locked
2 Year Old PC - All of a Sudden Windows Not Genuine RRS feed

  • Question

  • I have a Gateway Desktop PC running Windows 7 home Premium 64. It is 2 years old with the original OS installed.  I had Kaspersky corrupt some files, ran scandisk to correct the errors. Since then I have reinstalled Kaspersky and it's fine (this is the only thing significant  that has happened to the PC lately). Now I'm getting flagged that my copy of Windows isn't genuine. 

    If I run slui.exe it gives an error code 0xC0020012 or sometimes it runs but then I get 'access denied' half way through the activation process.

    If I run MGADiag.exe and try to copy the results I get an error "failed to create output files, hr = 0x80070002. Please contact support".

    The last tab of MGADiag "Licensing"states "On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a0x80070426' to display the error text" Error 0x80070426.

    I'm really tired of this problem and it looks like it's getting more and more prevalent with users who actually paid or OEM for a genuine copy of Windows.

    Please help.

    Wednesday, January 25, 2012 9:40 PM

Answers

  • "catchpen" wrote in message news:4d47325d-03ac-498c-b435-2051b6ef0a73...

    Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 1:25:2012 14:58
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            ACRSYS        APIC0935
      FACP            ACRSYS        FACP0935
      HPET            ACRSYS        OEMHPET
      MCFG            ACRSYS        OEMMCFG
      SLIC            ACRSYS        ACRPRDCT
      OEMB            ACRSYS        OEMB0935
      GSCI            ACRSYS        GMCHSCI
      AWMI            ACRSYS        OEMB0935
      SSDT            DpgPmm        CpuPm




    Catchpen
     
    Hmmm – still nothing springs up and shouts for attention :(
    Please check that the file SPPSVC.EXE exists in the following
    c:\Windows\System32
    C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_78875ce737927d27
    C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_7656491f3aa3f98d
     
    Please check the EXACT file size of the c:\Windows\System32\SPPSVC.DLL copy – it should be
    3524608 bytes.
    Please also check the size of the
    c:\Windows\System32\SPPSVC.EXE.MUI file (18994 bytes)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, January 30, 2012 9:52 PM
    Moderator

All replies

  • Ignore the error. the report will still copy and paste.
    Wednesday, January 25, 2012 10:11 PM
    Answerer
  • "catchpen" wrote in message news:a094791e-3751-43bf-9039-889705e8318b...

    I have a Gateway Desktop PC running Windows 7 home Premium 64. It is 2 years old with the original OS installed.  I had Kaspersky corrupt some files, ran scandisk to correct the errors. Since then I have reinstalled Kaspersky and it's fine (this is the only thing significant  that has happened to the PC lately). Now I'm getting flagged that my copy of Windows isn't genuine.

    If I run slui.exe it gives an error code 0xC0020012 or sometimes it runs but then I get 'access denied' half way through the activation process.

    If I run MGADiag.exe and try to copy the results I get an error "failed to create output files, hr = 0x80070002. Please contact support".

    The last tab of MGADiag "Licensing"states "On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a0x80070426' to display the error text" Error 0x80070426.

    I'm really tired of this problem and it looks like it's getting more and more prevalent with users who actually paid or OEM for a genuine copy of Windows.

    Please help.

    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!
     
    Having said that – your Software protection service is not started, which is what causes that error.
    Click on Start
    in the Search box, type
    SERVICES.MSC
    and hit the Enter key - accept the UAC prompt if you get one.
    Look in the console for the Software Protection service, right-click on it and select Properties.
    make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.

    Try starting the service now - do you get an error message? Does it start? does it almost immediately stop again?
    Post back with your results, and a new MGADiag report.

    If it doesn't start, then please do the following...
    Please open an Elevated (Administrator) Command Prompt window and use the following commands....

    net start sppsvc
    sc qc sppsvc
    sc queryex sppsvc
    sc qprivs sppsvc
    sc qsidtype sppsvc
    sc sdshow sppsvc

    copy and paste the results into your response (to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response), together with the EXACT error message you get when you attempt to start the service from the Services control panel..


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, January 25, 2012 10:13 PM
    Moderator
  • Thanks for the quick response guys...

    MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 1:25:2012 14:58
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            ACRSYS        APIC0935
      FACP            ACRSYS        FACP0935
      HPET            ACRSYS        OEMHPET
      MCFG            ACRSYS        OEMMCFG
      SLIC            ACRSYS        ACRPRDCT
      OEMB            ACRSYS        OEMB0935
      GSCI            ACRSYS        GMCHSCI
      AWMI            ACRSYS        OEMB0935
      SSDT            DpgPmm        CpuPm

    ____________________________________________________________
    Error message when starting service:

    Windows could nor start the Software Protection service on Local Computer

    Error2: The system cannot find the file specified.

    _____________________________________________________________

    Results of commands in Command Prompt:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service could not be started.

    A system error has occurred.

    System error 2 has occurred.

    The system cannot find the file specified.


    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qc sppsvc
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: sppsvc
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\sppsvc.exe
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Software Protection
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\NetworkService

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc queryex sppsvc

    SERVICE_NAME: sppsvc
            TYPE               : 10  WIN32_OWN_PROCESS
            STATE              : 1  STOPPED
            WIN32_EXIT_CODE    : 2  (0x2)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 0
            FLAGS              :

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qprivs sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
            PRIVILEGES       : SeAuditPrivilege
                             : SeChangeNotifyPrivilege
                             : SeCreateGlobalPrivilege
                             : SeImpersonatePrivilege

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>scqsidtype sppsvc
    'scqsidtype' is not recognized as an internal or external command,
    operable program or batch file.

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qsidtype sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
    SERVICE_SID_TYPE:  UNRESTRICTED

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc sdshow sppsvc

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
    CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCW
    DWO;;;WD)

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>

     


    Catchpen
    Wednesday, January 25, 2012 11:03 PM
  • "catchpen" wrote in message news:7eeffd4a-bbb2-4dfd-bbbb-dbe34a379216...

    Thanks for the quick response guys...

    MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003


    Other data-->
    SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS



    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426




    ____________________________________________________________
    Error message when starting service:

    Windows could nor start the Software Protection service on Local Computer

    Error2: The system cannot find the file specified.

    _____________________________________________________________

    Results of commands in Command Prompt:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service could not be started.

    A system error has occurred.

    System error 2 has occurred.

    The system cannot find the file specified.



    Catchpen

    The responses are pretty much as expected
     
    That is a *really* weird prompt from the Command Prompt window!
    please do the following.
    Click on Start
    in the Search box, type
    %systemroot%
    and hit the Enter key – what folder does the Windows Explorer window open?
     
    Please also run the following in a Command Prompt window
    REG QUERY “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment”
    and copy/paste the result to your reply.
     
    Please also check that the file SPPSVC.EXE actually exists in the C:\Windows\System32 folder
     
    You should also run a CHKDSK and SFC – there are indications that there may be a problem with your hard drive.
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
    CHKDSK C: /R
    and hit the Enter key
    You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC

    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type

    SFC /SCANNOW

    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.

    run another MGADiag report, and post the results.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, January 26, 2012 12:51 AM
    Moderator
  • Windows Explorer opens up to Windows folder on C drive when entering %systemroot%. I installed Todo Backup program when I was having problems with the corrupt files in case my PC wouldn't recover.  Not sure why it did this.

    The REG QUERY results:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Jon>REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Sess
    ion Manager\Environment"

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
        ComSpec    REG_EXPAND_SZ    %SystemRoot%\system32\cmd.exe
        FP_NO_HOST_CHECK    REG_SZ    NO
        OS    REG_SZ    Windows_NT
        Path    REG_EXPAND_SZ    C:\Program Files (x86)\NVIDIA Corporation\PhysX\Com
    mon;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files
     (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemR
    oot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:
    \Program Files (x86)\Windows Live\Shared;C:\Windows\system32\gs\gs8.71\bin;C:\Pr
    ogram Files (x86)\QuickTime\QTSystem\
        PATHEXT    REG_SZ    .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
        PROCESSOR_ARCHITECTURE    REG_SZ    AMD64
        TEMP    REG_EXPAND_SZ    %SystemRoot%\TEMP
        TMP    REG_EXPAND_SZ    %SystemRoot%\TEMP
        USERNAME    REG_SZ    SYSTEM
        windir    REG_EXPAND_SZ    %SystemRoot%
        PSModulePath    REG_EXPAND_SZ    %SystemRoot%\system32\WindowsPowerShell\v1.
    0\Modules\
        NUMBER_OF_PROCESSORS    REG_SZ    4
        PROCESSOR_LEVEL    REG_SZ    6
        PROCESSOR_IDENTIFIER    REG_SZ    Intel64 Family 6 Model 37 Stepping 2, Genu
    ineIntel
        PROCESSOR_REVISION    REG_SZ    2502
        asl.log    REG_SZ    Destination=file;OnFirstLog=command,environment
        CLASSPATH    REG_SZ    .;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

        QTJAVA    REG_SZ    C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

    ______________________________________

    • SPPSVC.EXE does exist in the C:\Windows\System32 folder
    • I ran an error check yesterday, yes it took forever but no errors. I enabled it from the drive tools tab. This is the same as CHKDSK C: /R right? I'll run it again via command prompt if it isn't.
    • System File Checker: "Windows Resource Protection did not find any integrity violations"

    Catchpen
    Thursday, January 26, 2012 2:43 AM
  • "catchpen" wrote in message news:2e3642e7-3ffa-43ed-8a2e-fe54c4f01e86...

    Windows Explorer opens up to Windows folder on C drive when entering %systemroot%. I installed Todo Backup program when I was having problems with the corrupt files in case my PC wouldn't recover.  Not sure why it did this.

    The REG QUERY results:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Jon>REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Sess
    ion Manager\Environment"

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
        ComSpec    REG_EXPAND_SZ    %SystemRoot%\system32\cmd.exe
        FP_NO_HOST_CHECK    REG_SZ    NO
        OS    REG_SZ    Windows_NT
        Path    REG_EXPAND_SZ    C:\Program Files (x86)\NVIDIA Corporation\PhysX\Com
    mon;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files
    (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemR
    oot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:
    \Program Files (x86)\Windows Live\Shared;C:\Windows\system32\gs\gs8.71\bin;C:\Pr
    ogram Files (x86)\QuickTime\QTSystem\
        PATHEXT    REG_SZ    ..COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
        PROCESSOR_ARCHITECTURE    REG_SZ    AMD64
        TEMP    REG_EXPAND_SZ    %SystemRoot%\TEMP
        TMP    REG_EXPAND_SZ    %SystemRoot%\TEMP
        USERNAME    REG_SZ    SYSTEM
        windir    REG_EXPAND_SZ    %SystemRoot%
        PSModulePath    REG_EXPAND_SZ    %SystemRoot%\system32\WindowsPowerShell\v1.
    0\Modules\
        NUMBER_OF_PROCESSORS    REG_SZ    4
        PROCESSOR_LEVEL    REG_SZ    6
        PROCESSOR_IDENTIFIER    REG_SZ    Intel64 Family 6 Model 37 Stepping 2, Genu
    ineIntel
        PROCESSOR_REVISION    REG_SZ    2502
        asl.log    REG_SZ    Destination=file;OnFirstLog=command,environment
        CLASSPATH    REG_SZ    .;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

        QTJAVA    REG_SZ    C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip

    ______________________________________

    • SPPSVC.EXE does exist in the C:\Windows\System32 folder
    • I ran an error check yesterday, yes it took forever but no errors. I enabled it from the drive tools tab. This is the same as CHKDSK C: /R right? I'll run it again via command prompt if it isn't.
    • System File Checker: "Windows Resource Protection did not find any integrity violations"

    Catchpen
     
    If you ran the too in full mode (both boxes ticked), then the result is the same as would be generated by the command-line (so long as you  allowed the reboot). Otherwise, please run the command line  and reboot at request – it will take a long time, as it reads every sector on the drive.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, January 26, 2012 10:43 AM
    Moderator
  • Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 1:25:2012 14:58
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            ACRSYS        APIC0935
      FACP            ACRSYS        FACP0935
      HPET            ACRSYS        OEMHPET
      MCFG            ACRSYS        OEMMCFG
      SLIC            ACRSYS        ACRPRDCT
      OEMB            ACRSYS        OEMB0935
      GSCI            ACRSYS        GMCHSCI
      AWMI            ACRSYS        OEMB0935
      SSDT            DpgPmm        CpuPm




    Catchpen
    Monday, January 30, 2012 9:31 PM
  • "catchpen" wrote in message news:4d47325d-03ac-498c-b435-2051b6ef0a73...

    Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 1:25:2012 14:58
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            ACRSYS        APIC0935
      FACP            ACRSYS        FACP0935
      HPET            ACRSYS        OEMHPET
      MCFG            ACRSYS        OEMMCFG
      SLIC            ACRSYS        ACRPRDCT
      OEMB            ACRSYS        OEMB0935
      GSCI            ACRSYS        GMCHSCI
      AWMI            ACRSYS        OEMB0935
      SSDT            DpgPmm        CpuPm




    Catchpen
     
    Hmmm – still nothing springs up and shouts for attention :(
    Please check that the file SPPSVC.EXE exists in the following
    c:\Windows\System32
    C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_78875ce737927d27
    C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_7656491f3aa3f98d
     
    Please check the EXACT file size of the c:\Windows\System32\SPPSVC.DLL copy – it should be
    3524608 bytes.
    Please also check the size of the
    c:\Windows\System32\SPPSVC.EXE.MUI file (18994 bytes)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, January 30, 2012 9:52 PM
    Moderator
  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    Friday, February 3, 2012 9:03 PM
  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    Not resolved but you can close thread since I'm having to reinstall Windows.

    Catchpen
    Saturday, February 4, 2012 8:50 PM
  • "catchpen" wrote in message news:08484e41-fcc8-4cf4-88e0-8147e528cc3a...

    No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    Not resolved but you can close thread since I'm having to reinstall Windows.

    Catchpen
     
     
    Ouch! – sorry we couldn’t get it back for you,
     
    Good Luck

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 4, 2012 9:03 PM
    Moderator