W7 Pro 64, Problem with geniune and updates

Page 2 of 2 FirstFirst 12

  1. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #11

    Interesting....


    Please download the Farbar Service Scanner from

    http://www.bleepingcomputer.com/download/farbar-service-scanner/

    Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

      My Computer
    Quote Quote

  3. err5ttres
    Posts : 9
    Ultimate 64bit
    Thread Starter
       New #12

    here you go. Are we getting anything useful from all this so far?

    Code:
    Farbar Service Scanner Version: 17-08-2013
Ran by Admin (administrator) on 17-08-2013 at 16:04:05
Running from "C:\Users\Admin\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============
Firewall Disabled Policy: 
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0

System Restore:
============
System Restore Disabled Policy: 
========================

Action Center:
============

Windows Update:
============
Windows Autoupdate Disabled Policy: 
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****
      My Computer
    Quote Quote

  4. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #13

    Bother - that shows nothing, but I'm not sure that it covers the normal Event services anyhow, so we'll have to check them manually.

    Please open an Elevated Command Prompt, and run the following commands...
    SC QC EVENTLOG
    SC QUERYEX EVENTLOG
    SC QC wecsvc
    SC QUERYEX wecsvc
    SC QC EVENTSYSTEM
    SC QUERYEX EVENTSYSTEM

    Post the results...

    Here are some instructions to make life easier :)
    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
      My Computer
    Quote Quote

  6. err5ttres
    Posts : 9
    Ultimate 64bit
    Thread Starter
       New #14

    Code:
    Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
C:\Windows\system32>SC QC EVENTLOG
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: EVENTLOG
        TYPE               : 20  WIN32_SHARE_PROCESS
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\System32\svchost.exe -k LocalServiceNetw
orkRestricted
        LOAD_ORDER_GROUP   : Event Log
        TAG                : 0
        DISPLAY_NAME       : Windows Event Log
        DEPENDENCIES       :
        SERVICE_START_NAME : NT AUTHORITY\LocalService
C:\Windows\system32>SC QUERYEX EVENTLOG
SERVICE_NAME: EVENTLOG
        TYPE               : 20  WIN32_SHARE_PROCESS
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 5  (0x5)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
        PID                : 0
        FLAGS              :
C:\Windows\system32>SC QC wecsvc
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: wecsvc
        TYPE               : 20  WIN32_SHARE_PROCESS
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k NetworkService
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : Windows Event Collector
        DEPENDENCIES       : HTTP
                           : Eventlog
        SERVICE_START_NAME : NT AUTHORITY\NetworkService
C:\Windows\system32>SC QUERYEX wecsvc
SERVICE_NAME: wecsvc
        TYPE               : 20  WIN32_SHARE_PROCESS
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 1077  (0x435)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
        PID                : 0
        FLAGS              :
C:\Windows\system32>SC QC EVENTSYSTEM
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: EVENTSYSTEM
        TYPE               : 20  WIN32_SHARE_PROCESS
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k LocalService
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : COM+ Event System
        DEPENDENCIES       : rpcss
        SERVICE_START_NAME : NT AUTHORITY\LocalService
C:\Windows\system32>SC QUERYEX EVENTSYSTEM
SERVICE_NAME: EVENTSYSTEM
        TYPE               : 20  WIN32_SHARE_PROCESS
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
        PID                : 456
        FLAGS              :
C:\Windows\system32>
      My Computer
    Quote Quote

  7. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #15

    You appear to be getting an Access Denied error on attempting to start the Eventlog service, for some reason.

    I'll do some hunting and see if I can track down a test regime - shout if you haven't heard by Wednesday!
      My Computer
    Quote Quote

  8. err5ttres
    Posts : 9
    Ultimate 64bit
    Thread Starter
       New #16

    Noel,

    I decided to format since I need to have the computer ready by tomorrow afternoon.

    Thanks for all the help.
      My Computer
    Quote Quote

  10. NoelDP
    Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       New #17

    Makes sense if you're in a hurry - sorry I couldn't tease some sense out of it!

    Good luck
      My Computer
    Quote Quote

 
Page 2 of 2 FirstFirst 12

  Related Discussions
window not geniune any more ??????
in Windows Updates & Activation

hi.i am having a big problem . i did build my computer in oct 2012 i had a microsoft cd with 32 and 64 bits cd with the key that i pay 130.00 .so i did activeted now 2 day ago i get a popup telling that it is not valide or not geniune and put in new set of key .so i did type the same key that came...
Window 7 not geniune,help please
in Windows Updates & Activation

Pls frnds my window 7 ultimate is showing window not genuine, pls how can i solve the problem without formatting?
Windows 7 Not Geniune (but it is!)
in Windows Updates & Activation

Hello all, A while back after installing an update, my background went black and the computer started displaying the 'Windows 7 Not Geniune' messages. I should note that this is on a netbook (Eee PC) that I bought new from Best Buy in the US (I assume that they don't load pirated software onto...
Not geniune - Trying to remedy with purchased OS
in Windows Updates & Activation

I am getting the "Not Geniune" message. Most likely it truly isn't geniune, as a friend gave it to me when he went to Mac. However, I went out and bought the same version, Win7 ultimate x64 from NewEgg. Is there a way to "cure" my existing install, using the newly purchased software,...
windows geniune problem
in Windows Updates & Activation

OK i hope someone can help. Every couple of days when i start my notebook i get the error screen saying that my version of windows is not geniune and i get the option of "get geniune now or remind me later" i click on cancel and everything is fine. I know my copy is geniune as it was sent to me...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 23:58.
Find Us