MGADiag report - "This Computer is not running genuine Windows"

NoelDP · 09 Feb 2013

Very strange - none of the problem files were replaced, but some new ones were found.

The last time I saw creeping errors like this, the problem was caused by failing RAM.

Download Memtest86+ from www.memtest.org and run it for a few hours (follow their instructions for creating boot media) to see how it performs.

WooDoggies · 09 Feb 2013

Maybe I didn't do something correct with wdgaa file. I extracted it to C: and I see it in C: but when in repair mode at the cmd prompt it would not find it in C: but it did find it in D:. D: is what I used for the remained of the instructions.

I will run the memtest tonight and report results back tomorrow, hopefully that will tell us something.

NoelDP · 09 Feb 2013

Sounds like you did it right, to me :)

See what Memtest has to say.

WooDoggies · 10 Feb 2013

OK, downloaded the memtest and burned the .iso image to a cd. Rebooted and let the test run for 2 1/2 hours. Results showed 3 full passes and 20% complete on the 4th pass with no errors found.

NoelDP · 10 Feb 2013

That probably means that the memory is OK (the forum recommendation here is for 8 passes - but I consider that to be overkill :))

The next check needs to be the hard drive - which in fact you already ran.
Please open Event Viewer, and look for the Windows Logs - Application
In the Source column, look for Wininit events - the latest one is likely to be the output from your CHKDSK run.
Please double-click on that, then use the Copy button, and paste the results into your reply.

WooDoggies · 10 Feb 2013

Please see below for the details from the most recent Wininit dated 02/02/2013.

Code:

Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          2/2/2013 5:33:30 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Home-PC
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  217600 file records processed.                                         

File verification completed.
  1527 large file records processed.                                   

  0 bad file records processed.                                     

  0 EA records processed.                                           

  77 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 5)...
  272176 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 5)...
  217600 file SDs/SIDs processed.                                        

Cleaning up 250 unused index entries from index $SII of file 0x9.
Cleaning up 250 unused index entries from index $SDH of file 0x9.
Cleaning up 250 unused security descriptors.
Security descriptor verification completed.
  27289 data files processed.                                           

CHKDSK is verifying Usn Journal...
  34973136 USN bytes processed.                                            

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  217584 files processed.                                                

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  47502861 free clusters processed.                                        

Free space verification is complete.
Windows has checked the file system and found no problems.

 244195691 KB total disk space.
  53774160 KB in 125074 files.
     80756 KB in 27290 indexes.
         0 KB in bad sectors.
    329331 KB in use by the system.
     65536 KB occupied by the log file.
 190011444 KB available on disk.

      4096 bytes in each allocation unit.
  61048922 total allocation units on disk.
  47502861 allocation units available on disk.

Internal Info:
00 52 03 00 38 53 02 00 98 6f 04 00 00 00 00 00  .R..8S...o......
75 02 00 00 4d 00 00 00 00 00 00 00 00 00 00 00  u...M...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-02-02T23:33:30.000000000Z" />
    <EventRecordID>43936</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>Home-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  217600 file records processed.                                         

File verification completed.
  1527 large file records processed.                                   

  0 bad file records processed.                                     

  0 EA records processed.                                           

  77 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 5)...
  272176 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 5)...
  217600 file SDs/SIDs processed.                                        

Cleaning up 250 unused index entries from index $SII of file 0x9.
Cleaning up 250 unused index entries from index $SDH of file 0x9.
Cleaning up 250 unused security descriptors.
Security descriptor verification completed.
  27289 data files processed.                                           

CHKDSK is verifying Usn Journal...
  34973136 USN bytes processed.                                            

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  217584 files processed.                                                

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  47502861 free clusters processed.                                        

Free space verification is complete.
Windows has checked the file system and found no problems.

 244195691 KB total disk space.
  53774160 KB in 125074 files.
     80756 KB in 27290 indexes.
         0 KB in bad sectors.
    329331 KB in use by the system.
     65536 KB occupied by the log file.
 190011444 KB available on disk.

      4096 bytes in each allocation unit.
  61048922 total allocation units on disk.
  47502861 allocation units available on disk.

Internal Info:
00 52 03 00 38 53 02 00 98 6f 04 00 00 00 00 00  .R..8S...o......
75 02 00 00 4d 00 00 00 00 00 00 00 00 00 00 00  u...M...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
  </EventData>
</Event>

NoelDP · 10 Feb 2013

That looks fine (a lot better than I was expecting, actually!)

OK - let's check something...

Please open a Command Prompt, and run the following commands...

DIR C:\wdgaa
DIR C:\Windows\Winsxs\wdgaa
ICACLS C:\Windows\winsxs

post the results

WooDoggies · 10 Feb 2013

Please see results below. It did not find, "DIR C:\Windows\Winsxs\wdgaa".

Code:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Home>DIR C:\wdgaa
 Volume in drive C has no label.
 Volume Serial Number is 6068-AB8F

 Directory of C:\wdgaa

02/09/2013  01:17 PM    <DIR>          .
02/09/2013  01:17 PM    <DIR>          ..
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-ehome-samplemedia
_31bf3856ad364e35_6.1.7600.16385_none_b6b9b223710b3802
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-musicsamples_31bf
3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-photosamples_31bf
3856ad364e35_6.1.7600.16385_none_f36e0e659b8042be
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-videosamples_31bf
3856ad364e35_6.1.7600.16385_none_51a21f033003affd
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-winsatmediasample
s_31bf3856ad364e35_6.1.7600.16385_none_0b34d0642122c1c4
02/09/2013  01:17 PM    <DIR>          amd64_microsoft-windows-wordpad_31bf3856a
d364e35_6.1.7600.20744_none_8a634cbd9f94998c
               0 File(s)              0 bytes
               8 Dir(s)  186,560,040,960 bytes free

C:\Users\Home>DIR C:\Windows\Winsxs\wdgaa
 Volume in drive C has no label.
 Volume Serial Number is 6068-AB8F

 Directory of C:\Windows\Winsxs

File Not Found

C:\Users\Home>ICACLS C:\Windows\winsxs
C:\Windows\winsxs NT SERVICE\TrustedInstaller:(OI)(CI)(F)
                  BUILTIN\Administrators:(OI)(CI)(RX)
                  NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
                  BUILTIN\Users:(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Home>

NoelDP · 10 Feb 2013

I can't see any reason for the fix not working properly - the source files are in the right place, at least
Please try booting to the Repair Environment again, and repeating the command - let's see if it works this time - and run another SFC scan, and post the results.

WooDoggies · 10 Feb 2013

I re-ran the instructions you gave me yesterday in the Repair Environment. Here is a link to the latest CBS log file. http://sdrv.ms/X1bFut