Windows 7 Activation Technologies Keeps Popping Up

All replies

• 

  

  0

  Sign in to vote

  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

  Please run a full CHKDSK and SFC scan....

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

  At the Command prompt, type

   CHKDSK C: /R

  and hit the Enter key.

  You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.

  The CHKDSK will take a few hours depending on the size  of the drive, so be patient!

   After the CHKDSK has run, Windows should boot normally  (possibly after a second auto-reboot) - then run the SFC.

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

  At the Command prompt, type

  SFC /SCANNOW

  and hit the Enter key

  Wait for the scan to finish - make a note of any error messages - and then reboot.

  Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Sunday, December 28, 2014 10:58 AM

  Moderator
• 

  

  0

  Sign in to vote

  I'm not sure if the problem has been fixed or not (I'm posting this just as I restarted), but I did do the disk check and sfc /scannow

  EDIT: Problem Still Not Fixed

  sfc /scannow command at the end said something about being fixed, but I don't know. The CBS log file is only 5.5 MB.

  CBS: https://www.dropbox.com/s/96fm9aac7uv8s1w/CBS.log?dl=0

  MGADiag:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0x8004FE22
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-D6W47-74R3H-C9Y62
  Windows Product Key Hash: aNEYw76xgK9ZRFC9yGUpcW/OMDk=
  Windows Product ID: 00359-OEM-8802197-25539
  Windows Product ID Type: 3
  Windows License Type: OEM System Builder
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {C08007C7-1BE3-43F2-A0C7-AE51867C990B}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.140303-2144
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 102
  Microsoft Office Word 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{C08007C7-1BE3-43F2-A0C7-AE51867C990B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-C9Y62</PKey><PID>00359-OEM-8802197-25539</PID><PIDType>3</PIDType><SID>S-1-5-21-3772008586-1343012073-631780865</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>To be filled by O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>F10</Version><SMBIOSVersion major="2" minor="7"/><Date>20120305000000.000000+000</Date></BIOS><HWID>108A3807018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{90120000-001B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Word 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
  Activation ID: 9f83d90f-a151-4665-ae69-30b3f63ec659
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00176-021-925539-02-1033-7601.0000-2922013
  Installation ID: 000952445255602782646546430496022914139564387720308971
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: C9Y62
  License Status: Licensed
  Remaining Windows rearm count: 2
  Trusted time: 12/29/2014 9:01:34 AM
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE22
  HrOnline: N/A
  HealthStatus: 0x0000000000002000
  Event Time Stamp: 12:22:2014 15:21
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
  
  
  HWID Data-->
  HWID Hash Current: PAAAAAIAAAABAAIAAwADAAAABAABAAEAHKIQSXcWrJVe985wNqy5tu4WWtnWte4LoYXZjyakwgVIgzQh
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ALASKA A M I
    FACP ALASKA A M I
    HPET ALASKA A M I
    MCFG ALASKA OEMMCFG.
    SSDT INTEL CpuPm
    MATS ALASKA A M I
    MATS ALASKA A M I
  
  

  
  

  • Edited by DarkFlareX Monday, December 29, 2014 8:08 PM

  Monday, December 29, 2014 2:07 PM
• 

  

  0

  Sign in to vote

  SFC was able to fix the following errors...

  	Line 39609: 2014-12-29 08:36:41, Info                  CSI    00000339 [SR] Repairing 6 components
  	Line 39610: 2014-12-29 08:36:41, Info                  CSI    0000033a [SR] Beginning Verify and Repair transaction
  	Line 39613: 2014-12-29 08:36:41, Info                  CSI    0000033c [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:26{13}]"iesysprep.dll" from store
  	Line 39619: 2014-12-29 08:36:41, Info                  CSI    0000033f [SR] Repairing corrupted file [ml:520{260},l:88{44}]"\??\C:\Program Files (x86)\Internet Explorer"\[l:14{7}]"pdm.dll" from store
  	Line 39622: 2014-12-29 08:36:41, Info                  CSI    00000341 [SR] Repairing corrupted file [ml:520{260},l:88{44}]"\??\C:\Program Files (x86)\Internet Explorer"\[l:20{10}]"msdbg2.dll" from store
  	Line 39631: 2014-12-29 08:36:41, Info                  CSI    00000345 [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Program Files\Internet Explorer"\[l:14{7}]"pdm.dll" from store
  	Line 39634: 2014-12-29 08:36:41, Info                  CSI    00000347 [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Program Files\Internet Explorer"\[l:20{10}]"msdbg2.dll" from store
  	Line 39643: 2014-12-29 08:36:41, Info                  CSI    0000034b [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Program Files\Internet Explorer"\[l:14{7}]"pdm.dll" from store
  	Line 39646: 2014-12-29 08:36:41, Info                  CSI    0000034d [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Program Files\Internet Explorer"\[l:20{10}]"msdbg2.dll" from store
  	Line 39655: 2014-12-29 08:36:41, Info                  CSI    00000351 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"iesetup.dll" from store
  	Line 39658: 2014-12-29 08:36:41, Info                  CSI    00000353 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"ieuinit.inf" from store
  	Line 39661: 2014-12-29 08:36:41, Info                  CSI    00000355 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"iernonce.dll" from store
  	Line 39673: 2014-12-29 08:36:41, Info                  CSI    0000035a [SR] Repairing corrupted file [ml:60{30},l:58{29}]"\??\C:\Windows\SysWOW64\en-US"\[l:32{16}]"iernonce.dll.mui" from store
  	Line 39676: 2014-12-29 08:36:41, Info                  CSI    0000035c [SR] Repairing corrupted file [ml:60{30},l:58{29}]"\??\C:\Windows\SysWOW64\en-US"\[l:30{15}]"iesetup.dll.mui" from store
  	Line 39709: 2014-12-29 08:36:41, Info                  CSI    00000360 [SR] Repair complete
  

  
  

  Looks like it may be permissions errors...

  Please open an Elevated Command Prompt, and run the following command.

  ICACLS  C:\Windows\System32\sppcomapi.dll.* /T

  post the results.

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, December 30, 2014 10:53 AM

  Moderator
• 

  

  0

  Sign in to vote

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>ICACLS  C:\Windows\System32\sppcomapi.dll.* /T
  C:\Windows\System32\sppcomapi.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)
  
  C:\Windows\System32\en-US\sppcomapi.dll.mui NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)
  
  C:\Windows\System32\LogFiles\WMI\RtBackup\sppcomapi.dll.*: Access is denied.
  Successfully processed 2 files; Failed processing 1 files
  
  C:\Windows\system32>

  Tuesday, December 30, 2014 1:36 PM
• 

  

  0

  Sign in to vote

  That looks normal.

  The last time we came across this problem, and the normal methods didn't identify the cause, the following procedure worked (but we have no idea why!)

  Open an Elevated COmmand prompt, and run the following commands...

  net stop wuauserv

  net stop cryptSvc

  net stop bits

  net stop msiserver

  ren C:\Windows\SoftwareDistribution SoftwareDistribution.old

  ren C:\Windows\System32\catroot2 catroot2.old

  net start wuauserv

  net start cryptSvc

  net start bits

  net start msiserver

  Wait 20 minutes, then restart the machine, and wait another 15 minutes before restarting again and running another MGADiag report.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Sunday, January 11, 2015 2:22 PM
  • Marked as answer by Noel D PatonModerator Sunday, January 25, 2015 8:25 AM

  Tuesday, December 30, 2014 2:22 PM

  Moderator
• 

  

  0

  Sign in to vote

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-D6W47-74R3H-C9Y62
  Windows Product Key Hash: aNEYw76xgK9ZRFC9yGUpcW/OMDk=
  Windows Product ID: 00359-OEM-8802197-25539
  Windows Product ID Type: 3
  Windows License Type: OEM System Builder
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {C08007C7-1BE3-43F2-A0C7-AE51867C990B}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.140303-2144
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 102
  Microsoft Office Word 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{C08007C7-1BE3-43F2-A0C7-AE51867C990B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-C9Y62</PKey><PID>00359-OEM-8802197-25539</PID><PIDType>3</PIDType><SID>S-1-5-21-3772008586-1343012073-631780865</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>To be filled by O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>F10</Version><SMBIOSVersion major="2" minor="7"/><Date>20120305000000.000000+000</Date></BIOS><HWID>108A3807018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{90120000-001B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Word 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
  Activation ID: 9f83d90f-a151-4665-ae69-30b3f63ec659
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00176-021-925539-02-1033-7601.0000-2922013
  Installation ID: 000952445255602782646546430496022914139564387720308971
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: C9Y62
  License Status: Licensed
  Remaining Windows rearm count: 2
  Trusted time: 12/30/2014 1:53:00 PM
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 12:29:2014 21:08
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  
  
  HWID Data-->
  HWID Hash Current: PAAAAAIAAAABAAIAAwADAAAABAABAAEAHKIQSXcWrJVe985wNqy5tu4WWtnWte4LoYXZjyakwgVIgzQh
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ALASKA A M I
    FACP ALASKA A M I
    HPET ALASKA A M I
    MCFG ALASKA OEMMCFG.
    SSDT INTEL CpuPm
    MATS ALASKA A M I
    MATS ALASKA A M I
  
  

  Tuesday, December 30, 2014 6:56 PM
• 

  

  0

  Sign in to vote

  Looks like it worked this time, too :)

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 11, 2015 2:22 PM

  Moderator