locked
New Hard Drive and Now a List of Tampered and Mismatched files and the Popup every few minutes RRS feed

  • Question

  • Hello, as many of the people say I am having basically the same problem as a lot of others. The problem is, I can't seem to find any that actually got the problem fixed and I really need this fixed. Win 7 Ultimate 32 bit on Sony Laptop AW series. Was running perfect with 320 Gb. Used a hardware replicator to upgrade to 750Gb and now I get the following popup saying I'm not genuine. I ran MGADiag and here are the problem areas I believe:

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F3070C9F-1D4D-4242-AD24-44D3D6E0751B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-J9MQ4</PKey><PID>00426-OEM-9402076-28557</PID><PIDType>8</PIDType><SID>S-1-5-21-2291559621-2915215958-3453984615</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGNAW390JAH</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R2032Y2</Version><SMBIOSVersion major="2" minor="4"/><Date>20090923000000.000000+000</Date></BIOS><HWID>8D973F07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>C2567FD70DB586</Val><Hash>19BvqvHbWznssEyPBlW5PW47ZYY=</Hash><Pid>89409-707-4603305-65949</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 022a1afb-b893-4190-92c3-8f69a49839fb
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00188-020-728557-02-1033-7601.0000-1522012
    Installation ID: 006305362186537132311193715824836203197454077700351744
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J9MQ4
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 6/22/2012 12:48:55 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 6:22:2012 00:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys

    HWID Data-->
    HWID Hash Current: NAAAAAEAAwABAAEAAAACAAAAAwABAAEAeqgMDAptxgPYNRqFGKIo4tabfp35FQ7Jfv1Gyg==

    Right after I did the hard drive upgrade I worked on a system that had a virus. I am wondering if this is a virus related issue or just hard drive upgrade issue. No viruses detected with several packages. So how do I repair this? I am not wanting to have to reload everything, so any one that can solve this I will really appriciate it.

    Thanks,

    NorthSideMechanic

    Friday, June 22, 2012 6:06 AM

Answers

  • "NorthSideMechanic" wrote in message news:06989079-8d26-4fa3-9f13-d498cbf9a8db...

    Hello, as many of the people say I am having basically the same problem as a lot of others. The problem is, I can't seem to find any that actually got the problem fixed and I really need this fixed. Win 7 Ultimate 32 bit on Sony Laptop AW series. Was running perfect with 320 Gb. Used a hardware replicator to upgrade to 750Gb and now I get the following popup saying I'm not genuine. I ran MGADiag and here are the problem areas I believe:

     

    NorthSideMechanic

     
     
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
     
     
    That said...
    The problem lies with the file integrity.
    This may simply be caused by a bad set of Intel Rapid Storage Technology drivers -  
     
    Installing the Intel Rapid Storage Drivers
     
    Once complete, please reboot twice, then post another MGADiag report.   
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, June 22, 2012 11:15 AM
    Moderator

All replies

  • "NorthSideMechanic" wrote in message news:06989079-8d26-4fa3-9f13-d498cbf9a8db...

    Hello, as many of the people say I am having basically the same problem as a lot of others. The problem is, I can't seem to find any that actually got the problem fixed and I really need this fixed. Win 7 Ultimate 32 bit on Sony Laptop AW series. Was running perfect with 320 Gb. Used a hardware replicator to upgrade to 750Gb and now I get the following popup saying I'm not genuine. I ran MGADiag and here are the problem areas I believe:

     

    NorthSideMechanic

     
     
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
     
     
    That said...
    The problem lies with the file integrity.
    This may simply be caused by a bad set of Intel Rapid Storage Technology drivers -  
     
    Installing the Intel Rapid Storage Drivers
     
    Once complete, please reboot twice, then post another MGADiag report.   
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, June 22, 2012 11:15 AM
    Moderator
  • Well Noel,

               You hit this one out of the park first swing. It was the Intel Rapid Storage Drivers. I decided to try that first. They installed perfect fisrt try and fixed the problem. When I run MGADiag now it comes back perfectly clean and no more popups. So there really should be a white paper that tells you to try the driver thing right off. I looked on the web for months and tried buying new keys (Per the people at the MS help desk) and reinstalling virus software and God knows what else. So, Thanks, I am fixed.

    Thanks!!!!

    Sunday, June 24, 2012 6:59 AM
  • "NorthSideMechanic" wrote in message news:4bb4d426-ed2c-4434-acba-ed0c1bab1cf6...

    Well Noel,

               You hit this one out of the park first swing. It was the Intel Rapid Storage Drivers. I decided to try that first. They installed perfect fisrt try and fixed the problem. When I run MGADiag now it comes back perfectly clean and no more popups. So there really should be a white paper that tells you to try the driver thing right off. I looked on the web for months and tried buying new keys (Per the people at the MS help desk) and reinstalling virus software and God knows what else. So, Thanks, I am fixed.

    Thanks!!!!

    Please post a new MGADiag report so we can check everything is OK.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 24, 2012 8:28 AM
    Moderator
  • "NorthSideMechanic" wrote in message news:4bb4d426-ed2c-4434-acba-ed0c1bab1cf6...

    Well Noel,

               You hit this one out of the park first swing. It was the Intel Rapid Storage Drivers. I decided to try that first. They installed perfect fisrt try and fixed the problem. When I run MGADiag now it comes back perfectly clean and no more popups. So there really should be a white paper that tells you to try the driver thing right off. I looked on the web for months and tried buying new keys (Per the people at the MS help desk) and reinstalling virus software and God knows what else. So, Thanks, I am fixed.

    Thanks!!!!

    Please post a new MGADiag report so we can check everything is OK.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 24, 2012 8:33 AM
    Moderator