Windows Update Removed Windows Installer

hxl7 · Jul 15, 2012

Hello ... I just ran update on a Vista Home Premium Service Pack 2 machine that has had NO problems. Following that, I found Windows Installer was no longer listed in Services.

MSIEXEC.EXE is in C:\Windows\System32. It is version 4.5.6002.18005.

I tried to download and install a new copy of the x86 Installer, but the message said that "The update does not apply to your system."

Download: Windows Installer 4.5 - Microsoft Download Center - Download Details

Thank you very much for any help.

Bill

NoelDP · Jul 15, 2012

Please open an Elevated COmmand Prompt, and run the following commands.

NET START MSISERVER
SC QC MSISERVER

copy and past the results to your reply

Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

hxl7 · Jul 15, 2012

Thank you so much for replying.

I ran the first command from an elevated prompt from the C:\windows\system32 directory and received the following message:
"System error 3 has occurred"
"The system cannot find the path specified"

NoelDP · Jul 15, 2012

OK - please repeat that, and try the second command as well this time
Please post the output, complete

hxl7 · Jul 15, 2012

1st command
"System error 3 has occurred"
"The system cannot find the path specified"

2nd command
" [SC] QueryServiceConfig2 <delayed autostart flag> FAILED 2: "
" The system cannot find the path specified "

NoelDP · Jul 15, 2012

You obviously have some serious corruption issues (not to mention being unable to follow instructions).
Please attempt the following - although I have my doubts as to whether the system response will be any better....

Please run a full CHKDSK and SFC scan....
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.

You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

The chkdsk will take a few hours depending on the size
of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally
(possibly after a second auto-reboot) - then run the SFC

SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator - the Elevated Command Prompt window should pop up
At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.
Post an MGADiag report with details of any error messages encountered.

hxl7 · Jul 15, 2012

Thanks again.

I ran SFC prior to accessing this forum and it did not turn up any problems.

This is really quite a mystery re/what might have happened. This is a fairly new Vista reinstall and has been a backup computer with little use. Several anti-virus programs are used to keep it clean (manually run).

Windows Update really did a number then if there is corruption.

CHKDSK is running now ... I'll be back.

Not sure what you meant re/not following instructions...

Best, Bill

NoelDP · Jul 15, 2012

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

karlsnooks · Jul 15, 2012

In addition to Noel's excellent advice, here is another way of posting the results of running chkdsk:

# **********************INSTRUCTIONS**************************
# STEP 1 ** RUN POWERSHELL AS ADMINISTRATOR ******************
# ************************************************************
#
# WIN key | type POWERSHELL | do NOT hit ENTER |
# in the PROGRAMS list, right-click on WINDOWS POWERSHELL |
# choose "Run as administrator" |
# Click on the YES button (if such appears)
#
# WIN key = key with Microsoft log on top
#
# for the guru:
# WIN | type POWERSHELL | CTRL+SHIFT+ENTER key combo | ALT+Y keycombo
# ************************************************************
# STEP 2 ** COPY AND PASTE ***********************************
# ************************************************************
#
# COPY the script using CTRL+C,
# COPY every line of script down thru both EXIT statements
#
# PASTE into Powershell
#----Right-Click at the PowerShell Prompt
#----(Ctrl+V does not work)
#
# Start copying with first script line without a # at start of the line
# Note: Actually, you can paste the entire file if you rather
#-------Lines starting with a # are ignored by PowerShell
# ************************************************************
# STEP 3 ** SCRIPT OUTPUT & SCRIPT PURPOSE *******************
# ************************************************************
# --The script output and purpose is given at the very front of the script
#
# --The script output and purpose is given at the very front of the script
#
# ************************************************************
# ***************** NOTE - POWERSHELL VERSION*****************
# if you receive this error msg:
#--The system can not find the path specified
# you may need to update your PowerShell
# you must be using Powershell 2.0 or later.
#
# To determine your Powershell version:
#---Run PowerShell
#---enter $host.version
#---you should see at least:
# Major Minor Build Revision
# ----- ----- ----- --------
# 2......0......-1.....-1
#
# If you do not see the above, update your Vista/Win 7.
# ************************************************************
# *************** NOTE - EXECUTION POLICY*********************
# If you haven't set the execution policy, you may need to:
#---Run PowerShell
#---enter SET-EXECUTIONPOLICY -EXECUTIONPOLICY REMOTESIGNED
# ************************************************************

karlsnooks · Jul 15, 2012

Sorry.

Failed to include the script!

PHP:

# ************************************************************
# Places CHKDSKLOGS.txt on your DESKTOP
#
# Results of running chkdsk (check disk) are in ChkDskLogs.txt
# ************************************************************

$events = get-winevent -filterhashtable @{logname='application';id=1001,26212,26214} -verbose:$false -ea:silentlycontinue |
sort-object -property timecreated -desc | 
where {($_.providername -ne 'Microsoft-Windows-LoadPerf') -and ($_.providername -ne 'Windows Error Reporting')}

If ($events -eq $Null) {"No check disk logs exist." | OUT-FILE $env:userprofile\desktop\CHKDSKLOGS.TXT} ELSE {
$events | SELECT timecreated, id, message |
format-table -auto -wrap | OUT-FILE $env:userprofile\desktop\CHKDSKLOGS.TXT }

EXIT
EXIT

# ************************************************************

hxl7 · Jul 15, 2012

Thank you karlsnooks for the suggestion but CHKDSK was already well under way.

CHKDSK completed finding no errors or problems.

MGADiag results follows. Thanks for your continued assistance. -Bill

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-JQMWD-2QJRJ-RJ34F
Windows Product Key Hash: R8gPTEFMoOygFewoq/uOoWMpz68=
Windows Product ID: 89578-OEM-7332157-00237
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6002.2.00010300.2.0.003
ID: {0932EC09-CDBF-4C9A-9861-D39D65CBDC09}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.120402-0336
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\user1\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{0932EC09-CDBF-4C9A-9861-D39D65CBDC09}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-RJ34F</PKey><PID>89578-OEM-7332157-00237</PID><PIDType>2</PIDType><SID>S-1-5-21-1864999921-4217884488-1375275430</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite A205</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>2.50 </Version><SMBIOSVersion major="2" minor="4"/><Date>20081208000000.000000+000</Date></BIOS><HWID>56313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, HomePremium edition
Description: Windows Operating System - Vista, OEM_SLP channel
Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89578-00146-321-500237-02-1033-6000.0000-2972011
Installation ID: 083512399681479390369025341662485500046503187565588654
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: RJ34F
License Status: Licensed

Windows Activation Technologies-->
N/A

HWID Data-->
HWID Hash Current: NAAAAAEAAwABAAIAAQABAAAAAgABAAEAJJRcmEaeJqnkM0aDNjhesrpb8vQ6/SqurFYqhQ==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20000
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL CRESTLNE
FACP TOSINV CRESTLNE
HPET INTEL CRESTLNE
BOOT TOSINV $SBFTBL$
MCFG INTEL CRESTLNE
TCPA Intel CRESTLN
TMOR TOSINV
APIC INTEL CRESTLNE
SLIC TOSINV TOSINV00
SSDT SataRe SataAhci
SSDT SataRe SataAhci
SSDT SataRe SataAhci
SSDT SataRe SataAhci

karlsnooks · Jul 15, 2012

Read the info I posted.

The results of chkdsk are always available unless you clear out the event logs.

NoelDP · Jul 15, 2012

I was expecting to see a characteristic error in the report - it's not there.
despite that, it may be worth running a few limited test commands.

Please open an Elevated Command Prompt window, and run the following commands.

REG QUERY HKU
REG QUERY HKU\S-1-5-20
REG QUERY HKU\S-1-5-20\Environment
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
ICACLS C:\Windows\ServiceProfiles\NetworkService
ICACLS C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
DIR C:\Windows\ServiceProfiles\NetworkService /as
DIR C:\Windows\ServiceProfiles\NetworkService /ah

copy and paste the resultss to your reply.

Here are some instructions to make life easier (again)

1) To open an Elevated Command Prompt Window (the CP window),
click on Start, All Programs, Accessories – then right-click on Command Prompt,
and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands,
and right-click on the highlight – select Copy.
In the CP Windows, click on the black/white icon at top left – select Paste.
The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left,
and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

karlsnooks · Jul 15, 2012

Noel,
For pasting, they should be able to rt-click in the command shell window and choose Paste from the options listed.

If "quick edit" has been enabled then the paste will take place without having to select past from the options listed.

hxl7 · Jul 15, 2012

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKU

HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-21-1864999921-4217884488-1375275430-1000
HKEY_USERS\S-1-5-21-1864999921-4217884488-1375275430-1000_Classes
HKEY_USERS\S-1-5-18

C:\Windows\system32>REG QUERY HKU\S-1-5-20

HKEY_USERS\S-1-5-20
(Default) REG_SZ Empty

HKEY_USERS\S-1-5-20\AppEvents
HKEY_USERS\S-1-5-20\Console
HKEY_USERS\S-1-5-20\Control Panel
HKEY_USERS\S-1-5-20\Environment
HKEY_USERS\S-1-5-20\EUDC
HKEY_USERS\S-1-5-20\Keyboard Layout
HKEY_USERS\S-1-5-20\Network
HKEY_USERS\S-1-5-20\Printers
HKEY_USERS\S-1-5-20\Software

C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment

HKEY_USERS\S-1-5-20\Environment
TEMP REG_EXPAND_SZ %USERPROFILE%\AppData\Local\Temp
TMP REG_EXPAND_SZ %USERPROFILE%\AppData\Local\Temp

C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\ProfileList\S-1-5-20"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
5-20
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkSer
vice
Flags REG_DWORD 0x0
State REG_DWORD 0x0

C:\Windows\system32>ICACLS C:\Windows\ServiceProfiles\NetworkService
C:\Windows\ServiceProfiles\NetworkService NT AUTHORITY\SYSTEM

OI)(CI)(F)
BUILTIN\Administrators

OI)(CI)(F)
NT AUTHORITY\NETWORK SERVICE

OI)(CI)(
F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>ICACLS C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT

C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT TOSHIBA\user1

I)(F)
NT AUTHORITY\SYSTEM

I)(F)
BUILTIN\Administrators

I)(
F)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NetworkService /as
Volume in drive C is SQ004393V04
Volume Serial Number is DAA2-4ABD

Directory of C:\Windows\ServiceProfiles\NetworkService

02/03/2012 04:56 PM 65,536 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TM.blf
02/03/2012 04:56 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
12/13/2011 01:40 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
12/10/2011 08:59 PM 65,536 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TM.blf
12/10/2011 08:59 PM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000001.regtrans-ms
11/02/2006 05:57 AM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000002.regtrans-ms
07/15/2012 12:05 PM 65,536 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TM.blf
07/15/2012 12:05 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
04/01/2012 06:03 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
04/01/2012 05:29 PM 65,536 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TM.blf
04/01/2012 05:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/14/2012 08:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
02/14/2012 06:53 PM 65,536 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TM.blf
02/14/2012 06:53 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/03/2012 08:22 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
15 File(s) 5,570,560 bytes
0 Dir(s) 147,797,721,088 bytes free

C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NetworkService /ah
Volume in drive C is SQ004393V04
Volume Serial Number is DAA2-4ABD

Directory of C:\Windows\ServiceProfiles\NetworkService

10/24/2011 09:34 PM <DIR> AppData
11/02/2006 08:28 AM 1,024 NTUSER.DAT.LOG
07/15/2012 03:18 PM 262,144 ntuser.dat.LOG1
11/02/2006 05:47 AM 0 ntuser.dat.LOG2
02/03/2012 04:56 PM 65,536 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TM.blf
02/03/2012 04:56 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
12/13/2011 01:40 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
12/10/2011 08:59 PM 65,536 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TM.blf
12/10/2011 08:59 PM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000001.regtrans-ms
11/02/2006 05:57 AM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000002.regtrans-ms
07/15/2012 12:05 PM 65,536 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TM.blf
07/15/2012 12:05 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
04/01/2012 06:03 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
04/01/2012 05:29 PM 65,536 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TM.blf
04/01/2012 05:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/14/2012 08:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
02/14/2012 06:53 PM 65,536 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TM.blf
02/14/2012 06:53 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/03/2012 08:22 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
18 File(s) 5,833,728 bytes
1 Dir(s) 147,796,836,352 bytes free

C:\Windows\system32> THANK YOU!!!!!!

karlsnooks · Jul 15, 2012

that "past" should have been "paste"

hxl7 · Jul 15, 2012

karlsnooks ... I pasted the script but it caused the CMD window to close before I could see what happened.

NoelDP · Jul 15, 2012

karlsnooks said:
Noel,
For pasting, they should be able to rt-click in the command shell window and choose Paste from the options listed.

If "quick edit" has been enabled then the paste will take place without having to select past from the options listed.

True - but people may not have that enabled, so it's a case of start with the lowest technology necessary to get the job done withut another Q&A

karlsnooks · Jul 15, 2012

Nowadays, they can always right-click. Whether they get a menu or not depends upon their settings. Without the menu, then paste is instantaneous.

Try it.

NoelDP · Jul 15, 2012

hxl7 said:
C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NetworkService /as
Volume in drive C is SQ004393V04
Volume Serial Number is DAA2-4ABD

Directory of C:\Windows\ServiceProfiles\NetworkService

02/03/2012 04:56 PM 65,536 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TM.blf
02/03/2012 04:56 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
12/13/2011 01:40 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
12/10/2011 08:59 PM 65,536 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TM.blf
12/10/2011 08:59 PM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000001.regtrans-ms
11/02/2006 05:57 AM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000002.regtrans-ms
07/15/2012 12:05 PM 65,536 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TM.blf
07/15/2012 12:05 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
04/01/2012 06:03 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
04/01/2012 05:29 PM 65,536 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TM.blf
04/01/2012 05:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/14/2012 08:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
02/14/2012 06:53 PM 65,536 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TM.blf
02/14/2012 06:53 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/03/2012 08:22 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
15 File(s) 5,570,560 bytes
0 Dir(s) 147,797,721,088 bytes free

C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NetworkService /ah
Volume in drive C is SQ004393V04
Volume Serial Number is DAA2-4ABD

Directory of C:\Windows\ServiceProfiles\NetworkService

10/24/2011 09:34 PM <DIR> AppData
11/02/2006 08:28 AM 1,024 NTUSER.DAT.LOG
07/15/2012 03:18 PM 262,144 ntuser.dat.LOG1
11/02/2006 05:47 AM 0 ntuser.dat.LOG2
02/03/2012 04:56 PM 65,536 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TM.blf
02/03/2012 04:56 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
12/13/2011 01:40 PM 524,288 NTUSER.DAT{2fca40a8-23ac-11e1-bb4b-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
12/10/2011 08:59 PM 65,536 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TM.blf
12/10/2011 08:59 PM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000001.regtrans-ms
11/02/2006 05:57 AM 524,288 NTUSER.DAT{3a539865-6a70-11db-887c-d362bd
253390}.TMContainer00000000000000000002.regtrans-ms
07/15/2012 12:05 PM 65,536 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TM.blf
07/15/2012 12:05 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
04/01/2012 06:03 PM 524,288 NTUSER.DAT{7d6c0128-7c5a-11e1-99e5-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
04/01/2012 05:29 PM 65,536 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TM.blf
04/01/2012 05:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/14/2012 08:29 PM 524,288 NTUSER.DAT{80d5d8cf-5777-11e1-ac0f-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
02/14/2012 06:53 PM 65,536 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TM.blf
02/14/2012 06:53 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
02/03/2012 08:22 PM 524,288 NTUSER.DAT{c22de7ea-4ec1-11e1-bf62-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
18 File(s) 5,833,728 bytes
1 Dir(s) 147,796,836,352 bytes free

C:\Windows\system32> THANK YOU!!!!!!

I can see what the problem is now - your Network Service hive has gone astray somewhere. (the NTUSER.DAT file is missing)
Perhaps Karl can take over - I'm asleep on my bum

Back tomorrow.

Windows Update Removed Windows Installer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer