windows 7 not genuine

All replies

• 

  

  0

  Sign in to vote

  File Scan Data-->
  File Mismatch: C:\Windows\system32\sppobjs.dll[Hr = 0x80092003]

  Please run a full CHKDSK and SFC scan....

   

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  CHKDSK C: /R

   

  and hit the Enter key.

  You will be told that the drive is locked,

  and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

   

  The CHKDSK will take a few hours depending on the size of the drive, so be patient!

   

  After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

  then run the SFC.

   

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  SFC /SCANNOW

   

  and hit the Enter key

   

  Wait for the scan to finish - make a note of any error messages - and then reboot.

   

   

  Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

   

  Post a new MGADiag report with details of any error messages encountered.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Tuesday, January 15, 2013 12:20 AM

  Saturday, January 12, 2013 12:49 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for the reply and your assistance thus far.  Sorry for the delay.

  I performed the chkdsk and then the sfc scannow tests.

  My PC doesn't like to warm boot now, it keeps looking from media to boot from.  Have to cold boot to get it to boot up from hard drive to get to windows.

  How do you stop the chkdsk test from running after reboot?

  After the sfc test the following was displayed "Windows Resource Protection found corrupt files but was unable to fix some of them"

  This site will not allow me to insert links, it says I need to be verified first.  Don't know what that means. Got another way for me to get you the file?

  Below is the diagnostic report

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-G3DT8-P2XJP-379R7
  Windows Product Key Hash: zCQYPKMmc+VC4WqLZy1lFeIUw8A=
  Windows Product ID: 00371-153-6000985-85566
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {7F510C08-881C-492F-9164-B19478CE44D4}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120830-0333
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Professional Plus 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->
  File Mismatch: C:\Windows\system32\sppobjs.dll[Hr = 0x80092003]

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{7F510C08-881C-492F-9164-B19478CE44D4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-379R7</PKey><PID>00371-153-6000985-85566</PID><PIDType>5</PIDType><SID>S-1-5-21-2921414870-2438168558-2245915741</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5K</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0603   </Version><SMBIOSVersion major="2" minor="4"/><Date>20070703000000.000000+000</Date></BIOS><HWID>22B33807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3D4DF1EB2E22D86</Val><Hash>lXP7ogKcFTWK9T1h23hUtfPBgYg=</Hash><Pid>89409-707-2721896-65928</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
  Error: 0xC004F012

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0000000000000010
  Event Time Stamp: 10:24:2012 13:52
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\sppobjs.dll

  
  HWID Data-->
  HWID Hash Current: NgAAAAEABgABAAEAAAABAAAAAgABAAEA6GHWinjhAqV05oj9CIUKgD76Hva4hFyjYPHWByqF

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   A_M_I_  OEMAPIC
    FACP   A_M_I_  OEMFACP
    HPET   A_M_I_  OEMHPET
    MCFG   A_M_I_  OEMMCFG
    OEMB   A_M_I_  AMI_OEM
    OSFR   A_M_I_  OEMOSFR

  Saturday, January 12, 2013 11:29 PM
• 

  

  0

  Sign in to vote

  When you paste the link in, remove the 'http:\\www' from the front first - it will then post happily.

  It's obvious from the report that the file problem hasn't been solved.

  Please also run the CheckSUR tool and post the results....

  Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

  (you'll need to look in the details for Method 2)

   

  Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

  The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

   

  Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 12:04 AM

  Moderator
• 

  

  0

  Sign in to vote

  This is the link to the CBS log file, hope it works.

  live.com/redir?resid=695F2E048DCBBA1D!109&authkey=!AOG2JSXRTX1jl6Y

  Sunday, January 13, 2013 12:11 AM
• 

  

  0

  Sign in to vote

   It did :)

  There are a number of file problems in that report.

  	Line 10589: 2013-01-12 17:21:46, Info                  CSI    000003ca [SR] Repairing 12 (0x000000000000000c) components
  	Line 10590: 2013-01-12 17:21:46, Info                  CSI    000003cb [SR] Beginning Verify and Repair transaction
  	Line 10593: 2013-01-12 17:21:46, Info                  CSI    000003cd [SR] Cannot repair member file [l:24{12}]"aitagent.exe" of Microsoft-Windows-Application-Experience-Application-Telemetry-Agent, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10596: 2013-01-12 17:21:46, Info                  CSI    000003cf [SR] Cannot repair member file [l:20{10}]"CbsApi.dll" of Microsoft-Windows-CbsApi, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10599: 2013-01-12 17:21:47, Info                  CSI    000003d1 [SR] Cannot repair member file [l:22{11}]"eappcfg.dll" of Microsoft-Windows-Extensible-Authentication-Protocol-Host-Peer, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10602: 2013-01-12 17:21:47, Info                  CSI    000003d3 [SR] Cannot repair member file [l:102{51}]"microsoft-windows-kernel-processor-power-events.dll" of Microsoft-Windows-Kernel-Processor-Power-Events-Container, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10605: 2013-01-12 17:21:47, Info                  CSI    000003d5 [SR] Cannot repair member file [l:22{11}]"INETRES.dll" of Microsoft-Windows-Mail-Comm-DLL, Version = 6.1.7601.17609, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10608: 2013-01-12 17:21:47, Info                  CSI    000003d7 [SR] Cannot repair member file [l:22{11}]"makecab.exe" of Microsoft-Windows-makecab, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10611: 2013-01-12 17:21:47, Info                  CSI    000003d9 [SR] Cannot repair member file [l:30{15}]"msmpeg2adec.dll" of Microsoft-Windows-MSMPEG2ADEC, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10614: 2013-01-12 17:21:47, Info                  CSI    000003db [SR] Cannot repair member file [l:30{15}]"FwRemoteSvr.dll" of Microsoft-Windows-Network-Security-Domain-Clients-Svc, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10617: 2013-01-12 17:21:47, Info                  CSI    000003dd [SR] Cannot repair member file [l:22{11}]"lltdapi.dll" of Microsoft-Windows-NetworkTopology, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10620: 2013-01-12 17:21:47, Info                  CSI    000003df [SR] Cannot repair member file [l:20{10}]"inetpp.dll" of Microsoft-Windows-Printing-InternetPrinting-Client, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10623: 2013-01-12 17:21:47, Info                  CSI    000003e1 [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10626: 2013-01-12 17:21:47, Info                  CSI    000003e3 [SR] Cannot repair member file [l:24{12}]"filemgmt.dll" of Microsoft-Windows-SharedFoldersUI, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  	Line 10627: 2013-01-12 17:21:47, Info                  CSI    000003e4 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:30{15}]"FwRemoteSvr.dll" by copying from backup

  I'll work on them while we wait for the results from the CheckSUR scan.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  
  

  • Edited by Noel D PatonModerator Sunday, January 13, 2013 12:27 AM remove excess

  Sunday, January 13, 2013 12:25 AM

  Moderator
• 

  

  0

  Sign in to vote

  This is the link to the chcksur file

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!111&authkey=!AKzdV8wafwu-TCA

  Sunday, January 13, 2013 12:44 AM
• 

  

  0

  Sign in to vote

  ...and here's the fix protocol for the first set of problems :)

  I've uploaded a file - skrxx.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
  
  Please download and save it.

  Right-click on the saved file and select Extract all...
  
  Change the target to C:\ and click on Extract
  
  This should create a new folder C:\skrxx

  Close all windows (it would be a good idea to print these instructions!)
  
  Now reboot to the Repair Environment - as soon as the machine restarts, start
  tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
  should be the option 'Repair my Computer'
  
  Pick that
  
  You'll have to log in with your username and password.

  Pick the option to use a Command Prompt
  
  At the prompt type
  
  DIR C:\skrxx
  
  hit the enter key - if you get a 'Not
  Found' error try
  
  DIR D:\skrxx
  
  or
  
  DIR E:\skrxx

   

  The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

   

  XCOPY <drive>:\skrxx <drive>:\windows\winsxs /y /i /s /v /h

   

  run the command (it should take almost no time) and when the prompt returns, type
  
  EXIT
  
  and hit the Enter key to exit Command
  Prompt - reboot to Normal Mode Windows.

  Now run SFC /SCANNOW in an
  Elevated Command Prompt
  
  then reboot and upload the new CBS.log file to your SkyDrive Public folder, and
  post a new link

  Also run a new MGADiag report, and post the result.

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 1:00 AM

  Moderator
• 

  

  0

  Sign in to vote

  ... from the looks of your CheckSUR log, I could get to regret taking this on! :)

  There are 82 errors present there - and possibly more to come one we fix those.

  Once you have run the SFC scan from the above, please run another CheckSUR and post the new log file - I'm off to bed (if I don't have nightmares! <g>)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 1:10 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks Noel.

  Great!! you have been super in your efforts so far.

  That did away with the 'Windows not genuine' message.  I did notice though that Windows Media Center is not working.   Is there a way to use my original Windows install disk to fix some of these issues?

  CBS Log file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!112&authkey=!ADh2U0noChV44DE

  CheckSUR Report file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!113&authkey=!APrKUWVuoC-dQ6I

  MGADiag Report Below

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-G3DT8-P2XJP-379R7
  Windows Product Key Hash: zCQYPKMmc+VC4WqLZy1lFeIUw8A=
  Windows Product ID: 00371-153-6000985-85566
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {7F510C08-881C-492F-9164-B19478CE44D4}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120830-0333
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Professional Plus 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{7F510C08-881C-492F-9164-B19478CE44D4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-379R7</PKey><PID>00371-153-6000985-85566</PID><PIDType>5</PIDType><SID>S-1-5-21-2921414870-2438168558-2245915741</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5K</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0603   </Version><SMBIOSVersion major="2" minor="4"/><Date>20070703000000.000000+000</Date></BIOS><HWID>22B33807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3D4DF1EB2E22D86</Val><Hash>lXP7ogKcFTWK9T1h23hUtfPBgYg=</Hash><Pid>89409-707-2721896-65928</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, Professional edition
  Description: Windows Operating System - Windows(R) 7, RETAIL channel
  Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00371-00170-153-600098-01-1033-7600.0000-0172011
  Installation ID: 015930487546666142176135765095130792314954624000523593
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 379R7
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 1/12/2013 9:48:44 PM

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 10:24:2012 13:52
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NgAAAAEABgABAAEAAAABAAAAAgABAAEA6GHWinjhAqV05oj9CIUKgD76Hva4hFyjYPFq6CqF

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   A_M_I_  OEMAPIC
    FACP   A_M_I_  OEMFACP
    HPET   A_M_I_  OEMHPET
    MCFG   A_M_I_  OEMMCFG
    OEMB   A_M_I_  AMI_OEM
    OSFR   A_M_I_  OEMOSFR

  Sunday, January 13, 2013 3:13 AM
• 

  

  0

  Sign in to vote

  Good - repairing the SFC errors allowed CheckSUR to repair the nine file errors in the report.

  Now all I have to deal with is the 73 remaining registry errors :)

  I want to do this in sections - That way there's not too much to do if I get things wrong.

  Back in a bit when I've worked out the priorities, and exactly what's needed - how are you for using regedit?

  I'm not sure how much effect these repairs will have on Media Player - the errors seem to be more in IE updates than anything else - but you never know :)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 11:14 AM

  Moderator
• 

  

  0

  Sign in to vote

  Before you get too far just to let you know that I ran a repair on Visual Studio and installed the latest Windows update last night and that seemed to also fix Windows Media Center. I'm not sure if that resolved everything..

  Sunday, January 13, 2013 2:12 PM
• 

  

  0

  Sign in to vote

  Yeurgh!

  Thanks for letting me know! - please run another CheckSUR report and post the new log.

  (I have the first set of repairs organised and was about to post them - I'll hold off for the new log now)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 2:31 PM

  Moderator
• 

  

  0

  Sign in to vote

  Sorry about that.  Your patience and assistance is truly appreciated.

  I ran another CheckSUR, the link is below.

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!114&authkey=!AOTO25id5okGpZI

  I have had to use another computer to work within skydrive, apparently this issue is affecting ie's ability to work with skydrive, can't upload or manipulate files at all, only view them.

  Do you know anything about Windows FIXit?
  
  Also found this microsof fix for error code 0x80070002

  /kb/910336

  • Edited by skriesten Sunday, January 13, 2013 5:31 PM

  Sunday, January 13, 2013 4:56 PM
• 

  

  0

  Sign in to vote

  Please don't start trying Fixits - they aren't designed to deal with the type of problems that you are having, and could give some very strange results, with those errors still present.

  At least your repairs haven't increased the number of problems found :)

  First, I've uploaded a file skrab.zip to my Skydrive at  https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
  please download it, and extract the contents to your desktop (it should be one small file, skrab.txt)

  Then we need to adjust the permissions in the registry, so that we are allowed to make the necessary changes.
  Please open regedit, and navigate to the
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
  key, and right-click on it.
  Select Permissions
  The Permissions window should appear
  Click on the Advanced button, then the Owner tab
  highlight the Administrators entry in the list, and put a tick in the 'Replace Owner....' box
  Click on the OK button (once!)
  Back in the Permissions window,
  highlight the Administrators entry, and put a tick in Full Control
  Click on the Apply button
  and OK out
  Close Regedit

  Now open the skrab.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minise the window, just in case :)

  Now open an Elevated Command Prompt,
  right-click in the window, and select Paste.
  The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirm

  Now copy the output from the Command Prompt to your reply here.

  There should (if everything went right!) be a file on your desktop called npresults.log
  upload that to your SkyDrive, and post a link.
  Close Notepad, and the Command Prompt window,
  Now run CheckSUR again, upload the new CheckSUR.log file, and post a link

  Then we'll have a look see if I got it right!

  With any luck that will clear the errors from one section of the report, and give me enough information to correct the errors in the other section.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 5:55 PM

  Moderator
• 

  

  0

  Sign in to vote

  There was no output file to view.  I noticed in the text that the last line (output) stated "REH QUERY", should that have read "REG QUERY"?

  Also, it was asking for permissions to Permanently delete

  "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0 /v "Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2" /f

  
  

  • Edited by skriesten Sunday, January 13, 2013 6:43 PM

  Sunday, January 13, 2013 6:33 PM
• 

  

  0

  Sign in to vote

  If you need me to delete items manually in the registry, I don't have a problem with that.

  Sunday, January 13, 2013 6:58 PM
• 

  

  0

  Sign in to vote

  I'd rather not do manual registry editing if possible - it's all too easy to make a mistake! :)
  Sorry about the typo - it should have been REG QUERY... (and I missed a quote symbol as well, I see!)

  corrected version

  REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect" /S >%userprofile%\desktop\npresults.log

  (which explains why the file wasn't created!)

  If you haven't closed the command prompt window yet, can you copy/paste the content you a reply? - To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.   

  AS far as the permission to delete is concerned, that's another typo on my part - another missing quote!

  here's the corrected version

  REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-AppSupport-Legacy~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2387149_RTM~31bf3856ad364e35~amd64~~6.1.1.1" /f

  Please run both and post the file, and the new CheckSUR log - and I'll try to do better next time!

  (I think I'd better split it up, if I start getting word-blind that quickly!)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 7:21 PM

  Moderator
• 

  

  0

  Sign in to vote

  With that cluestick, I see that there are typos missing quotes in the last two commands as well...

  please run these two commands before the new CheckSUR run....

  REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-Security-ForApplications~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0" /f
  REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-Security-ForApplications~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0" /f 
   
   
  

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 7:24 PM

  Moderator
• 

  

  0

  Sign in to vote

  Here you go.

  CheckSUR file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!118&authkey=!AAKWR4RgPmiiCA4

  Command Prompt Text link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!116&authkey=!AHUa392KNYd7BG4

  NPResults file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!117&authkey=!AH8jb0JsiY4NZf8

  Sunday, January 13, 2013 8:12 PM
• 

  

  0

  Sign in to vote

  OK - that's good so far :)

  The only remaining errors are for the two commands I amended in my last post - so if you run those, we can assume they also work.

  Now all I have to do is work out WTH to do about the ComponentDetect data :)

  Back in a while - more likely tomorrow.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 8:19 PM

  Moderator
• 

  

  0

  Sign in to vote

  It didn't take quite as long as I thought it might :)

  Please disable Windows Updates from automatically downloading for the moment. (we don't want them attempting to install into partially un/installed components, and making things even worse!)

  I've uploaded a file skrac.zip to my SkyDrive at  https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
  please download it, and extract the contents to your desktop (it should be one not-so-small file, skrac.txt)

  open the skrac.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minimise the window, just in case :)

  Now open an Elevated Command Prompt,
  right-click in the window, and select Paste.
  The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirm (and post back)

  Then we'll have a look see if I got it right!

  Please run a new CheckSUR report, and upload the new log.

  Please also run a new SFC /SCANNOW (just in case!) and post the CBS.log

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 13, 2013 10:22 PM

  Moderator
• 

  

  0

  Sign in to vote

  Thank you very much for all your assistance.  I now can use IE on this machine to run SkyDrive.

  Below are the results of the reports as stated above

  CBS Log file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!120&authkey=!AMJS1X-nZZHu2uU

  CheckSUR Log file link

  skydrive.live.com/redir?resid=695F2E048DCBBA1D!119&authkey=!AJxH1gwKDqqNMxs

  Monday, January 14, 2013 1:33 AM
• 

  

  0

  Sign in to vote

  OK - three's still three errors present....

  they should be easy enough after that lot!

  The SFC scan is clear.

  One line of this will produce an error - I can't tell which of the first two entries is the affected one

  Assuming the other three run without a problem, please run another CheckSUR and post the results.

  I've uploaded a file skrad.zip to my SkyDrive at  https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
  please download it, and extract the contents to your desktop (it should be one not-so-small file, skrad.txt)

  open the skrad.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minimise the window, just in case :)

  Now open an Elevated Command Prompt,
  right-click in the window, and select Paste.
  The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirm (and post back)

  Then we'll have a look see if I got it right!

  Please run a new CheckSUR report, and upload the new log.

  If it's clear, you can reset the permissions and ownership on the registry Key we changed earlier (read access for Administrators, and Ownership to TrustedInstaller), and switch Windows Updates back on. Then cross your fingers, and do a check for updates and see what comes up!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Monday, January 14, 2013 2:07 AM

  Moderator
• 

  

  0

  Sign in to vote

  It appears there were some errors in that last set.

  Command Prompt Text below

  Microsoft Windows [Version 6.1.7601]
   

  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
  rrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-
  htmlactivexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_
  for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-29_neutral_LDR" /F
  ERROR: The system was unable to find the specified registry key or value.

  C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
  rrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-
  htmlactivexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_
  for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-30_neutral_GDR" /F
  The operation completed successfully.

  C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
  rrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetE
  xplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0" /VAN.dll"Package_6_for_KB241640
  0~31bf3856ad364e35~amd64~~6.1.1.2" /F
  ERROR: Invalid syntax.
  Type "REG DELETE /?" for usage.

  C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
  rrentVersion\Component Based Servicing\PackageDetect\WinEmb-AppSupport-Legacy~31
  bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2387149~31bf3856ad364e35~amd64~
  ~6.1.1.1" /FREG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVer
  sion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-htmlacti
  vexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_for_KB24
  16400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-29_neutral_LDR" /F
  ERROR: Invalid syntax.
  Type "REG DELETE /?" for usage.

  
  

  • Edited by skriesten Monday, January 14, 2013 3:41 AM

  Monday, January 14, 2013 3:09 AM
• 

  

  0

  Sign in to vote

  Text from the CheckSUR file

  
  =================================
  Checking System Update Readiness.
  Binary Version 6.1.7601.21645
  Package Version 17.0
  2013-01-13 22:14

  Checking Windows Servicing Packages

  Checking Package Manifests and Catalogs

  Checking Package Watchlist
  (f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0 Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlist

  Checking Component Watchlist

  Checking Packages

  Checking Component Store

  Summary:
  Seconds executed: 1232
   Found 1 errors
    CBS Watchlist Package Missing Total count: 1

  
  

  • Edited by skriesten Monday, January 14, 2013 3:44 AM

  Monday, January 14, 2013 3:43 AM
• 

  

  0

  Sign in to vote

  I see what happened there - the error threw the other commands out of sync.

  Please open an Elevated Command Prompt and copy/paste the following command into it

  REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2" /F
   
   
  

  
  Assuming no errors In the command, you should be able to reset the permissions now.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Monday, January 14, 2013 10:30 AM

  Moderator
• 

  

  0

  Sign in to vote

  I reperformed a SFC SCAN and CheckSUR report and neither showed any errors.

  Thank you very much Noel for your hard work, it was greatly appreciated.

  Wish I could buy you a beer.

  Steve Kriesten

  • Marked as answer by skriesten Monday, January 14, 2013 10:21 PM

  Monday, January 14, 2013 10:21 PM
• 

  

  0

  Sign in to vote

  Thanks for sticking with it!

  It was a useful learning experience for me - the first time I'd actually done one like that on my own.

  Good luck!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, January 15, 2013 12:19 AM

  Moderator