locked
Brand New Studio XPS Dell Laptop RRS feed

  • Question

  • I am quite annoyed.  I don't know what is up with this.  Under Control Panel > System and Security > System it says that Windows is activated.  Does that mean that it is valid?  I mean I know that it is valid since it is a brand new laptop from Dell and there are others with the same problem.  I'm just wondering if the computer already knows that it is valid but keeps popping up every few hours telling me that it isn't genuine.

     

    Here are my results. Please help. I'm loving Windows 7, but this is frustrating me!

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82

    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=

    Windows Product ID: 00359-OEM-8992687-00095

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010300.0.0.003

    ID: {003477DA-93C8-4718-8558-5DEB134FCA19}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Home Premium

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.100226-1909

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\Kyle\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{003477DA-93C8-4718-8558-5DEB134FCA19}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-1708725298-38935990-2827186111</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio XPS 1645</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="6"/><Date>20100511000000.000000+000</Date></BIOS><HWID>18B93607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, HomePremium edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00359-00178-926-800095-02-1033-7600.0000-1602010

    Installation ID: 020026255853779841193760766624038456634254847520785525

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: RMV82

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 6/20/2010 12:24:26 AM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x000000000001EFF0

    Event Time Stamp: 6:20:2010 00:16

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppobjs.dll

    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    Tampered File: %systemroot%\system32\sppwinob.dll

    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    Tampered File: %systemroot%\system32\drivers\spsys.sys

     

     

    HWID Data-->

    HWID Hash Current: OAAAAAEABAABAAEAAAACAAAABAABAAEAonbgbeKvfKZKNCysEHPK4Ph0Yj1QrjQYjo9he85bdlY=

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC PTLTD APIC  

      FACP INTEL CRESTLNE

      HPET INTEL CRESTLNE

      BOOT PTLTD $SBFTBL$

      MCFG INTEL CRESTLNE

      SLIC DELL   QA09   

      OSFR DELL   DELL    

      SSDT PmRef CpuPm

     

     

    Sunday, June 20, 2010 4:27 AM

Answers

  • "keyl10" wrote in message news:30f5cf22-1a06-4ec4-a57c-6fb0bdbe2a20...

    I am quite annoyed.  I don't know what is up with this.  Under Control Panel > System and Security > System it says that Windows is activated.  Does that mean that it is valid?  I mean I know that it is valid since it is a brand new laptop from Dell and there are others with the same problem.  I'm just wondering if the computer already knows that it is valid but keeps popping up every few hours telling me that it isn't genuine.

     

    Here are my results. Please help. I'm loving Windows 7, but this is frustrating me!

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82

    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=

    Windows Product ID: 00359-OEM-8992687-00095

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010300.0.0.003

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, HomePremium edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00359-00178-926-800095-02-1033-7600.0000-1602010

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x000000000001EFF0

    Event Time Stamp: 6:20:2010 00:16

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppobjs.dll

    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    Tampered File: %systemroot%\system32\sppwinob.dll

    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    Tampered File: %systemroot%\system32\drivers\spsys.sys

     


    You have some massive file corruption in highly protected system files - it's this which is causing your problem with Validation.
    It does NOT appear to be a problem with the Language files, as Carey thinks - since none of the files involved are .mui language files, but ALL are directly involved in the Licensing process.
    This would imply that  you may have installed something that is directly attacking the Licensing system in Windows, either by design or by accident. Windows has attempted to heal the files itself, and has failed. The Hash for the file is not what appears in the hash catalog, and windows is seeing this as an attack on the system.
    I have never seen a system so badly afflicted that hasn't been the subject of a virus attack, or deliberate tampering.
     
    What to do now -
    1) Run a FULL System Scan with your Anti-Virus, with Updated definitions. Follow that with a FULL System Scan in Safe Mode using MalwareBytes Anti-Malware, with newly updated definitions.
     
    2) Try a System Restore  - If it was a malware attack, System Restore may have been switched off by the malware, and no restore points available.
    If the System Restore works, then check for Windows updates again, install any High Priority ones, and  then attempt to Validate the system at http://www.microsoft.com/genuine
    Then run MGADiag, and post the result here
    3) Try  a System File Checker scan  - which will scan your whole Windows filesystem for problems, and attempt to repair them.
     From an Elevated Command Prompt, type   SFC  /SCANNOW - accept the confirmation(s) if requested, and wait for the scan to finish - what is the result? Then attempt to Validate the system at http://www.microsoft.com/genuine
    Then run MGADiag, and post the result here.
     
    If that fails, then you have two options -
    a) create a no-charge support request with MS at http://support.microsoft.com/gp/contactwga - point them at this thread if it helps
    b) Use the Dell Recovery system to reinstall Windows
     
    HTH
    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 20, 2010 8:34 AM
    Moderator

All replies

  • You need to uninstall the software that caused the issue, such as an unathorized third-party language modification program.

    File Scan Data-->

     File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003

     File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

     File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x

    Tampered File: %systemroot%\system32\sppobjs.dll

     Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

     Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

     Tampered File: %systemroot%\system32\sppwinob.dll

     Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

     Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

     Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

     Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

     Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

     Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

     Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

     Tampered File: %systemroot%\system32\drivers\spsys.sys

     

     

     


    Carey Frisch
    Sunday, June 20, 2010 5:13 AM
    Moderator
  • "keyl10" wrote in message news:30f5cf22-1a06-4ec4-a57c-6fb0bdbe2a20...

    I am quite annoyed.  I don't know what is up with this.  Under Control Panel > System and Security > System it says that Windows is activated.  Does that mean that it is valid?  I mean I know that it is valid since it is a brand new laptop from Dell and there are others with the same problem.  I'm just wondering if the computer already knows that it is valid but keeps popping up every few hours telling me that it isn't genuine.

     

    Here are my results. Please help. I'm loving Windows 7, but this is frustrating me!

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82

    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=

    Windows Product ID: 00359-OEM-8992687-00095

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010300.0.0.003

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, HomePremium edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00359-00178-926-800095-02-1033-7600.0000-1602010

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x000000000001EFF0

    Event Time Stamp: 6:20:2010 00:16

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppobjs.dll

    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    Tampered File: %systemroot%\system32\sppwinob.dll

    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    Tampered File: %systemroot%\system32\drivers\spsys.sys

     


    You have some massive file corruption in highly protected system files - it's this which is causing your problem with Validation.
    It does NOT appear to be a problem with the Language files, as Carey thinks - since none of the files involved are .mui language files, but ALL are directly involved in the Licensing process.
    This would imply that  you may have installed something that is directly attacking the Licensing system in Windows, either by design or by accident. Windows has attempted to heal the files itself, and has failed. The Hash for the file is not what appears in the hash catalog, and windows is seeing this as an attack on the system.
    I have never seen a system so badly afflicted that hasn't been the subject of a virus attack, or deliberate tampering.
     
    What to do now -
    1) Run a FULL System Scan with your Anti-Virus, with Updated definitions. Follow that with a FULL System Scan in Safe Mode using MalwareBytes Anti-Malware, with newly updated definitions.
     
    2) Try a System Restore  - If it was a malware attack, System Restore may have been switched off by the malware, and no restore points available.
    If the System Restore works, then check for Windows updates again, install any High Priority ones, and  then attempt to Validate the system at http://www.microsoft.com/genuine
    Then run MGADiag, and post the result here
    3) Try  a System File Checker scan  - which will scan your whole Windows filesystem for problems, and attempt to repair them.
     From an Elevated Command Prompt, type   SFC  /SCANNOW - accept the confirmation(s) if requested, and wait for the scan to finish - what is the result? Then attempt to Validate the system at http://www.microsoft.com/genuine
    Then run MGADiag, and post the result here.
     
    If that fails, then you have two options -
    a) create a no-charge support request with MS at http://support.microsoft.com/gp/contactwga - point them at this thread if it helps
    b) Use the Dell Recovery system to reinstall Windows
     
    HTH
    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 20, 2010 8:34 AM
    Moderator
  • My system crashed this morning and wouldn't start up again so I was forced to reformat.  If the problem occurs again I will post back, but for now everything is good.
    Sunday, June 20, 2010 8:19 PM
  • "keyl10" wrote in message news:bbe45290-6383-4339-afcb-70b17dc97ee0...
    My system crashed this morning and wouldn't start up again so I was forced to reformat.  If the problem occurs again I will post back, but for now everything is good.

    It's an ill wind.....
    :)
     
    Good Luck!

    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 20, 2010 10:43 PM
    Moderator