locked
Files have been modified/removed/disabled RRS feed

  • Question

  • I now get the following error message when I try to validate:

    "Files that Windows needs to work properly have been modified, removed, or disabled. To resolve, you need to install genuine Windows. Not to worry, we can help you with that."

    Is there anything I can do short of a clean re-install?

    Thanks!

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-7Y4GM-39QCB-4V698
    Windows Product Key Hash: Wsk1d47SJZScaCiedleB7U75UWk=
    Windows Product ID: 00426-067-6628814-86377
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {435B49CF-329F-49E6-8647-E6276376AFD2}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{435B49CF-329F-49E6-8647-E6276376AFD2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-4V698</PKey><PID>00426-067-6628814-86377</PID><PIDType>5</PIDType><SID>S-1-5-21-39583289-3219424112-3054399955</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>170469U</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7BETC4WW (2.05 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20061117000000.000000+000</Date></BIOS><HWID>A2B80600018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 3:13:2011 00:17
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: MAAAAAAAAgABAAIAAAABAAAAAwABAAEAeqgE0upOwjN2plzQupTUFnBcDqzvFPRI

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-7B  
      FACP            LENOVO        TP-7B  
      HPET            LENOVO        TP-7B  
      BOOT            LENOVO        TP-7B  
      MCFG            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  
      ECDT            LENOVO        TP-7B  
      TCPA            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  
      SSDT            LENOVO        TP-7B  

    Sunday, March 13, 2011 5:33 AM

Answers

  • If you are not an MSDN subscriber

    Your Product ID line shows that you are using an MSDN product key.  Unless you are the subscriber who was issued this product key, it is invalid for your use.

    Windows Product ID: 00426-067-6628814-86377

    The 067 is the MSDN indicator.  If you purchased a retail box the entire box and its contents is a counterfeit product.  Many counterfeit copies are being sold on eBay and the Amazon Marketplace as well as various websites around the world.  The product key is not a genuine retail PK.  It is a genuine MSDN product key and so will activate and pass as genuine until it is blocked by Microsoft as an MSDN key in use by a nonsubscriber.  It takes a while for MS to detect and complete processing of abused keys.  The seller plans to be doing something else by then.

    Pursue a refund for an item not as described immediately.  Do not accept a replacement product key from the seller.  It will be from the same source.

    Report the incident to Microsoft at

    http://www.microsoft.com/howtotell/reports/report.aspx

    To see how good these knock-offs are becoming, see

    http://www.youtube.com/watch?v=hzqNNiOM0cs

    Buy a copy of Windows from a rock solid seller like the Microsoft Store or Amazon Corp (not an affiliate).

    If you are an MSDN subscriber and this is a key issued to you,

    Click Start, type 'cmd' in the Search/Run box, and right click on the CMD icon at the top of the results pane and select Run as Administrator.  Type 'sfc /scannow' at the prompt.  Be sure to leave a space after sfc.  Exit afte the system file checker finishes and run another MGADiag report and post here.

     

     


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Sunday, March 13, 2011 6:08 AM
    Answerer

All replies

  • If you are not an MSDN subscriber

    Your Product ID line shows that you are using an MSDN product key.  Unless you are the subscriber who was issued this product key, it is invalid for your use.

    Windows Product ID: 00426-067-6628814-86377

    The 067 is the MSDN indicator.  If you purchased a retail box the entire box and its contents is a counterfeit product.  Many counterfeit copies are being sold on eBay and the Amazon Marketplace as well as various websites around the world.  The product key is not a genuine retail PK.  It is a genuine MSDN product key and so will activate and pass as genuine until it is blocked by Microsoft as an MSDN key in use by a nonsubscriber.  It takes a while for MS to detect and complete processing of abused keys.  The seller plans to be doing something else by then.

    Pursue a refund for an item not as described immediately.  Do not accept a replacement product key from the seller.  It will be from the same source.

    Report the incident to Microsoft at

    http://www.microsoft.com/howtotell/reports/report.aspx

    To see how good these knock-offs are becoming, see

    http://www.youtube.com/watch?v=hzqNNiOM0cs

    Buy a copy of Windows from a rock solid seller like the Microsoft Store or Amazon Corp (not an affiliate).

    If you are an MSDN subscriber and this is a key issued to you,

    Click Start, type 'cmd' in the Search/Run box, and right click on the CMD icon at the top of the results pane and select Run as Administrator.  Type 'sfc /scannow' at the prompt.  Be sure to leave a space after sfc.  Exit afte the system file checker finishes and run another MGADiag report and post here.

     

     


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Sunday, March 13, 2011 6:08 AM
    Answerer
  • File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

     

    Your MGADiag report is also showing signs that the RemoveWAT crack has also been run on your system.

    If you go into System Properties and scroll to the bottom do you see any Windows Activation section at all ?

    Sunday, March 13, 2011 6:46 AM