Windows not genuine message plus Error message 0x8000247

Dwarf · 18 Dec 2012

Yes, because that way it keeps everything that you've tried and everything that we've suggested together.

basils57 · 18 Dec 2012

Thanks for all of this guys.

OK, following the Windows Update Posting Instructions, firstly when trying to run SURT I got the Error message 'Installer encountered an error 0xc800247'.
I've run the SFC scan and the log is attached

NoelDP · 18 Dec 2012

The CBS.log is fine.
The 0xc8000247 error means that there is a problem with one of the services - probably the TrustedInstaller service, I think.

Please open an Elevated Command Prompt, and run the following commands.

NET START TRUSTEDINSTALLER
SC QUERYEX TRUSTEDINSTALLER

Please also download and run the FarBar Service Scanner....

Please download the Farbar Service Scanner from

http://www.bleepingcomputer.com/download/farbar-service-scanner/

Run it, and tick all the options, then click on the Scan button - copy and paste the report to your response.

basils57 · 18 Dec 2012

FarBar Service Scanner report:

Code:

Farbar Service Scanner Version: 10-12-2012
Ran by Barry (administrator) on 18-12-2012 at 17:13:24
Running from "C:\Users\Barry\Downloads"
Windows 7 Home Premium  (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2011-08-10 01:04] - [2011-06-21 05:39] - 1286016 ____A (Microsoft Corporation) C2DAAEB48F3A47C410B041A0D2382EE1

C:\Windows\system32\dnsrslvr.dll
[2011-04-14 20:01] - [2011-03-03 05:29] - 0132608 ____A (Microsoft Corporation) B15BE77A2BACF9C3177D27518AFE26A9

C:\Windows\system32\mpssvc.dll
[2009-07-13 23:53] - [2009-07-14 01:15] - 0565760 ____A (Microsoft Corporation) 5CD996CECF45CBC3E8D109C86B82D69E

C:\Windows\system32\bfe.dll
[2009-07-13 23:54] - [2009-07-14 01:14] - 0493568 ____A (Microsoft Corporation) 85AC71C045CEB054ED48A7841AAE0C11

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll
[2009-07-13 23:23] - [2009-07-14 01:16] - 0125952 ____A (Microsoft Corporation) 5FD90ABDBFAEE85986802622CBB03446

C:\Windows\system32\vssvc.exe
[2009-07-13 23:24] - [2009-07-14 01:14] - 1025536 ____A (Microsoft Corporation) 7EA2BCD94D9CFAF4C556F5CC94532A6C

C:\Windows\system32\wscsvc.dll
[2011-02-09 12:25] - [2010-12-21 05:38] - 0073728 ____A (Microsoft Corporation) A661A76333057B383A06E65F0073222F

C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll
[2009-07-14 00:15] - [2009-07-14 01:16] - 1912832 ____A (Microsoft Corporation) A33408CC036F9C08142B11BE5E93F0A1

C:\Windows\system32\qmgr.dll
[2009-07-13 23:30] - [2009-07-14 01:16] - 0589312 ____A (Microsoft Corporation) 53F476476F55A27F580661BDE09C4EC4

C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll
[2009-07-13 23:54] - [2009-07-14 01:15] - 0497152 ____A (Microsoft Corporation) 477397B432A256A50EE7E4339EB9EA14

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

NoelDP · 18 Dec 2012

...and the results of the commands??

basils57 · 18 Dec 2012

Sorry Noel:-

C:\Windows\System32>
C:\Windows\System32>NET START TRUSTEDINSTALLER
The Windows Modules Installer service is starting.
The Windows Modules Installer service was started successfully.

C:\Windows\System32>SC QUERYEX TRUSTEDINSTALLER

SERVICE_NAME: TRUSTEDINSTALLER
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 3224
FLAGS :

C:\Windows\System32>

NoelDP · 18 Dec 2012

That's all normal.
Please open an Elevated Command Prompt, and run the following commands.... (I only need to know the number of files and folders found for each command, in the summary after running)

DIR C:\Windows /AR /S
DIR C:\Windows\System32 /AR /S
DIR C:\Windows\System32 /AH /S

basils57 · 18 Dec 2012

DIR C:\Windows /AR /S:
Total Files Listed:
2261 File(s) 4,544,717,215 bytes
174 Dir(s) 475,273,420,800 bytes free

DIR C:\Windows\System32 /AR /S:
Total Files Listed:
66 File(s) 43515784bytes
174 Dir(s) 475,275,943,936 bytes free

DIR C:\Windows\System32 /AH /S:
Total Files Listed:
338 File(s) 238,541,625 bytes
40 Dir(s) 475,273,785,344 bytes free

NoelDP · 18 Dec 2012

There is something rather odd about the number of directories tagged as Read-Only in the System32 structure.

Please run the following command, and post the DIRS.log file that will appear on your desktop

DIR C:\Windows\System32 /AR /S >%userprofile%\desktop\DIRS.log

basils57 · 18 Dec 2012

Here's the DIRS.log file:

Code:

 Volume in drive C is BOOT
 Volume Serial Number is 70C0-1102

 Directory of C:\Windows\System32

27/09/2011  16:19                 8 275A8D252F.sys
27/11/2009  12:51                 8 924B3D9395.sys
22/02/2005  16:55            81,920 aac_parser.ax
01/11/2006  15:20           509,084 acfpdf.dll
01/11/2006  15:20           334,640 acfpdf.drv
01/11/2006  14:03               109 acfpdf.txt
01/11/2006  15:20           403,277 acfpdfu.dll
01/11/2006  15:20           499,712 acfpdfuamd64.dll
01/11/2006  15:20           244,543 acfpdfui.dll
01/11/2006  14:03         1,092,096 acfpdfuia64.dll
01/11/2006  15:20           199,168 acfpdfuiamd64.dll
01/11/2006  14:03           345,088 acfpdfuiia64.dll
19/08/2009  22:50            22,872 AdobePDFUI.dll
01/11/2006  15:20             1,100 amyuni.inf
01/11/2006  15:20             9,095 atpdf251.cat
01/11/2006  15:20         1,966,080 cdintf.dll
01/11/2006  15:20         1,966,080 cdintf251.dll
16/08/2006  14:53           175,104 CoreAAC.ax
17/01/2005  23:26           179,200 DiracSplitter.ax
05/06/2007  00:30            41,296 hlp95en.dll
01/11/2006  14:50           126,976 PDFInstall.exe
31/10/2008  10:51         1,314,816 PVSonyDll.dll
28/12/2010  18:43            14,051 RaCoInst.dat
12/02/2005  23:00           186,880 RLOgg.ax
12/02/2005  23:00            51,712 RLSpeexDec.ax
12/02/2005  23:00            67,584 RLTheoraDec.ax
05/02/2005  23:00            92,672 RLVorbisDec.ax
              27 File(s)      9,925,171 bytes

 Directory of C:\Windows\System32\config\systemprofile

28/11/2010  11:17    <DIR>          Contacts
13/12/2011  15:24    <DIR>          Desktop
28/11/2010  11:17    <DIR>          Links
28/11/2010  11:17    <DIR>          Saved Games
28/11/2010  11:17    <DIR>          Searches
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Google\Custom Buttons

17/10/2011  17:33             1,946 toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml
               1 File(s)          1,946 bytes

 Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows

13/12/2011  15:24    <DIR>          Start Menu
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu

13/12/2011  15:24    <DIR>          .
13/12/2011  15:24    <DIR>          ..
13/12/2011  15:24    <DIR>          Programs
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

13/12/2011  15:24    <DIR>          .
13/12/2011  15:24    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\Contacts

28/11/2010  11:17    <DIR>          .
28/11/2010  11:17    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\Desktop

13/12/2011  15:24    <DIR>          .
13/12/2011  15:24    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\Links

28/11/2010  11:17    <DIR>          .
28/11/2010  11:17    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\Saved Games

28/11/2010  11:17    <DIR>          .
28/11/2010  11:17    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\config\systemprofile\Searches

28/11/2010  11:17    <DIR>          .
28/11/2010  11:17    <DIR>          ..
               0 File(s)              0 bytes

 Directory of C:\Windows\System32\drivers

07/11/2007  14:18             7,936 inidvd.sys
               1 File(s)          7,936 bytes

 Directory of C:\Windows\System32\Macromed\Flash

15/12/2012  12:10        14,460,856 Flash32_11_5_502_135.ocx
               1 File(s)     14,460,856 bytes

 Directory of C:\Windows\System32\oobe

14/07/2009  09:26            84,480 drvmgrtn.dll
14/07/2009  09:26            10,883 envmig.xml
14/07/2009  09:26           146,432 hwcompat.dll
14/07/2009  09:26           101,888 migisol.dll
14/07/2009  09:26            36,864 migtestplugin.dll
14/07/2009  09:26           587,704 oscomps.xml
14/07/2009  09:26            21,026 osfilter.inf
14/07/2009  09:26             1,824 sfcn.dat
14/07/2009  09:26             1,644 sflcid.dat
14/07/2009  09:26         3,225,610 sflistlh.dat
14/07/2009  09:26         2,119,152 sflistw7.dat
14/07/2009  09:26         1,445,052 sflistxp.dat
14/07/2009  09:26            10,457 sfpat.inf
14/07/2009  09:26             9,665 sfpatlh.inf
14/07/2009  09:26               462 sfpatpg.inf
14/07/2009  09:26             3,371 sfpatw7.inf
14/07/2009  09:26             4,386 sfpatxp.inf
14/07/2009  09:26           164,352 upgcmi2migxml.dll
14/07/2009  09:26         5,815,808 upgcore.dll
14/07/2009  09:26           329,216 upgcsiagent.dll
14/07/2009  09:26           689,664 upgdriver.dll
14/07/2009  09:26           258,560 upghost.exe
14/07/2009  09:26           111,616 upgmxeagent.dll
14/07/2009  09:26         2,820,096 upgradeagent.dll
14/07/2009  09:26            59,673 upgradeagent.xml
14/07/2009  09:26           167,756 upgrade_bulk.xml
14/07/2009  09:26            36,864 upgres.dll
14/07/2009  09:26           189,952 wdscore.dll
              28 File(s)     18,454,457 bytes

 Directory of C:\Windows\System32\oobe\en-US

14/07/2009  09:26             6,656 upgdriver.dll.mui
14/07/2009  09:26             9,216 upgres.dll.mui
               2 File(s)         15,872 bytes

 Directory of C:\Windows\System32\restore

01/11/2009  23:02                76 MachineGuid.txt
               1 File(s)             76 bytes

 Directory of C:\Windows\System32\spool\drivers\color

02/04/2008  20:28               749 HP_w2228h.icm
03/04/2008  20:18               789 HP_w2448h.icm
               2 File(s)          1,538 bytes

 Directory of C:\Windows\System32\spool\drivers\w32x86

01/11/2006  14:03               109 acfpdf.txt
01/11/2006  15:20           403,277 acpdf251.dll
01/11/2006  15:20           244,543 pdfui251.dll
               3 File(s)        647,929 bytes

     Total Files Listed:
              66 File(s)     43,515,781 bytes
              21 Dir(s)  475,271,979,008 bytes free