Vista Problems

Forums › Microsoft Windows › Vista Problems

mme

161 posts

Master Geek

#18754 22-Jan-2008 18:09

Hi

I have just bought this new laptop with vista home basic on it (3 days old)

Specs:
OS: Vista Home Basic
RAM: 512MB
HHD: 80GB

Manufacture: HP

When ever I start it up I get two popups telling me that vista is not genuine. However just after I bought the laptop I checked on Microsoft's website and it passed validation now it doesnt.

When ever I try and access outlook 2003 it asks for my email password altought the box saying rember password is checked.

If I open up control panel it just says: 'this folder is empty'

I installed my printer Brother MFC-520C from the borther website (which works on vista it says) and once it finishes installing it tells me that i cannot print with some weird error. Altought the printer shows up in printers.

Here is my hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:59:57, on 22/01/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\conime.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Users\Sandra\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telegraaf.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://au.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com/1Q00CDT/0409/bl8.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://au.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2.0\r3hook.dll
O20 - Winlogon Notify: GoToAssist Express Customer - C:\Program Files\Citrix\GoToAssist Express Customer\48\g2ax_winlogon.dll
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: GoToAssist Express Customer - Unknown owner - C:\Program Files\Citrix\GoToAssist Express Customer\48\g2ax_service.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
O24 - Desktop Component 1: Aqua Real - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

--
End of file - 7005 bytes

manhinli

2483 posts

Uber Geek

Trusted

#106167 22-Jan-2008 18:36

Considering that you have the new laptop for 3 days, I would recommend restoring from the recovery disc. (I made my one straight after I got my Compaq laptop, and I recommend everyone to do the same as PC manufacturers are forcing users to create the discs.)

Then install only essential software (for security purposes), update, and see if WGA says that your copy of Vista Home Basic is genuine or not.

If not, call Microsoft. Then they will take you step-by-step into resloving the matter. As long as you really do have a genuine copy of Vista, it should be perfectly fine.

If it's fine, then install the software one by one and validate after every single install. Also make sure the software is safe to install.

Find me on Twitter!

I posted 1, 2 x 10^3 times!

mme

161 posts

Master Geek

#106183 22-Jan-2008 20:54

sorry i forgot to mention bu I installed hitman pro ,which installes spyware doctor. And it shows this error when starting up the computer:

"There is a problem with your license so notifications will no longer appear
You will no longer recive notifications, including those about your license or activation.
Try to fix this problem, click one of the links below.
Error: 0xC004D401
Description:
The security processor reported a system file mismatch error."

I have already uninstalled those programs but it still comes up and windows wont allow me to vallidate. Is there any way to fix this ?

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#106188 22-Jan-2008 21:19

If Windows Vista Home Basic is like Windows XP Pro then Outlook won't save passwords, this is by design.

I agree with manhili. Use the recover DVD or partition to restore the system to its original system and activate it again. If it fails activation call Microsoft.

If there's a problem, return it to the store and ask HP to fix it or have it replaced with a valid license.

manhinli

2483 posts

Uber Geek

Trusted

#106191 22-Jan-2008 21:29

Here is my take on it.

The first message looks fake. (visually - I haven't researched this yet)

Then the second is the result of something (usually bad or unsafe software) tampering with Windows.

I would recommend you just backup only important personal files (its only been 3 days!) and completely clear your system and restore.

Find me on Twitter!

I posted 1, 2 x 10^3 times!

bradstewart

4335 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#106193 22-Jan-2008 21:40

manhinli: Here is my take on it.

The first message looks fake. (visually - I haven't researched this yet)

Then the second is the result of something (usually bad or unsafe software) tampering with Windows.

They are both genuine. The first notification is that something is messing with something it shouldn't be. The second is the standard non genuine Windows notification.

Reinstall Windows and be very careful with what you are installing. A program would've required admin rights to make such changes.

mme

161 posts

Master Geek

#106197 22-Jan-2008 21:59

Well the laptop is used for business and it was working fine with problems for 1-2 days then Hitman pro was installed (includes pc tools spyware docotor) and this started to happen. now about recovering, I made a backup just after I installed some business accounting software (MYOB v16 ect...) using norton ghost. However how about all the business data that was done in the last 2 days (quite a bit) what is the best way to get that backed up so I dont lose everything.

Now I have also tried to validate windows again on microsoft.com/genuine and it tells me that this was probley caused by incompatible software (like spyware doctor) I have un-installed this but it still happens.

Any sollution beside re-installing windows if no than what is the best way to save my business ettings and accounts.

Thanks

EDIT:
I think I am just going to bring it into a pc repair shop

Batman

Mad Scientist
29760 posts

Uber Geek

Trusted

Lifetime subscriber

#106616 24-Jan-2008 21:13

where did you buy this thing from?

something's quite fishy here - vista home basic does not have windows aero ...

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

manhinli

2483 posts

Uber Geek

Trusted

#106619 24-Jan-2008 21:17

Its just a generic message that's all.

I personally would just wipe it and start again as it'll save time and money.

Find me on Twitter!

I posted 1, 2 x 10^3 times!