Answered by:
2 Year Old PC - All of a Sudden Windows Not Genuine

Question
-
I have a Gateway Desktop PC running Windows 7 home Premium 64. It is 2 years old with the original OS installed. I had Kaspersky corrupt some files, ran scandisk to correct the errors. Since then I have reinstalled Kaspersky and it's fine (this is the only thing significant that has happened to the PC lately). Now I'm getting flagged that my copy of Windows isn't genuine.
If I run slui.exe it gives an error code 0xC0020012 or sometimes it runs but then I get 'access denied' half way through the activation process.
If I run MGADiag.exe and try to copy the results I get an error "failed to create output files, hr = 0x80070002. Please contact support".
The last tab of MGADiag "Licensing"states "On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a0x80070426' to display the error text" Error 0x80070426.
I'm really tired of this problem and it looks like it's getting more and more prevalent with users who actually paid or OEM for a genuine copy of Windows.
Please help.
Wednesday, January 25, 2012 9:40 PM
Answers
-
"catchpen" wrote in message news:4d47325d-03ac-498c-b435-2051b6ef0a73...
Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:25:2012 14:58
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc
HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC0935
FACP ACRSYS FACP0935
HPET ACRSYS OEMHPET
MCFG ACRSYS OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB0935
GSCI ACRSYS GMCHSCI
AWMI ACRSYS OEMB0935
SSDT DpgPmm CpuPm
CatchpenHmmm – still nothing springs up and shouts for attention :(Please check that the file SPPSVC.EXE exists in the followingc:\Windows\System32C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_78875ce737927d27C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_7656491f3aa3f98dPlease check the EXACT file size of the c:\Windows\System32\SPPSVC.DLL copy – it should be3524608 bytes.Please also check the size of thec:\Windows\System32\SPPSVC.EXE.MUI file (18994 bytes)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Friday, February 3, 2012 9:04 PM
Monday, January 30, 2012 9:52 PMModerator
All replies
-
Ignore the error. the report will still copy and paste.Wednesday, January 25, 2012 10:11 PMAnswerer
-
"catchpen" wrote in message news:a094791e-3751-43bf-9039-889705e8318b...
I have a Gateway Desktop PC running Windows 7 home Premium 64. It is 2 years old with the original OS installed. I had Kaspersky corrupt some files, ran scandisk to correct the errors. Since then I have reinstalled Kaspersky and it's fine (this is the only thing significant that has happened to the PC lately). Now I'm getting flagged that my copy of Windows isn't genuine.
If I run slui.exe it gives an error code 0xC0020012 or sometimes it runs but then I get 'access denied' half way through the activation process.
If I run MGADiag.exe and try to copy the results I get an error "failed to create output files, hr = 0x80070002. Please contact support".
The last tab of MGADiag "Licensing"states "On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a0x80070426' to display the error text" Error 0x80070426.
I'm really tired of this problem and it looks like it's getting more and more prevalent with users who actually paid or OEM for a genuine copy of Windows.
Please help.
To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )Once saved, run the tool.Click on the Continue button, which will produce the report.To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.- **in your own thread**, pleasePlease also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!Having said that – your Software protection service is not started, which is what causes that error.Click on Start
in the Search box, type
SERVICES.MSC
and hit the Enter key - accept the UAC prompt if you get one.
Look in the console for the Software Protection service, right-click on it and select Properties.
make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.
Try starting the service now - do you get an error message? Does it start? does it almost immediately stop again?
Post back with your results, and a new MGADiag report.
If it doesn't start, then please do the following...
Please open an Elevated (Administrator) Command Prompt window and use the following commands....
net start sppsvc
sc qc sppsvc
sc queryex sppsvc
sc qprivs sppsvc
sc qsidtype sppsvc
sc sdshow sppsvc
copy and paste the results into your response (to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response), together with the EXACT error message you get when you attempt to start the service from the Services control panel..
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, January 25, 2012 10:13 PMModerator -
Thanks for the quick response guys...
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:25:2012 14:58
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc
HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC0935
FACP ACRSYS FACP0935
HPET ACRSYS OEMHPET
MCFG ACRSYS OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB0935
GSCI ACRSYS GMCHSCI
AWMI ACRSYS OEMB0935
SSDT DpgPmm CpuPm
____________________________________________________________
Error message when starting service:Windows could nor start the Software Protection service on Local Computer
Error2: The system cannot find the file specified.
_____________________________________________________________
Results of commands in Command Prompt:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>net start sppsvc
The Software Protection service is starting.
The Software Protection service could not be started.
A system error has occurred.
System error 2 has occurred.
The system cannot find the file specified.
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qc sppsvc
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: sppsvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START (DELAYED)
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\sppsvc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Software Protection
DEPENDENCIES : RpcSs
SERVICE_START_NAME : NT AUTHORITY\NetworkService
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc queryex sppsvc
SERVICE_NAME: sppsvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 2 (0x2)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qprivs sppsvc
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: sppsvc
PRIVILEGES : SeAuditPrivilege
: SeChangeNotifyPrivilege
: SeCreateGlobalPrivilege
: SeImpersonatePrivilege
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>scqsidtype sppsvc
'scqsidtype' is not recognized as an internal or external command,
operable program or batch file.
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc qsidtype sppsvc
[SC] QueryServiceConfig2 SUCCESS
SERVICE_NAME: sppsvc
SERVICE_SID_TYPE: UNRESTRICTED
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>sc sdshow sppsvc
D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCW
DWO;;;WD)
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>
CatchpenWednesday, January 25, 2012 11:03 PM -
"catchpen" wrote in message news:7eeffd4a-bbb2-4dfd-bbbb-dbe34a379216...
Thanks for the quick response guys...
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
Other data-->
SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
____________________________________________________________
Error message when starting service:Windows could nor start the Software Protection service on Local Computer
Error2: The system cannot find the file specified.
_____________________________________________________________
Results of commands in Command Prompt:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64>net start sppsvc
The Software Protection service is starting.
The Software Protection service could not be started.
A system error has occurred.
System error 2 has occurred.
The system cannot find the file specified.
CatchpenThe responses are pretty much as expectedThat is a *really* weird prompt from the Command Prompt window!please do the following.Click on Startin the Search box, type%systemroot%and hit the Enter key – what folder does the Windows Explorer window open?Please also run the following in a Command Prompt windowREG QUERY “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment”and copy/paste the result to your reply.Please also check that the file SPPSVC.EXE actually exists in the C:\Windows\System32 folderYou should also run a CHKDSK and SFC – there are indications that there may be a problem with your hard drive.Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key
You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC
SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
run another MGADiag report, and post the results.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, January 26, 2012 12:51 AMModerator -
Windows Explorer opens up to Windows folder on C drive when entering %systemroot%. I installed Todo Backup program when I was having problems with the corrupt files in case my PC wouldn't recover. Not sure why it did this.
The REG QUERY results:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Jon>REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Sess
ion Manager\Environment"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
FP_NO_HOST_CHECK REG_SZ NO
OS REG_SZ Windows_NT
Path REG_EXPAND_SZ C:\Program Files (x86)\NVIDIA Corporation\PhysX\Com
mon;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files
(x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemR
oot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:
\Program Files (x86)\Windows Live\Shared;C:\Windows\system32\gs\gs8.71\bin;C:\Pr
ogram Files (x86)\QuickTime\QTSystem\
PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE REG_SZ AMD64
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
USERNAME REG_SZ SYSTEM
windir REG_EXPAND_SZ %SystemRoot%
PSModulePath REG_EXPAND_SZ %SystemRoot%\system32\WindowsPowerShell\v1.
0\Modules\
NUMBER_OF_PROCESSORS REG_SZ 4
PROCESSOR_LEVEL REG_SZ 6
PROCESSOR_IDENTIFIER REG_SZ Intel64 Family 6 Model 37 Stepping 2, Genu
ineIntel
PROCESSOR_REVISION REG_SZ 2502
asl.log REG_SZ Destination=file;OnFirstLog=command,environment
CLASSPATH REG_SZ .;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
QTJAVA REG_SZ C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
______________________________________
- SPPSVC.EXE does exist in the C:\Windows\System32 folder
- I ran an error check yesterday, yes it took forever but no errors. I enabled it from the drive tools tab. This is the same as CHKDSK C: /R right? I'll run it again via command prompt if it isn't.
- System File Checker: "Windows Resource Protection did not find any integrity violations"
CatchpenThursday, January 26, 2012 2:43 AM -
"catchpen" wrote in message news:2e3642e7-3ffa-43ed-8a2e-fe54c4f01e86...
Windows Explorer opens up to Windows folder on C drive when entering %systemroot%. I installed Todo Backup program when I was having problems with the corrupt files in case my PC wouldn't recover. Not sure why it did this.
The REG QUERY results:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Jon>REG QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Sess
ion Manager\Environment"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
FP_NO_HOST_CHECK REG_SZ NO
OS REG_SZ Windows_NT
Path REG_EXPAND_SZ C:\Program Files (x86)\NVIDIA Corporation\PhysX\Com
mon;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files
(x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemR
oot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:
\Program Files (x86)\Windows Live\Shared;C:\Windows\system32\gs\gs8.71\bin;C:\Pr
ogram Files (x86)\QuickTime\QTSystem\
PATHEXT REG_SZ ..COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE REG_SZ AMD64
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
USERNAME REG_SZ SYSTEM
windir REG_EXPAND_SZ %SystemRoot%
PSModulePath REG_EXPAND_SZ %SystemRoot%\system32\WindowsPowerShell\v1.
0\Modules\
NUMBER_OF_PROCESSORS REG_SZ 4
PROCESSOR_LEVEL REG_SZ 6
PROCESSOR_IDENTIFIER REG_SZ Intel64 Family 6 Model 37 Stepping 2, Genu
ineIntel
PROCESSOR_REVISION REG_SZ 2502
asl.log REG_SZ Destination=file;OnFirstLog=command,environment
CLASSPATH REG_SZ .;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
QTJAVA REG_SZ C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip
______________________________________
- SPPSVC.EXE does exist in the C:\Windows\System32 folder
- I ran an error check yesterday, yes it took forever but no errors. I enabled it from the drive tools tab. This is the same as CHKDSK C: /R right? I'll run it again via command prompt if it isn't.
- System File Checker: "Windows Resource Protection did not find any integrity violations"
CatchpenIf you ran the too in full mode (both boxes ticked), then the result is the same as would be generated by the command-line (so long as you allowed the reboot). Otherwise, please run the command line and reboot at request – it will take a long time, as it reads every sector on the drive.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, January 26, 2012 10:43 AMModerator -
Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:25:2012 14:58
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc
HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC0935
FACP ACRSYS FACP0935
HPET ACRSYS OEMHPET
MCFG ACRSYS OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB0935
GSCI ACRSYS GMCHSCI
AWMI ACRSYS OEMB0935
SSDT DpgPmm CpuPm
CatchpenMonday, January 30, 2012 9:31 PM -
"catchpen" wrote in message news:4d47325d-03ac-498c-b435-2051b6ef0a73...
Sorry for the delay. I didn't see any errors on the CHKDSK. Here's the report again.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {736B298D-0E43-4DC4-96CF-BC29B93CD05B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{736B298D-0E43-4DC4-96CF-BC29B93CD05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1779256781-661507301-2243644971</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B1</Version><SMBIOSVersion major="2" minor="6"/><Date>20100323000000.000000+000</Date></BIOS><HWID>8E053707018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:25:2012 14:58
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc
HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAln3UPISxQsg4yT5V+HOkwKZUXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC0935
FACP ACRSYS FACP0935
HPET ACRSYS OEMHPET
MCFG ACRSYS OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB0935
GSCI ACRSYS GMCHSCI
AWMI ACRSYS OEMB0935
SSDT DpgPmm CpuPm
CatchpenHmmm – still nothing springs up and shouts for attention :(Please check that the file SPPSVC.EXE exists in the followingc:\Windows\System32C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_78875ce737927d27C:\Windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_7656491f3aa3f98dPlease check the EXACT file size of the c:\Windows\System32\SPPSVC.DLL copy – it should be3524608 bytes.Please also check the size of thec:\Windows\System32\SPPSVC.EXE.MUI file (18994 bytes)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Friday, February 3, 2012 9:04 PM
Monday, January 30, 2012 9:52 PMModerator -
No reply from the Original Poster.
Issue is assumed to be resolved.
Darin MSFriday, February 3, 2012 9:03 PM -
No reply from the Original Poster.
Issue is assumed to be resolved.
Darin MS
CatchpenSaturday, February 4, 2012 8:50 PM -
"catchpen" wrote in message news:08484e41-fcc8-4cf4-88e0-8147e528cc3a...
No reply from the Original Poster.
Issue is assumed to be resolved.
Darin MS
CatchpenOuch! – sorry we couldn’t get it back for you,Good Luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, February 4, 2012 9:03 PMModerator