New
#11
@NoelDP: What do you mean by other problems? Also I'll show you the high RAM usage even if the program is not that heavy supposedly it should be in the 30-48% RAM usage area on my perfectly working system before this happened.
@NoelDP: What do you mean by other problems? Also I'll show you the high RAM usage even if the program is not that heavy supposedly it should be in the 30-48% RAM usage area on my perfectly working system before this happened.
Well I have news about SFC and CHKDSK. First of all I still have problems donwloading the MGADiag, Second CHKDSK didn't found any bad sectors or bad indexes. I can still use Windows Media Player and Microsoft Office without any problems, I can still play games. Also I have a question what happens if this problem is not solved lets say 35 days have passed what would happen? Can I still use my PC? Will some programs will not work? And last why is my upload speed is better than my download speed? I tried to upload the 13 Mb CBS file (but fails because of exceeded file size) fast but not download a 2 Mb file? What kind of sorcery is this?
I see you have elements of Kaspersky, and McAfee, as well as a fully-installed MSE - I'd recommend uninstalling Kaspersky and McAfee, and using their removal tools to clean up afterwards.
the open an elevated Command Prompt window and run NETSH WINSOCK RESET and reboot on request.
Have you ever had another AV installed?
I think the problem was the browser earlier when I said it was slow I was using chrome but when I switched to safari it was better.Code:Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 50 Cached Online Validation Code: N/A, hr = 0xc004f012 Windows Product Key: *****-*****-PPKRR-8J7T4-TJHTH Windows Product Key Hash: 2Xg0gGJgLddefMxQtBCLuEuvT3c= Windows Product ID: 00346-OEM-8992752-50008 Windows Product ID Type: 2 Windows License Type: OEM SLP Windows OS version: 6.1.7601.2.00010300.1.0.002 ID: {976FCDEA-1B4B-4A86-A359-7FE617A07A3D}(1) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Home Basic Architecture: 0x00000000 Build lab: 7601.win7sp1_gdr.120830-0333 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Users\patrick\AppData\Local\Google\Chrome\Application\chrome.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003] File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003] Other data--> Office Details: <GenuineResults><MachineData><UGUID>{976FCDEA-1B4B-4A86-A359-7FE617A07A3D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-TJHTH</PKey><PID>00346-OEM-8992752-50008</PID><PIDType>2</PIDType><SID>S-1-5-21-1684045860-3113741293-3062281249</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>SLIC-CPC</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>6.05</Version><SMBIOSVersion major="2" minor="6"/><Date>20100812000000.000000+000</Date></BIOS><HWID>E51C3907018400F8</HWID><UserLCID>3409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Taipei Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> C:\Windows\system32\slmgr.vbs(1131, 5) (null): 0xC004F012 Windows Activation Technologies--> HrOffline: 0x00000000 HrOnline: N/A HealthStatus: 0x0000000000000000 Event Time Stamp: N/A ActiveX: Not Registered - 0x80040154 Admin Service: Not Registered - 0x80040154 HealthStatus Bitmask Output: HWID Data--> HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAJJRuYox4fhJI5Kp2gjsgTs4lDqIG12o4Rso= OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC HPQOEM SLIC-CPC FACP HPQOEM SLIC-CPC HPET HPQOEM SLIC-CPC MCFG HPQOEM SLIC-CPC OEMB HPQOEM SLIC-CPC GSCI HPQOEM SLIC-CPC SSDT HPQOEM SLIC-CPC
Also I have 4 MSE, Kaspersky, McAfee, and Iobit Malware Fighter. I'll do what you posted
According to the report, the WAT update (KB971033) is not yet installed.
The problem with activation is that the BIOS SLIC table is not visible to the OS - which may simply mean that you've updated the BIOS with a non-compliant version.
Having said that - there are a number of problems.
The major one, is....
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1131, 5) (null): 0xC004F012
This can cover a multitude of sins - so we need to go back to basics.....
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and attach it to your response.
I would uninstall ANY software from IOBIT - it's almost all scareware designed to empty your pockets and fill theirs.
Plus they blatantly stole the MBAM definitions, then denied it despite all the evidence collected by Malwarebytes:
IOBit Steals Malwarebytes' Intellectual Property - Malwarebytes Forum
@NoelDP: Luckily I downloaded the free version, I also removed all of my AV except for MSE, removed all Iobit software. I used system restore after it updated thats why the update was not installed. I uploaded the CBS.zip and also what is the meaning of this "you've updated the BIOS with a non-compliant version."?
Your CBS log reveals only one bad file
However, there are a large number of failures in the running logs.Code:Line 80483: 2013-01-04 10:12:19, Info CSI 000001a0 [SR] Repairing 1 components Line 80484: 2013-01-04 10:12:19, Info CSI 000001a1 [SR] Beginning Verify and Repair transaction Line 80485: 2013-01-04 10:12:19, Info CSI 000001a2 [SR] Cannot repair member file [l:32{16}]"tsmxuui3.dll.mui" of prnts003.inf.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing Line 80486: 2013-01-04 10:12:19, Info CSI 000001a3 [SR] Cannot repair member file [l:32{16}]"tsmxuui3.dll.mui" of prnts003.inf.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing Line 80487: 2013-01-04 10:12:19, Info CSI 000001a4 [SR] This component was referenced by [l:192{96}]"Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~x86~en-US~6.1.7601.17514.INF_prnts003" Line 80488: 2013-01-04 10:12:19, Info CSI 000001a5 [SR] Could not reproject corrupted file [ml:520{260},l:104{52}]"\??\C:\Windows\System32\spool\drivers\w32x86\3\en-US"\[l:32{16}]"tsmxuui3.dll.mui"; source file in store is also corrupted Line 80493: 2013-01-04 10:12:19, Info CSI 000001a7 [SR] Repair complete
I'll create a fix for the file error, and we'll see if that changes anything significant, and work on the rest - back later.
I've uploaded a file - rainxx.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
This should create a folder C:\rainxx
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\rainxx
hit the enter key - if you get a 'Not Found' error try
DIR D:\rainxx
or
DIR E:\rainxx
The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...
XCOPY <drive>:\rainxx <drive>:\windows\winsxs /y /i /s /v /h
run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and attach the new CBS.log file to your reply
Also run a new MGADiag report, and post the result.