Windows 7 giving WAT not running genuine windows message

jaycul2k

New member
Member
Local time
10:14 AM
Messages
28
My windows 7 Ultimate x64 crashed a few days ago and I was forced to do a system restore. Afterwards I started receiving the dreaded WAT pop-ups saying I was running non-genuine windows. I've also had some issues with a few dll files going bad in this time period so I'm wondering if that has anything to do with it. Here's my diagnostic tool output. Greatly appreciate any help

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {53ECD5CD-D3ED-4205-B0AE-9220BC7E2A50}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Users\Jason\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{53ECD5CD-D3ED-4205-B0AE-9220BC7E2A50}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2048840114-538357040-3838390185</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L701X   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="6"/><Date>20101224000000.000000+000</Date></BIOS><HWID>C36D3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0352011
Installation ID: 012602492244325031717991980271866560623823727730241592
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 1/16/2013 9:37:42 AM

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000000A8B0
Event Time Stamp: 1:16:2013 09:36
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAHKIESaCzKn5OCpRhzp9a67CHPoQKcHZW

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			PTLTD 			 APIC  
  FACP			INTEL 		CALPELLA
  HPET			INTEL 		CALPELLA
  BOOT			PTLTD 		$SBFTBL$
  MCFG			INTEL 		CALPELLA
  SLIC			DELL  		QA09   
  OSFR			DELL  		DELL    
  ASF!			  CETP		    CETP
  SSDT			PmRef		CpuPm
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
You definitely have dll problems - interestingly similar to another post I'm dealing with elsewhere
Code:
File Scan Data-->
File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100


Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.

SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.


Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and attach it to your reply

Post a new MGADiag report with details of any error messages encountered.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Only error message I got when running SFC was that it said there were some corrupt files, some of which could not be fixed. Here is the diagnostic report post sfc with the attached cbs.log

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {53ECD5CD-D3ED-4205-B0AE-9220BC7E2A50}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Users\Jason\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{53ECD5CD-D3ED-4205-B0AE-9220BC7E2A50}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2048840114-538357040-3838390185</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L701X   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="6"/><Date>20101224000000.000000+000</Date></BIOS><HWID>C36D3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0352011
Installation ID: 012602492244325031717991980271866560623823727730241592
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 1/16/2013 3:01:54 PM

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000000A8B0
Event Time Stamp: 1:16:2013 09:36
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAHKIESaCzKn5OCpRhzp9a67CHPoQKcHZW

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			PTLTD 			 APIC  
  FACP			INTEL 		CALPELLA
  HPET			INTEL 		CALPELLA
  BOOT			PTLTD 		$SBFTBL$
  MCFG			INTEL 		CALPELLA
  SLIC			DELL  		QA09   
  OSFR			DELL  		DELL    
  ASF!			  CETP		    CETP
  SSDT			PmRef		CpuPm
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
The report makes interesting reading - here's the condensed results.
Code:
 Line 6356: 2013-01-16 10:51:31, Info                  CSI    0000037f [SR] Repairing 19 (0x0000000000000013) components
 Line 6357: 2013-01-16 10:51:31, Info                  CSI    00000380 [SR] Beginning Verify and Repair transaction
 Line 6360: 2013-01-16 10:51:31, Info                  CSI    00000382 [SR] Cannot repair member file [l:16{8}]"uudf.dll" of Microsoft-Windows-FileSystemUtilityUdfsLibrary, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6363: 2013-01-16 10:51:31, Info                  CSI    00000384 [SR] Cannot repair member file [l:24{12}]"dciman32.dll" of Microsoft-Windows-GDI, Version = 6.1.7601.18032, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6366: 2013-01-16 10:51:32, Info                  CSI    00000386 [SR] Cannot repair member file [l:22{11}]"normnfd.nls" of Microsoft-Windows-International-Normalization, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6369: 2013-01-16 10:51:32, Info                  CSI    00000388 [SR] Cannot repair member file [l:22{11}]"iscsium.dll" of Microsoft-Windows-iSCSI_Initiator_Service, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6372: 2013-01-16 10:51:32, Info                  CSI    0000038a [SR] Cannot repair member file [l:24{12}]"splwow64.exe" of Microsoft-Windows-Printing-Spooler-Splwow64, Version = 6.1.7601.17777, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6375: 2013-01-16 10:51:32, Info                  CSI    0000038c [SR] Cannot repair member file [l:44{22}]"PrintIsolationHost.exe" of Microsoft-Windows-Printing-Server-Isolation, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6378: 2013-01-16 10:51:32, Info                  CSI    0000038e [SR] Cannot repair member file [l:22{11}]"runonce.exe" of Microsoft-Windows-runonce, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6381: 2013-01-16 10:51:32, Info                  CSI    00000390 [SR] Cannot repair member file [l:20{10}]"tdpipe.sys" of Microsoft-Windows-TerminalServices-TransportDrivers, Version = 6.1.7601.17779, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6384: 2013-01-16 10:51:32, Info                  CSI    00000392 [SR] Cannot repair member file [l:20{10}]"vdsldr.exe" of Microsoft-Windows-VirtualDiskService, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6387: 2013-01-16 10:51:32, Info                  CSI    00000394 [SR] Cannot repair member file [l:18{9}]"vdsvd.dll" of Microsoft-Windows-VirtualDiskService-VirtualDiskProvider, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6391: 2013-01-16 10:51:32, Info                  CSI    00000396 [SR] Cannot repair member file [l:30{15}]"PerfCounter.dll" of NetFx-PERFCOUNTER_DLL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6395: 2013-01-16 10:51:32, Info                  CSI    00000398 [SR] Cannot repair member file [l:24{12}]"mscorsvw.exe" of NetFx-MSCORSVW_EXE, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6398: 2013-01-16 10:51:32, Info                  CSI    0000039a [SR] Cannot repair member file [l:22{11}]"usb.inf_loc" of usb.inf.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6401: 2013-01-16 10:51:32, Info                  CSI    0000039c [SR] Cannot repair member file [l:22{11}]"iTVData.dll" of Microsoft-Windows-iTVData, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6404: 2013-01-16 10:51:32, Info                  CSI    0000039e [SR] Cannot repair member file [l:16{8}]"Sens.dll" of Microsoft-Windows-Sens-Service, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6407: 2013-01-16 10:51:32, Info                  CSI    000003a0 [SR] Cannot repair member file [l:28{14}]"quartz.dll.mui" of Microsoft-Windows-DirectShow-Core.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6410: 2013-01-16 10:51:32, Info                  CSI    000003a2 [SR] Cannot repair member file [l:16{8}]"d2d1.dll" of Microsoft-Windows-D2D, Version = 6.1.7601.17563, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6413: 2013-01-16 10:51:32, Info                  CSI    000003a4 [SR] Cannot repair member file [l:26{13}]"werui.dll.mui" of Microsoft-Windows-ErrorReportingUI.Resources, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6417: 2013-01-16 10:51:32, Info                  CSI    000003a6 [SR] Cannot repair member file [l:22{11}]"Culture.dll" of NetFx-Culture_DLL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6420: 2013-01-16 10:51:32, Info                  CSI    000003a8 [SR] Cannot repair member file [l:22{11}]"usb.inf_loc" of usb.inf.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6421: 2013-01-16 10:51:32, Info                  CSI    000003a9 [SR] This component was referenced by [l:184{92}]"Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.INF_usb"
 Line 6426: 2013-01-16 10:51:32, Info                  CSI    000003ac [SR] Could not reproject corrupted file [ml:520{260},l:82{41}]"\??\C:\windows\System32\driverstore\en-US"\[l:22{11}]"usb.inf_loc"; source file in store is also corrupted
 Line 6429: 2013-01-16 10:51:32, Info                  CSI    000003ae [SR] Cannot repair member file [l:28{14}]"quartz.dll.mui" of Microsoft-Windows-DirectShow-Core.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6430: 2013-01-16 10:51:32, Info                  CSI    000003af [SR] This component was referenced by [l:266{133}]"Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.Windows Foundation Language Pack"
 Line 6435: 2013-01-16 10:51:32, Info                  CSI    000003b2 [SR] Could not reproject corrupted file [ml:60{30},l:58{29}]"\??\C:\windows\SysWOW64\en-US"\[l:28{14}]"quartz.dll.mui"; source file in store is also corrupted
 Line 6438: 2013-01-16 10:51:32, Info                  CSI    000003b4 [SR] Cannot repair member file [l:26{13}]"werui.dll.mui" of Microsoft-Windows-ErrorReportingUI.Resources, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6439: 2013-01-16 10:51:32, Info                  CSI    000003b5 [SR] This component was referenced by [l:266{133}]"Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.Windows Foundation Language Pack"
 Line 6444: 2013-01-16 10:51:32, Info                  CSI    000003b8 [SR] Could not reproject corrupted file [ml:60{30},l:58{29}]"\??\C:\windows\SysWOW64\en-US"\[l:26{13}]"werui.dll.mui"; source file in store is also corrupted
 Line 6447: 2013-01-16 10:51:32, Info                  CSI    000003ba [SR] Cannot repair member file [l:44{22}]"PrintIsolationHost.exe" of Microsoft-Windows-Printing-Server-Isolation, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6448: 2013-01-16 10:51:32, Info                  CSI    000003bb [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6453: 2013-01-16 10:51:32, Info                  CSI    000003be [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:44{22}]"PrintIsolationHost.exe"; source file in store is also corrupted
 Line 6454: 2013-01-16 10:51:32, Info                  CSI    000003bf [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:24{12}]"dciman32.dll" by copying from backup
 Line 6457: 2013-01-16 10:51:32, Info                  CSI    000003c1 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:24{12}]"dciman32.dll" from store
 Line 6458: 2013-01-16 10:51:32, Info                  CSI    000003c2 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[ml:24{12},l:22{11}]"iscsium.dll" by copying from backup
 Line 6461: 2013-01-16 10:51:32, Info                  CSI    000003c4 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:22{11}]"iscsium.dll" from store
 Line 6462: 2013-01-16 10:51:32, Info                  CSI    000003c5 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:20{10}]"vdsldr.exe" by copying from backup
 Line 6465: 2013-01-16 10:51:32, Info                  CSI    000003c7 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:20{10}]"vdsldr.exe" from store
 Line 6469: 2013-01-16 10:51:32, Info                  CSI    000003c9 [SR] Cannot repair member file [l:30{15}]"PerfCounter.dll" of NetFx-PERFCOUNTER_DLL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6470: 2013-01-16 10:51:32, Info                  CSI    000003ca [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6477: 2013-01-16 10:51:32, Info                  CSI    000003cd [SR] Could not reproject corrupted file [ml:520{260},l:102{51}]"\??\C:\windows\Microsoft.NET\Framework64\v2.0.50727"\[l:30{15}]"PerfCounter.dll"; source file in store is also corrupted
 Line 6481: 2013-01-16 10:51:32, Info                  CSI    000003cf [SR] Cannot repair member file [l:24{12}]"mscorsvw.exe" of NetFx-MSCORSVW_EXE, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6482: 2013-01-16 10:51:32, Info                  CSI    000003d0 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6489: 2013-01-16 10:51:32, Info                  CSI    000003d3 [SR] Could not reproject corrupted file [ml:520{260},l:102{51}]"\??\C:\windows\Microsoft.NET\Framework64\v2.0.50727"\[l:24{12}]"mscorsvw.exe"; source file in store is also corrupted
 Line 6490: 2013-01-16 10:51:32, Info                  CSI    000003d4 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:16{8}]"Sens.dll" by copying from backup
 Line 6493: 2013-01-16 10:51:32, Info                  CSI    000003d6 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:16{8}]"Sens.dll" from store
 Line 6494: 2013-01-16 10:51:32, Info                  CSI    000003d7 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:24{12}]"splwow64.exe" by copying from backup
 Line 6497: 2013-01-16 10:51:32, Info                  CSI    000003d9 [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\windows"\[l:24{12}]"splwow64.exe" from store
 Line 6500: 2013-01-16 10:51:32, Info                  CSI    000003db [SR] Cannot repair member file [l:18{9}]"vdsvd.dll" of Microsoft-Windows-VirtualDiskService-VirtualDiskProvider, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6501: 2013-01-16 10:51:32, Info                  CSI    000003dc [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6506: 2013-01-16 10:51:32, Info                  CSI    000003df [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:18{9}]"vdsvd.dll"; source file in store is also corrupted
 Line 6509: 2013-01-16 10:51:32, Info                  CSI    000003e1 [SR] Cannot repair member file [l:22{11}]"iTVData.dll" of Microsoft-Windows-iTVData, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6510: 2013-01-16 10:51:32, Info                  CSI    000003e2 [SR] This component was referenced by [l:176{88}]"Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.MediaCenter"
 Line 6515: 2013-01-16 10:51:32, Info                  CSI    000003e5 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:22{11}]"iTVData.dll"; source file in store is also corrupted
 Line 6518: 2013-01-16 10:51:32, Info                  CSI    000003e7 [SR] Cannot repair member file [l:22{11}]"runonce.exe" of Microsoft-Windows-runonce, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6519: 2013-01-16 10:51:32, Info                  CSI    000003e8 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6524: 2013-01-16 10:51:32, Info                  CSI    000003eb [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:22{11}]"runonce.exe"; source file in store is also corrupted
 Line 6527: 2013-01-16 10:51:32, Info                  CSI    000003ed [SR] Cannot repair member file [l:16{8}]"uudf.dll" of Microsoft-Windows-FileSystemUtilityUdfsLibrary, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6528: 2013-01-16 10:51:32, Info                  CSI    000003ee [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"

It's not as bad as it looks - there are multiple entries for each failure.

(to be continued!)
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
...continued

Code:
 Line 6533: 2013-01-16 10:51:32, Info                  CSI    000003f1 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:16{8}]"uudf.dll"; source file in store is also corrupted
 Line 6536: 2013-01-16 10:51:32, Info                  CSI    000003f3 [SR] Cannot repair member file [l:20{10}]"tdpipe.sys" of Microsoft-Windows-TerminalServices-TransportDrivers, Version = 6.1.7601.17779, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6537: 2013-01-16 10:51:32, Info                  CSI    000003f4 [SR] This component was referenced by [l:154{77}]"Package_3_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.2621440-6_neutral_GDR"
 Line 6542: 2013-01-16 10:51:32, Info                  CSI    000003f7 [SR] Could not reproject corrupted file [ml:520{260},l:62{31}]"\??\C:\windows\System32\drivers"\[l:20{10}]"tdpipe.sys"; source file in store is also corrupted
 Line 6543: 2013-01-16 10:51:33, Info                  CSI    000003f8 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:16{8}]"d2d1.dll" by copying from backup
 Line 6546: 2013-01-16 10:51:33, Info                  CSI    000003fa [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:16{8}]"d2d1.dll" from store
 Line 6549: 2013-01-16 10:51:33, Info                  CSI    000003fc [SR] Cannot repair member file [l:22{11}]"normnfd.nls" of Microsoft-Windows-International-Normalization, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6550: 2013-01-16 10:51:33, Info                  CSI    000003fd [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6555: 2013-01-16 10:51:33, Info                  CSI    00000400 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:22{11}]"normnfd.nls"; source file in store is also corrupted
 Line 6559: 2013-01-16 10:51:33, Info                  CSI    00000402 [SR] Cannot repair member file [l:22{11}]"Culture.dll" of NetFx-Culture_DLL, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b03f5f7f11d50a3a}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 6560: 2013-01-16 10:51:33, Info                  CSI    00000403 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 6567: 2013-01-16 10:51:33, Info                  CSI    00000406 [SR] Could not reproject corrupted file [ml:520{260},l:98{49}]"\??\C:\windows\Microsoft.NET\Framework\v2.0.50727"\[l:22{11}]"Culture.dll"; source file in store is also corrupted
 Line 6596: 2013-01-16 10:51:33, Info                  CSI    00000408 [SR] Repair complete


It really isn't that bad! :)

Please download and save the CheckSUR tool from System Update Readiness Tool fixes Windows Update errors in Windows 8, Windows 7, Windows Vista, Windows Server 2008 R2, and Windows Server 2008
(you'll need to look in the details for Method 2)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and attach it to your reply.
Hopefully it will fix at least some of the problems,
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Bad news... ran this, then rebooted my computer. When windows loaded up, my screen went lo-res. When I tried to log in. It gave me the messages that

Windows/system32/RpcRpRemote.dll was not designed to run on this system...
Windows/system32/Userenv.dll was not designed to run on this system...

And then tried to set up a user environment and went to a black screen.
I am currently once again running System Restore

Note: This is the same reason I had to run System Restore in the first place before the WAT messages started occuring
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
It sounds like something has installed 32-bit versions of software into the 64-bit system
Let's try doing the SFC repairs first, then.....


I've uploaded a file - jayaa.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
This should create a folder C:\jayaa

Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\jayaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\jayaa
or
DIR E:\jayaa


The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\jayaa <drive>:\windows\winsxs /y /i /s /v /h

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.


Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link


Also run a new MGADiag report, and post the result.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Ran a few system restores, started with the one that I initially used and it failed for "unknown reasons". Tried one later, after I did the initial restore, and it worked, however still had the userenv,dll error and thus could not get into windows. This occurs in both normal and safe modes.

Am currently running chkdsk /r again and will run sfc after.

If this is unsuccessful, I will probably have to restore the drive to the system default.
If it is successful, I will run the above and post results

Edit: Was successfully able to restore after a bunch of tries, will be posting new log/diagnostic report shortly
 
Last edited:

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
Here is the latest log(attached) and diagnostic after running SFC which this time said that it was able to successfully repair the files.

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {DDC101A9-B226-4689-A1D7-515C8BCDB556}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Users\Jason\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DDC101A9-B226-4689-A1D7-515C8BCDB556}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2048840114-538357040-3838390185</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L701X   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="6"/><Date>20101224000000.000000+000</Date></BIOS><HWID>C36D3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0352011
Installation ID: 012602492244325031717991980271866560623823727730241592
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 1/17/2013 10:11:44 AM

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000000A8B0
Event Time Stamp: 1:16:2013 09:36
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAHKIESaCzKn5OCpRhzp9a67CHPoQKcHZW

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			PTLTD 			 APIC  
  FACP			INTEL 		CALPELLA
  HPET			INTEL 		CALPELLA
  BOOT			PTLTD 		$SBFTBL$
  MCFG			INTEL 		CALPELLA
  SLIC			DELL  		QA09   
  OSFR			DELL  		DELL    
  ASF!			  CETP		    CETP
  SSDT			PmRef		CpuPm
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
There's no sign of any SFC results in that log - please post the latest CBSPersistxxxxxx.cab file
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Sure, here you go
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
There's significant problems in there .....
Code:
 Line 68605: 2013-01-17 10:04:53, Info                  CSI    000003fa [SR] Repairing 6 components
 Line 68606: 2013-01-17 10:04:53, Info                  CSI    000003fb [SR] Beginning Verify and Repair transaction
 Line 68609: 2013-01-17 10:04:53, Info                  CSI    000003fd [SR] Cannot repair member file [l:24{12}]"dciman32.dll" of Microsoft-Windows-GDI, Version = 6.1.7601.18032, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68612: 2013-01-17 10:04:53, Info                  CSI    000003ff [SR] Cannot repair member file [l:22{11}]"iscsium.dll" of Microsoft-Windows-iSCSI_Initiator_Service, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68615: 2013-01-17 10:04:53, Info                  CSI    00000401 [SR] Cannot repair member file [l:24{12}]"splwow64.exe" of Microsoft-Windows-Printing-Spooler-Splwow64, Version = 6.1.7601.17777, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68618: 2013-01-17 10:04:53, Info                  CSI    00000403 [SR] Cannot repair member file [l:20{10}]"vdsldr.exe" of Microsoft-Windows-VirtualDiskService, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68621: 2013-01-17 10:04:53, Info                  CSI    00000405 [SR] Cannot repair member file [l:16{8}]"Sens.dll" of Microsoft-Windows-Sens-Service, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68624: 2013-01-17 10:04:53, Info                  CSI    00000407 [SR] Cannot repair member file [l:16{8}]"d2d1.dll" of Microsoft-Windows-D2D, Version = 6.1.7601.17563, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 68625: 2013-01-17 10:04:53, Info                  CSI    00000408 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:24{12}]"dciman32.dll" by copying from backup
 Line 68626: 2013-01-17 10:04:53, Info                  CSI    00000409 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:24{12}]"dciman32.dll" from store
 Line 68627: 2013-01-17 10:04:53, Info                  CSI    0000040a [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[ml:24{12},l:22{11}]"iscsium.dll" by copying from backup
 Line 68630: 2013-01-17 10:04:53, Info                  CSI    0000040c [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:22{11}]"iscsium.dll" from store
 Line 68631: 2013-01-17 10:04:53, Info                  CSI    0000040d [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:20{10}]"vdsldr.exe" by copying from backup
 Line 68634: 2013-01-17 10:04:53, Info                  CSI    0000040f [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\windows\System32"\[l:20{10}]"vdsldr.exe" from store
 Line 68635: 2013-01-17 10:04:53, Info                  CSI    00000410 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:16{8}]"Sens.dll" by copying from backup
 Line 68638: 2013-01-17 10:04:53, Info                  CSI    00000412 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:16{8}]"Sens.dll" from store
 Line 68639: 2013-01-17 10:04:54, Info                  CSI    00000413 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:24{12}]"splwow64.exe" by copying from backup
 Line 68642: 2013-01-17 10:04:54, Info                  CSI    00000415 [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\windows"\[l:24{12}]"splwow64.exe" from store
 Line 68643: 2013-01-17 10:04:54, Info                  CSI    00000416 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:16{8}]"d2d1.dll" by copying from backup
 Line 68646: 2013-01-17 10:04:54, Info                  CSI    00000418 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:16{8}]"d2d1.dll" from store
 Line 68675: 2013-01-17 10:04:54, Info                  CSI    0000041a [SR] Repair complete
 Line 68676: 2013-01-17 10:04:54, Info                  CSI    0000041b [SR] Committing transaction
 Line 68681: 2013-01-17 10:04:54, Info                  CSI    0000041f [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

All these problems appear to have been solved.

Please run a new SFC scan and post the new CBS log - this should confirm it.
Then reboot, and create a manual Restore Point
Please also run a new CheckSUR scan (after backups!) and see if you get a better result this time.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Ran SFC again, rebooted, and attached the log.

Ran a new CheckSUR scan with no problems.

Ran another MGA Diagnostic, and copied results

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {DDC101A9-B226-4689-A1D7-515C8BCDB556}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Users\Jason\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DDC101A9-B226-4689-A1D7-515C8BCDB556}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2048840114-538357040-3838390185</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L701X   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="6"/><Date>20101224000000.000000+000</Date></BIOS><HWID>C36D3E07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0352011
Installation ID: 012602492244325031717991980271866560623823727730241592
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 1/18/2013 7:51:05 AM

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000000A8B0
Event Time Stamp: 1:17:2013 21:04
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAHKIESaCzKn5OCpRhzp9a67CHPoQKcHZW

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			PTLTD 			 APIC  
  FACP			INTEL 		CALPELLA
  HPET			INTEL 		CALPELLA
  BOOT			PTLTD 		$SBFTBL$
  MCFG			INTEL 		CALPELLA
  SLIC			DELL  		QA09   
  OSFR			DELL  		DELL    
  ASF!			  CETP		    CETP
  SSDT			PmRef		CpuPm
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
The CBS log is interesting - it's a shame I don't understand the ramifications :(
The SFC scan didn't find any problems.... but the section after it ran is the interesting bit
KB2726535 seems to be stuck in staging - but Windows isn't worried about it :)

I suspect that there's either a dll file unregistered somewhere, or registry corruption - or possibly a broken certificate (although I would have expected that to impact more files).
Have you been using any form or registry cleaner or optimizer??
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
No, I've used programs such as Combofix, Spybot, and Malwarebytes for dealing with the occasional virus and whatnot, but certainly not any specific Registry cleaners or optimizers.

I can tell you that before this all started I had been having some issues with the DC power jack before this started, and there were times when the battery drained completely, and the power would cut midboot. Soon after this was fixed, the computer flagged itself to run scandisk at which time it found literally a few hundred errors as it went through, and I started receiving some .dll messages when I would login to windows.

So it is quite possible that the registry also got messed up during that time.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
Ah.
Please open the Event Viewer
Navigate in the left pane to the Windows logs/Application
look in the error list (or filter it) for Wininit events - doubleclick on the latest to open it, and click on the Copy button.
Past the result in your reply.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Code:
Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          1/1/2013 8:03:58 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Jason-PC
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x1f for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc05 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 3077.
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x285 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x1051 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 4177.
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x2f5 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x1936 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 6454.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x166c for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x4e9a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 20122.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x490d for possibly 0x70 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x5b93 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 23443.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xe395 for possibly 0x2c clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x7ccf is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 31951.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xe8fb for possibly 0x29 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x847d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 33917.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x17c9 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc3ca is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 50122.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x2d73 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc42d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 50221.
Attribute record of type 0x80 and instance tag 0x5 is cross linked
starting at 0x6f88 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x5
in file 0xc7c0 is already in use.
Deleted corrupt attribute list entry
with type code 128 in file 51136.
Unable to locate attribute with instance tag 0x5 and segment
reference 0x1b00000000c7c1.  The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 51137.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x45f3 for possibly 0xa clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xccb8 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 52408.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x69a for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd40c is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54284.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x970 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd416 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54294.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x237d for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd5c3 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54723.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x27e for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xf313 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 62227.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xb2f for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xf837 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 63543.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x559 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xf8a0 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 63648.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x53dc for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x10675 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 67189.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x28e for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x11136 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 69942.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x4f03 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x1116a is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 69994.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xaa21 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x11a71 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 72305.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x81de4 for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x15615 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 87573.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x1854 for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x156ba is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 87738.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x6eba for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x15922 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 88354.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x2fbc for possibly 0x40 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x15c1a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 89114.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x14c7 for possibly 0x6 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x15e97 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 89751.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x2a5 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x160da is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90330.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x46d8 for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x160e6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90342.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4ee7 for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16100 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90368.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4efe for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16107 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90375.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4eef for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1610d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90381.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4ef7 for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16110 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90384.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6e96 for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16118 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90392.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6ea3 for possibly 0xc clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1619a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90522.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xc56 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x161d6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90582.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6a74 for possibly 0x18 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1620a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90634.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xc84 for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16260 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90720.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x1fb for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x162da is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90842.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x103f for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x162de is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90846.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6eaf for possibly 0x6 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x162fc is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90876.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x371 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x16441 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91201.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xad40 for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x1647c is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91260.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xe94c for possibly 0xe clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x1647f is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91263.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6b1e for possibly 0x15 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1678b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 92043.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x12 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1679b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 92059.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x456c for possibly 0x9 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1770b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96011.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xbb93 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x178ca is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96458.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xe9ac for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x17a3b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96827.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6eb1 for possibly 0x9 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x17b46 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 97094.
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x644 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x17d6f is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 97647.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x704 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x17f0d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 98061.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x7558 for possibly 0xa clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x180a3 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 98467.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xf71e for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x18512 is already in use.
Deleting corrupt attribute record (128, ""
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-02T01:03:58.000000000Z" />
    <EventRecordID>6931</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>Jason-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x1f for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc05 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 3077.
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x285 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x1051 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 4177.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
Here is part 2...

Code:
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x2f5 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x1936 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 6454.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x166c for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x4e9a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 20122.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x490d for possibly 0x70 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x5b93 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 23443.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xe395 for possibly 0x2c clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x7ccf is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 31951.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xe8fb for possibly 0x29 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x847d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 33917.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x17c9 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc3ca is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 50122.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x2d73 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xc42d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 50221.
Attribute record of type 0x80 and instance tag 0x5 is cross linked
starting at 0x6f88 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x5
in file 0xc7c0 is already in use.
Deleted corrupt attribute list entry
with type code 128 in file 51136.
Unable to locate attribute with instance tag 0x5 and segment
reference 0x1b00000000c7c1.  The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 51137.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x45f3 for possibly 0xa clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xccb8 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 52408.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x69a for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd40c is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54284.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x970 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd416 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54294.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x237d for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xd5c3 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 54723.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x27e for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0xf313 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 62227.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xb2f for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xf837 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 63543.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x559 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0xf8a0 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 63648.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x53dc for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x10675 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 67189.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x28e for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x11136 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 69942.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x4f03 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x1116a is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 69994.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xaa21 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x11a71 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 72305.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x81de4 for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x15615 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 87573.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x1854 for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x156ba is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 87738.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x6eba for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x15922 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 88354.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x2fbc for possibly 0x40 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x15c1a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 89114.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x14c7 for possibly 0x6 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x15e97 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 89751.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x2a5 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x160da is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90330.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x46d8 for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x160e6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90342.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4ee7 for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16100 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90368.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4efe for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16107 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90375.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4eef for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1610d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90381.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x4ef7 for possibly 0x7 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16110 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90384.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6e96 for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16118 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90392.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6ea3 for possibly 0xc clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1619a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90522.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xc56 for possibly 0x4 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x161d6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90582.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6a74 for possibly 0x18 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1620a is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90634.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xc84 for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x16260 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90720.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x1fb for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x162da is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90842.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x103f for possibly 0x5 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x162de is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90846.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6eaf for possibly 0x6 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x162fc is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 90876.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x371 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x16441 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91201.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xad40 for possibly 0xd clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x1647c is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91260.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0xe94c for possibly 0xe clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x1647f is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 91263.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6b1e for possibly 0x15 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1678b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 92043.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x12 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1679b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 92059.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x456c for possibly 0x9 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x1770b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96011.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xbb93 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x178ca is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96458.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0xe9ac for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x17a3b is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 96827.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x6eb1 for possibly 0x9 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x17b46 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 97094.
Attribute record of type 0xa0 and instance tag 0x3 is cross linked
starting at 0x644 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x3
in file 0x17d6f is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 97647.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x704 for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x17f0d is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 98061.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x7558 for possibly 0xa clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x180a3 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 98467.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xf71e for possibly 0x8 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x18512 is already in use.
Deleting corrupt attribute record (128, ""</Data>
  </EventData>
</Event>
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
OUCH!
Please run a full CHKDSK, then post the new event report - this one might contain more useful data (that one overflowed the buffer in the Event)


Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
In the meantime while I'm waiting for the 2-3 hours that will take... that was the event with all the errors. I ran a full chkdsk /r since then. Here is the log of that.

Code:
Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          1/14/2013 3:47:32 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Jason-PC
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  293120 file records processed.                                         

File verification completed.
  988 large file records processed.                                   

  0 bad file records processed.                                     

  2 EA records processed.                                           

  60 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  359824 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  293120 file SDs/SIDs processed.                                        

Cleaning up 29 unused index entries from index $SII of file 0x9.
Cleaning up 29 unused index entries from index $SDH of file 0x9.
Cleaning up 29 unused security descriptors.
Security descriptor verification completed.
  33353 data files processed.                                           

CHKDSK is verifying Usn Journal...
  36230800 USN bytes processed.                                            

Usn Journal verification completed.
Windows has checked the file system and found no problems.

 717173397 KB total disk space.
 254839912 KB in 166085 files.
     99436 KB in 33354 indexes.
         0 KB in bad sectors.
    419249 KB in use by the system.
     65536 KB occupied by the log file.
 461814800 KB available on disk.

      4096 bytes in each allocation unit.
 179293349 total allocation units on disk.
 115453700 allocation units available on disk.

Internal Info:
00 79 04 00 1a 0b 03 00 64 76 05 00 00 00 00 00  .y......dv......
89 02 00 00 3c 00 00 00 00 00 00 00 00 00 00 00  ....<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-14T20:47:32.000000000Z" />
    <EventRecordID>7480</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>Jason-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  293120 file records processed.                                         

File verification completed.
  988 large file records processed.                                   

  0 bad file records processed.                                     

  2 EA records processed.                                           

  60 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  359824 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  293120 file SDs/SIDs processed.                                        

Cleaning up 29 unused index entries from index $SII of file 0x9.
Cleaning up 29 unused index entries from index $SDH of file 0x9.
Cleaning up 29 unused security descriptors.
Security descriptor verification completed.
  33353 data files processed.                                           

CHKDSK is verifying Usn Journal...
  36230800 USN bytes processed.                                            

Usn Journal verification completed.
Windows has checked the file system and found no problems.

 717173397 KB total disk space.
 254839912 KB in 166085 files.
     99436 KB in 33354 indexes.
         0 KB in bad sectors.
    419249 KB in use by the system.
     65536 KB occupied by the log file.
 461814800 KB available on disk.

      4096 bytes in each allocation unit.
 179293349 total allocation units on disk.
 115453700 allocation units available on disk.

Internal Info:
00 79 04 00 1a 0b 03 00 64 76 05 00 00 00 00 00  .y......dv......
89 02 00 00 3c 00 00 00 00 00 00 00 00 00 00 00  ....<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
  </EventData>
</Event>
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64
OS
Windows 7 Ultimate x64
Back
Top