locked
Windows Activation reset because of Gigabyte 3TB+ driver RRS feed

  • Question

  • After installing a new 3tb hard drive, I installed Gigabyte's 3TB+ unlock utility (http://www.gigabyte.cn/microsite/276/3tb.html, note: not the extra driver) to be able to use the full 3TB. Looking back, that wasn't the smartest thing to do since you only need it if you're going to boot from it, but now it ruined my Windows activation.

    Anyway, Windows told me to activate again, but the browser activation tells me that the service was unavailable. After some retries I notice the 0x80070005 error. Trying to manually activate with slmgr then throws this error "Error: 0x80070005 Access denied: the requested action requires elevated privileges". Searching around means this usually has something to do with the permissions of the plug and play service.

    After further research I found these topics:

    Gigabyte 3TB+ driver resets Windows Activation: forever stuck with error 0x80070005 and slmgr.vbs with errCode 800A0046
    http://social.microsoft.com/Forums/is/genuinewindows7/thread/a59a21a0-2929-4282-9bb2-1104b5000201

    Gigabyte 3TB+ driver resets Windows 2008 R2 Activation: forever stuck with error 0x80070005 and slmgr.vbs with errCode 800A0046
    http://social.microsoft.com/Forums/en-CA/genuinewindows7/thread/61a364d8-99bd-4521-93e6-cca387cb5a71

    The first person solved it by reinstalling from scratch. Second one got saved by System restore, but unfortunately I don't have that available.

    I already uninstalled the utility, tried recreating the licensing store and check in regedit that HKEY_USERS\S-1-5-20 has the correct permissions.

    I'm about to give up and try a repair / clean install, but I'm hoping I can get some good suggestions here first since I don't know how much is lost with a repair install.

    Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 50 Cached Online Validation Code: 0x0 Windows Product Key: N/A, hr=0x80070005 Windows Product Key Hash: N/A, hr=0x80070005 Windows Product ID: 55041-007-2004744-86850 Windows Product ID Type: 6 Windows License Type: Volume MAK Windows OS version: 6.1.7601.2.00010100.1.0.004 ID: {DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}(1) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Enterprise Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.120830-0333 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-2004744-86850</PID><PIDType>6</PIDType><SID>S-1-5-21-824696172-2448174435-1427695111</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD2</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0B0A3607018400FE</HWID><UserLCID>0813</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied Windows Activation Technologies--> HrOffline: 0x00000000 HrOnline: 0xC004C533 HealthStatus: 0x0000000000000000 Event Time Stamp: 1:16:2013 10:22 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: HWID Data--> HWID Hash Current: OgAAAAEABgABAAEAAQACAAAAAgABAAEACrbE5whQCtVCxkBAgJYIhcKP9iJ4UoqpYj30mFQMZDh2Vg== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC GBT GBTUACPI FACP GBT GBTUACPI HPET GBT GBTUACPI MCFG GBT GBTUACPI EUDS GBT TAMG GBT GBT B0 SSDT INTEL PPM RCM

    Thursday, January 17, 2013 2:36 AM

Answers

All replies

  • Your error appears different to that in the threads you reference (from memory) - you have 0x80070005 (Access Denied) errors.

    Open an Elevated
    Command Prompt, and run the following commands

     

    sc sdshow plugplay
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
    NT\CurrentVersion\ProfileList\S-1-5-18" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
    NT\CurrentVersion\ProfileList\S-1-5-19" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
    NT\CurrentVersion\ProfileList\S-1-5-20" /S

     

    Copy and paste the results to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, January 17, 2013 12:15 PM
    Moderator
  • Thanks for the reply. Here are the results:

    C:\Users\Sam>sc sdshow plugplay

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
    RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

    C:\Users\Sam>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current
    Version\ProfileList\S-1-5-18" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-18
        Flags    REG_DWORD    0xc
        State    REG_DWORD    0x0
        RefCount    REG_DWORD    0x1
        Sid    REG_BINARY    010100000000000512000000
        ProfileImagePath    REG_EXPAND_SZ    %systemroot%\system32\config\systemprof
    ile


    C:\Users\Sam>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current
    Version\ProfileList\S-1-5-19" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-19
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\LocalService

        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Users\Sam>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current
    Version\ProfileList\S-1-5-20" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0

    Thursday, January 17, 2013 3:08 PM
  • That looks normal - it could be that either a service has lost its default Security status, or that you're running with UAC disabled? (or something else entirely!)

    That line reference in slmgr is a common fault point, and is the end of a for...next loop querying the WMI store

    Please run the following commands and post the results....

    NET START WINMGMT
    SC QC WINMGMT
    SC QUERYEX WINMGMT
    SC SDSHOW WINMGMT
     
     
    


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 2:16 PM
    Moderator
  • You're correct, UAC is disabled. I enabled it again and the slmgr error did change when entered in a non-admin cmd prompt, 0xC004F025,  but I don't suppose that is of any aid.

    Results:

    C:\Users\Sam>NET START WINMGMT
    The requested service has already been started.

    More help is available by typing NET HELPMSG 2182.


    C:\Users\Sam>SC QC WINMGMT
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: WINMGMT
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 0   IGNORE
            BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k netsvcs
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Windows Management Instrumentation
            DEPENDENCIES       : RPCSS
            SERVICE_START_NAME : localSystem

    C:\Users\Sam>SC QUERYEX WINMGMT

    SERVICE_NAME: WINMGMT
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 1020
            FLAGS              :

    C:\Users\Sam>SC SDSHOW WINMGMT

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
    RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

    Friday, January 18, 2013 4:05 PM
  • with UAC enabled, please run another MGADiag report - or run it as Admin

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 4:22 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-007-2004744-86850
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-2004744-86850</PID><PIDType>6</PIDType><SID>S-1-5-21-824696172-2448174435-1427695111</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD2</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0B0A3607018400FE</HWID><UserLCID>0813</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied
    
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:16:2013 10:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    
    
    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAEAAQACAAAAAgABAAEACrbE5whQCtVCxkBAgJYIhcKP9iJ4UoqpYj30mFQMZDh2Vg==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name	OEMID Value	OEMTableID Value
      APIC			GBT   		GBTUACPI
      FACP			GBT   		GBTUACPI
      HPET			GBT   		GBTUACPI
      MCFG			GBT   		GBTUACPI
      EUDS			GBT   		
      TAMG			GBT   		GBT   B0
      SSDT			INTEL		PPM RCM 
    
    
    

    Friday, January 18, 2013 5:15 PM
  • OK- back to basics, then....

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 6:10 PM
    Moderator
  • CBS.log: http://sdrv.ms/10F1OBB

    C:\Windows\system32>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 9% complete.

    Windows Resource Protection could not perform the requested operation.

    Also tried SFC /SCANNOW in Safe Mode, but same error

    Friday, January 18, 2013 7:28 PM
  • Not good :(

    You're getting Access Denied errors in the Winsxs store.

    Please run the following command, and post the results

    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921 /T

    You could try it from the Recovery Environment - you may  have more success there.....

    Reboot the computer, and tap the F8 key until you get the advanced boot menu up - one option should be 'Repair your computer'. Pick that one.

     

    Log into your normal account.

    You'll get a set of options - pick the Command Prompt one.

    At the command prompt, type  DIR C:\

    - if we're lucky this will bring up a listing of your normal C: drive contents, including the Program Files folder(s) and the Windows folder.

    If not, try D:\ or E:\ (etc. until you get the right letter)

    then type the following command

     

    sfc /scannow /OFFBOOTDIR=<drive>:\ /OFFWINDIR=<drive>:\Windows

     

    where <drive> is the letter you found above.

     

    Wait for the command to complete. (make a note of the response!).

     

    Once it has, type  EXIT and the pick the option to reboot.

     

    Post another MGADiag report   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 7:41 PM
    Moderator
  • Thanks for the help so far, first command seemed to be successful.

    C:\Windows\system32>ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loade
    r.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921 /T
    C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_nl-nl_8b999d0b86bcd921 NT SERVICE\TrustedInstaller:(I)(OI)(CI)(
    F)

                                            INGEBOUWD\Administrators:(I)(OI)(CI)(RX)


                                            NT AUTHORITY\SYSTEM:(I)(OI)(CI)(RX)

                                            INGEBOUWD\Users:(I)(OI)(CI)(RX)

    C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.efi.mui NT SERVICE\TrustedInstal
    ler:(F)

                                                            INGEBOUWD\Administrators
    :(RX)

                                                            NT AUTHORITY\SYSTEM:(RX)


                                                            INGEBOUWD\Users:(RX)

    C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.exe.mui Sam-PC\Sam:(F)

    C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.efi.mui NT SERVICE\TrustedInst
    aller:(F)

                                                              INGEBOUWD\Administrato
    rs:(RX)

                                                              NT AUTHORITY\SYSTEM:(R
    X)

                                                              INGEBOUWD\Users:(RX)

    C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e3
    5_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.exe.mui Sam-PC\Sam:(F)

    Successfully processed 5 files; Failed processing 0 files



    Managed to find the correct drive in repair mode for the second command, but still the same problem unfortunately :/

    X:\windows\system32>sfc /scannow /OFFBOOTDIR=E:\ /OFFWINDIR=E:\Windows

    Beginning system scan.  This process will take some time.

    Windows Resource Protection could not perform the requested operation.



    MGADiag report

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-007-2004744-86850
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-2004744-86850</PID><PIDType>6</PIDType><SID>S-1-5-21-824696172-2448174435-1427695111</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD2</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0B0A3607018400FE</HWID><UserLCID>0813</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied
    
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:16:2013 10:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    
    
    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAEAAQACAAAAAgABAAEACrbE5whQCtVCxkBAgJYIhcKP9iJ4UoqpYj30mFQMZDh2Vg==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name	OEMID Value	OEMTableID Value
      APIC			GBT   		GBTUACPI
      FACP			GBT   		GBTUACPI
      HPET			GBT   		GBTUACPI
      MCFG			GBT   		GBTUACPI
      EUDS			GBT   		
      TAMG			GBT   		GBT   B0
      SSDT			INTEL		PPM RCM 
    
    


    • Edited by Esdeka Friday, January 18, 2013 9:19 PM
    Friday, January 18, 2013 9:18 PM
  • That explains the problem - it seems that you've already played with the permissions on some of the files there, and broken the chain. (and I've been sending the wrong file - the English version, rather than the Dutch version  - anyhow)

    We'll have to reset those, and try again....

    Please open an Elevated Command Prompt, and run the following commands.

    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.exe.mui /grant "NT SERVICE\TrustedInstaller":(F)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.exe.mui /grant "NT AUTHORITY\System":(RX)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.exe.mui /grant Administrators:(RX)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winload.exe.mui /grant Users:(RX
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.exe.mui /grant "NT SERVICE\TrustedInstaller":(F)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.exe.mui /grant "NT AUTHORITY\System":(RX)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.exe.mui /grant Administrators:(RX)
    ICACLS C:\Windows\WinSxS\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921\winresume.exe.mui /grant Users:(RX)
     
     
    

    That should reset the permissions properly - please then run another SFC /SCANNOW and post the CBS.log

    I'll try and source the files while you do that.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Friday, January 18, 2013 10:35 PM
    Moderator
  • (Please note the corrections in the previous post! - sorry about that!)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 10:45 PM
    Moderator
  • Great, that seemed to work, sfc /scannow finished and asked me to reboot.

    Here's the log: http://sdrv.ms/WoJ5Dx

    Friday, January 18, 2013 11:08 PM
  • There's a number of errors there....

    Line 20573: 2013-01-18 23:58:03, Info                  CSI    000003c5 [SR] Repairing 3 components
    	Line 20574: 2013-01-18 23:58:03, Info                  CSI    000003c6 [SR] Beginning Verify and Repair transaction
    	Line 20577: 2013-01-18 23:58:03, Info                  CSI    000003c8 [SR] Cannot repair member file [l:30{15}]"winload.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"nl-NL", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    	Line 20580: 2013-01-18 23:58:03, Info                  CSI    000003ca [SR] Cannot repair member file [l:34{17}]"winresume.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"nl-NL", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    	Line 20581: 2013-01-18 23:58:03, Info                  CSI    000003cb [SR] Cannot repair member file [l:22{11}]"bootres.dll" of Microsoft-Windows-BootRes, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    	Line 20582: 2013-01-18 23:58:03, Info                  CSI    000003cc [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:30{15}]"winload.exe.mui" by copying from backup
    	Line 20583: 2013-01-18 23:58:03, Info                  CSI    000003cd [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:34{17}]"winresume.exe.mui" by copying from backup
    	Line 20586: 2013-01-18 23:58:03, Info                  CSI    000003cf [SR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\nl-NL"\[l:30{15}]"winload.exe.mui" from store
    	Line 20589: 2013-01-18 23:58:03, Info                  CSI    000003d1 [SR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\nl-NL"\[l:34{17}]"winresume.exe.mui" from store
    	Line 20592: 2013-01-18 23:58:03, Info                  CSI    000003d3 [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store
    	Line 20593: 2013-01-18 23:58:03, Info                  CSI    000003d4 [SR] Cannot repair member file [l:22{11}]"bootres.dll" of Microsoft-Windows-BootRes, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    	Line 20594: 2013-01-18 23:58:03, Info                  CSI    000003d5 [SR] This component was referenced by [l:242{121}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.Microsoft-Windows-Client-Features-Update"
    	Line 20599: 2013-01-18 23:58:03, Info                  CSI    000003d8 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"bootres.dll"; source file in store is also corrupted
    	Line 20616: 2013-01-18 23:58:03, Info                  CSI    000003da [SR] Repair complete
    	Line 20617: 2013-01-18 23:58:03, Info                  CSI    000003db [SR] Committing transaction
    	Line 20618: 2013-01-18 23:58:03, Info                  CSI    000003dc [SR] Cannot commit interactively, there are boot critical components being repaired
    	Line 20619: 2013-01-18 23:58:03, Info                  CSI    000003dd [SR] Repairing 3 components
    	Line 20620: 2013-01-18 23:58:03, Info                  CSI    000003de [SR] Beginning Verify and Repair transaction
    	Line 20623: 2013-01-18 23:58:03, Info                  CSI    000003e0 [SR] Cannot repair member file [l:30{15}]"winload.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"nl-NL", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    	Line 20626: 2013-01-18 23:58:03, Info                  CSI    000003e2 [SR] Cannot repair member file [l:34{17}]"winresume.exe.mui" of Microsoft-Windows-BootEnvironment-OS-Loader.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"nl-NL", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    	Line 20627: 2013-01-18 23:58:03, Info                  CSI    000003e3 [SR] Cannot repair member file [l:22{11}]"bootres.dll" of Microsoft-Windows-BootRes, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    	Line 20628: 2013-01-18 23:58:03, Info                  CSI    000003e4 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:30{15}]"winload.exe.mui" by copying from backup
    	Line 20629: 2013-01-18 23:58:03, Info                  CSI    000003e5 [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:34{17}]"winresume.exe.mui" by copying from backup
    	Line 20632: 2013-01-18 23:58:03, Info                  CSI    000003e7 [SR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\nl-NL"\[l:30{15}]"winload.exe.mui" from store
    	Line 20635: 2013-01-18 23:58:03, Info                  CSI    000003e9 [SR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\nl-NL"\[l:34{17}]"winresume.exe.mui" from store
    	Line 20638: 2013-01-18 23:58:03, Info                  CSI    000003eb [SR] Repairing corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:24{12}]"explorer.exe" from store
    	Line 20639: 2013-01-18 23:58:03, Info                  CSI    000003ec [SR] Cannot repair member file [l:22{11}]"bootres.dll" of Microsoft-Windows-BootRes, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
    	Line 20640: 2013-01-18 23:58:03, Info                  CSI    000003ed [SR] This component was referenced by [l:242{121}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.Microsoft-Windows-Client-Features-Update"
    	Line 20645: 2013-01-18 23:58:03, Info                  CSI    000003f0 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"bootres.dll"; source file in store is also corrupted
    	Line 20662: 2013-01-18 23:58:03, Info                  CSI    000003f2 [SR] Repair complete
    

    The only remaining error appears to be the bootres.dll

    Please confirm this by running another SFC /SCANNOW, and post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, January 18, 2013 11:31 PM
    Moderator
  • http://sdrv.ms/13PhzDP
    Saturday, January 19, 2013 7:46 AM
  • I've uploaded a file - esdaa.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526

    Please download and save it.

    Right-click on the saved file and select Extract all...

    Change the target to C:\ and click on Extract

    This should create a folder
    C:\esdaa

    Close all windows (it would be a good idea to print
    these instructions!)

    Now reboot to the Repair Environment - as soon as the machine restarts, start
    tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
    should be the option 'Repair my Computer'

    Pick that

    You'll have to log in with your username and password.

    Pick the option to use a Command Prompt

    At the prompt type

    DIR C:\esdaa

    hit the enter key - if you get a 'Not Found' error try

    DIR D:\esdaa

    or

    DIR E:\esdaa

     

    The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following
    command...

     

    XCOPY <drive>:\esdaa <drive>:\windows\winsxs /y /i /s /v /h

     

    run the command (it should take almost no time)and when the prompt returns, type

    EXIT

    and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

    Now run SFC /SCANNOW in an Elevated Command Prompt

    then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

    Also run a new MGADiag report, and post the result.



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 11:17 AM
    Moderator
  • The xopy failed, access denied ...

    Here are the logs anyway:

    http://sdrv.ms/YeRJd5

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-007-2004744-86850
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-2004744-86850</PID><PIDType>6</PIDType><SID>S-1-5-21-824696172-2448174435-1427695111</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD2</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0B0A3607018400FE</HWID><UserLCID>0813</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied
    
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:16:2013 10:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    
    
    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAEAAQACAAAAAgABAAEACrbE5whQCtVCxkBAgJYIhcKP9iJ4UoqpYj30mFQMZDh2Vg==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name	OEMID Value	OEMTableID Value
      APIC			GBT   		GBTUACPI
      FACP			GBT   		GBTUACPI
      HPET			GBT   		GBTUACPI
      MCFG			GBT   		GBTUACPI
      EUDS			GBT   		
      TAMG			GBT   		GBT   B0
      SSDT			INTEL		PPM RCM 
    
    
    

    Saturday, January 19, 2013 12:00 PM
  • Very strange!

    Please run the following commands, and post the results...

      

    DIR C:\esdaa
    ICACLS C:\Windows\Winsxs
    ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5 /T
    ATTRIB C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5 /S
    
     
    
    


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 12:09 PM
    Moderator
  • Results:

    C:\Windows\system32>dir c:\esdaa
     Volume in drive C is Win 7 - 128GB - Crucial M4 SSD
     Volume Serial Number is 6A5C-E183

     Directory of c:\esdaa

    19/01/2013  12:29    <DIR>          .
    19/01/2013  12:29    <DIR>          ..
    19/01/2013  11:14    <DIR>          amd64_microsoft-windows-bootres_31bf3856ad36
    4e35_6.1.7601.17514_none_9d42c69298905ee5
                   0 File(s)              0 bytes
                   3 Dir(s)  38.228.488.192 bytes free

    C:\Windows\system32>ICACLS C:\Windows\Winsxs
    C:\Windows\Winsxs NT SERVICE\TrustedInstaller:(OI)(CI)(F)
                      INGEBOUWD\Administrators:(OI)(CI)(RX)
                      NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
                      INGEBOUWD\Users:(OI)(CI)(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31b
    f3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5 /T
    C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.1751
    4_none_9d42c69298905ee5 NT SERVICE\TrustedInstaller:(I)(OI)(CI)(F)

                            INGEBOUWD\Administrators:(I)(OI)(CI)(RX)

                            NT AUTHORITY\SYSTEM:(I)(OI)(CI)(RX)

                            INGEBOUWD\Users:(I)(OI)(CI)(RX)

    C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.1751
    4_none_9d42c69298905ee5\bootres.dll Sam-PC\Sam:(F)

    Successfully processed 2 files; Failed processing 0 files

    C:\Windows\system32>ATTRIB C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31b
    f3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5 /S
    File not found - C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364
    e35_6.1.7601.17514_none_9d42c69298905ee5

    I tried this one too because I found it a bit strange it couldn't find the folder:

    C:\Windows\system32>ATTRIB C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31b
    f3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\*.* /S
    A            C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_
    6.1.7601.17514_none_9d42c69298905ee5\bootres.dll

    Saturday, January 19, 2013 12:28 PM
  • My fault - Folders don't have Attributes :)

    That explains the problem - you've obviously taken ownership at some point and disallowed access to everyone else.

    C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.1751
    4_none_9d42c69298905ee5\bootres.dll Sam-PC\Sam:(F)

    We need to correct that...

    Open an Elevated Command Prompt, and run the following Commands

    TAKEOWN /F C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll /A
    ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll /reset
    ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll
     
     
    

    post the results, and try the XCOPY again, from the RE


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 12:44 PM
    Moderator
  • C:\Windows\system32>TAKEOWN /F C:\Windows\WinSxs\amd64_microsoft-windows-bootres
    _31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll /A

    SUCCESS: The file (or folder): "C:\Windows\WinSxs\amd64_microsoft-windows-bootre
    s_31bf3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll" now owned b
    y the administrators group.

    C:\Windows\system32>ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31b
    f3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll /reset
    processed file: C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e
    35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll
    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31b
    f3856ad364e35_6.1.7601.17514_none_9d42c69298905ee5\bootres.dll
    C:\Windows\WinSxs\amd64_microsoft-windows-bootres_31bf3856ad364e35_6.1.7601.1751
    4_none_9d42c69298905ee5\bootres.dll NT SERVICE\TrustedInstaller:(I)(F)

                                        INGEBOUWD\Administrators:(I)(RX)

                                        NT AUTHORITY\SYSTEM:(I)(RX)

                                        INGEBOUWD\Users:(I)(RX)

    Successfully processed 1 files; Failed processing 0 files

    After xcopy and sfc /scannow, seems it worked - yay?

    Windows Resource Protection did not find any integrity violations.


    http://sdrv.ms/WO5kBt

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-007-2004744-86850
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.004
    ID: {DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DAE3ED7E-CB97-461D-9E21-7BB3A601CD00}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-2004744-86850</PID><PIDType>6</PIDType><SID>S-1-5-21-824696172-2448174435-1427695111</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD2</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0B0A3607018400FE</HWID><UserLCID>0813</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied
    
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:16:2013 10:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    
    
    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAEAAQACAAAAAgABAAEACrbE5whQCtVCxkBAgJYIhcKP9iJ4UoqpYj30mFQMZDh2Vg==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name	OEMID Value	OEMTableID Value
      APIC			GBT   		GBTUACPI
      FACP			GBT   		GBTUACPI
      HPET			GBT   		GBTUACPI
      MCFG			GBT   		GBTUACPI
      EUDS			GBT   		
      TAMG			GBT   		GBT   B0
      SSDT			INTEL		PPM RCM 
    
    
    

    Saturday, January 19, 2013 1:12 PM
  • Still no change in the report :(

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Method 2)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 1:36 PM
    Moderator
  • Here it is: http://sdrv.ms/U8XUfe

    Saturday, January 19, 2013 2:45 PM
  • That's clear also.

    What happens if you attempt to re-input your Key now?

    Please run the following commands separately, and note just the number of files and folders found - there could be thousands, and each could take a couple of minutes to run.

    DIR C:\Windows\System32 /AR /S

    DIR C:\Windows /AR /S

    If you get any errors, make a note of the error, and the last couple of lines showing before the error.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 3:03 PM
    Moderator
  • Still the 0x80070005  Access is denied error, don't think anything has changed.

    C:\Windows\System32
         Total Files Listed:
                   4 File(s)     20.351.536 bytes
                   6 Dir(s)  37.254.545.408 bytes free

    C:\Windows
         Total Files Listed:
                1749 File(s)  4.240.220.343 bytes
                 171 Dir(s)  37.253.316.608 bytes free

    Saturday, January 19, 2013 3:17 PM
  • Please run the following commands, and post the results..

    ICACLS C:\Windows\System32\7b*.*


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 5:40 PM
    Moderator

  • C:\Users\Sam>ICACLS C:\Windows\System32\7b*.*
    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)

                       INGEBOUWD\Administrators:(I)(F)

                       INGEBOUWD\Users:(I)(RX)

    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)

                       INGEBOUWD\Administrators:(I)(F)

                       INGEBOUWD\Users:(I)(RX)

    Successfully processed 2 files; Failed processing 0 files
    Saturday, January 19, 2013 6:03 PM
  • That's normal - I should have asked for DIR results as well, though (the  files should be updated every 30 minute or so)

    Please run the following commands and post the results

    DIR C:\Windows\System32\7b*.*
    REG QUERY HKU
    REG QUERY HKU\S-1-5-20
    DIR C:\Windows\ServiceProfiles\NetworkService\*.DAT /AH
    DIR C:\Windows\ServiceProfiles\LocalService\*.DAT /AH
    ICACLS C:\Windows\ServiceProfiles\NetworkService
    ICACLS C:\Windows\ServiceProfiles\LocalService
     
     
    


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, January 19, 2013 7:37 PM
    Moderator
  • Results:
    C:\Windows\system32>DIR C:\Windows\System32\7b*.*
     Volume in drive C is Win 7 - 128GB - Crucial M4 SSD
     Volume Serial Number is 6A5C-E183
    
     Directory of C:\Windows\System32
    
    File Not Found
    
    C:\Windows\system32>REG QUERY HKU
    
    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-20
    HKEY_USERS\S-1-5-21-824696172-2448174435-1427695111-1000
    HKEY_USERS\S-1-5-21-824696172-2448174435-1427695111-1000_Classes
    HKEY_USERS\S-1-5-18
    
    C:\Windows\system32>REG QUERY HKU\S-1-5-20
    
    HKEY_USERS\S-1-5-20\AppEvents
    HKEY_USERS\S-1-5-20\Console
    HKEY_USERS\S-1-5-20\Control Panel
    HKEY_USERS\S-1-5-20\Environment
    HKEY_USERS\S-1-5-20\EUDC
    HKEY_USERS\S-1-5-20\Keyboard Layout
    HKEY_USERS\S-1-5-20\Network
    HKEY_USERS\S-1-5-20\Printers
    HKEY_USERS\S-1-5-20\Software
    HKEY_USERS\S-1-5-20\System
    
    C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NetworkService\*.DAT /AH
     Volume in drive C is Win 7 - 128GB - Crucial M4 SSD
     Volume Serial Number is 6A5C-E183
    
     Directory of C:\Windows\ServiceProfiles\NetworkService
    
    19/01/2013  18:21           524.288 NTUSER.DAT
                   1 File(s)        524.288 bytes
                   0 Dir(s)  35.380.338.688 bytes free
    
    C:\Windows\system32>DIR C:\Windows\ServiceProfiles\LocalService\*.DAT /AH
     Volume in drive C is Win 7 - 128GB - Crucial M4 SSD
     Volume Serial Number is 6A5C-E183
    
     Directory of C:\Windows\ServiceProfiles\LocalService
    
    19/01/2013  18:11           262.144 NTUSER.DAT
                   1 File(s)        262.144 bytes
                   0 Dir(s)  35.380.338.688 bytes free
    
    C:\Windows\system32>ICACLS C:\Windows\ServiceProfiles\NetworkService
    C:\Windows\ServiceProfiles\NetworkService NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                                              INGEBOUWD\Administrators:(OI)(CI)(F)
                                              NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(
    F)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>ICACLS C:\Windows\ServiceProfiles\LocalService
    C:\Windows\ServiceProfiles\LocalService NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                                            INGEBOUWD\Administrators:(OI)(CI)(F)
                                            NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(F)
    
    Successfully processed 1 files; Failed processing 0 files

    Saturday, January 19, 2013 8:13 PM
  • That all looks normal.

    I'm about out of ideas :(

    I can really only suggest a repair install at this stage - unless you want to take it to MS WGA support (who will probably also suggest a repair install, or perhaps a clean one!)

    WGA Support can be found here

    North America:
    http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
     
    Outside North America:
     
    http://support.microsoft.com/contactus/?ws=support#tab0
     
    Please let us know if (and how) MS manage to repair the problem without a repair
    install of the OS - it would be useful for future reference!    


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    • Marked as answer by Esdeka Sunday, January 20, 2013 9:44 AM
    Saturday, January 19, 2013 8:39 PM
    Moderator
  • Well, I'll do a clean install then, I remember having some other problems that are easier solved with a new installation anyway.

    I'll probably try a repair install first, just to see what the results are, and I'll let them know here.

    Thanks a bunch for all the help so far anyway!

    Sunday, January 20, 2013 9:43 AM
  • You're welcome - sorry I couldn't get a better result for you.

    Good luck.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, January 20, 2013 9:56 AM
    Moderator