fdPHost and netman are throwing errors in DCOM - but I have no honest idea how to cure that :(

    I'll ask someone else to have a look and see if they can come up with some suggestions.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, December 21, 2012 10:33 AM
    Moderator
  • Check the SMART values for the hard drive using
    SpeedFan (click on the "online analysis" button located on the
    "S.M.A.R.T." tab, and post the results to sky drive).

    SpeedFan:
    Monitors internal temperatures and has an online drive health analysis feature (SMART tab) for hard drives.
    It will display your drives model number and compares your drive with other drives of the same make and model.
    http://www.almico.com/speedfan.php

    ===================================================

    HD Tune:
    Provides drive info and has an option (error scan tab ) to test your drive.
    http://www.hdtune.com/

    Also install the free version of HD Tune, click on the "Error Scan" tab and run a
    "Full" (not a Quick) scan, this may take a while depending on the
    speed and size of your drive.

    J W Stuart: http://www.pagestart.com


    Never be afraid to ask. This forum has some of the best people in the world available to help.

    Saturday, December 22, 2012 8:16 PM
  • (Thanks, Jim!)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, December 22, 2012 8:20 PM
    Moderator
  • Vic?

    Any progress??


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, January 9, 2013 11:04 AM
    Moderator
  • Had no luck so far. The Error scan gave no errors.

    Is it time for me to go to the darkside and buy a Mac?

    Thursday, January 10, 2013 1:34 AM
  • Did you run SFC scannow

    Click on Start/All programs/Accessories  then
    Right click on Command Prompt option and select 'Run as administrator'.
    (or "Safe Mode" open a Command prompt)
    At the command prompt enter:  SFC  /SCANNOW

    Windows 7 - SFC SCANNOW Command - System File Checker
    http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

    How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7
    http://support.microsoft.com/kb/929833

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program generates in Windows Vista:
    http://support.microsoft.com/kb/928228

     

    J W Stuart: http://www.pagestart.com


    Never be afraid to ask. This forum has some of the best people in the world available to help.

    Thursday, January 10, 2013 2:40 AM
  • Got the message "Windows Resource Protection could not start the repair service."
    Friday, January 11, 2013 1:49 AM
  • See the following article: http://www.winhelponline.com/blog/fix-for-error-windows-resource-protection-could-not-start-the-repair-service-when-running-sfc-in-vista/

    J W Stuart: http://www.pagestart.com


    Never be afraid to ask. This forum has some of the best people in the world available to help.

    Friday, January 11, 2013 3:18 PM
  • ...and if Jim's link doesn't fix the problem, please open an Elevated Command Prompt, and run the following commands...

    SC QC TRUSTEDINSTALLER
    SC QUERYEX TRUSTEDINSTALLER
    NET START TRUSTEDINSTALLER
    SC QUERYEX EVENTLOG
    SC QUERYEX EVENTSYSTEM
     
    

    post the results.....

    (just a reminder)

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 11, 2013 3:42 PM
    Moderator
  • Microsoft Windows [Version 6.0.6002]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    C:\Users\Deeble>SC QC TRUSTEDINSTALLER
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: TRUSTEDINSTALLER
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\servicing\TrustedInstaller.exe
            LOAD_ORDER_GROUP   : ProfSvc_Group
            TAG                : 0
            DISPLAY_NAME       : Windows Modules Installer
            DEPENDENCIES       :
            SERVICE_START_NAME : localSystem

    C:\Users\Deeble>SC QUERYEX TRUSTEDINSTALLER

    SERVICE_NAME: TRUSTEDINSTALLER
            TYPE               : 10  WIN32_OWN_PROCESS
            STATE              : 1  STOPPED
            WIN32_EXIT_CODE    : 1067  (0x42b)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 0
            FLAGS              :

    C:\Users\Deeble>NET START TRUSTEDINSTALLER
    The requested service has already been started.

    More help is available by typing NET HELPMSG 2182.


    C:\Users\Deeble>SC QUERYEX EVENTLOG

    SERVICE_NAME: EVENTLOG
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 1152
            FLAGS              :

    C:\Users\Deeble>SC QUERYEX EVENTSYSTEM

    SERVICE_NAME: EVENTSYSTEM
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 1700
            FLAGS              :

    C:\Users\Deeble>
    Wednesday, January 16, 2013 3:55 AM
  • I followed the instructions and then:-

    Microsoft Windows [Version 6.0.6002]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    C:\Users\Deeble>SFC /SCANNOW

    Windows Resource Protection could not start the repair service.

    C:\Users\Deeble>

    Wednesday, January 16, 2013 3:59 AM
  • Those look normal - please open an Elevated Command Prompt, and run the following command

    VSSADMIN LIST WRITERS

    wait until the prompt returns, and check the output - do you get anything other than 'Stable/no error' responses?

    How many responses do you get?

    (no need to post the results, unless you get any with errors)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Wednesday, January 16, 2013 10:46 AM
    Moderator
  • I got 8 responses

    No errors.

    Vic

    Sunday, January 27, 2013 1:42 AM
  • Something's possibly wrong there - I get 12 responses.

    Please run the command again, and this time copy the results to your reply.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, January 27, 2013 2:06 AM
    Moderator
  • Any progress on this, Vic??


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, February 27, 2013 9:48 AM
    Moderator