Answered by:
Fresh install w7 64, windows genuine error

Question
-
Hi All,
Appreciate any help!
This is a fresh install of Windows 7 on a new HDD on an older Lenovo T61 (Bios updated to handle W7).
The only software installed on the computer is Windows 7, followed by all of the Lenovo specific drivers, and a then Mcafee, itunes, and winDVD.
Unfortunately, all of this was installed in one batch over a few hours, although there is a restore point just after the windows 7 install+updates (before the lenovo drivers), and then again after the lenovo drivers and before the user-level software, so if the lenovo drivers (or mcafee) are to blame, it will be possible to roll back.
The main error I see in the MGA trace are a set of "tampered" files. If this is the only problem, I should be able to go back to the earlier restore point and re-run MGA, and then step through the various Lenovo drivers again until I see the files go bad (painful).
Before rolling back, I was hoping to get an expert opinion of the MGA trace, to see if those files are indeed the only problem, and to see if there is any option other than rolling back. The laptop seems to be working perfectly other than this problem.
Thanks in advance!
--CK
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {DB1C285C-7701-4B6A-9C76-B32AC98EC890}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB1C285C-7701-4B6A-9C76-B32AC98EC890}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YHVMT</PKey><PID>00359-OEM-8703827-95944</PID><PIDType>3</PIDType><SID>S-1-5-21-2442399382-3847126018-1859854697</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOS><HWID>48C53F07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-038-295944-02-1033-7601.0000-0372012
Installation ID: 019431043592084156941143601733611265742816188774386026
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/7/2012 11:08:30 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 2:6:2012 20:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAEAAwABAAIAAAABAAAAAgABAAEAonYkYge7AC0an0aD2kMSbfZwRgaiM8y2KoU=OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7L
FACP LENOVO TP-7L
HPET LENOVO TP-7L
BOOT LENOVO TP-7L
MCFG LENOVO TP-7L
SSDT LENOVO TP-7L
ECDT LENOVO TP-7L
TCPA LENOVO TP-7L
SLIC LENOVO TP-7L
ASF! LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L- Changed type Darin Smith MS Wednesday, February 8, 2012 11:47 PM
Wednesday, February 8, 2012 7:00 PM
Answers
-
"ckk6" wrote in message news:57b869d2-8389-46f8-8e4a-82dbe70f7272...
Hi All,
Appreciate any help!
This is a fresh install of Windows 7 on a new HDD on an older Lenovo T61 (Bios updated to handle W7).
The only software installed on the computer is Windows 7, followed by all of the Lenovo specific drivers, and a then Mcafee, itunes, and winDVD.
Unfortunately, all of this was installed in one batch over a few hours, although there is a restore point just after the windows 7 install+updates (before the lenovo drivers), and then again after the lenovo drivers and before the user-level software, so if the lenovo drivers (or mcafee) are to blame, it will be possible to roll back.
The main error I see in the MGA trace are a set of "tampered" files. If this is the only problem, I should be able to go back to the earlier restore point and re-run MGA, and then step through the various Lenovo drivers again until I see the files go bad (painful).
Before rolling back, I was hoping to get an expert opinion of the MGA trace, to see if those files are indeed the only problem, and to see if there is any option other than rolling back. The laptop seems to be working perfectly other than this problem.
Thanks in advance!
--CK
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100Other data-->
SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOSLicensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/7/2012 11:08:30 PM
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
The problem here is almost certainly with the Intel drivers -Installing the Intel Rapid Storage Driverstry downloading and installing them from here -Once complete, please reboot twice, then post another MGADiag reportGood Luck!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Wednesday, February 8, 2012 11:47 PM
- Marked as answer by Darin Smith MS Thursday, February 9, 2012 10:26 PM
Wednesday, February 8, 2012 7:40 PMModerator -
Ah, great news. I figured out why I couldn't install the latest RST driver (Intel hasn't updated it to handle AHCI, only RAID, but of course they don't list any other valid drivers for my chipset...)
I then found an older version of the RST driver (10.1.0.1008) which does install, and now MGADiag seems clean. I'll give it a day or so, then come back and mark Noel's original answer as the solution.
I can't believe that I've been bitten by Intel RST drivers again. I spent months last year fighting a RAID5 problem only to find out that the Intel RST drivers were completely broken...
Anyway, I'm crossing my fingers that this is completely fixed now, Thanks again!
--Carey
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {DB1C285C-7701-4B6A-9C76-B32AC98EC890}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB1C285C-7701-4B6A-9C76-B32AC98EC890}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YHVMT</PKey><PID>00359-OEM-8703827-95944</PID><PIDType>3</PIDType><SID>S-1-5-21-2442399382-3847126018-1859854697</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOS><HWID>48C53F07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-038-295944-02-1033-7601.0000-0372012
Installation ID: 019431043592084156941143601733611265742816188774386026
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/8/2012 6:06:06 PMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 2:6:2012 20:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEAAwABAAIAAAABAAAAAgABAAEAonYkYge7AC0an0aD2kMSbfZwRgaiM8y2KoU=OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7L
FACP LENOVO TP-7L
HPET LENOVO TP-7L
BOOT LENOVO TP-7L
MCFG LENOVO TP-7L
SSDT LENOVO TP-7L
ECDT LENOVO TP-7L
TCPA LENOVO TP-7L
SLIC LENOVO TP-7L
ASF! LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
- Marked as answer by Darin Smith MS Thursday, February 9, 2012 10:26 PM
Thursday, February 9, 2012 2:14 AM
All replies
-
"ckk6" wrote in message news:57b869d2-8389-46f8-8e4a-82dbe70f7272...
Hi All,
Appreciate any help!
This is a fresh install of Windows 7 on a new HDD on an older Lenovo T61 (Bios updated to handle W7).
The only software installed on the computer is Windows 7, followed by all of the Lenovo specific drivers, and a then Mcafee, itunes, and winDVD.
Unfortunately, all of this was installed in one batch over a few hours, although there is a restore point just after the windows 7 install+updates (before the lenovo drivers), and then again after the lenovo drivers and before the user-level software, so if the lenovo drivers (or mcafee) are to blame, it will be possible to roll back.
The main error I see in the MGA trace are a set of "tampered" files. If this is the only problem, I should be able to go back to the earlier restore point and re-run MGA, and then step through the various Lenovo drivers again until I see the files go bad (painful).
Before rolling back, I was hoping to get an expert opinion of the MGA trace, to see if those files are indeed the only problem, and to see if there is any option other than rolling back. The laptop seems to be working perfectly other than this problem.
Thanks in advance!
--CK
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100Other data-->
SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOSLicensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/7/2012 11:08:30 PM
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
The problem here is almost certainly with the Intel drivers -Installing the Intel Rapid Storage Driverstry downloading and installing them from here -Once complete, please reboot twice, then post another MGADiag reportGood Luck!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Wednesday, February 8, 2012 11:47 PM
- Marked as answer by Darin Smith MS Thursday, February 9, 2012 10:26 PM
Wednesday, February 8, 2012 7:40 PMModerator -
Thanks a lot Noel,
I couldn't install that specific RST driver ("This system does not meet the minimum requirements for this driver"), even though my chipset is listed in the readme file, but I was able to install the newest Intel chipset drivers (I was using 9.2 from the Lenovo site, and the current release is 9.3).
I did this about 30 minutes ago, and I have rebooted twice, and I haven't seen MGA warning yet, but unfortunately the MGADiag looks almost identical.
I will leave the computer running until tomorrow AM, and report back if it seems fixed.
I noticed one other issue on the system, btw. In the device manager, there is a lenovo component (something to do with security) called SM Bios which has an unsigned/disabled driver. I haven't tried uninstalling this component, but that might help.
--CK
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {DB1C285C-7701-4B6A-9C76-B32AC98EC890}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB1C285C-7701-4B6A-9C76-B32AC98EC890}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YHVMT</PKey><PID>00359-OEM-8703827-95944</PID><PIDType>3</PIDType><SID>S-1-5-21-2442399382-3847126018-1859854697</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOS><HWID>48C53F07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-038-295944-02-1033-7601.0000-0372012
Installation ID: 019431043592084156941143601733611265742816188774386026
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/8/2012 4:57:08 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 2:6:2012 20:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAEAAwABAAIAAAABAAAAAgABAAEAonYkYge7AC0an0aD2kMSbfZwRgaiM8y2KoU=OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7L
FACP LENOVO TP-7L
HPET LENOVO TP-7L
BOOT LENOVO TP-7L
MCFG LENOVO TP-7L
SSDT LENOVO TP-7L
ECDT LENOVO TP-7L
TCPA LENOVO TP-7L
SLIC LENOVO TP-7L
ASF! LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
- Edited by ckk6 Thursday, February 9, 2012 1:27 AM
Thursday, February 9, 2012 1:21 AM -
Ah, great news. I figured out why I couldn't install the latest RST driver (Intel hasn't updated it to handle AHCI, only RAID, but of course they don't list any other valid drivers for my chipset...)
I then found an older version of the RST driver (10.1.0.1008) which does install, and now MGADiag seems clean. I'll give it a day or so, then come back and mark Noel's original answer as the solution.
I can't believe that I've been bitten by Intel RST drivers again. I spent months last year fighting a RAID5 problem only to find out that the Intel RST drivers were completely broken...
Anyway, I'm crossing my fingers that this is completely fixed now, Thanks again!
--Carey
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {DB1C285C-7701-4B6A-9C76-B32AC98EC890}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB1C285C-7701-4B6A-9C76-B32AC98EC890}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YHVMT</PKey><PID>00359-OEM-8703827-95944</PID><PIDType>3</PIDType><SID>S-1-5-21-2442399382-3847126018-1859854697</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>8897CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7LETC9WW (2.29 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20110318000000.000000+000</Date></BIOS><HWID>48C53F07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7L </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-038-295944-02-1033-7601.0000-0372012
Installation ID: 019431043592084156941143601733611265742816188774386026
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: YHVMT
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/8/2012 6:06:06 PMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 2:6:2012 20:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEAAwABAAIAAAABAAAAAgABAAEAonYkYge7AC0an0aD2kMSbfZwRgaiM8y2KoU=OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7L
FACP LENOVO TP-7L
HPET LENOVO TP-7L
BOOT LENOVO TP-7L
MCFG LENOVO TP-7L
SSDT LENOVO TP-7L
ECDT LENOVO TP-7L
TCPA LENOVO TP-7L
SLIC LENOVO TP-7L
ASF! LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
SSDT LENOVO TP-7L
- Marked as answer by Darin Smith MS Thursday, February 9, 2012 10:26 PM
Thursday, February 9, 2012 2:14 AM -
"ckk6" wrote in message news:1cc89963-6044-46a3-b77f-b7489c43a1c2...
Ah, great news. I figured out why I couldn't install the latest RST driver (Intel hasn't updated it to handle AHCI, only RAID, but of course they don't list any other valid drivers for my chipset...)
I then found an older version of the RST driver (10.1.0.1008) which does install, and now MGADiag seems clean. I'll give it a day or so, then come back and mark Noel's original answer as the solution.
I can't believe that I've been bitten by Intel RST drivers again. I spent months last year fighting a RAID5 problem only to find out that the Intel RST drivers were completely broken...
Anyway, I'm crossing my fingers that this is completely fixed now, Thanks again!
--Carey
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-QM87R-BD838-YHVMT
Windows Product Key Hash: hZCcVW/YDkneG5JjhRRF8LR7ajA=
Windows Product ID: 00359-OEM-8703827-95944
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
Great – well done! – it does seem to be fixed.I was under the impression that the drivers needed to be the latest version – I’ll have to include the option for that set in my ‘boilerplate from now on.Thanks for letting us know.You may wan to clear the remaining minor error by going and validating at www.microsoft.com/genuine/validate – when it passes, you’ll be offered MSE and IE9 – you don’t have to take them!Good luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, February 9, 2012 7:18 AMModerator -
Thanks again for the help, glad I didn't need to go through the lenovo driver install one at a time looking for MGA problems after each one!
To close out the topic, validation on the website went smoothly, no more WGA popups, all applications & updates are installed, and the system seems stable.
Thanks,
--Carey
Thursday, February 9, 2012 10:39 PM -
"ckk6" wrote in message news:0dbbc71b-00a0-4cef-80ed-8894c3d98d6c...
Thanks again for the help, glad I didn't need to go through the lenovo driver install one at a time looking for MGA problems after each one!
To close out the topic, validation on the website went smoothly, no more WGA popups, all applications & updates are installed, and the system seems stable.
Thanks,
--Carey
You’re welcome – thanks again, and good luck!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothFriday, February 10, 2012 9:42 AMModerator