Answered by:
windows 7 not genuine

Question
-
My machine had the blue screen after an early morning automatic update on 1/9/2013. I restarted the machine and it the brought up this issue "Windows 7 Build 7601 This copy of Windows is not genuine"
Error Code 0x800700c1
It won't allow me to verify whether it is genuine and when I go to the web site as directed in the link to validate Windows it runs without doing anything, for 2 hours. I have had this software for 2 years, since April 2010, on the same machine. I have since reintalled it once on the same machine and hard drive.
To keep from confusing my needs with others I need assistance in getting this back right. I am willing to reinstall windows if necessary, but would not prefer to go through that exercise. Also, why would I be receiving this?
I tried going through the microsoft online help but when I entered my product ID for verifiication it stated that it had expired.
Help is truly appreciated.
Below is the diagnostic report
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-G3DT8-P2XJP-379R7
Windows Product Key Hash: zCQYPKMmc+VC4WqLZy1lFeIUw8A=
Windows Product ID: 00371-153-6000985-85566
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {7F510C08-881C-492F-9164-B19478CE44D4}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-8009_E2AD56EA-766-2efd_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[Hr = 0x80092003]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7F510C08-881C-492F-9164-B19478CE44D4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-379R7</PKey><PID>00371-153-6000985-85566</PID><PIDType>5</PIDType><SID>S-1-5-21-2921414870-2438168558-2245915741</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5K</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0603 </Version><SMBIOSVersion major="2" minor="4"/><Date>20070703000000.000000+000</Date></BIOS><HWID>22FB3C07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3D4DF1EB2E22D86</Val><Hash>lXP7ogKcFTWK9T1h23hUtfPBgYg=</Hash><Pid>89409-707-2721896-65928</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
Error: 0xC004F012Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000010
Event Time Stamp: 10:24:2012 13:52
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
HWID Data-->
HWID Hash Current: NgAAAAEABgABAAEAAAABAAAAAgABAAEA6GHWinjhAqV05oj9CIUKgD76Hva4hFyjYPEehyqFOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM
OSFR A_M_I_ OEMOSFR- Edited by skriesten Saturday, January 12, 2013 12:21 AM
Saturday, January 12, 2013 12:06 AM
Answers
-
I reperformed a SFC SCAN and CheckSUR report and neither showed any errors.
Thank you very much Noel for your hard work, it was greatly appreciated.
Wish I could buy you a beer.
Steve Kriesten
- Marked as answer by skriesten Monday, January 14, 2013 10:21 PM
Monday, January 14, 2013 10:21 PM
All replies
-
File Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[Hr = 0x80092003]Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.
Post a new MGADiag report with details of any error messages encountered.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Tuesday, January 15, 2013 12:20 AM
Saturday, January 12, 2013 12:49 AMModerator -
Thanks for the reply and your assistance thus far. Sorry for the delay.
I performed the chkdsk and then the sfc scannow tests.
My PC doesn't like to warm boot now, it keeps looking from media to boot from. Have to cold boot to get it to boot up from hard drive to get to windows.
How do you stop the chkdsk test from running after reboot?
After the sfc test the following was displayed "Windows Resource Protection found corrupt files but was unable to fix some of them"
This site will not allow me to insert links, it says I need to be verified first. Don't know what that means. Got another way for me to get you the file?
Below is the diagnostic report
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-G3DT8-P2XJP-379R7
Windows Product Key Hash: zCQYPKMmc+VC4WqLZy1lFeIUw8A=
Windows Product ID: 00371-153-6000985-85566
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {7F510C08-881C-492F-9164-B19478CE44D4}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[Hr = 0x80092003]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7F510C08-881C-492F-9164-B19478CE44D4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-379R7</PKey><PID>00371-153-6000985-85566</PID><PIDType>5</PIDType><SID>S-1-5-21-2921414870-2438168558-2245915741</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5K</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0603 </Version><SMBIOSVersion major="2" minor="4"/><Date>20070703000000.000000+000</Date></BIOS><HWID>22B33807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3D4DF1EB2E22D86</Val><Hash>lXP7ogKcFTWK9T1h23hUtfPBgYg=</Hash><Pid>89409-707-2721896-65928</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
Error: 0xC004F012Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000010
Event Time Stamp: 10:24:2012 13:52
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
HWID Data-->
HWID Hash Current: NgAAAAEABgABAAEAAAABAAAAAgABAAEA6GHWinjhAqV05oj9CIUKgD76Hva4hFyjYPHWByqFOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM
OSFR A_M_I_ OEMOSFRSaturday, January 12, 2013 11:29 PM -
When you paste the link in, remove the 'http:\\www' from the front first - it will then post happily.
It's obvious from the report that the file problem hasn't been solved.
Please also run the CheckSUR tool and post the results....
Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Method 2)
Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file
Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 12:04 AMModerator -
This is the link to the CBS log file, hope it works.
live.com/redir?resid=695F2E048DCBBA1D!109&authkey=!AOG2JSXRTX1jl6Y
Sunday, January 13, 2013 12:11 AM -
It did :)
There are a number of file problems in that report.
Line 10589: 2013-01-12 17:21:46, Info CSI 000003ca [SR] Repairing 12 (0x000000000000000c) components Line 10590: 2013-01-12 17:21:46, Info CSI 000003cb [SR] Beginning Verify and Repair transaction Line 10593: 2013-01-12 17:21:46, Info CSI 000003cd [SR] Cannot repair member file [l:24{12}]"aitagent.exe" of Microsoft-Windows-Application-Experience-Application-Telemetry-Agent, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10596: 2013-01-12 17:21:46, Info CSI 000003cf [SR] Cannot repair member file [l:20{10}]"CbsApi.dll" of Microsoft-Windows-CbsApi, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10599: 2013-01-12 17:21:47, Info CSI 000003d1 [SR] Cannot repair member file [l:22{11}]"eappcfg.dll" of Microsoft-Windows-Extensible-Authentication-Protocol-Host-Peer, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10602: 2013-01-12 17:21:47, Info CSI 000003d3 [SR] Cannot repair member file [l:102{51}]"microsoft-windows-kernel-processor-power-events.dll" of Microsoft-Windows-Kernel-Processor-Power-Events-Container, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10605: 2013-01-12 17:21:47, Info CSI 000003d5 [SR] Cannot repair member file [l:22{11}]"INETRES.dll" of Microsoft-Windows-Mail-Comm-DLL, Version = 6.1.7601.17609, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10608: 2013-01-12 17:21:47, Info CSI 000003d7 [SR] Cannot repair member file [l:22{11}]"makecab.exe" of Microsoft-Windows-makecab, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10611: 2013-01-12 17:21:47, Info CSI 000003d9 [SR] Cannot repair member file [l:30{15}]"msmpeg2adec.dll" of Microsoft-Windows-MSMPEG2ADEC, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10614: 2013-01-12 17:21:47, Info CSI 000003db [SR] Cannot repair member file [l:30{15}]"FwRemoteSvr.dll" of Microsoft-Windows-Network-Security-Domain-Clients-Svc, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10617: 2013-01-12 17:21:47, Info CSI 000003dd [SR] Cannot repair member file [l:22{11}]"lltdapi.dll" of Microsoft-Windows-NetworkTopology, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10620: 2013-01-12 17:21:47, Info CSI 000003df [SR] Cannot repair member file [l:20{10}]"inetpp.dll" of Microsoft-Windows-Printing-InternetPrinting-Client, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10623: 2013-01-12 17:21:47, Info CSI 000003e1 [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10626: 2013-01-12 17:21:47, Info CSI 000003e3 [SR] Cannot repair member file [l:24{12}]"filemgmt.dll" of Microsoft-Windows-SharedFoldersUI, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 10627: 2013-01-12 17:21:47, Info CSI 000003e4 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:30{15}]"FwRemoteSvr.dll" by copying from backup
I'll work on them while we wait for the results from the CheckSUR scan.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Edited by Noel D PatonModerator Sunday, January 13, 2013 12:27 AM remove excess
Sunday, January 13, 2013 12:25 AMModerator -
This is the link to the chcksur file
skydrive.live.com/redir?resid=695F2E048DCBBA1D!111&authkey=!AKzdV8wafwu-TCA
Sunday, January 13, 2013 12:44 AM -
...and here's the fix protocol for the first set of problems :)
I've uploaded a file - skrxx.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
Please download and save it.Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
This should create a new folder C:\skrxxClose all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start
tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.Pick the option to use a Command Prompt
At the prompt type
DIR C:\skrxx
hit the enter key - if you get a 'Not
Found' error try
DIR D:\skrxx
or
DIR E:\skrxxThe drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...
XCOPY <drive>:\skrxx <drive>:\windows\winsxs /y /i /s /v /h
run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command
Prompt - reboot to Normal Mode Windows.Now run SFC /SCANNOW in an
Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and
post a new linkAlso run a new MGADiag report, and post the result.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 1:00 AMModerator -
... from the looks of your CheckSUR log, I could get to regret taking this on! :)
There are 82 errors present there - and possibly more to come one we fix those.
Once you have run the SFC scan from the above, please run another CheckSUR and post the new log file - I'm off to bed (if I don't have nightmares! <g>)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 1:10 AMModerator -
Thanks Noel.
Great!! you have been super in your efforts so far.
That did away with the 'Windows not genuine' message. I did notice though that Windows Media Center is not working. Is there a way to use my original Windows install disk to fix some of these issues?
CBS Log file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!112&authkey=!ADh2U0noChV44DE
CheckSUR Report file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!113&authkey=!APrKUWVuoC-dQ6I
MGADiag Report Below
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-G3DT8-P2XJP-379R7
Windows Product Key Hash: zCQYPKMmc+VC4WqLZy1lFeIUw8A=
Windows Product ID: 00371-153-6000985-85566
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {7F510C08-881C-492F-9164-B19478CE44D4}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7F510C08-881C-492F-9164-B19478CE44D4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-379R7</PKey><PID>00371-153-6000985-85566</PID><PIDType>5</PIDType><SID>S-1-5-21-2921414870-2438168558-2245915741</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>P5K</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0603 </Version><SMBIOSVersion major="2" minor="4"/><Date>20070703000000.000000+000</Date></BIOS><HWID>22B33807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3D4DF1EB2E22D86</Val><Hash>lXP7ogKcFTWK9T1h23hUtfPBgYg=</Hash><Pid>89409-707-2721896-65928</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00170-153-600098-01-1033-7600.0000-0172011
Installation ID: 015930487546666142176135765095130792314954624000523593
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 379R7
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 1/12/2013 9:48:44 PMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 10:24:2012 13:52
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NgAAAAEABgABAAEAAAABAAAAAgABAAEA6GHWinjhAqV05oj9CIUKgD76Hva4hFyjYPFq6CqFOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM
OSFR A_M_I_ OEMOSFRSunday, January 13, 2013 3:13 AM -
Good - repairing the SFC errors allowed CheckSUR to repair the nine file errors in the report.
Now all I have to deal with is the 73 remaining registry errors :)
I want to do this in sections - That way there's not too much to do if I get things wrong.
Back in a bit when I've worked out the priorities, and exactly what's needed - how are you for using regedit?
I'm not sure how much effect these repairs will have on Media Player - the errors seem to be more in IE updates than anything else - but you never know :)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 11:14 AMModerator -
Before you get too far just to let you know that I ran a repair on Visual Studio and installed the latest Windows update last night and that seemed to also fix Windows Media Center. I'm not sure if that resolved everything..Sunday, January 13, 2013 2:12 PM
-
Yeurgh!
Thanks for letting me know! - please run another CheckSUR report and post the new log.
(I have the first set of repairs organised and was about to post them - I'll hold off for the new log now)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 2:31 PMModerator -
Sorry about that. Your patience and assistance is truly appreciated.
I ran another CheckSUR, the link is below.
skydrive.live.com/redir?resid=695F2E048DCBBA1D!114&authkey=!AOTO25id5okGpZI
I have had to use another computer to work within skydrive, apparently this issue is affecting ie's ability to work with skydrive, can't upload or manipulate files at all, only view them.
Do you know anything about Windows FIXit?
Also found this microsof fix for error code 0x80070002/kb/910336
- Edited by skriesten Sunday, January 13, 2013 5:31 PM
Sunday, January 13, 2013 4:56 PM -
Please don't start trying Fixits - they aren't designed to deal with the type of problems that you are having, and could give some very strange results, with those errors still present.
At least your repairs haven't increased the number of problems found :)
First, I've uploaded a file skrab.zip to my Skydrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
please download it, and extract the contents to your desktop (it should be one small file, skrab.txt)Then we need to adjust the permissions in the registry, so that we are allowed to make the necessary changes.
Please open regedit, and navigate to the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
key, and right-click on it.
Select Permissions
The Permissions window should appear
Click on the Advanced button, then the Owner tab
highlight the Administrators entry in the list, and put a tick in the 'Replace Owner....' box
Click on the OK button (once!)
Back in the Permissions window,
highlight the Administrators entry, and put a tick in Full Control
Click on the Apply button
and OK out
Close RegeditNow open the skrab.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minise the window, just in case :)
Now open an Elevated Command Prompt,
right-click in the window, and select Paste.
The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirmNow copy the output from the Command Prompt to your reply here.
There should (if everything went right!) be a file on your desktop called npresults.log
upload that to your SkyDrive, and post a link.
Close Notepad, and the Command Prompt window,
Now run CheckSUR again, upload the new CheckSUR.log file, and post a linkThen we'll have a look see if I got it right!
With any luck that will clear the errors from one section of the report, and give me enough information to correct the errors in the other section.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 5:55 PMModerator -
There was no output file to view. I noticed in the text that the last line (output) stated "REH QUERY", should that have read "REG QUERY"?
Also, it was asking for permissions to Permanently delete
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0 /v "Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2" /f
- Edited by skriesten Sunday, January 13, 2013 6:43 PM
Sunday, January 13, 2013 6:33 PM -
If you need me to delete items manually in the registry, I don't have a problem with that.Sunday, January 13, 2013 6:58 PM
-
I'd rather not do manual registry editing if possible - it's all too easy to make a mistake! :)
Sorry about the typo - it should have been REG QUERY... (and I missed a quote symbol as well, I see!)corrected version
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect" /S >%userprofile%\desktop\npresults.log
(which explains why the file wasn't created!)
If you haven't closed the command prompt window yet, can you copy/paste the content you a reply? - To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
AS far as the permission to delete is concerned, that's another typo on my part - another missing quote!
here's the corrected version
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-AppSupport-Legacy~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2387149_RTM~31bf3856ad364e35~amd64~~6.1.1.1" /f
Please run both and post the file, and the new CheckSUR log - and I'll try to do better next time!
(I think I'd better split it up, if I start getting word-blind that quickly!)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 7:21 PMModerator -
With that cluestick, I see that there are typos missing quotes in the last two commands as well...
please run these two commands before the new CheckSUR run....
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-Security-ForApplications~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0" /f REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-Security-ForApplications~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0" /f
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 7:24 PMModerator -
Here you go.
CheckSUR file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!118&authkey=!AAKWR4RgPmiiCA4
Command Prompt Text link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!116&authkey=!AHUa392KNYd7BG4
NPResults file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!117&authkey=!AH8jb0JsiY4NZf8
Sunday, January 13, 2013 8:12 PM -
OK - that's good so far :)
The only remaining errors are for the two commands I amended in my last post - so if you run those, we can assume they also work.
Now all I have to do is work out WTH to do about the ComponentDetect data :)
Back in a while - more likely tomorrow.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 8:19 PMModerator -
It didn't take quite as long as I thought it might :)
Please disable Windows Updates from automatically downloading for the moment. (we don't want them attempting to install into partially un/installed components, and making things even worse!)
I've uploaded a file skrac.zip to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
open the skrac.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minimise the window, just in case :)
please download it, and extract the contents to your desktop (it should be one not-so-small file, skrac.txt)Now open an Elevated Command Prompt,
right-click in the window, and select Paste.
The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirm (and post back)Then we'll have a look see if I got it right!
Please run a new CheckSUR report, and upload the new log.
Please also run a new SFC /SCANNOW (just in case!) and post the CBS.log
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, January 13, 2013 10:22 PMModerator -
Thank you very much for all your assistance. I now can use IE on this machine to run SkyDrive.
Below are the results of the reports as stated above
CBS Log file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!120&authkey=!AMJS1X-nZZHu2uU
CheckSUR Log file link
skydrive.live.com/redir?resid=695F2E048DCBBA1D!119&authkey=!AJxH1gwKDqqNMxs
Monday, January 14, 2013 1:33 AM -
OK - three's still three errors present....
they should be easy enough after that lot!
The SFC scan is clear.
One line of this will produce an error - I can't tell which of the first two entries is the affected one
Assuming the other three run without a problem, please run another CheckSUR and post the results.
I've uploaded a file skrad.zip to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
open the skrad.txt file in Notepad, and highlight the content using Ctrl+A then copy it using Ctrl+C and minimise the window, just in case :)
please download it, and extract the contents to your desktop (it should be one not-so-small file, skrad.txt)Now open an Elevated Command Prompt,
right-click in the window, and select Paste.
The commands should run without error - if you get any demands for confirmation or any error messages, use Ctrl+C to break, and Y to confirm (and post back)Then we'll have a look see if I got it right!
Please run a new CheckSUR report, and upload the new log.
If it's clear, you can reset the permissions and ownership on the registry Key we changed earlier (read access for Administrators, and Ownership to TrustedInstaller), and switch Windows Updates back on. Then cross your fingers, and do a check for updates and see what comes up!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, January 14, 2013 2:07 AMModerator -
It appears there were some errors in that last set.
Command Prompt Text below
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
rrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-
htmlactivexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_
for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-29_neutral_LDR" /F
ERROR: The system was unable to find the specified registry key or value.C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
rrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-
htmlactivexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_
for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-30_neutral_GDR" /F
The operation completed successfully.C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
rrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetE
xplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0" /VAN.dll"Package_6_for_KB241640
0~31bf3856ad364e35~amd64~~6.1.1.2" /F
ERROR: Invalid syntax.
Type "REG DELETE /?" for usage.C:\Windows\system32>REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cu
rrentVersion\Component Based Servicing\PackageDetect\WinEmb-AppSupport-Legacy~31
bf3856ad364e35~amd64~~0.0.0.0" /v "Package_for_KB2387149~31bf3856ad364e35~amd64~
~6.1.1.1" /FREG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVer
sion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-htmlacti
vexcompat_31bf3856ad364e35_0.0.0.0_none_3b4962f457f39ea4" /v "Package_6_for_KB24
16400~31bf3856ad364e35~amd64~~6.1.1.2.2416400-29_neutral_LDR" /F
ERROR: Invalid syntax.
Type "REG DELETE /?" for usage.- Edited by skriesten Monday, January 14, 2013 3:41 AM
Monday, January 14, 2013 3:09 AM -
Text from the CheckSUR file
=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 17.0
2013-01-13 22:14Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
(f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0 Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlistChecking Component Watchlist
Checking Packages
Checking Component Store
Summary:
Seconds executed: 1232
Found 1 errors
CBS Watchlist Package Missing Total count: 1- Edited by skriesten Monday, January 14, 2013 3:44 AM
Monday, January 14, 2013 3:43 AM -
I see what happened there - the error threw the other commands out of sync.
Please open an Elevated Command Prompt and copy/paste the following command into it
REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~0.0.0.0" /v "Package_6_for_KB2416400~31bf3856ad364e35~amd64~~6.1.1.2" /F
Assuming no errors In the command, you should be able to reset the permissions now.Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, January 14, 2013 10:30 AMModerator -
I reperformed a SFC SCAN and CheckSUR report and neither showed any errors.
Thank you very much Noel for your hard work, it was greatly appreciated.
Wish I could buy you a beer.
Steve Kriesten
- Marked as answer by skriesten Monday, January 14, 2013 10:21 PM
Monday, January 14, 2013 10:21 PM -
Thanks for sticking with it!
It was a useful learning experience for me - the first time I'd actually done one like that on my own.
Good luck!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Tuesday, January 15, 2013 12:19 AMModerator