Sorry for the neglect! - that all looks normal.
We'll have to look at a few more things.....
Please open an Elevated Command Prompt, and run the following commands and post the results.
DIR C:\Windows\sppsvc.* /S
ICACLS C:\Windows\system32\sppsvc.exe /T
REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\sppsvc /S
DIR C:\Windows\System32 /AR /S
Thank you for the quick response, these are the results:
Code:age~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 12,098 Microsoft-Windows-MobilePC-Client-Basic-Pack age~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 9,472 Microsoft-Windows-MobilePC-Client-Premium-Pa ckage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 11,816 Microsoft-Windows-MobilePC-Client-Premium-Pa ckage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 12,098 Microsoft-Windows-MobilePC-Client-Sensors-Pa ckage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 17,076 Microsoft-Windows-MobilePC-Client-Sensors-Pa ckage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,640 Microsoft-Windows-MobilePC-Client-SideShow-P ackage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 14,136 Microsoft-Windows-MobilePC-Client-SideShow-P ackage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,914 Microsoft-Windows-MSMQ-Client-Package~31bf38 56ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 29,118 Microsoft-Windows-MSMQ-Client-Package~31bf38 56ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 33,872 Microsoft-Windows-NetFx3-OC-Package~31bf3856 ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 222,155 Microsoft-Windows-NetFx3-OC-Package~31bf3856 ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 11:18 8,876 Microsoft-Windows-NetworkDiagnostics-DirectA ccessEntry-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 14,756 Microsoft-Windows-NFS-ClientSKU-Package~31bf 3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 21,796 Microsoft-Windows-NFS-ClientSKU-Package~31bf 3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 12,388 Microsoft-Windows-OfflineFiles-Package~31bf3 856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 15,046 Microsoft-Windows-OfflineFiles-Package~31bf3 856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 13,000 Microsoft-Windows-OpticalMediaDisc-Package~3 1bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 130,601 Microsoft-Windows-OpticalMediaDisc-Package~3 1bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 15,682 Microsoft-Windows-ParentalControls-Package~3 1bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 18,010 Microsoft-Windows-ParentalControls-Package~3 1bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,350 Microsoft-Windows-PeerDist-Client-Package~31 bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 12,396 Microsoft-Windows-PeerDist-Client-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 15,352 Microsoft-Windows-PeerToPeer-Full-Package~31 bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 18,345 Microsoft-Windows-PeerToPeer-Full-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 11:18 10,616 Microsoft-Windows-Personalization-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 11,236 Microsoft-Windows-PhotoBasicPackage~31bf3856 ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 16,512 Microsoft-Windows-PhotoBasicPackage~31bf3856 ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 11,236 Microsoft-Windows-PhotoPremiumPackage~31bf38 56ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 16,512 Microsoft-Windows-PhotoPremiumPackage~31bf38 56ad364e35~x86~~6.1.7601.17514.cat 132 File(s) 7,173,717 bytes Directory of C:\Windows\System32\config\systemprofile 03/07/2011 18:08 <DIR> Contacts 03/07/2011 18:08 <DIR> Desktop 13/08/2011 16:23 <DIR> Documents 03/07/2011 18:08 <DIR> Downloads 03/07/2011 18:08 <DIR> Favorites 03/07/2011 18:08 <DIR> Links 03/07/2011 18:08 <DIR> Music 03/07/2011 18:08 <DIR> Pictures 03/07/2011 18:08 <DIR> Saved Games 03/07/2011 18:08 <DIR> Searches 03/07/2011 18:08 <DIR> Videos 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Google\Cust om Buttons 17/10/2011 18:33 1,946 toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml 1 File(s) 1,946 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows\Burn 03/07/2011 18:08 <DIR> Burn 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows\Burn\Burn 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows Sidebar 03/07/2011 18:08 <DIR> Gadgets 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows Sidebar\Gadgets 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows 03/07/2011 18:08 <DIR> Libraries 09/03/2012 19:27 <DIR> Recent 03/07/2011 18:08 <DIR> Start Menu 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Libraries 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Recent 09/03/2012 19:27 <DIR> . 09/03/2012 19:27 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Programs 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Administrative Tools 03/07/2011 18:08 <DIR> Startup 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs\Administrative Tools 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs\Startup 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Contacts 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Desktop 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Documents 13/08/2011 16:23 <DIR> . 13/08/2011 16:23 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Downloads 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Favorites 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Links 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Music 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Playlists 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Music\Playlists 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Pictures 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Slide Shows 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Pictures\Slide Shows 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Saved Games 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Searches 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Videos 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\drivers\N360\1401010.002 07/08/2012 19:41 7,611 ccsetx86.cat 02/08/2012 17:57 828 ccSetx86.inf 07/08/2012 19:42 134,304 ccSetx86.sys 08/08/2012 05:59 7,593 iron.cat 28/07/2012 04:05 737 Iron.inf 28/07/2012 04:05 175,264 Ironx86.sys 11/08/2012 02:26 7,593 srtsp.cat 13/08/2012 01:59 1,387 srtsp.inf 11/08/2012 02:26 585,888 srtsp.sys 11/08/2012 02:26 7,597 srtspx.cat 13/08/2012 01:59 1,387 srtspx.inf 25/05/2012 06:36 32,888 srtspx.sys 07/08/2012 02:54 7,593 SymDS.cat 28/07/2012 04:25 2,851 SymDS.inf 28/07/2012 04:25 368,288 SymDS.sys 09/08/2012 02:50 7,599 SymEFA.cat 08/08/2012 06:18 3,434 SymEFA.inf 08/08/2012 06:18 926,880 SymEFA.sys 21/06/2012 03:45 9,670 SymELAM.cat 21/06/2012 03:45 996 symELAM.inf 21/06/2012 03:45 21,400 SymELAM.sys 09/08/2012 02:50 7,601 SymNet.cat 23/07/2012 02:34 1,440 SymNet.inf 23/07/2012 02:34 338,592 symnets.sys 08/08/2012 06:18 8,942 SymVTcer.dat 25 File(s) 2,668,363 bytes Directory of C:\Windows\System32\Macromed\Flash 21/09/2012 11:00 9,639,344 Flash32_11_4_402_278.ocx 1 File(s) 9,639,344 bytes Directory of C:\Windows\System32\restore 14/03/2011 18:25 76 MachineGuid.txt 1 File(s) 76 bytes Directory of C:\Windows\System32\spool\drivers\color 19/06/2002 22:40 906,804 4C Ctd TRUEMATCHRITProfi.icm 19/06/2002 22:40 33,696 Allgemeines CMYK Profil.icm 19/06/2002 22:40 726,912 ColorMatch 3.01 - SWOP Ink,.icm 19/06/2002 20:37 557,164 Euroscale Coated v2.icm 19/06/2002 20:37 557,164 Euroscale Uncoated v2.icm 19/06/2002 20:37 557,160 Japan Standard v2.icm 14/11/2007 16:20 3,065 TRANS.TBL 19/06/2002 20:37 557,168 U.S. Sheetfed Coated v2.icm 19/06/2002 20:36 557,168 U.S. Sheetfed Uncoated v2.icm 19/06/2002 20:36 557,168 U.S. Web Coated (SWOP) v2.icm 19/06/2002 20:37 557,164 U.S. Web Uncoated v2.icm 11 File(s) 5,570,633 bytes Total Files Listed: 495 File(s) 278,471,122 bytes 63 Dir(s) 131,047,124,992 bytes free C:\Windows\system32>
try this.
Open Windows Explorer and navigate to the C:\Windows folder. find the System32 folder there, and right-click on it - select Properties.
In the General tab, clear the box beside 'Read-only (Only.....' by clicking in it until it's empty (it cycles around three values)
Click Apply.
Accept any warnings that come up - if you get a 'Ignore/Ignore All/Try again' option, pick 'Ignore all'
Once complete (may be almost instantaneous),
reboot, and run another MGADiag report.
Here it is:
Code:Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: N/A, hr = 0xc0000022 Windows Product Key: *****-*****-3T7PC-WWBHB-BHRQC Windows Product Key Hash: VvW3LsLNFcHl6WG9QpQ1rH+JREQ= Windows Product ID: 00359-112-6321493-85980 Windows Product ID Type: 5 Windows License Type: Retail Windows OS version: 6.1.7601.2.00010300.1.0.003 ID: {1BC27C47-4AFC-4744-A15B-D2C8F5BD8CB6}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Home Premium Architecture: 0x00000000 Build lab: 7601.win7sp1_gdr.120330-1504 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 100 Genuine Microsoft Office Home and Student 2007 - 100 Genuine OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{1BC27C47-4AFC-4744-A15B-D2C8F5BD8CB6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BHRQC</PKey><PID>00359-112-6321493-85980</PID><PIDType>5</PIDType><SID>S-1-5-21-3341527090-2742051375-1317818011</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-E ACPI BIOS Revision 1010</Version><SMBIOSVersion major="2" minor="3"/><Date>20051125000000.000000+000</Date></BIOS><HWID>F8933E07018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>880986A854C70E</Val><Hash>XDPvojxu4+w2XnOUd4p11YcsCYQ=</Hash><Pid>81602-903-9710515-68915</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text. Error: 0x80070426 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0001000000000000 Event Time Stamp: 10:6:2012 18:04 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered Service: sppsvc HWID Data--> HWID Hash Current: OgAAAAIABgABAAEAAAADAAAAAQABAAEAeqgkgNQabTXq1HTqAIfekz6Ofgi+m06TkopiPbYOrF00tQ== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC Nvidia AWRDACPI FACP Nvidia AWRDACPI SRAT AMD HAMMER SSDT PTLTD POWERNOW MCFG Nvidia AWRDACPI
Hmmm - interesting!
Run these commands again - let's see what actually got changed :)
DIR C:\Windows\sppsvc.* /S
ICACLS C:\Windows\system32\sppsvc.exe /T
REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\sppsvc /S
DIR C:\Windows\System32 /AR /S
These are the results:
Code:age~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 12,098 Microsoft-Windows-MobilePC-Client-Basic-Pack age~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 9,472 Microsoft-Windows-MobilePC-Client-Premium-Pa ckage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 11,816 Microsoft-Windows-MobilePC-Client-Premium-Pa ckage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 12,098 Microsoft-Windows-MobilePC-Client-Sensors-Pa ckage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 17,076 Microsoft-Windows-MobilePC-Client-Sensors-Pa ckage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,640 Microsoft-Windows-MobilePC-Client-SideShow-P ackage~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 14,136 Microsoft-Windows-MobilePC-Client-SideShow-P ackage~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,914 Microsoft-Windows-MSMQ-Client-Package~31bf38 56ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 29,118 Microsoft-Windows-MSMQ-Client-Package~31bf38 56ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 33,872 Microsoft-Windows-NetFx3-OC-Package~31bf3856 ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 222,155 Microsoft-Windows-NetFx3-OC-Package~31bf3856 ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 11:18 8,876 Microsoft-Windows-NetworkDiagnostics-DirectA ccessEntry-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 14,756 Microsoft-Windows-NFS-ClientSKU-Package~31bf 3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 21,796 Microsoft-Windows-NFS-ClientSKU-Package~31bf 3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 12,388 Microsoft-Windows-OfflineFiles-Package~31bf3 856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 15,046 Microsoft-Windows-OfflineFiles-Package~31bf3 856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 13,000 Microsoft-Windows-OpticalMediaDisc-Package~3 1bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 130,601 Microsoft-Windows-OpticalMediaDisc-Package~3 1bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 15,682 Microsoft-Windows-ParentalControls-Package~3 1bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 18,010 Microsoft-Windows-ParentalControls-Package~3 1bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 10,350 Microsoft-Windows-PeerDist-Client-Package~31 bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 12,396 Microsoft-Windows-PeerDist-Client-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 15,352 Microsoft-Windows-PeerToPeer-Full-Package~31 bf3856ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 18,345 Microsoft-Windows-PeerToPeer-Full-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 11:18 10,616 Microsoft-Windows-Personalization-Package~31 bf3856ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 11,236 Microsoft-Windows-PhotoBasicPackage~31bf3856 ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 16,512 Microsoft-Windows-PhotoBasicPackage~31bf3856 ad364e35~x86~~6.1.7601.17514.cat 20/11/2010 10:36 11,236 Microsoft-Windows-PhotoPremiumPackage~31bf38 56ad364e35~x86~en-US~6.1.7601.17514.cat 20/11/2010 11:18 16,512 Microsoft-Windows-PhotoPremiumPackage~31bf38 56ad364e35~x86~~6.1.7601.17514.cat 132 File(s) 7,173,717 bytes Directory of C:\Windows\System32\config\systemprofile 03/07/2011 18:08 <DIR> Contacts 03/07/2011 18:08 <DIR> Desktop 13/08/2011 16:23 <DIR> Documents 03/07/2011 18:08 <DIR> Downloads 03/07/2011 18:08 <DIR> Favorites 03/07/2011 18:08 <DIR> Links 03/07/2011 18:08 <DIR> Music 03/07/2011 18:08 <DIR> Pictures 03/07/2011 18:08 <DIR> Saved Games 03/07/2011 18:08 <DIR> Searches 03/07/2011 18:08 <DIR> Videos 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Google\Cust om Buttons 17/10/2011 18:33 1,946 toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml 1 File(s) 1,946 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows\Burn 03/07/2011 18:08 <DIR> Burn 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows\Burn\Burn 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows Sidebar 03/07/2011 18:08 <DIR> Gadgets 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\W indows Sidebar\Gadgets 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows 03/07/2011 18:08 <DIR> Libraries 09/03/2012 19:27 <DIR> Recent 03/07/2011 18:08 <DIR> Start Menu 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Libraries 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Recent 09/03/2012 19:27 <DIR> . 09/03/2012 19:27 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Programs 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Administrative Tools 03/07/2011 18:08 <DIR> Startup 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs\Administrative Tools 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft \Windows\Start Menu\Programs\Startup 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Contacts 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Desktop 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Documents 13/08/2011 16:23 <DIR> . 13/08/2011 16:23 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Downloads 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Favorites 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Links 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Music 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Playlists 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Music\Playlists 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Pictures 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 03/07/2011 18:08 <DIR> Slide Shows 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Pictures\Slide Shows 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Saved Games 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Searches 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\Videos 03/07/2011 18:08 <DIR> . 03/07/2011 18:08 <DIR> .. 0 File(s) 0 bytes Directory of C:\Windows\System32\drivers\N360\1401010.002 07/08/2012 19:41 7,611 ccsetx86.cat 02/08/2012 17:57 828 ccSetx86.inf 07/08/2012 19:42 134,304 ccSetx86.sys 08/08/2012 05:59 7,593 iron.cat 28/07/2012 04:05 737 Iron.inf 28/07/2012 04:05 175,264 Ironx86.sys 11/08/2012 02:26 7,593 srtsp.cat 13/08/2012 01:59 1,387 srtsp.inf 11/08/2012 02:26 585,888 srtsp.sys 11/08/2012 02:26 7,597 srtspx.cat 13/08/2012 01:59 1,387 srtspx.inf 25/05/2012 06:36 32,888 srtspx.sys 07/08/2012 02:54 7,593 SymDS.cat 28/07/2012 04:25 2,851 SymDS.inf 28/07/2012 04:25 368,288 SymDS.sys 09/08/2012 02:50 7,599 SymEFA.cat 08/08/2012 06:18 3,434 SymEFA.inf 08/08/2012 06:18 926,880 SymEFA.sys 21/06/2012 03:45 9,670 SymELAM.cat 21/06/2012 03:45 996 symELAM.inf 21/06/2012 03:45 21,400 SymELAM.sys 09/08/2012 02:50 7,601 SymNet.cat 23/07/2012 02:34 1,440 SymNet.inf 23/07/2012 02:34 338,592 symnets.sys 08/08/2012 06:18 8,942 SymVTcer.dat 25 File(s) 2,668,363 bytes Directory of C:\Windows\System32\Macromed\Flash 21/09/2012 11:00 9,639,344 Flash32_11_4_402_278.ocx 1 File(s) 9,639,344 bytes Directory of C:\Windows\System32\restore 14/03/2011 18:25 76 MachineGuid.txt 1 File(s) 76 bytes Directory of C:\Windows\System32\spool\drivers\color 19/06/2002 22:40 906,804 4C Ctd TRUEMATCHRITProfi.icm 19/06/2002 22:40 33,696 Allgemeines CMYK Profil.icm 19/06/2002 22:40 726,912 ColorMatch 3.01 - SWOP Ink,.icm 19/06/2002 20:37 557,164 Euroscale Coated v2.icm 19/06/2002 20:37 557,164 Euroscale Uncoated v2.icm 19/06/2002 20:37 557,160 Japan Standard v2.icm 14/11/2007 16:20 3,065 TRANS.TBL 19/06/2002 20:37 557,168 U.S. Sheetfed Coated v2.icm 19/06/2002 20:36 557,168 U.S. Sheetfed Uncoated v2.icm 19/06/2002 20:36 557,168 U.S. Web Coated (SWOP) v2.icm 19/06/2002 20:37 557,164 U.S. Web Uncoated v2.icm 11 File(s) 5,570,633 bytes Total Files Listed: 495 File(s) 278,471,122 bytes 63 Dir(s) 131,052,339,200 bytes free C:\Windows\system32>
OK - there are stil 495 files tagged as read-only (which hasn't changed since the first run)
In a clean Windows system there are only a handful. I suspect this is caused by Norton.
What I do not understand is why contents of the Servicing/Packages folder are showing at all
-that's the one that ends...
20/11/2010 11:18 16,512 Microsoft-Windows-PhotoPremiumPackage~31bf38
56ad364e35~x86~~6.1.7601.17514.cat
132 File(s) 7,173,717 bytes
It's NOT normally in the System32 folder, andthe only reason I can think of for something like that ending up there is that the proper folder is/was corrupted.
Please run the following commands and post the results...
DIR C:\Windows\Servicing
ICACLS C:\Windows\servicing\Packages
ICACLS C:\Windows\servicing
DIR C:\Windows\servicing
Code:Code:Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>DIR C:\Windows\Servicing Volume in drive C is Windows Volume Serial Number is B087-E240 Directory of C:\Windows\Servicing 15/03/2011 09:39 <DIR> . 15/03/2011 09:39 <DIR> .. 14/07/2009 02:15 17,408 CbsApi.dll 14/07/2009 02:15 28,672 CbsMsg.dll 15/03/2011 09:39 <DIR> Editions 14/07/2009 05:56 <DIR> en-US 25/08/2011 00:47 <DIR> GC32 27/09/2012 10:21 <DIR> Packages 27/09/2012 15:39 <DIR> Sessions 14/07/2009 03:04 <DIR> SQM 20/11/2010 13:17 204,800 TrustedInstaller.exe 18/05/2011 21:20 <DIR> Version 14/07/2009 02:16 9,216 wrpintapi.dll 4 File(s) 260,096 bytes 9 Dir(s) 131,052,257,280 bytes free C:\Windows\system32>ICACLS C:\Windows\servicing\Packages C:\Windows\servicing\Packages NT SERVICE\TrustedInstaller:(I)(F) NT SERVICE\TrustedInstaller:(I)(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(I)(RX) NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(GR,GE) BUILTIN\Administrators:(I)(RX) BUILTIN\Administrators:(I)(OI)(CI)(IO)(GR,GE) BUILTIN\Users:(I)(RX) BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>ICACLS C:\Windows\servicing C:\Windows\servicing NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(RX) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(GR,GE) BUILTIN\Administrators:(RX) BUILTIN\Administrators:(OI)(CI)(IO)(GR,GE) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>DIR C:\Windows\servicing Volume in drive C is Windows Volume Serial Number is B087-E240 Directory of C:\Windows\servicing 15/03/2011 09:39 <DIR> . 15/03/2011 09:39 <DIR> .. 14/07/2009 02:15 17,408 CbsApi.dll 14/07/2009 02:15 28,672 CbsMsg.dll 15/03/2011 09:39 <DIR> Editions 14/07/2009 05:56 <DIR> en-US 25/08/2011 00:47 <DIR> GC32 27/09/2012 10:21 <DIR> Packages 27/09/2012 15:39 <DIR> Sessions 14/07/2009 03:04 <DIR> SQM 20/11/2010 13:17 204,800 TrustedInstaller.exe 18/05/2011 21:20 <DIR> Version 14/07/2009 02:16 9,216 wrpintapi.dll 4 File(s) 260,096 bytes 9 Dir(s) 131,052,208,128 bytes free C:\Windows\system32>
Last edited by militarymad; 08 Oct 2012 at 20:10.
Plese run the following command and post the results
ATTRIB C:\Windows\Servicing\Packages\Package_for_KB2691442*.*
Please run the following command - don't bother posting the result, I just need to know the number of files and folders the listing quotes at the end (the last two lines)
DIR C:\Windows\Servicing\Packages
The first:
Code:Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>ATTRIB C:\Windows\Servicing\Packages\Package_for_KB2691442*. * A C:\Windows\Servicing\Packages\Package_for_KB2691442_SP1~31bf3856ad3 64e35~x86~~6.1.1.3.cat A C:\Windows\Servicing\Packages\Package_for_KB2691442_SP1~31bf3856ad3 64e35~x86~~6.1.1.3.mum A C:\Windows\Servicing\Packages\Package_for_KB2691442~31bf3856ad364e3 5~x86~~6.1.1.3.cat A C:\Windows\Servicing\Packages\Package_for_KB2691442~31bf3856ad364e3 5~x86~~6.1.1.3.mum
The results of the second one are:
1599 File(s) 23,741,278 bytes
2 Dir(s) 131,052,134,400 bytes free
Last edited by militarymad; 08 Oct 2012 at 19:40.
Quote