Over 1 million tech questions and answers.

Sysprep Specialize pass fails CopyProfile

Q: Sysprep Specialize pass fails CopyProfile

Hello -
In the past we applied copyprofile to our answerfiles used at the sysprep stage before we captured images and deployed them using WDS.
We are now trying to sys prep and capture the image without this answer file -- but then apply the answer file with copyprofile set to true in the specialize pass to the captured image in WDS (checking "allow image to install in unattended mode"
in the install image properties and setting the file)
We had tested this successfully before but now we are failing on the specialize pass. Setuperr.log seems to show the copy profile failing.
When does copy profile need to be applied? Must it be applied via an answer file at the sysprep stage in order to work properly? Or can an answer file with copyprofile set to true be applied to the captured install image in WDS?

Thank you -

Read other answers
Preferred Solution: Sysprep Specialize pass fails CopyProfile

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)



I am having a hard time with the sysprep specialize pass.  The error file I am getting from the setupact out of panther is:
2016-01-29 11:57:06, Error [setup.exe] [Action Queue] : Unattend action failed with exit code 4
2016-01-29 11:57:06, Info [setup.exe] [Action Queue] : ProcessActionQueue finish (hr = 0x1f2000)
2016-01-29 11:57:06, Error [setup.exe] Execution of unattend GCs failed; hr = 0x0; pResults->hrResult =0x8030000b
2016-01-29 11:57:06, Info [0x0606cc] IBS Flushing registry to disk...
2016-01-29 11:57:07, Info [0x0606cc] IBS Flush took 967 ms.
2016-01-29 11:57:07, Warning IBS Callback_Unattend_InitiatePass: Runtime error occurred while applying unattend answer file; hrResult = 0x8030000b
2016-01-29 11:57:07, Info IBS UnattendErrorFromResults: Hit an unattend error; dumping any info we have about the failure...
2016-01-29 11:57:07, Info IBS UnattendDumpSetting: ------Unattend setting error / warning------
2016-01-29 11:57:07, Info IBS UnattendDumpSetting: Error code = 0x8030000b
2016-01-29 11:57:07, Info IBS UnattendDumpSetting: Pass = specialize
2016-01-29 11:57:07, Info IBS UnattendDumpSetting: Component name = [Microsoft-Windows-Shell-Setup]
2016-01-29 11:57:07, Info IBS UnattendDumpSetting: ---------------------... Read more

Read other answers


We're deploying Windows 8.1 to our public computing labs right now. This is the first time we're doing mass deployments with SCCM and we've run into the dreaded sysprep error just after applying the image. I think we've
narrowed this down to drivers but can't seem to figure it out. As an example, *almost none* of our hundreds of Optiplex 9010s will accept the image, yet hundreds of other models (Optiplex 7010, Optiplex 9020) accept the same image without issue.

I saw plenty of other posts about this error but I don't think this could be an unattend file or sysprep issue. Why would it work on some machines but not others?

Has anyone experienced a similar issue?

Thanks in advance!!

Sysprep could not parse or process the unattend answer file for pass [specialize]. The settings specified in the answer file cannot be applied. The error was detected while processing settings for component [Microsoft-Windows-Shell-Setup].

Log Files:
Will post separately.

A:SCCM Windows 8.1 Deployment - Sysprep could not parse or process the unattend answer file for pass specialize

For those with a similar issue - 

This turned out to be a driver problem for us, as suspected. In speaking with Premier Support, we dug through the CBS.log on a failed machine and confirmed it. In CBS, we traced the setup process to where drivers get installed and found a couple failures
(network, audio, etc.). Setup failed immediately after that process.

We were under the impression that our device drivers were current in SCCM, however they were not. In SCCM, we were ignoring driver import errors while using the Dell Command Deploy Utility for CABs. The errors were a result of the 2008 site server's inability
to recognize the newer Windows 8.1 drivers. We applied KB 2837108 and KB 2921916 to the site server and re-imported drivers. The sysprep error went away after this.

Read other 1 answers

I setup an ACER VM6620G (Win7x86) how I wanted, including disabling the administrator account and creating an administrator user "PVA"
Navigated to \\wds\DeploymentShare$\Scripts and ran the litetouch script. Chose my "Sysprep and Capture" task. 
Everything went off without a hitch until I restarted the technician pc. 
I got the dreaded
"Windows could not parse or process unattend answer file [C:\windows\Panther\unattend.xml] for pass [specialize]. A component or setting specified in the answer file does not exist"
I tried to deploy the captured image to the same computer and got the same error
I've scoured the internet for solutions (Shift+10 opens command prompt. Good to know!) with no luck.
I've saved the unattend.xml and looked for errors- going as far as to install an x86 Win7 virtual machine to validate the unattend.xml file in WISM

Other information that might be useful:
   I never used WISM to create an unattend.xml nor did I attach one to the image. 
   I didn't try to copy user profiles/settings/migrate etc
   I imported the captured image to WDT. Created a standard task and added 2 nodes 
     -Inject Drivers
     -Install Application

As a side, I've got another image that I've already injected the drivers/installed the application as a test. Everything went smoothly.

 | Unattend.xml: 
&#... Read more

Read other answers

After fully building my Windows 8 and 10 images using Audit Mode, I use the COPYPROFILE setting in Sysprep to make a copy of the profile for all users. The issue occurs when the user's try using IE 11. The MSN homepage is missing nearly all of it's content,
except the main scrolling section for top articles. All other sections are gone and none of the ads load. I have tried resetting IE andrebuilding the image, neither of these worked. I Prepped the image without using the COPYPROFILE switch and IE is usable
but all my configurations are gone. Please advise.

Read other answers

As I will soon be deploying my first (official) Windows 8.1 soon, I'd really like to be able to sysprep it so the users get a standard profile. The last time I tried, which was some time back, I kept getting failures, as mentioned in a thread I posted at the time;
sysprep in Windows 8.1
Also, I'm hoping I don't run into this;
Windows 8.1 eval ISO problems / activation problems
though it should already be activated since it's OEM on the device.

Can anybody give me any recent information on the subject ?? We have several applications (desktop apps) that need to be preconfigured if at all possible.

By the way, the devices in question are Surface Pro 3 tablets. All they had to do was see mine (personal) and they fell in love.


A:sysprep with CopyProfile=True

See this tutorial on our sister site the Ten Forums, it applies to Windows 8 / 8.1, too: Windows 10 Image - Customize in Audit Mode with Sysprep.


Read other 5 answers

I'm trying to build a Windows 7 Embedded image to deploy and I'm not having any luck getting CopyProfile to work. I've got it added to the Unattend file and the profile is being copied according to the setupact.log, but the Administrator account
doesn't have any of the changes after OOBE.
I've created an image, saved it off for future servicing, and then I run Sysprep /generalize /oobe /unattend:<my unattend file>.  Everything seems to go smooth except none of my customizations are preserved after OOBE.  What am I doing wrong?

Read other answers

Hi All, I would suggest you read my old post here first:

Anyhow, where I work we have a single DR PC what has our basic company software/programs on and is imaged, and then deployed out to a large multiple of identical PC's at our disaster recovery facility in the event when needed. Our DR facility is connected
to our AD domain.
The DR PC's we use are HP EliteDesk 800G2 Desktop Mini's and have Windows 7 Pro x64 on them.  Now capturing and restoring the image is not an issue and is is done via PXE booting using Symantic Ghost.

I have two major issues that need to be resolved very soon as we have a DR test coming up in a couple of months where we push the image out to a large number of identical PC's and test everything down in DR.

Issue 1: When ever sysprep is run with the "/generalize" option, windows fails to boot/reboot. Just get
a black screen in a continuous re-booting loop. Not even any error message, absolutely nada is shown! 
Maybe it's got something to do with he ultra modern hardware/chipset/platform of the HP EliteDesk G2; all USB port are USB3 and the boot drive is a NVMe SSD.
To resolve this issue, I have to restore the image to the DR PC via PXE.
And Yes I have the following in my Autounattend.xml file under the
generalize pass. 
<component name="Microsoft-Windows-PnpSysprep... Read more

Read other answers

Hi all, I've been working on a new x64 image in what is predominantly an x86 client environment. So, MDT (2010) is what we're using to deploy - and it all seemed to go very well after imaging a bunch of laptops with a .wim file with which I integrated
SP1 manually (using DISM). I then went to integrate all the latest updates in the same way, but sadly this didn't work as there was an update of some description which seemed to break it (I excluded a couple of updates known to cause issues).

So, I decided to work on capturing a wim from a VM after I applied all the updates. Something that seemed to go pretty seamlessly, but sadly when I copy the wim over, then run the deployment, I get a failure on the 'specialize' pass. There are several points
at which the BDD log states it cannot find the product key, but then we use KMS so I'm assuming this isn't needed. That being said, there is a key in the unattend.xml, so I've become a little confused by this..
Here's the specialize portion of the unattend.xml:

<settings pass="specialize">
<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<Username>[email protected]</Username>
... Read more

Read other answers

Currently trying to take an image of our new Lenovo Tiny Form Factors (M900) running Windows 7 Enterprise x64. After sysprep I am hit with this error message up on rebooting.

"Windows could not parse or process the unattend file for pass [specialize]. The settings specified in the answer file cannot be applied. The error was detected while processing settings for component [Microsoft-Windows-Shell-Setup]."
 I'm somewhat of a noob, but have done this before and have no issues. Ive searched everywhere and cant seem to find a fix, any help would be greatly appreciated. 
Here's The answer file I'm currently using.

Thanks in advance.

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="generalize">
<component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<settings pass="specialize">
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35&... Read more

Read other answers

I am trying to create a Windows 8.1 x64 bit Enterprise image. Upon sysprepping I am getting a copyprofile error (listed below). Normally this is caused by a profile not being deleted out of the registry but I have not deleted or created any profiles in the
image. Also listed below are the profiles that are in the registry (I believe that all of these profiles should be in the registry). I appreciate any help that anyone can give me!

Error from C:\Windows\Panther\UnattendGC\Setuperr.log:
2014-06-25 08:23:19, Error                        [Shell Unattend] CopyProfileDirectory from C:\Users\Administrator failed (0x8007012b) [gle=0x0000012b]
2014-06-25 08:23:19, Error                        [Shell Unattend] _CopyToDefaultProfile failed (0x8007012b) [gle=0x0000012b]
2014-06-25 08:23:19, Error                        [Shell Unattend] CopyProfile failed (0x8007012b) [gle=0x0000012b]

Profiles in registry:
SystemProfile, LocalService, NetworkService, Administrator

A:CopyProfile fails in unattend.xml - error 0x8007012b

the system time should be syncronized in the deployment process.
This problem may occur if you manually delete the profile folder that is located in the \Users folder. This action causes an inconsistent image state, and leaves the profile information orphaned
in the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

To work around this problem on a WIM image on which Sysprep was run and captured, follow these steps: 1.Mount the WIM image by using the following DISM command:

DISM /Mount-Wim /WimFile:<path to the wim file> /index:<index number> /MountDir:<Path to an empty Mount Directory>
2.Start Registry Editor. To do this, click Start, type regedit in the Start Search box (or on the Start Screen in Windows 8), and then click regedit.exe or Registry Editor in the results.
3.Select the HKEY_LOCAL_MACHINE key, and then click Load Hive on File menu.
4.In the Load Hive window, locate the mount directory in which the WIM file is mounted, open the %WINDIR%\System32\Config folder, and click SOFTWARE. When you are prompted for a key name, type test.
5.In the Registry Editor winodw, locate the following subkey :
HKEY_LOCAL_MACHINE\test\Microsoft\Windows NT\Current Version\ProfileList
6.Delete the key that corresponds to the user profile that is based on the path in the ProfileImagePath value.

Note The key name is the SID that is associated with the user profile and user account. The value po... Read more

Read other 5 answers

Here is my Xml file.
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="windowsPE">
        <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm=http://schemas.microsoft.com/WMIConfig/2002/Sta>
                    </Install... Read more

Read other answers

Hi there,
I have a WDS server setup with images but I am having trouble with the unattend answer file bit. I always get an error after deploying in image during setup that it had trouble during the Speicalize phase. I believe it has something to do with the product
key most likely. I am wanting to skip product key entirely and leave it blank as the computers I'm deploying are all Lenovo business computers with the on board chip for activation.

The exact error I get is
"Windows could not parse or process the unattend answer file for pass [specialize]. The settings specified in the answer file cannot be applied. The error was detected while processing settings for component [Microsoft-Windows-Shell-Setup]"

I am able to get the computer up and running by going into REGEDIT, Childcompletion key and changing the value of "Setup" from 1 to 3 but I am wondering how I can prevent this entirely.

Here is the answer file I'm using...

<settings pass="oobeSystem">
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<UILanguage>en-US&... Read more

Read other answers

When i try to sysprep my machine(Defualt location for WINDOWS 7) I get an error message "A fatal error occured while trying to sysprep the machine." I need help to fix this problem??????????


Check the log in the sysprep folder. I had the same error message recently. The log indicated failure when sysprep encountered drmv2clt.dll This is a Digital Rights Management dll. Look for a Windows Media Player process and kill this before trying sysprep. In my case it was wmpnetwk.exe that was running.

Read other 59 answers

I am trying to use Kari's xml script For sysprep to move users folders during installation - something is going wrong.
I'm using a Windows 7 Enterprise iso burned from MS Volume Licensing download which already has SP1 integrated. Windows 7 installs fine, and I can get into audit mode.
When I run the script, PerfLogs, Program Files, Program Files (x86),Users, and Windows directories are created on my E drive.
All these files still exist on the C drive. I'm thinking that maybe file locations/ names on the iso are different than a retail disk, but I don't know enough about sysprep to understand what is going wrong. Any thoughts?? Any assistance would be appreciated.

A:Move Users Folders XML sysprep FAILS HELP!

Problem solved. I did a clean install of Win7, ran the xml file again, and it worked fine.

Read other 1 answers

Getting the message after Sysprep stating "Sysprep Fails After Deployment With: Windows could not finish configuring the system...."

This is a new out-of-box Lenovo T530 laptop, it came pre-loaded with Windows 7 Pro.

I pulled laptop from box and inserted our Windows 7 Pro SP 1 disk and installed our copy. I then configured all settings and applications under "audit mode", created an "Unattend.xml" file using the WSIM, and copied that file into the Sysprep folder and ran "Sysprep /shutdown /oobe /generalize /unattend:unattend.xml"

The error message appears after I image drive using Ghost GSS (I'm assuming the error would appear after boot-up regardless of imaging the machine)

I have read numerous articles regarding this error and have also disabled the "Windows Media Player Network Sharing Service" as suggested by many. I'm also assuming that the "Hotfix" for this issue does not apply since I am installing SP1.

I am able to boot into the machine after attempting to boot into "safe mode" first (as suggested by many users), however once in, it looks as if the XML file is completely ignored.
Could it be related to the SSD drive in these laptops?

A:Sysprep Fails After Deployment With: Windows could not finish configur

So I decided to completely reinstall Win 7 Pro, add drivers needed and Sysprep using the same Unattend.xml file I created, it now comes back with an error after sysprep stating it doesn't like the "amd64_Microsoft-Windows-Shell-Setup__neutral" pass under "specialize".

It then states it has to reboot and when it does it comes back with an error about "unexpected error" and "windows installation cannot proceed" and to "restart the installation"??

I did manage to Shift+F10 into a command prompt and copy the "setupact.log" and the "setuperr.log" from the "C:\Windows\Panther" folder, it seems to complain about a product key which is not listed in the xml file, so not sure whats up with that.

2012-11-08 00:39:16, Error [Shell Unattend] ProductKey: '' installation failed (0x80070057)
2012-11-08 00:40:18, Error [windeploy.exe] Setup.exe failed, returning exit code [0x1f]
2012-11-08 00:40:18, Error [windeploy.exe] Failure occured during online installation. Online installation cannot complete at this time.; hr = 0x80004005
2012-11-08 01:10:25, Error [windeploy.exe] Setup.exe failed, returning exit code [0x1f]
2012-11-08 01:10:25, Error [windeploy.exe] Failure occured during online installation. Online installation cannot complete at this time.; hr = 0x80004005
2012-... Read more

Read other 2 answers

I'm getting the following error when trying to run sysprep on a Windows 7 x86 machine.
"Windows could not parse or process unattend answer file [C:\windows\Panther\unattend.xml] for pass [oobesystem]. The settings specified in the answer file cannot be applied. The error was detected while processing settings for
component [Microsoft - Windows - Shell -Setup]".
What I found in the C:\Windows\Panther\Set
2010-12-16 15:34:57, Info                  SYSPRP SPPNP: The device Root\LEGACY_MPIO\0000 is using the service mpio.
2010-12-16 15:34:57, Warning               SYSPRP SPPNP: Error 0xE000020B occurred while adding device Root\LEGACY_MPIO\0000 to the device info set.

A:Windows 7 x86 Sysprep error Windows Could not parse or process unattend answer file [C:\Windows\Panther\Unattend.xml] for pass [oobesystem]......

I fixed mine. 
Under 7 oobe System>X86_Microsoft-Windows-Shell-Setup_neutral I was using Auto Logon. I had the logonCount populated and Username populated but I didn't have "TRUE" in Enabled.
Now my sysprep is working.

Read other 3 answers

Well, here is a fun one. A coworker spent the entire day getting a Windows 8 machine up and ready for imaging. As part of the process, he went ahead and let it update the metro apps from the store.

Big mistake: Apparently updating Metro apps breaks sysprep;
Sysprep giving "fatal error" -- but *only* after updating Metro apps?

Here is a KB article on the issue;
Removing or Updating Windows 8 built-in Windows Store apps causes Sysprep to fail

It's even being reported that simply "opening" a metro app will cause sysprep to fail on Windows 8;
Techy Geeks Home: SCCM capture of Windows 8 fails during Sysprep stage - Fatal error occurred while trying to sysprep the machine
Needless to say, my coworker was pretty miffed about losing an entire day on this particular issue.

A:Sysprep fails if Metro Apps have been "updated"


Thanks for pointing to the KB article! I've had scenario 3, and ended up reinstalling the OS I had prepared on a VM. The KB article suggests removing all updated apps, so it wouldn't work for my purposes anyway.

I also had a sysprep issue when simply installed an app from the store. But in that case I managed to remove it manually after analyzing the sysprep log.


Read other 7 answers

Hey everyone, I hope you're doing fine.
Well, I'll keep this short and to the point.
I want to run sysprep on my Windows 10 Pro (x64) PC and I've faced many errors till now which I somehow managed to dodge , Now I've come across another problem. i have no clue about this so please help me

Setupact.log :-

Pastebin- http://pastebin.com/ri2cc4Li

Code tags:

2016-03-01 12:17:21, Info SYSPRP ========================================================2016-03-01 12:17:21, Info SYSPRP === Beginning of a new sysprep run ===
2016-03-01 12:17:21, Info SYSPRP ========================================================
2016-03-01 12:17:21, Info [0x0f004d] SYSPRP The time is now 2016-03-01 12:17:21
2016-03-01 12:17:21, Info [0x0f004e] SYSPRP Initialized SysPrep log at C:\Windows\System32\Sysprep\Panther
2016-03-01 12:17:21, Info [0x0f0054] SYSPRP ValidateUser:User has required privileges to sysprep machine
2016-03-01 12:17:21, Info [0x0f007e] SYSPRP FCreateTagFile:Tag file C:\Windows\System32\Sysprep\Sysprep_succeeded.tag does not already exist, no need to delete anything
2016-03-01 12:17:21, Warning SYSPRP WinMain: File operations pending
2016-03-01 12:17:21, Info [0x0f005f] SYSPRP ParseCommands:Found supported command line option 'OOBE'
2016-03-01 12:17:21, Info [0x0f005f] SYSPRP ParseCommands:Found supported command line option 'GENERALIZE'
2016-03-01 12:17:21... Read more

Read other answers

I have windows 7 pro 64 and i want to transfer my disk to a new computer. I tried to use the Sysprep but after a bit it say a fatal error occured and it stop. No other informations. I would like some help please.

Read other answers

On the 4th attempt to sysprep a Windows 7 Enterprise system, I get the dreaded, 'A fatal error occurred while trying to sysprep the machine.' 
The setuperr.log shows:
2010-08-04 13:57:58, Error      [0x0f0073] SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn't update the recorded state, dwRet = 31
2010-08-04 13:57:58, Error      [0x0f00ae] SYSPRP WinMain:Hit failure while processing sysprep cleanup external providers; hr = 0x8007001f

I've seen articles referring to the Windows Software Licensing Rearm program may have issues running more than three times in a single Windows image and to add <SkipRearm>1</SkipRearm> in the /unattend file...  but this did not help. 
The Windows Media Player Network Sharing Service has also been disabled which is often referred to in other posts.
The KB article: http://support.microsoft.com/kb/947212/en-us indicated that the resolution is to re-create the image for the machine... This is very frustrating. I'm hoping that there is
a better resolution???
How do you sysprep a machine more than three times to avoid this error?

A:Sysprep - Fatal error occurred while trying to sysprep the machine

Thanks for posting in Microsoft TechNet forums.
This error shows that sysprep was run multiple times on the machine, please open a command prompt, type:
slmgr /dlv to view how many times of remaining Windows Activation count. Generally speaking, to sysprep the image on a single computer for multiple times, you need to configure the
Microsoft-Windows-Security-SPP |
SkipRearm to 1 in the unattend.xml file. I am assuming whether you configure the
Microsoft-Windows-Security-Licensing-SLC |
SkipRearm to 1 instead of SPP, the SLC setting is deprecated and should not be used.  
As a work around of this problem, please type: regedit in the Start Search box to open Registry Editor, set the value of
GeneralizationState under HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus to
7, then run sysprep again.
If the same issue still persists, please unistall the MSDTC and Reinstall it, then try the sysprep.
To uninstall MSDTC :- msdtc -uninstall
To reinstall 
MSDTC :- msdtc –install
Best Regards
Dale Qiao
TechNet Subscriber Support in forum. If you have any feedback on our support, please contact
[email protected]

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Read other 86 answers


I have written this Unattend.xml file

<?xml version='1.0' encoding='utf-8'?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="generalize" wasPassProcessed="true">
<component name="Microsoft-Windows-Security-Licensing-SLC" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<settings pass="specialize" wasPassProcessed="true">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<component name="Microsof... Read more

A:The CopyProfile and DisableFirstRunWizard statements not work

The problem is this:

If I do not put the DisableFirstRunWizard statement, Windows copies the custom profile of the Administrator account in the default profile.

Instead, if I put this statement, Windows does execute neither CopyProfile nor DisableFirstRunWizard statement. How come?

So, how do I solve this?



Read other 1 answers


1st sorry for my english (i'm french guy).

I made a sysprep and all parameters are corrects.
but after the reboot I have always the sysprep preparation tools box.
for me the sysprep is correct but I don't know what's happended.

in attachment my unattend.xml

and thanks by advance.

A:win7 after sysprep reboot always with sysprep box

Hi Didier, welcome to the Seven Forums.

It looks you have sysprepped your PC in Audit Mode. When Audit Mode starts the sysprep window is always shown. Also, if you have not chosen to exit Audit Mode, PC will after reboot be back in Audit Mode and the sysprep window shown.

To exit Audit Mode and enter the normal setupmode (OOBE or Welcome mode), you need to select System Cleanup Action: Enter System Out-of-Box Experience (OOBE) and Shutdown Options: Shutdown (or reboot) and click OK:


Read other 4 answers

Running a HP 1220C (Love it more everyday). Unfortunately HP has discontinued them otherwise I would have got another one in case this one croaks.

But last Friday I had to reboot cause I installed a anti-virus update. So after rebooting I shut down cause I was heading out of town for the weekend. But at the last minute I decided to print out maps of both O'hara and Denver International, so I knew where the gates for my connecting and departing flights were.

I tried multiple times to get the printer to power up with no luck, so I gave up. And then tonight messing around with it the same results. So I reinstalled the driver package for it and that IMO didn't help so the thought was going through my mind I was going to have to look into a new printer.

But while reading my e-mail's, the looney thing powered up on its own. Practically scared me out of my chair.

What possibilities is there that would cause something like this and what could I do to correct it?

A:Anyone here specialize in Printer psychology?

Double click the desktop icon (My Computer, ect..)>then double click printers> & right click & select properties of the printer you are using.> Then left click the Control tab at the top of the dialog box.> Look for something that says Auto Power Off/On (or something like that).

Set it to what you want.........or not at all.

You can set the printer to automatically come on whenever you press the Print button on most programs. And the printer will automatically turn itself off after a selected number of minutes/hours, if you aren't using it.

You also have quite a few other things that you can set to tailor to you desires, such as print w/color or Black & white...paper size, graphic control, ect...

Play around with it & have fun. If you really screw it up badly, you can always delete the printer installed (from the Printers folder) & then just re-install by double clicking the Add Printer icon in the printers folder & select the brand name & model # that you have plugged into your computer.

Read other 1 answers

Hi All,
I tested the following attacks in Microsoft Advanced Threat Analytics and found them
not to be working.

Bruteforce Attack Pass-The-Ticket Pass-The-Hash Sensitive account exposed Using Plain-Text Authentication
I have tested other attacks like Reconnaissance
using DNS, Broken Trust, Honey Token account suspicious activities but they are working perfectly fine. I don't know
what's the issue with the above 4.
1. Bruteforce Attack:
I used thc-hydra-windows and triggered a dictionary attack using a list of passwords.

2. Pass-The-Ticket:
I used mimikatz to steal the kerberos ticket from a PC on which Admin is logged on. Impersonating an attacker, I copied the .kirbi file and Injected that file(using mimikatz again) to another PC on which a domain user is logged in.

3. Pass-The-Hash:
(Same as above)
4. Sensitive account exposed in plain text authentication:
I used mimikatz command 'sekurlsa :: logonpasswords' and was able to get passwords of all the users who logged on to that PC. But this was also not detected by MATA.

Please help me with the above issues. If possible, provide the tools using which I can trigger and detect those attacks.

Read other answers

Ok so i am furious with Micro$oft now! the other day i was FORCED to change my microsoft account after much nagging i did so and i dont like changing logins too much. (this was a week ago)
now for some random reason on earth without my permission my windows login also changed login passwords to the microsoft account. I DONT WANT THAT! that password is too long and complicated for someone who locks his computer every 5 minutes or so. why did this just kick in now? i changed M$ account pass over a week ago and today it decides to change windows login?! can i change JUST my local windows login separate from microsoft login?
if i try to change pass from settings it it goes online and says you cant use password that has been used before.

A:Can i change windows login pass without changing microsoft pass too?

Originally Posted by xdarkmario

Ok so i am furious with Micro$oft now! the other day i was FORCED to change my microsoft account after much nagging i did so and i dont like changing logins too much. (this was a week ago)
now for some random reason on earth without my permission my windows login also changed login passwords to the microsoft account. I DONT WANT THAT! that password is too long and complicated for someone who locks his computer every 5 minutes or so. why did this just kick in now? i changed M$ account pass over a week ago and today it decides to change windows login?! can i change JUST my local windows login separate from microsoft login?
if i try to change pass from settings it it goes online and says you cant use password that has been used before.

Don't go for a password. Use the PIN option That's just what you need and it's really a great thing as well.

Read other 4 answers

I'm getting the famous enter admin pass on boot (no BIOS update, laptop been off for a year (no OS atm) and I just started trying to fix it.  The error code I get is: [ 54549743 ] I hope that helps get my mobo unlocked!

View Solution.

A:HP-2000 Enter Admin Pass/Power on Pass at Boot

@PoetheProgrammr? Enter    41421385 Regards, DP-K

Read other 2 answers

China's hacking hardware, the United States' assassins or Japan's taboo content -- in the Dark Web, only money matters.

On Tuesday, Trend Micro researchers released a whitepaper (.PDF) documenting the results of an investigation into the Web's underbelly, asking if the underground is connected globally, or whether there are countries which have a certain illegal "specialization" in goods or services.

Dark Web drugs, data dumps and death: Which countries specialize in what services? | ZDNet

A:Dark Web: Which countries specialize in what services?

"The US is also, ironically, the best place for the darkest and most dangerous services and purchases, including assassination services and murder-for-hire.

Meanwhile in Canada, the underground economy is not as well-developed or efficient as others. However, vendors are still making a profit on trading ice hockey cards and 'Kenny Chesney' MP3's. The more serious vendors are rumoured to be distributing 'Corb Lund Band' MP3's too. Worldwide!"

Read other 0 answers

I have recently installed ATA (1.8.6645.28499). It is now in to the second week of its learning phase and it is raising a considerable number of false pass-the-hash alerts when users initiate Citrix sessions from their usual PC using pass-thru authentication,
eg a typical alert would be:
Bloggs,Fred's hash was stolen from one of the computers previously logged into by Bloggs,Fred and used from xx1234
Clearly this is spurious - in each case the user is initiating a Citrix session from their
own PC and the xx1234 represents a Citrix server in the farm in every case.
1) Why am I only receiving a handful of related PTH alerts each day when I have many thousands of Citrix users, all authenticating in the same manner?
2) How can I supress these alerts?
What I effectively want to say is 'IF the suspected PTH is being triggered BY the user on their OWN PC and the target server is in our Citrix farm' then ignore it. I can't see a way of setting an exclusion range like this for PTH events though?

Read other answers

Our organization has recently received a number of Tablet devices (over 100) which we require a standardized image to be deployed to them all, the obvious thing to this was to create a standard image using sysprep however when i run sysprep I get the message
'Sysprep was not able to validate your windows installation' and to check the logs when i check the logs i find a message saying 'sysprep will not run on an upgrade OS' I have recently updated to windows 8.1.
I have found an article relating to windows 7 which suggested deleting the 'upgrade' key from the registry however this solution has not worked for windows 8.1
Can someone help? I do not have the time nor patience to have to start the image from scratch.

A:Sysprep message "Sysprep was not able to validate your windows installation"

Sysprep must not be used on upgrade installation types. Run Sysprep only on clean installations.
For more information, please refer to this article:
Best regards,
Karen Hu
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Read other 13 answers

 please any one help me i am struggling last 3 day  with sysprep command, I want to sysprep the windows7 system which is genuine professional version and updated with Microsoft patches, i installed all applications and drivers to that system, When i doudle click sysprep icon selected oobe /generalize/reboot Then it give error  a fatal error occured while trying to sysprep the machine  then i checked log file in prefeth folder 2009-11-24 16:17:22, Error      [0x0f0073] SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn't update the recorded state, dwRet = 31 2009-11-24 16:17:22, Error      [0x0f00ae] SYSPRP WinMain:Hit failure while processing sysprep cleanup external providers; hr = 0x8007001f please help me........

Read other answers

i have a hp touchsmart 610-1000 i forgot my power on password i need some help to get on my computer

A:i have a touchsmart 610-1000 cant get pass the power on pass...

 Hi, Attach the completed model number, for example 610-1031f How Do I Find My Model Number or Product Number?

Read other 3 answers

An interesting study on the global underground company shows that money can get you anything -- wherever you are.

China's hacking hardware, the United States' assassins or Japan's taboo content -- in the Dark Web, only money matters.

On Tuesday, Trend Micro researchers released a whitepaper (.PDF) documenting the results of an investigation into the Web's underbelly, asking if the underground is connected globally, or whether there are countries which have a certain illegal "specialization" in goods or services.

There are three loose layers of the Internet; the "Clear" Web, the "Deep" Web and the "Dark" Web. The Clear Web is where we go for daily tasks and to visit standard websites through search engines such as Google, Bing and Yahoo.

The "Deep" Web is the layer underneath which is not indexed by standard search engines, and has to be accessed through a service such as the Tor network to access .onion websites hosted in this area.

Lastly, the "Dark" Web is a fraction of the Deep Web where illegal dealings take place, such as the purchase of weapons, drugs, counterfeit documents and hacking tools.

The average person is unlikely to go beyond the Clear Web, but the rest of the Internet is open to anyone using the right setup.
Over the past few years, Trend Micro has conducted a number of research projects focusing on these areas and the underground economy at large. Within the latest resear... Read more

Read other answers

Hallo zusammen,
Ich versuche seit einiger Zeit einen WDS aufzusetzen um ein Image auf mehrere Rechner verteilen zu können. Allerdings bekomme ich spätestens nach dem Setup der Clients folgende Fehlermeldung: (Da wo der Rechner zum ersten mal von der eigenen Festplatte Booted
und dann auch die Treiber installiert werden)
Die Antwortdatei für die unbeaufsichtigte Installation für Durchgang [specialize] konnte nicht analysiert oder verarbeitet werden. Die in der Antwortdatei angegebenen Einstellungen können nicht angewendet werden. Der Fehler wurde beim Verarbeiten von Einstellungen
für Die Komponente [Microsoft-Windows-Shell-Setup] erkannt.
Mit Shift+F10 habe ich die Log Dateien die unter C:\Windows\Panther lagen auf den Server kopiert.

Hier der ausschnitt der setupact.log:
2017-01-27 08:36:40, Info [setup.exe] UnattendSearchExplicitPath: Found unattend file at [C:\Windows\Panther\unattend.xml]; examining for applicability.
2017-01-27 08:36:40, Info [setup.exe] UnattendSearchExplicitPath: Found usable unattend file for pass [specialize] at [C:\Windows\Panther\unattend.xml].
2017-01-27 08:36:40, Info IBS Callback_Unattend_InitEngine:Using unattend file found at [C:\Windows\Panther\unattend.xml].
2017-01-27 08:36:40, Info [setup.exe] ValidateSMIPass: serialized settings stream; status 0x00000000
2017-01-27 08:36:40, Info [setup.exe] Validate... Read more

Read other answers

Hello everyone! Can you help me with a (hopefully) simple problem?
I have a Access 2003 SQL Pass-thru query that I need to prompt the user for Begin Date and End date, then put these values in the query. I read the Help, but I still don't understand HOW!
Questions: (BTW, this query is being generated from the Switchboard)
1. How do I prompt the user for the dates in Access? I can't use parameters and I don't understand how to use a prompt otyher than that.
2. How do I get those user responses into the query below
3. How do I write the querydef?

The SQL query is attached


A:Prompt&Pass value to pass-thru query

Read other 16 answers

So, I'm sysprepping Windows 8.1 with an answer file set to CopyProfile=True.  I log in to my customized account and sysprep /generalize /oobe /shutdown /unattend:unattend.xml.  Everything copies over just fine.  I get my layout in the Metro
start menu, etc, etc...

However, when I log in to the default profile I originally customized after sysprep, everything works great.  But when I log into any other account created during sysprep or thereafter and I hit the windows key and do a search for "Update" -
and select "Windows Update"  I get an error:

Title: C:\Users\ORIGINALDEFAULTACCOUNT\AppData\Local\Packages\windows.immersivecontrol.....
Message: "Windows cannot access the specified device, path, or file.  You may not have the appropriate permissions to access the item."
It's not every single shortcut... Only a certain fiew.
I get a nearly identical message when trying to launch "Programs and Features" from start.  If I manually navigate to these controls, they load up just fine.  Just the search items seem to be pointing to the wrong point.  Is there like
a cache that copyprofile seems to be copying over for some reason?
I've tried modifying the built in administrator account thinking Microsoft has gotten a bit stricter on which account I can use, but I get the same error.

Can anybody help?

A:CopyProfile causes search shortcuts on all users search screen to point to the default user profile

Ok.  So.... after updating the image as of yesterday, this issue has disappeared.  Same image.  Haven't done anything differently.

I can actually use my base image, not run updates and replicate the error, but updates between the last time I ran updates (couldn't have been more than two weeks ago) and yesterday, the issue has disappeared. 

Thank you MS!

Read other 12 answers

Good evening, it has been a while. I got a custom built computer about a year ago so that I can play FSX and P3D reasonably well. Everything seemed to go ok, not great, just ok. This are my specs:
Intel i7 [email protected] - Nvidia EVGA GTX 970 4gb - Asus Z97 Maximus Hero VII - WD black series 1TB HD - Corsair RM series RM850 - Samsung 840 EVO MZ-7TE500BW 500gb SSD.
About a month ago I started to notice that my wifi connection would be lost, then come back on its own. It got worse about two weeks ago, so I tried running the troubleshooter, it failed saying an error prevented it from running. Odd I thought.
I tried running windows updater, it downloaded a number of files to update, but continuosly failed to install 3 of them, apparently related to Microsoft Net Framework.
This morning I decided to uninstall P3D, and install a clean updated version, and the setup failed, never happened before. In the forums it adviced to make sure Direct X9 is installed, tried doing that and it failed as well.
This is very stressful, and affects my immune system, which is not good for me. Can someone here please be kind enough to take some time to help me solev this mess, thanks very much.
This are some logs from what happened today.

A:Windows update fails, Direct X fails, troubleshooter fails

im sorry to hear that you are having health issues sir. may i ask what OS yo are running

Read other 2 answers

I removed Simple pass and validity software, and I am still required to enter the master password that simplepass asked me to set up, I uninstalled all drivers, and software, and removed all remnants from registry, and I am still required to enter the password at login, i have done the netplwiz thing,  and bios says password is clear, so how do i remove this password requirement that i didnt have before i installed simplepass.

Read other answers

I'm simply attempting to run update on my Windows 7 machine. Update will not run, downloading and running the SP1 update fails, downloading and running the Update Readiness Tool fails, trying to launch a troubleshooter fails. I ran sfc and have attached the log along with all the error codes screenshots. I have no idea how to proceed from here other than to drop this machine off at the nearest recycling center.

A:update fails, SP1 install fails, troubleshooter fails

Looks to me like you're having problems accessing the COMONENTS registry hive - although I would have thought that would also make a SFC scan fail.

I suspect I know what the problem is - let's see if a different tool can expose it...
I need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.x

Read other 3 answers

Update for Windows 7 for x64-based Systems (KB2158563)

Installation date: ‎10/‎1/‎2010 6:40 AM

Installation status: Failed

Error details: Code 800B0100

Update type: Important

This update fails to install (automatic or manual update) with error code 800B0100. I have tried several times. I have also installed the System Update Readiness Tool and it didn't correct the issue.

Syetem: Intel Core i7, Win7 Pro x64

I opened a support ticket with Microsoft but thought I'd check here also.

A:[SOLVED] update fails... and fails... and fails

Hi -

Windows Update error 800B0100 = TRUST_E_NOSIGNATURE = A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

There may be a root security check issue. Try re-registering Wintrust.dll -
START | type cmd.exe | RIGHT-click on cmd.exe | "Run as Administrator" | paste -


regsvr32 Wintrust.dll /s

Check Windows Updates again = www.update.microsoft.com


Regards. . .



Read other 12 answers

So you try to run the 'rate my computer' and it fails showing this error message:

You are then advised to run a command prompt (old dos screen) as administrator and key in and run
winsat formal.

This fails and gives the following error messages:
error. failed to load XML
An invalid character was found in text content
unable to process xml file. winsat\main.cpp(4742)

Error: cannot process assessment results cannot load xml data from string
an invalid character was found in text content from interface msxm16.dll:Ixmldomdocument2

You start searching for these invalid characters after reading the various help threads out there such as this one: Windows Expierience Index could not be computed

You learn that not only does your computer have a bios but also something called a smbios, you may find it in registry thus:

Note the odd square OO's after version.
You might confirm this using HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools utility as seen here:

Editing the registry value will not work! Updating the bios probably won't work. The answer to this most frustrating problem is as follows:

Get onto your computer supplier, mine is Novatech here in the UK and I'll now paste his explanation here for you all.

The Problem

When the manufacture flashes the SMBIOS, it is basically adding simple and basic information, to allow the main BIOS to function, as well as hold data about the machine or component. Sometimes though the... Read more

A:Windows Experience Index fails/winsat formal fails invalid character

Excellent, glad it's fixed mike. Novatech seems to be a good company if they did this for you.

Read other 2 answers


I'm getting the following error/issues with my PC. Any immediate help would be greatly appreciated.
fyi ... I have attached the "minitools" output and mini "dmp". Thanks

1) All my windows - update fails (Config: xp Professional with Service Pack 3)

It says: A problem on your computer is preventing updates from being downloaded or installed

2) System restore fails,
It says : System Restore is not able to protect your computer. Please restart your computer

3) Takes directly to ===> Windows/System32/DRVSTORE in blue while system reboot

A:All windows update fails system restore fails, DRVSTORE in blue while reboot

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

Read other 5 answers

I read that ahcix64s is an AMD driver. Download from AMD gives me 153MB of files.  I don't know how to isolate and transfer the needed file to the PC that will not run Windows 7.  
Any help/guidance would be greatly appreciated.
My PC is an HP a6750f, with integrated Radeon HD 3200 graphics; Windows 7 (upgraded from Vista)

A:WIN 7 boot fails. Driver ahcix64s corrupt. Restore fails --registry.

I had the exact same problem today with my HP after installing the latest Microsoft Updates. Luckily I found an other version of the ahcix64s file on my hard-drive.
If you can somehow boot into command prompt or use the Windows Recovery Console - rename the current ahcix64s.sys file to something else and copy the other ahcix64s.sys in it's place.
Computer boots perfectly now.

Read other 5 answers

thank you in advance.

Logfile of HijackThis v1.99.1
Scan saved at 19:02:27, on 29/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe ... Read more

A:Hotmail login fails DNS error when using IE, MSN Messenger fails no service found?

Greetings, and welcome to TSF!

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).


Go to www.trendmicro.com, and then:

1. Click "Free Online Scan".
2. Click "Scan now, it's free".

It'll take a few minutes to download (especially with a dialup connection), so be patient. When it's down:

1. Select all available drives.
2. Check(tick) "Auto Clean&q... Read more

Read other 9 answers

So, earlier today, everything was fine. My computer was working normally nothing was acting up. While unplugging my laptop from the wall I dropped it, but nothing appeared to be wrong. A little while later I restarted my computer and it worked fine for about a minute and then everything froze in windows explorer, nothing would work, folders wont open task manager never appears start menu wont come up, nothing.
I booted into safe mode and everything works fine through there, so I looked around online and one suggestion was to update my BIOS so I tried to update from Dells Inspiron 1420 A08 to the newer A10 BIOS version, trying that in safe mode failed so I tried to boot normally and quickly do whatever it told me, when I tried it wouldnt restart (and still refuses too, I have to shut it down manually outside of safe mode) it said it couldnt update the BIOS version because it couldnt locate the image, but I downloaded it directly from Dells own website.
So then I tried to do a system restore, and I got the message:

The disk Vista (c:) has errors
Windows detected file system corruption on Vista (c:)
You must check the disk for errors before it can be restored.

So I clicked scan and fix, and nothing happens. (this is back in safe mode by the way) so I opened a command promp and typed sfc /scannow
and it scanned and found some errors but were unable to fix them. Details are located in the CBS.log
So I opened the log and I found the following:

POQ 62 ends.
2009-03-2... Read more

A:Vista - Explorer Freezes on reboot, system restore fails, BIOS update fails. Help.

Hi, the first rule if you ever drop a laptop (and it appears OK) is to take the battery out, boot from the mains if all is OK turn off add battery and reboot. Now you may have damaged the MB and or the RAM seating or HDD cable connection as well as the monitor connect cable.. etc ...etc. You can see where this is heading to the shop would be my advice.

Read other 1 answers

Here is the list of the problems in order of which I noticed things going awry:

1. My Firefox browser will re-direct my google searches to a new Firefox window pop-up with "google-analytics" in its address bar, but would never finish loading the new popped-up window. Firefox would also re-direct and never finish loading my google searches by opening a new tab with a "directdlr.com/....." in its address bar.

2. Microsoft Office 2010 applications don't open, instead a "DW20.exe" and a "DWWin.exe" replicates itself an infinite number of times in my processes, maxing out my CPU.

3. My anti-virus applications (Spyware Doctor, Microsoft Security Essentials, avast!, malwarebytes) won't update, and therefore won't run or scan. Firefox also won't load various anti-virus sites, such as this message board.

4. Other applications crash directly upon opening them (VLC Media Player)

Solutions that I've tried:

1. Resetting my router. I'd read somewhere online that doing this would solve the problem. It did not.

2. Trying to restore from a restore point. I opened System Restore, but the restore points were all very recent and within the timeframe of infection.

3. Un-installing Microsoft Office 2010 and re-installing. System won't let me un-install.

Here are my scan reports:

DDS (Ver_10-03-17.01) - NTFSx86
Run by dildon at 14:31:20.50 on Fri 06/04/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20
Microso... Read more

A:Browser Re-directs; Microsoft Office Fails to Load; Anti-Virus Fails to Update:upset:


Please do the following:

Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

Double click on ComboFix.exe & follow the prompts.When finished, it will produce a report for you.
Please post the C:\ComboFix.txt for further review.

Read other 14 answers