locked
Windows 7 Build 7601: This copy Windows is not genuine RRS feed

  • Question

  • I bought a ladtop last september with Windows 7 pre-installed, I had no problem until I installed a logiciel named Protel 99 for work and run the update from then. Since then, there are applications I can't use anymore, and I can't uninstall anything.

    Here is my report :

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->


    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E82AAC4C-B738-4C5D-8845-4AA0D243EB1D}(4)
    Is Admin: No
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.111118-2330
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A


    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002


    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002


    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002


    OGA Data-->
    Office Status: 102
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057


    Browser Data-->
    Proxy settings: http=127.0.0.1:56847
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Momo\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed


    File Scan Data-->


    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E82AAC4C-B738-4C5D-8845-4AA0D243EB1D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1046144376-3127291073-1063088008</SID><SYSTEM><Manufacturer>Packard Bell    </Manufacturer><Model>EasyNote TM86   </Model></SYSTEM><BIOS><Manufacturer>Packard Bell    </Manufacturer><Version>V1.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20100608000000.000000+000</Date></BIOS><HWID>3A1C3A07018400FC</HWID><UserLCID>040C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  


    Spsys.log Content: 0x80070002


    Licensing Data-->
    Sur un ordinateur exécutant une édition non-noyau de Microsoft Windows, exécutez « slui.exe 0x2a 0xC004F012 » pour afficher le texte de l’erreur.
    Erreur : 0xC004F012 


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000300000003EFF6
    Event Time Stamp: 1:9:2012 18:23
    ActiveX: Not Registered - 0x80070003
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys
    Tampered Service: sppsvc
    Tampered Service: sppuinotify




    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEA6GGcxOARmjBkoF69yiZc+LguXF0=


    OEM Activation 1.0 Data-->
    N/A


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ACRSYS ACRPRDCT
      FACP ACRSYS ACRPRDCT
      HPET ACRSYS ACRPRDCT
      BOOT ACRSYS ACRPRDCT
      MCFG ACRSYS ACRPRDCT
      ASF! ACRSYS ACRPRDCT
      SLIC ACRSYS ACRPRDCT
      ASPT ACRSYS ACRPRDCT
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm


    Thank you for your help.

    Monday, March 19, 2012 8:50 AM

Answers

  • The major problem in your system is the fact that the SPPSVC and SPPUINOTIFY services are not running, and appear to have been tampered with.

    So far, we have been unable to track down the cause of the tamper - and I've exhausted all the usual routes so far identified as potential causes.

    The System Error 5 on attempting to start the SPPSVC is therefore probably the result of major Registry corruption, and will require at least a repair install, or perhaps a clean install, to eliminate.

    You should start by backing up your data to external storage, while you decide which route you want to take.

    If you opt for the Repair install, thenere's a good set of instructions here - http://www.sevenforums.com/tutorials/3413-repair-install.html

    If you decide on a Clean install, then consult your manual for instructions on the use of the manufacturer's Recovery system.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, April 1, 2012 11:05 AM
    Moderator

All replies

  • "dattebayor" wrote in message news:8d8b4584-9ca4-4fed-aff8-80fc42d58f00...

    I bought a ladtop last september with Windows 7 pre-installed, I had no problem until I installed a logiciel named Protel 99 for work and run the update from then. Since then, there are applications I can't use anymore, and I can't uninstall anything.

    Here is my report :

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->


    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003



    Other data-->
    SYSTEM><Manufacturer>Packard Bell    </Manufacturer><Model>EasyNote TM86   </Model></SYSTEM><BIOS><Manufacturer>Packard Bell    </Manufacturer><Version>V1.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20100608000000.000000+000</Date></BIOS



    Licensing Data-->
    Sur un ordinateur exécutant une édition non-noyau de Microsoft Windows, exécutez « slui.exe 0x2a 0xC004F012 » pour afficher le texte de l’erreur.
    Erreur : 0xC004F012
     


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000300000003EFF6
    Event Time Stamp: 1:9:2012 18:23
    ActiveX: Not Registered - 0x80070003
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:

    Tampered Service: sppsvc
    Tampered Service: sppuinotify




    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
      SLIC ACRSYS ACRPRDCT

     
     
    You have a number of problems.
     
    1) The Software Protection Service is not running
    2) The SPP Notification service is not running.
    3) You probably have a bad Intel Rapid Storage Technology driver - or there is a problem with the Cryptography services as well.
     
    to check what the problem is with the services, please open an Elevated Command Prompt window, and run the following commands....
     
    SC QC SPPSVC
    SC QC SPPUINOTIFY
    SC QC CRYPTSVC
    ICACLS C:\Windows\System32\sppsvc.exe
    ICACLS C:\Windows\System32\slui.exe
    ICACLS C:\Windows\System32\sppcomapi.dll
    ICACLS C:\Windows\System32\slwga.dll
    ICACLS C:\Windows\System32\slcext.dll
    NET START SPPSVC
    NET START SPPUINOTIFY
    NET START CRYPTSVC
     
    Copy and paste the results to your response.
     
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, March 19, 2012 9:24 AM
    Moderator
  • I've been trying several times but the application just won't run, there isn't any error messages, I click on the shortcut but nothing happens. :(
    Monday, March 19, 2012 12:48 PM
  • "dattebayor" wrote in message news:abf2e2e6-5710-43b6-85f2-48aed18ca784...
    I've been trying several times but the application just won't run, there isn't any error messages, I click on the shortcut but nothing happens. :(
     
    This sounds like a heave malware infestation.
    Boot to Safe Mode With Networking
    Then download and install Malwarebytes Anti-malware www.malwarebytes.org and update it, and run a full scan (DO NOT enable the Real-Time protection option!). Delete everything it finds.
    The reboot to Normal Mode and try the 'fix' again.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, March 19, 2012 2:41 PM
    Moderator
  • I managed to run the elevated command prompt windows here are the results :

    Friday, March 23, 2012 5:28 PM
  • "dattebayor" wrote in message news:33b7e9dd-06fe-4015-b90f-e1244df63e67...

    I managed to run the elevated command prompt windows here are the results :

     

     

    That all looks normal - the error in the last line of the bottom picture is because you ran the command in a normal command prompt window, rather than an Elevated one.
     
    Protel 99 appears to be a very old program - from 1999/2000 - and may be the cause of your problems.
    You should uninstall it, and then run System Restore back to before you first installed Protel.
    This should get the registry back into the state it was in at the time.
    If that works, you may want to think about upgrading to Win 7 Pro, and using XP Mode to run this program, or using a later edition of the program which is more likely to be Win7-compatible.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, March 23, 2012 5:51 PM
    Moderator
  • I already try to uninstall it but I can't uninstall anything, when i try there is an error message that say that the application may be uninstalled already.
    Friday, March 23, 2012 6:25 PM
  • "dattebayor" wrote in message news:8387dc3c-9349-45c0-aa8d-432c4e1a04e0...
    I already try to uninstall it but I can't uninstall anything, when i try there is an error message that say that the application may be uninstalled already.
     
    In that case, it didn't install properly in the first place - try installing it again, this time using the option to install it in compatibility mode for XP. This should then allow it to be uninstalled.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, March 23, 2012 6:40 PM
    Moderator
  • no reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS

    Tuesday, March 27, 2012 7:38 PM
  • I'm sorry I didn't replay sooner but I've been busy recently. I've been trying to install it but it won't work either. The fact is that the application won't run, there is an error saying that windows doesn't find it

    Saturday, March 31, 2012 6:06 PM
  • "dattebayor" wrote in message news:72d1cd62-1f53-4934-9fb9-66c4be02f89b...

    I'm sorry I didn't replay sooner but I've been busy recently. I've been trying to install it but it won't work either. The fact is that the application won't run, there is an error saying that windows doesn't find it

    Please post a new MGADiag report - there's been a lot happened since the last one......
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, March 31, 2012 6:32 PM
    Moderator
  • I don't have a COA sticker but here is my report :

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->


    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E82AAC4C-B738-4C5D-8845-4AA0D243EB1D}(4)
    Is Admin: No
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.111118-2330
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A


    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002


    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002


    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002


    OGA Data-->
    Office Status: 102
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057


    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Momo\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed


    File Scan Data-->


    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E82AAC4C-B738-4C5D-8845-4AA0D243EB1D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1046144376-3127291073-1063088008</SID><SYSTEM><Manufacturer>Packard Bell    </Manufacturer><Model>EasyNote TM86   </Model></SYSTEM><BIOS><Manufacturer>Packard Bell    </Manufacturer><Version>V1.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20100608000000.000000+000</Date></BIOS><HWID>3A1C3A07018400FC</HWID><UserLCID>040C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Paris, Madrid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>102</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  


    Spsys.log Content: 0x80070002


    Licensing Data-->
    Sur un ordinateur exécutant une édition non-noyau de Microsoft Windows, exécutez « slui.exe 0x2a 0xC004F012 » pour afficher le texte de l’erreur.
    Erreur : 0xC004F012 


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000300000003EFF6
    Event Time Stamp: 1:9:2012 19:23
    ActiveX: Not Registered - 0x80070003
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys
    Tampered Service: sppsvc
    Tampered Service: sppuinotify




    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEA6GGcxOARmjBkoF69yiZc+LguXF0=


    OEM Activation 1.0 Data-->
    N/A


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ACRSYS ACRPRDCT
      FACP ACRSYS ACRPRDCT
      HPET ACRSYS ACRPRDCT
      BOOT ACRSYS ACRPRDCT
      MCFG ACRSYS ACRPRDCT
      ASF! ACRSYS ACRPRDCT
      SLIC ACRSYS ACRPRDCT
      ASPT ACRSYS ACRPRDCT
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm



    Sunday, April 1, 2012 6:37 AM
  • "dattebayor" wrote in message news:f765ce81-f024-41fe-8705-8556ed8e3657...

    I don't have a COA sticker but here is my report :

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->


    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003



    Other data-->
    SYSTEM><Manufacturer>Packard Bell    </Manufacturer><Model>EasyNote TM86   </Model></SYSTEM><BIOS><Manufacturer>Packard Bell    </Manufacturer><Version>V1.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20100608000000.000000+000</Date></BIOS




    Licensing Data-->
    Sur un ordinateur exécutant une édition non-noyau de Microsoft Windows, exécutez « slui.exe 0x2a 0xC004F012 » pour afficher le texte de l’erreur.
    Erreur : 0xC004F012
     


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000300000003EFF6
    Event Time Stamp: 1:9:2012 19:23
    ActiveX: Not Registered - 0x80070003
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys
    Tampered Service: sppsvc
    Tampered Service: sppuinotify




    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001

      SLIC ACRSYS ACRPRDCT




    You certainly *should* have a COA sticker - this license type and the SLIC table means that the machine was supplied with an edition of Windows 7 pre-installed, and the manufacturer is *required* to affix the sticker in the factory.
     
    Please run the following commands, and copy/paste the results to your response.
     
    REG QUERY HKU
    REG QUERY HKU\S-1-5-20
    REG QUERY HKU\S-1-5-20\Environment
    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, April 1, 2012 10:20 AM
    Moderator
  • I found the COA sticker. Well.... I admit that I didn't search it earlier ^^. It says Windows 7 home Prem OA

    As for the command here they are :

    Sunday, April 1, 2012 10:35 AM
  • The major problem in your system is the fact that the SPPSVC and SPPUINOTIFY services are not running, and appear to have been tampered with.

    So far, we have been unable to track down the cause of the tamper - and I've exhausted all the usual routes so far identified as potential causes.

    The System Error 5 on attempting to start the SPPSVC is therefore probably the result of major Registry corruption, and will require at least a repair install, or perhaps a clean install, to eliminate.

    You should start by backing up your data to external storage, while you decide which route you want to take.

    If you opt for the Repair install, thenere's a good set of instructions here - http://www.sevenforums.com/tutorials/3413-repair-install.html

    If you decide on a Clean install, then consult your manual for instructions on the use of the manufacturer's Recovery system.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, April 1, 2012 11:05 AM
    Moderator