Answered by:
Win 7 Home Premium not genuine

Question
-
About 3 days ago it was so hot that my comp was overheating. So I booted into the BIOS and reduced my overclock (which has been stable for 4 years, which is roughly the lifetime of the computer. One major issue is that I can't find my Windows install disk that I used to originally build the computer. I had it 4 years ago but I've moved twice since then and I can't find the disk in any of the boxes that I thought it might be in. The computer was definitely installed with a legitimate copy of Windows.
When I rebooted after doing that, Windows immediately informed me that my copy was no longer genuine. This is pretty surprising to me. I'm not sure it's related to the overclock but that definitely seemed to trigger something.
My comp has been having other issues for quite a while. A couple weeks ago Windows Update stopped working, and .NET 4.0 has never installed correctly as long as I can remember.
I know that's not a lot of detail to go on but hopefully someone can ask the right questions so that I can get to the bottom of this.
I already tried using Belarc Advisor to retrieve my product key and reentering that. It didn't work. I also tried downloading the Required Microsoft Validation Components but it just downloads something and then claims that the software is not supported for my version, or something like that.
My results from Microsoft Genuine Advantage Diagnostic Tool Report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-TQV3G-W26KC-FVJQW
Windows Product Key Hash: gJJq0H7x73SsddIKxWbWD02MPY0=
Windows Product ID: 00359-112-9656763-85614
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {1618A5F7-05EA-4345-B8CD-D06F8D2841A6}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: T:20130704233733453-
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{1618A5F7-05EA-4345-B8CD-D06F8D2841A6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVJQW</PKey><PID>00359-112-9656763-85614</PID><PIDType>5</PIDType><SID>S-1-5-21-3705753933-16309801-3043871853</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P2.20</Version><SMBIOSVersion major="2" minor="6"/><Date>20091210000000.000000+000</Date></BIOS><HWID>61363607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 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
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00170-112-965676-00-1033-7601.0000-1892013
Installation ID: 019971962152472422256165621180840360188015886980216302
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: FVJQW
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 5
Trusted time: 7/8/2013 11:29:57 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 5:29:2013 21:25
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: OgAAAAEABgABAAEAAAADAAAAAgABAAEAln0mUcqzgJZCxlLvCIXcdc7DFpocIWI90pDrYO4E8Lx2Vg==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 121009 APIC1134
FACP A_M_I OEMFACP
MCFG 121009 OEMMCFG
OEMB 121009 OEMB1134
AAFT 121009 OEMAAFT
GSCI 121009 GMCHSCI
SSDT DpgPmm CpuPm
Tuesday, July 9, 2013 6:48 AM
Answers
-
You have a Trusted Store Tamper - often the result of either overzealous cleanup regimes, or malware.
I'm surprised that Belarc was unable to retrieve your Product Key - try Magical JellyBean, or ProduKey instead - BEFORE attempting any fixes!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Marked as answer by Noel D PatonModerator Sunday, July 28, 2013 9:49 AM
Wednesday, July 10, 2013 7:12 AMModerator
All replies
-
You have a Trusted Store Tamper - often the result of either overzealous cleanup regimes, or malware.
I'm surprised that Belarc was unable to retrieve your Product Key - try Magical JellyBean, or ProduKey instead - BEFORE attempting any fixes!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Marked as answer by Noel D PatonModerator Sunday, July 28, 2013 9:49 AM
Wednesday, July 10, 2013 7:12 AMModerator -
What is a Truster Store Tamper?
Sorry, I wasn't clear on that point. Belarc did retrieve my key. However, when I attempted to enter the key that Belarc provided me, Windows claimed that the key was not genuine. Are you saying that Belarc somehow retrieved a false key?
I will try Magical JellyBean and ProduKey, thanks. What should I do if those utilities fail to help solve the problem?
Wednesday, July 10, 2013 6:17 PM -
FYI I found this post from you explaining Trusted Store Tamper, so you can ignore that first question.
http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/windows-7-became-un-activated-after-spyware/6cfc7174-e97e-e011-9b4b-68b599b31bf5?msgId=d51782be-997f-e011-9b4b-68b599b31bf5
Also, I'm curious, what are you looking for in the data I posted that indicates I'm having an issue with a Trusted Store Tamper?
Thanks, Raj
- Edited by Raj M Sahae Wednesday, July 10, 2013 6:23 PM Added a question
Wednesday, July 10, 2013 6:19 PM -
TTS Error: T:20130704233733453-
Please first try recreating Licensing Store.
Recreate the Licensing Store
Go to Start > All Programs > Accessories
Right-Click on Command Prompt and select Run as Administrator - accept the UAC prompt
Run the following commands in the Command Prompt window, using the Enter key at the end of each
net stop sppsvc
(wait until the service has stopped before entering the following lines)
CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
REN tokens.dat tokens.bar
net start sppsvc
slui.exe
After a couple of seconds the Windows Activation dialog will appear.
You may be asked to re-activate and/or re-enter your product key, or Activation may occur automatically.
If you are asked for your Key, use the one on the COA sticker on the machine's case
Reboot and Post back with a new MGADiag report.
(Note: the Line 'CD %win......\SoftwareProtectionPlatform' is all on one line - it may be broken in the Forum listing)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Thursday, July 18, 2013 3:00 PM
Saturday, July 13, 2013 10:45 AMModerator -
Hi Noel,
I had time today to attempt your procedure on recreating the Licence Store and it doesn't seemed to have helped, unfortunately. I performed these instructions on an administrator command prompt:
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>net stop sppsvc The Software Protection service is stopping. The Software Protection service was stopped successfully. C:\Windows\system32>cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform>REN tokens.dat tokens.bar C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform>net start sppsvc The Software Protection service is starting. The Software Protection service was started successfully. C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform>slui.exe C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform>
After running "slui.exe", the dialog came up prompting me to go online and fix the problem. No other options were given. I proceeded online where I downloaded a tool and ran it, and the tool ends up saying "This update is not applicable to your computer". The URL that the prompt took me to was this microsoft genuine validation page.
I then rebooted and reran the MGADiag tool. The report is pasted below. One more thing to note, when I run the tool and click the "Copy" button, the Diag tool pops up an error dialog saying "Failed to create output files, hr = 0x80070002. Please contact support." However, at least some of the report seems to get into the clipboard just fine, as you can see below.
How would you recommend I proceed?
Thanks in advance,
Raj Sahae
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-TQV3G-W26KC-FVJQW
Windows Product Key Hash: gJJq0H7x73SsddIKxWbWD02MPY0=
Windows Product ID: 00359-112-9656763-85614
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {1618A5F7-05EA-4345-B8CD-D06F8D2841A6}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: T:20130704233733453-
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{1618A5F7-05EA-4345-B8CD-D06F8D2841A6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVJQW</PKey><PID>00359-112-9656763-85614</PID><PIDType>5</PIDType><SID>S-1-5-21-3705753933-16309801-3043871853</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P2.20</Version><SMBIOSVersion major="2" minor="6"/><Date>20091210000000.000000+000</Date></BIOS><HWID>61363607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: U1BMRwEAAAAAAQAACAAAABYuAAAAAAAAWmICAAAAAACy2FshSnnOAWbXGpOihAOpMHzDmWxsjurhFsPfzoCttv7AGeFUxiikfyfvYxox8kL3HqMwwTdLpTOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAx4dZsxs/sxaQSZh6DCEuBHMIiPnNB+zjmcp4zPMbOEbS2/7NdovTdOy+YYxyvauVozkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00170-112-965676-00-1033-7601.0000-1892013
Installation ID: 019971962152472422256165621180840360188015886980216302
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: FVJQW
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 5
Trusted time: 8/14/2013 8:14:27 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 5:29:2013 21:25
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: OAAAAAEABgABAAEAAAACAAAAAgABAAEAln0mUcqzgJZCxlLvCIXcdc7DFpocIWI90pDuBPC8dlY=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 121009 APIC1134
FACP A_M_I OEMFACP
MCFG 121009 OEMMCFG
OEMB 121009 OEMB1134
AAFT 121009 OEMAAFT
GSCI 121009 GMCHSCI
SSDT DpgPmm CpuPm
Thursday, August 15, 2013 3:22 AM -
OK - it looks like the Trusted Store Tamper may still be active.
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.
Post a new MGADiag report with details of any error messages encountered.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Thursday, August 15, 2013 6:46 AMModerator -
Noel,
Thanks for the procedure. I ran the CHDSK (it took about an hour) then after booting I ran SFC. It failed so I tried again just to make sure. The output I get from the test is pasted below:
C:\Windows\system32>SFC /SCANNOWBeginning system scan.
This process will take some time.
Windows Resource Protection could not perform the requested operation.
C:\Windows\system32>
I rebooted then copied the CBS.log file to my desktop and zipped it up. I shared it on dropbox.
You can download the file here.
I then ran the MGADiag tool again. The tool seems to run fine, I only get the error when I select the "copy" button. The error I get is the same exact one I mentioned in my previous post: "Failed to create output files, hr = 0x80070002. Please contact support."
Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 50 Cached Online Validation Code: 0xc004c4a8 Windows Product Key: *****-*****-TQV3G-W26KC-FVJQW Windows Product Key Hash: gJJq0H7x73SsddIKxWbWD02MPY0= Windows Product ID: 00359-112-9656763-85614 Windows Product ID Type: 5 Windows License Type: Retail Windows OS version: 6.1.7601.2.00010300.1.0.003 ID: {1618A5F7-05EA-4345-B8CD-D06F8D2841A6}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Home Premium Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.120830-0333 TTS Error: T:20130704233733453- Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{1618A5F7-05EA-4345-B8CD-D06F8D2841A6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FVJQW</PKey><PID>00359-112-9656763-85614</PID><PIDType>5</PIDType><SID>S-1-5-21-3705753933-16309801-3043871853</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P2.20</Version><SMBIOSVersion major="2" minor="6"/><Date>20091210000000.000000+000</Date></BIOS><HWID>61363607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 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 Licensing Data--> Software licensing service version: 6.1.7601.17514 Name: Windows(R) 7, HomePremium edition Description: Windows Operating System - Windows(R) 7, RETAIL channel Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f Extended PID: 00359-00170-112-965676-00-1033-7601.0000-1892013 Installation ID: 019971962152472422256165621180840360188015886980216302 Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338 Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339 Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341 Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340 Partial Product Key: FVJQW License Status: Notification Notification Reason: 0xC004F200 (non-genuine). Remaining Windows rearm count: 5 Trusted time: 8/16/2013 12:28:42 AM Windows Activation Technologies--> HrOffline: 0x00000000 HrOnline: 0x00000000 HealthStatus: 0x0000000000000000 Event Time Stamp: 5:29:2013 21:25 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: HWID Data--> HWID Hash Current: OgAAAAEABgABAAEAAAADAAAAAgABAAEAln0mUcqzgJZCxlLvCIXcdc7DFpocIWI90pDrYO4E8Lx2Vg== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC 121009 APIC1134 FACP A_M_I OEMFACP MCFG 121009 OEMMCFG OEMB 121009 OEMB1134 AAFT 121009 OEMAAFT GSCI 121009 GMCHSCI SSDT DpgPmm CpuPm
Let me know what you think.
Thanks for your help so far. It's much appreciated.
Friday, August 16, 2013 7:38 AM -
You have what appear to be a fair number of bitflips in the registry - where a single character has changed at some point, and this leads to corruption.
This could be caused either by failing hardware, or by 'enemy action'.
I would suggest checking your RAM for problems using MemTest86+ from www.memtest.org before attempting to fix anything, as the problem may recur if this is the cause.
Assuming a clean bill of health from Memtest,
Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)
Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file
Then zip the CheckSUR.log and upload it to your Dropbox Public folder so I can take a look - post a link in your reply.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Friday, August 16, 2013 1:12 PMModerator -
Hi Noel,
Thanks for the procedure. I ran the memtest86+ as you suggested and it found no errors. I then installed the updates that I downloaded from the CheckSUR link you posted, and it seemed to run and complete successfully without any errors or issues.
I found 4 files recently modified in the CBS logs folder so just for good measure I zipped them all up. It's the CBS.log, CheckSUR.log, CheckSUR.persist.log, and FilterList.log.
I posted the zipped files here for you to check out.
Again, thanks for your help. Any sort of "update" successfully installing is progress at this point. I appreciate you sticking with me during this process.
Thanks,
Raj
Monday, August 19, 2013 7:25 AM -
Here's the summary from the CheckSUR report
Seconds executed: 511 Found 83 errors CSI Corrupt Component Keyform Total count: 3 CSI Mismatched Identity Total count: 1 CSI C Mark Deployment Missing Total count: 1 CSI Payload File Missing Total count: 23 CBS Registry Error Total count: 17 CBS Watchlist Package Missing Total count: 33 CBS Watchlist Component Missing Total count: 3 CSI Missing Winning Component Key Total count: 2
As you can see, there are a lot of registry errors - some of which I don't recall ever seeing before.
I'm going to see if I can get an expert to assist on this one - if for not other reason that to learn a little myself - He may be able to provide a relatively easy fix compared to my manual options.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, August 19, 2013 8:46 AMModerator -
I've had a response from my expert - and it appears that the damage may not be as bad as it appears :)
Please upload a copy of the COMPONENTS registry hive to Dropbox, and post a new link....
Run the following command in an Elevated Command Prompt, to copy the hive to your desktop
COPY C:\Windows\System32\config\COMPONENTS %userprofile%\desktop\RMSCOMP
now right-click on the RSCOMP file on the desktop, and select 'Send to...' > 'Compressed (zipped) folder'
This will create a new file RSCOMP.zip on the desktop - upload that, and post the link.
Thanks.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, August 19, 2013 11:14 AMModerator -
I can't copy the file because it's being used by another process. Do you happen to know what process I should kill (or which service I should stop) in order to unlock the file?Tuesday, August 20, 2013 4:45 AM
-
Hmm - Windows is supposed to unload the hive shortly after booting - if that's not happening, then try booting to Safe Mode, and see if the file becomes available then.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Tuesday, August 20, 2013 6:51 AMModerator -
Hi Noel,
Yep, trying it in Safe Mode seemed to do the trick. Here is the RMSCOMP file zipped up.
Thanks,
Raj
Tuesday, August 20, 2013 8:08 AM -
Got it - it'll take me a while to work out what I'm seeing - shout if you haven't heard from be by Thursday!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Tuesday, August 20, 2013 8:19 AMModerator -
OK - I have a fix for some of the minor errors, at least :)
I've uploaded a file - rmscompn.zip - to my SkyDrive at https://skydrive.live.com/?cid=936736bb8fceb92f#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21796
Please download and save it to your desktop.
Right-click on the saved file and select Extract all...
Save it to the default location
This should create a file COMPONENTS
Now open Windows Explorer, and navigate to the C:\Windows\System32\config folder
Rename the existing COMPONENTS file to COMPONENTS.OLD
Copy the new COMPONENTS file into the folder
close Windows Explorer and reboot.
Run the CheckSUR tool again, and post the new CheckSUR.log file
Also, please run the following commands, which will create a new file on your desktop - rmspack.log
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0" /S >> %userprofile%\desktop\rmspack.log REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Package_for_KB2454826~31bf3856ad364e35~amd64~~0.0.0.0" /S >> %userprofile%\desktop\rmspack.log REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1" /S >> %userprofile%\desktop\rmspack.log .
Zip the rmspack.log file, and upload it - post a link
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Edited by Noel D PatonModerator Wednesday, August 21, 2013 10:46 AM formatting
Wednesday, August 21, 2013 10:45 AMModerator -
Hi Noel,
I copied over your COMPONENTS file. I had to do it in safe mode, Windows said the file was locked out by"System" otherwise. After the reboot I ran CheckSUR again. You can download the 4 log files here.
Unfortunately, I could not run the REG QUERIES that you asked for. The OS tells me that the system was unable to find any of the keys you specified. Is it possible you mistyped them, or that I have a different set of keys?
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0" /S >> %userprofile%\desktop\rmspack.log ERROR: The system was unable to find the specified registry key or value. C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Package_for_KB2454826~31bf3856ad364e35~amd64~~0.0.0.0" /S >> %userprofile%\desktop\rmspack.log C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.1.1" /S >> %userprofile%\desktop\rmspack.log ERROR: The system was unable to find the specified registry key or value. C:\Windows\system32>
Thanks,
Raj
Wednesday, August 28, 2013 4:21 AM -
Hey Noel,
Sorry, I lied. Even with that error, one of the keys seemed to get saved. I think I ran it twice, so it saved it twice. Here's the log.
Wednesday, August 28, 2013 4:24 AM -
the rmspack.log file shows up one problem, at least...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Package_for_KB2454826~31bf3856ad364e35~amd64~~0.0.0.0 Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1,1.1 REG_DWORD 0x0 Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1.2.0 REG_DWORD 0x0
...and the error-count in the latest CheckSUR is reduced by 2 (I was hoping for more, but beggars can't be choosers :) )
Please run the following command, and post the results...
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1,1.1" /S >> %userprofile%\desktop\rmspack.log
- the rmspack.log file will be appended by the command, if it finds anything, so either copy/paste the new file or upload it again.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Wednesday, August 28, 2013 9:02 AMModerator -
ERROR: Unable to find the specified registry key or value.Friday, August 30, 2013 6:00 AM
-
OK - I'll see what I can do about rebuilding that
Back tomorrow :)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Saturday, August 31, 2013 11:52 AMModerator -
Please be very careful when following these instructions - mistakes in the registry are difficult to find and fix!
First create a new Restore point in System Restore.
Open Regedit
Navigate to the
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex
key
and find the
Package_for_KB2454826~31bf3856ad364e35~amd64~~0.0.0.0
subkey
right-click on the subkey to highlight it and select Permissions
Click on the Advanced button
Click on the Owner tab
highlight 'Administrators' in the box, and click Apply
put a tick in the 'Replace owner...' box, and click Apply
Click on the Permissions tab
highlight Administrators
Click Edit
put a tick in the Allow/Full Control box and click
OKput a tick in the 'Replace all child...' box and click Apply
Accept the warning
Click OK twice to get back into Regedit, and Exit that
Now open an Elevated Command Prompt, and run the following command....
REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex\Package_for_KB2454826~31bf3856ad364e35~amd64~~0.0.0.0\Package_for_KB2454826~31bf3856ad364e35~amd64~~6.1,1.1"
Close the CMD window and reboot
Run another CheckSUR scan, and post the new CheckSUR.log file
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, September 1, 2013 2:30 PMModerator -
Hi Noel,
Sorry work has been busy and I didn't have much time to look at this. I tried your procedure this weekend and the REG DELETE command is failing, it claims the key cannot be found. I copy/pasted your command so I wonder if something else is wrong. I can see the key in the regedit window, should I just delete it from the GUI instead of the command line?
Sunday, September 22, 2013 7:13 PM -
You can try doing it that way - you may have to take ownership of the Key first, and return it afterwards
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, September 22, 2013 8:26 PMModerator -
Hey Noel,
Sorry for the delayed response. I deleted the key manually, then restarted, and redownloaded the CheckSUR tool (it was from August 2013 and the size was different so I figured it wouldn't hurt), and ran it. You can find the log here: https://www.dropbox.com/s/p25tblml9vymb7e/checksur_results_2013-10-15.zip
Thanks again for your help. Just FYI, I'm going to be traveling out of the country for the next three weeks so I'll be able to take action on whatever your response is when I get back in November.
Tuesday, October 15, 2013 7:37 AM -
Here's the summary from the log...
Summary: Seconds executed: 578 Found 81 errors CSI Corrupt Component Keyform Total count: 3 CSI Payload File Missing Total count: 23 CBS Registry Error Total count: 17 CBS Watchlist Package Missing Total count: 33 CBS Watchlist Component Missing Total count: 3 CSI Missing Winning Component Key Total count: 2
If you compare it with the earlier summary...
Seconds executed: 511 Found 83 errors CSI Corrupt Component Keyform Total count: 3 CSI Mismatched Identity Total count: 1 CSI C Mark Deployment Missing Total count: 1 CSI Payload File Missing Total count: 23 CBS Registry Error Total count: 17 CBS Watchlist Package Missing Total count: 33 CBS Watchlist Component Missing Total count: 3 CSI Missing Winning Component Key Total count: 2
that means that the number of errors hasn't actually changed because of this mod.
MS actually released a tool recently which may obviate the need for individual manipulations - if we're very lucky.
The only problem is that it's an Update - and I suspect that you are unable to install updates currently.
Please try downloading this update - http://support.microsoft.com/kb/2852386 and see if it installs - if it does, try using the new option and then run another CheckSUR report and post the results.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Tuesday, October 15, 2013 8:16 PMModerator -
Hi Noel,
Thanks for the response. I tried installing the disk cleanup utility that you linked, but the website won't let me download the tool. Before downloading, it asks me to run a validation check and when I do that, it keeps linking me to the microsoft genuine validation site. I assume that it thinks my PC is failing validation (sort of the entire reason for this thread), so I'm not really surprised there.
Saturday, November 2, 2013 8:42 AM -
FYI, I ran CC Cleaner a couple times, both the regular system cleaner and the registry cleaner. It fixed a bunch of registry stuff ( I backed up before I made any changes) and then I ran the checksur tool again. Still has a CBS Registry Error count of 17.
Summary: Seconds executed: 1262 Found 81 errors CSI Corrupt Component Keyform Total count: 3 CSI Payload File Missing Total count: 23 CBS Registry Error Total count: 17 CBS Watchlist Package Missing Total count: 33 CBS Watchlist Component Missing Total count: 3 CSI Missing Winning Component Key Total count: 2 Customer Experience report successfully uploaded. Thank you for participating. For more information, see the Microsoft Customer Experience Improvement Program on the Microsoft web site.
Saturday, November 2, 2013 9:50 AM -
OK - please upload the latest CheckSUR log so that I can take a look, and see if I can have a go at patching the errors.
Post a new link.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Saturday, November 2, 2013 10:33 AMModerator -
Saturday, November 2, 2013 11:21 AM
-
Well, I'm willing to give it a go - but it would be a lot quicker to do a repair install :)
Download the SP1 Refresh for your language and edition from the links on these pages...
Heidoc - Microsoft DR Download links
The links are for downloads from the Digital River servers run for MS, so are about as safe as you can get :)
Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk Image Burner, or (better still) your favourite burning application at the slowest speed possible.
Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image' option from your app - or you'll end up with a useless coaster :)
Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start the repair from there - you must start the repair from within a normal Windows boot.
Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html
- and they should help you get through it (it's not as difficult as it looks!)
Always ask questions first if you're unsure - either here, or in sevenforums.
Good luck with it!
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Saturday, November 2, 2013 11:32 AMModerator -
Hi Noel,
I downloaded the SP1 media refresh for Win 7 Home Premium x64, burned it to a DVD, confirmed it was bootable (on my system), then booted back into normal Windows and proceeded to try the repair.
Unfortunately, I get all the way to the install step (step 13) and then I get an error. The installation cancels itself and says that it can't continue (but it doesn't give a reason). I tried restarting the system and then restarting the install 3 times.
Monday, November 25, 2013 2:12 AM -
Try asking in SevenForums - getting past this sort of failure is a bit of an art, and I'm no expert at that :(
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Monday, November 25, 2013 10:52 AMModerator