none
Windows 7 build 7601 this copy of windows is not genuine, about 6 months after buying the laptop RRS feed

  • Question

  • My laptop deicided today my windows is not genuine baring in mind i have had this laptop with no issue of this for the past 6 months or so. I logged in and the screen was black with just writing in the bottom right corner saying it wasn't genuine. I have no idea how to fix it. I bought my laptop brand new from PC world and never had this problem before and i don't know how to fix it. I tried system restore which didn't work either. Please help.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XFQDR-PJ794-8447M
    Windows Product Key Hash: LVvE4tx6kQ/wSugKQc0w694kAF4=
    Windows Product ID: 00359-OEM-8992687-00304
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8447M</PKey><PID>00359-OEM-8992687-00304</PID><PIDType>2</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:19:2012 03:49
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Friday, July 13, 2012 5:43 PM

Answers

  • The initial MGADiag report showed the following problems...

    Validation Code: 50

    File Scan Data-->
     File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005
     
    Licensing Data-->
     On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
     Error: 0xC004F012

    Atempting validation resulted in the addition of

    Cached Online Validation Code: N/A, hr = 0xc004f012
    and
    Windows Activation Technologies-->
     HrOffline: 0x00000000
     HrOnline: 0xC004F022
     HealthStatus: 0x0000000000000000

    Forensics showed that the backup copy of the required sppobjs.dll file and associated .xml file (and their containing folder) in the winxsx folder were damaged.

    After downloading a clean copy of the relevant folder,

    The following commands were executed...

    TAKEOWN /F C:\Windows\winsxs /A
    COPY %userprofile%\Desktop\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b C:\Windows\winsxs
    TAKEOWN /F C:\windows\system32\sppobjs.dll /A
    REN C:\windows\system32\sppobjs.dll sppobjs.dll.old
    SFC /SCANFILE=C:\windows\system32\sppobjs.dll

    followed by rebuilding the Licensing Store in the normal way.
    The resulting MGADiag report was normal.
    Validation confirmed that the system was now in a nominal state.
    The only remaining job was to reset the Owner on the Winsxs folder, by manually changing it using the GUI.

    Thanks to 'blackcurrant' for being a willing guinea-pig!  :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth



    Sunday, July 15, 2012 8:34 PM
    Moderator

All replies

  • Please first try recreating the Licensing Store.

    Recreate the Licensing Store
    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select Run as Administrator
    4) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection service may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
    If you are asked for your Key, use the one on the COA sticker on the machine's case

    Reboot and Post back with a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, July 13, 2012 9:04 PM
    Moderator
  • Please first try recreating the Licensing Store.

    Recreate the Licensing Store
    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select Run as Administrator
    4) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection service may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
    If you are asked for your Key, use the one on the COA sticker on the machine's case

    Reboot and Post back with a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Hi thanks for the reply i did the above but a little white box appeared saying windows must be restored with a red cross on it. An unauthorized change was made to windows. You must reinstall or restore windows system files to activate. Then it has two clickable links for help underneath saying How do i reinstall windows? and What is system restore?

    Friday, July 13, 2012 9:37 PM
  • System Restore is a method of 'turning the clock back' to a previous time in your Windows installation - undoing possible errors created with by  the user or by bad programs. To find out more, click on the Start button, and in the Search box, type 'System Restore' and hit the Enter key.

    It's possible that your problem is caused by malware - what is  your current Anti-Virus software, and what was pre-installed when you received the machine (have you always kept it up-to date, or did you allow any  trial subscription to lapse?)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, July 13, 2012 9:47 PM
    Moderator
  • System Restore is a method of 'turning the clock back' to a previous time in your Windows installation - undoing possible errors created with by  the user or by bad programs. To find out more, click on the Start button, and in the Search box, type 'System Restore' and hit the Enter key.

    It's possible that your problem is caused by malware - what is  your current Anti-Virus software, and what was pre-installed when you received the machine (have you always kept it up-to date, or did you allow any  trial subscription to lapse?)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    I tried system restore earlier today but didn't solve my problem. I have Norton 360 which i bought with my laptop and installed it upon starting the laptop up the first time so always had that on the laptop so unsure what was preinstalled it seems so long ago now. According to my Norton 360 though I have 106 days remaining of it.
    Friday, July 13, 2012 11:01 PM
  • One thing i just thought of, about 2/3 days ago an update for norton appeared and i installed it and norton itself looked different like it had upgraded/updated, i am not sure if this could be the problem? It is the only thing i can think of that changed in the last 2/3 days to make my laptop go like this.
    Friday, July 13, 2012 11:02 PM
  • When you first installed Norton, did you remove the proginal manufacturer's install of whatever AV they had installed a trial version of?

    If not, please do so now, and then run that AV manufacturer's removal tool.

    Certainly, I have known self-upgrades of Norton  cause major headaches - it would probably be a good idea to eliminate this problem by uninstalling it, and running the Norton Removal Tool, and then reinstalling Norton - follow the appropriate guidelines here....

    https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

    Please download and install Malwarebytes Anti-malware (free version) www.malwarebytes.org and update it, and run a full scan (DO NOT enable the Real-Time protection option!) in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, July 14, 2012 9:36 AM
    Moderator
  • When you first installed Norton, did you remove the proginal manufacturer's install of whatever AV they had installed a trial version of?

    If not, please do so now, and then run that AV manufacturer's removal tool.

    Certainly, I have known self-upgrades of Norton  cause major headaches - it would probably be a good idea to eliminate this problem by uninstalling it, and running the Norton Removal Tool, and then reinstalling Norton - follow the appropriate guidelines here....

    https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

    Please download and install Malwarebytes Anti-malware (free version) www.malwarebytes.org and update it, and run a full scan (DO NOT enable the Real-Time protection option!) in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Ok uninstalled Norton 360 and installed it again, downloaded the malwarebytes and did the scan, found 1 threat and deleted it, restarted the laptop but its still saying the same thing that windows is not genuine :(
    Saturday, July 14, 2012 3:18 PM
  • Please post a new MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, July 14, 2012 3:36 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XFQDR-PJ794-8447M
    Windows Product Key Hash: LVvE4tx6kQ/wSugKQc0w694kAF4=
    Windows Product ID: 00359-OEM-8992687-00304
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8447M</PKey><PID>00359-OEM-8992687-00304</PID><PIDType>2</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004F022
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:14:2012 12:14
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Saturday, July 14, 2012 4:02 PM
  • please run the following commands in a COmmand Prompt window...

    DIR C:\Windows\System32\7B*.* /AH

    DIR C:\Windows\System32\7B*.* /AR

    DIR C:\Windows\System32\ /AR

    copy and paste the results to your reply.

      Here are some instructions to make life easier :)
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, July 14, 2012 4:27 PM
    Moderator
  • please run the following commands in a COmmand Prompt window...

    DIR C:\Windows\System32\7B*.* /AH

    DIR C:\Windows\System32\7B*.* /AR

    DIR C:\Windows\System32\ /AR

    copy and paste the results to your reply.

      Here are some instructions to make life easier :)
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    thank you :) here is what I got

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\System32\7B*.* /AH
     Volume in drive C is Windows
     Volume Serial Number is B641-AE8A

     Directory of C:\Windows\System32

    14/07/2012  16:59            27,744 7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7
    483456-A289-439d-8115-601632D005A0
    14/07/2012  16:59            27,744 7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7
    483456-A289-439d-8115-601632D005A0
                   2 File(s)         55,488 bytes
                   0 Dir(s)  234,648,498,176 bytes free

    C:\Windows\system32>
    C:\Windows\system32>DIR C:\Windows\System32\7B*.* /AR
     Volume in drive C is Windows
     Volume Serial Number is B641-AE8A

     Directory of C:\Windows\System32

    File Not Found

    C:\Windows\system32>
    C:\Windows\system32>DIR C:\Windows\System32\ /AR
     Volume in drive C is Windows
     Volume Serial Number is B641-AE8A

     Directory of C:\Windows\System32

    File Not Found

    C:\Windows\system32>

    Saturday, July 14, 2012 4:47 PM
  • Well that eliminates the easy fix :(

    please run the following commands and post the results...

    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662" /s
    DIR C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b
    DIR C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7600.16385_none_1f05c4e4a00e66f1

    Note that there are only three commands there - copy and paste the results to your replay.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, July 14, 2012 5:06 PM
    Moderator
  • like this?

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
    CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0d
    d-ba02fed39662" /s

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtecti
    onPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppo
    bjs-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppobjs.dll


    C:\Windows\system32>DIR C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugi
    n-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b
     Volume in drive C is Windows
     Volume Serial Number is B641-AE8A

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_3
    1bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b

    21/11/2010  04:24    <DIR>          .
    21/11/2010  04:24    <DIR>          ..
    21/11/2010  04:24            11,758 sppobjs-spp-plugin-manifest-signed.xrm-ms
    21/11/2010  04:24         1,082,880 sppobjs.dll
                   2 File(s)      1,094,638 bytes
                   2 Dir(s)  234,644,078,592 bytes free

    C:\Windows\system32>DIR C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugi
    n-common_31bf3856ad364e35_6.1.7600.16385_none_1f05c4e4a00e66f1
     Volume in drive C is Windows
     Volume Serial Number is B641-AE8A

     Directory of C:\Windows\winsxs

    File Not Found

    C:\Windows\system32>

    Saturday, July 14, 2012 5:14 PM
  • VERY interesting!

    OK - please download the file amd64_-s..y-spp.zip from my Skydrive - save it to your desktop.

    right-click on the file and click Extract All, and extract to C:\Windows\winsxs (let me know if you get an error message - there are ways around it!)

    reboot, and run an MGADiag report - post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, July 14, 2012 5:30 PM
    Moderator
  • VERY interesting!

    OK - please download the file amd64_-s..y-spp.zip from my Skydrive - save it to your desktop.

    right-click on the file and click Extract All, and extract to C:\Windows\winsxs (let me know if you get an error message - there are ways around it!)

    reboot, and run an MGADiag report - post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Destination folder access denied is what it says?
    Saturday, July 14, 2012 5:39 PM
  • I was afraid that would happen.

    try this

    Open an elevated Command Prompt, and run the following commands..

    TAKEOWN /F C:\Windows\winsxs /A

    COPY %userprofile%\Desktop\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b C:\Windows\winsxs

    then reboot and run another MGADiag report, and the following commands

    ICACLS C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b /T


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Saturday, July 14, 2012 6:03 PM
    Moderator
  • new report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XFQDR-PJ794-8447M
    Windows Product Key Hash: LVvE4tx6kQ/wSugKQc0w694kAF4=
    Windows Product ID: 00359-OEM-8992687-00304
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8447M</PKey><PID>00359-OEM-8992687-00304</PID><PIDType>2</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004F022
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:14:2012 12:14
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Also just input what you said into the command prompt and it said on the last line of it 'successfully processed 3 files; failed processing 0 files

    Sunday, July 15, 2012 2:52 PM
  • Sorry - please run that last command again, as I need the output to assess what changes need to be made to the permissions (the error message has now changed pretty much as expected at this point)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Sunday, July 15, 2012 3:03 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>ICACLS C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-pl
    ugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b /T
    C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e3
    5_6.1.7601.17514_none_2136d8ac9cfcea8b NT SERVICE\TrustedInstaller:(I)(OI)(CI)(F
    )

                                           BUILTIN\Administrators:(I)(OI)(CI)(RX)

                                           NT AUTHORITY\SYSTEM:(I)(OI)(CI)(RX)

                                           BUILTIN\Users:(I)(OI)(CI)(RX)

    C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e3
    5_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs-spp-plugin-manifest-signed.xrm-ms
     NT SERVICE\TrustedInstaller:(F)


     BUILTIN\Administrators:(RX)


     NT AUTHORITY\SYSTEM:(RX)


     BUILTIN\Users:(RX)

    C:\Windows\winsxs\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e3
    5_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll NT SERVICE\TrustedInstaller:(
    F)

                                                       BUILTIN\Administrators:(RX)

                                                       NT AUTHORITY\SYSTEM:(RX)

                                                       BUILTIN\Users:(RX)

    Successfully processed 3 files; Failed processing 0 files

    C:\Windows\system32>
    Sunday, July 15, 2012 3:24 PM
  • Interesting - not quite the answer I was expecting!

    OK , now try running the following command from an elevated command prompt.

    SFC /SCANFILE=C:\Windows\system32\sppobjs.dll


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth



    Sunday, July 15, 2012 3:31 PM
    Moderator
  • I have no idea what any of this means haha or what the problem looks like from all this text :s but you are the expert! here is what i got:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>SFC /SCANFILE C:\Windows\system32\sppobjs.dll

    Microsoft (R) Windows (R) Resource Checker Version 6.0
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.

    Scans the integrity of all protected system files and replaces incorrect version
    s with
    correct Microsoft versions.

    SFC [/SCANNOW] [/VERIFYONLY] [/SCANFILE=<file>] [/VERIFYFILE=<file>]
        [/OFFWINDIR=<offline windows directory> /OFFBOOTDIR=<offline boot directory>
    ]

    /SCANNOW        Scans integrity of all protected system files and repairs files
    with
                    problems when possible.
    /VERIFYONLY     Scans integrity of all protected system files. No repair operati
    on is
                    performed.
    /SCANFILE       Scans integrity of the referenced file, repairs file if problems
     are
                    identified. Specify full path <file>
    /VERIFYFILE     Verifies the integrity of the file with full path <file>.  No re
    pair
                    operation is performed.
    /OFFBOOTDIR     For offline repair specify the location of the offline boot dire
    ctory
    /OFFWINDIR      For offline repair specify the location of the offline windows d
    irectory

    e.g.

            sfc /SCANNOW
            sfc /VERIFYFILE=c:\windows\system32\kernel32.dll
            sfc /SCANFILE=d:\windows\system32\kernel32.dll /OFFBOOTDIR=d:\ /OFFWINDI
    R=d:\windows
            sfc /VERIFYONLY

    C:\Windows\system32>

    Sunday, July 15, 2012 3:33 PM
  • Sorry - I always forget the = sign! ( CMD is very inconsitent in this need)

    SFC /SCANFILE=C:\Windows\system32\sppobjs.dll


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 3:41 PM
    Moderator
  • nothing seemed to happen?

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>SFC /SCANFILE=C:\Windows\system32\sppobjs.dll

    Sunday, July 15, 2012 4:34 PM
  • On Sun, 15 Jul 2012 16:34:10 +0000, blackcurrant wrote:
     
    >
    >
    >nothing seemed to happen? Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>SFC /SCANFILE=C:\Windows\system32\sppobjs.dll
    >
     
    did you hit the Enter key to force the command?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, July 15, 2012 4:37 PM
    Moderator
  • On Sun, 15 Jul 2012 16:34:10 +0000, blackcurrant wrote:
     
    >
    >
    >nothing seemed to happen? Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>SFC /SCANFILE=C:\Windows\system32\sppobjs.dll
    >
     
    did you hit the Enter key to force the command?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    I did yes, nothing happened though :S
    Sunday, July 15, 2012 4:43 PM
  • You should (hopefully) have got a message 

    'Windows resource protection found errors and corrected them' - or words to that effect.

    Please run another MGADiag report, and post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 4:47 PM
    Moderator
  • tried it a few times and nothing happened still, but heres the latest report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XFQDR-PJ794-8447M
    Windows Product Key Hash: LVvE4tx6kQ/wSugKQc0w694kAF4=
    Windows Product ID: 00359-OEM-8992687-00304
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8447M</PKey><PID>00359-OEM-8992687-00304</PID><PIDType>2</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004F022
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:14:2012 12:14
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Sunday, July 15, 2012 5:02 PM
  • OK - reboot and run the following commands

    TAKEOWN /F C:\windows\system32\sppobjs.dll /A

    ICACLS C:\windows\system32\sppobjs.dll /grant Administrators:(F)

    REN C:\windows\system32\sppobjs.dll sppobjs.dll.old

    SFC /SCANFILE=C:\windows\system32\sppobjs.dll

    ICACLS C:\windows\system32\sppobjs.dll

    copy and paste the results to your reply.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 5:13 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>TAKEOWN /F C:\windows\system32\sppobjs.dll /A

    SUCCESS: The file (or folder): "C:\windows\system32\sppobjs.dll" now owned by th
    e administrators group.

    C:\Windows\system32>
    C:\Windows\system32>ICACLS C:\windows\system32\sppobjs.dll /grant Administrators
    :(F)
    processed file: C:\windows\system32\sppobjs.dll
    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>
    C:\Windows\system32>REN C:\windows\system32\sppobjs.dll sppobjs.dll.old

    C:\Windows\system32>
    C:\Windows\system32>SFC /SCANFILE=C:\windows\system32\sppobjs.dll


    Windows Resource Protection found corrupt files and successfully repaired
    them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
    example C:\Windows\Logs\CBS\CBS.log

    C:\Windows\system32>
    C:\Windows\system32>ICACLS C:\windows\system32\sppobjs.dll
    C:\windows\system32\sppobjs.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>
    Sunday, July 15, 2012 5:38 PM
  • So for, so good!

    please post a new MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 6:20 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XFQDR-PJ794-8447M
    Windows Product Key Hash: LVvE4tx6kQ/wSugKQc0w694kAF4=
    Windows Product ID: 00359-OEM-8992687-00304
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-8447M</PKey><PID>00359-OEM-8992687-00304</PID><PIDType>2</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012 

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004F022
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:14:2012 12:14
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Sunday, July 15, 2012 6:30 PM
  • Well, at least we've cleared the File Mismatch error - now we have to try and force a license update...

    Please first try recreating the Licensing Store.

    Recreate the Licensing Store
    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select Run as Administrator
    4) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection service may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
    If you are asked for your Key, use the one on the COA sticker on the machine's case

    Reboot and Post back with a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 7:04 PM
    Moderator
  • Well, at least we've cleared the File Mismatch error - now we have to try and force a license update...

    Please first try recreating the Licensing Store.

    Recreate the Licensing Store
    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select Run as Administrator
    4) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection service may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
    If you are asked for your Key, use the one on the COA sticker on the machine's case

    Reboot and Post back with a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    I think it worked! it said it was successful and it seems ok again thank you so much!!! :D heres the report now:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-BDXXV-Q8H2H-KF2YF
    Windows Product Key Hash: F9+mnPo87ztYMNEvtZKAkgXuq7I=
    Windows Product ID: 00359-OEM-9816434-95405
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {D4E0418D-E589-4D1F-A9F1-91F274C5E186}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4E0418D-E589-4D1F-A9F1-91F274C5E186}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KF2YF</PKey><PID>00359-OEM-9816434-95405</PID><PIDType>8</PIDType><SID>S-1-5-21-1676199993-2272250133-3847445118</SID><SYSTEM><Manufacturer>Advent                         </Manufacturer><Model>Monza                          </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.22   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110614000000.000000+000</Date></BIOS><HWID>54C13307018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGWIND7</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00196-164-395405-02-2057-7601.0000-1972012
    Installation ID: 001990219422890261527794549424396626423303635816599154
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: KF2YF
    License Status: Licensed
    Remaining Windows rearm count: 1
    Trusted time: 15/07/2012 20:39:35

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004F022
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:14:2012 12:14
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEA6GE+MaxHVL4S0IZDqLdw0IjSRso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DSGLTD APIC1817
      FACP DSGLTD FACP1817
      HPET DSGLTD OEMHPET 
      MCFG DSGLTD OEMMCFG 
      SLIC DSGLTD DSGWIND7
      OEMB DSGLTD OEMB1817
      GSCI DSGLTD GMCHSCI 
      SSDT PmRef CpuPm

    Sunday, July 15, 2012 7:41 PM
  • Well, b&gg&r me sideways! - that's the first time we've ever solved that error in the forums!

    Well done!

    Last test - please attempt validation at www.microsoft.com/genuine/validate.

    Can I ask you a favour? please zip the C:\windows\system32\sppobs.dll.old file up, and upload it your SkyDrive, or other favoured filehare site, and put a link in your reply?

    You should also give the system a good check over with multiple AV and anti-malware programs - this has the ring of a badly-healed infection.

    Good luck - and thanks for sticking with it through thick and thin.

    If you don't mind,  I'll  summarise the thread later in a single post, and propose that as 'the Answer'


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 7:50 PM
    Moderator
  • Yes it worked on the site it is now genuine (again!) thank you :)

    I am confused about the zip folder thing though i can't seem to find it and i am not familiar with skydrive do you have a step by step guide to help me out at all? 

    I will do another scan for the computer too and yes do feel free to summarise and pick your reply as the answer it did work thank you so much!

    Sunday, July 15, 2012 8:04 PM
  • I just realised there's one more job to do before signing off on it :)

    it's simply to re-assign the TrustedInstaller as the Owner of the winsxs folder.

    To do this, we have to use the Windows interface, rather than the commnad prompt.

    Open Windows Explorer (Computer).

    Navigate to the C:\Windows folder, and find the winsxs folder - right-click on it and select Properties.

    Click on the Security tab

    Now click on the Advanced button, and then the Owner tab

    Click on the Edit button

    Click on the 'Other users or groups' button

    in the box, type

    NT SERVICE\TrustedInstaller

    click on 'Check Names - the displayed name will change to TrustedInstaller if you got it right.

    Now click OK - ONCE only!

    make sure that the displayed owner in the 'Advanced Security Settings windows is now TrustedInstaller - if not, highlight that option, and click OK all the way out.

    You're done!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 8:20 PM
    Moderator
  • I just realised there's one more job to do before signing off on it :)

    it's simply to re-assign the TrustedInstaller as the Owner of the winsxs folder.

    To do this, we have to use the Windows interface, rather than the commnad prompt.

    Open Windows Explorer (Computer).

    Navigate to the C:\Windows folder, and find the winsxs folder - right-click on it and select Properties.

    Click on the Security tab

    Now click on the Advanced button, and then the Owner tab

    Click on the Edit button

    Click on the 'Other users or groups' button

    in the box, type

    NT SERVICE\TrustedInstaller

    click on 'Check Names - the displayed name will change to TrustedInstaller if you got it right.

    Now click OK - ONCE only!

    make sure that the displayed owner in the 'Advanced Security Settings windows is now TrustedInstaller - if not, highlight that option, and click OK all the way out.

    You're done!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Ok that is now done too! thanks!
    Sunday, July 15, 2012 8:25 PM
  • Wonderful!

    About the zip files - right-click on teh file, and select 'Send To..' 'Compressed file' - save it to the desktop for ease of access.

    http://windows.microsoft.com/en-GB/skydrive/add-photos-files-faq

    should answer most of your questions.

    You've been a delight to work with - thank you.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, July 15, 2012 8:31 PM
    Moderator
  • The initial MGADiag report showed the following problems...

    Validation Code: 50

    File Scan Data-->
     File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80004005
     
    Licensing Data-->
     On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
     Error: 0xC004F012

    Atempting validation resulted in the addition of

    Cached Online Validation Code: N/A, hr = 0xc004f012
    and
    Windows Activation Technologies-->
     HrOffline: 0x00000000
     HrOnline: 0xC004F022
     HealthStatus: 0x0000000000000000

    Forensics showed that the backup copy of the required sppobjs.dll file and associated .xml file (and their containing folder) in the winxsx folder were damaged.

    After downloading a clean copy of the relevant folder,

    The following commands were executed...

    TAKEOWN /F C:\Windows\winsxs /A
    COPY %userprofile%\Desktop\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b C:\Windows\winsxs
    TAKEOWN /F C:\windows\system32\sppobjs.dll /A
    REN C:\windows\system32\sppobjs.dll sppobjs.dll.old
    SFC /SCANFILE=C:\windows\system32\sppobjs.dll

    followed by rebuilding the Licensing Store in the normal way.
    The resulting MGADiag report was normal.
    Validation confirmed that the system was now in a nominal state.
    The only remaining job was to reset the Owner on the Winsxs folder, by manually changing it using the GUI.

    Thanks to 'blackcurrant' for being a willing guinea-pig!  :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth



    Sunday, July 15, 2012 8:34 PM
    Moderator
  • https://skydrive.live.com/redir?resid=2470DB6793AA9144!107

    not sure if this is right!

    thanks again!
    Sunday, July 15, 2012 9:04 PM
  • On Sun, 15 Jul 2012 21:04:48 +0000, blackcurrant wrote:
     
    >
    >
    >https://skydrive.live.com/redir?resid=2470DB6793AA9144!107
    >
    >not sure if this is right! thanks again!
     
     
    It worked for me :)
     
    Thanks a lot - I'll have a play and see if I can work out what's wrong
    with it.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, July 15, 2012 9:19 PM
    Moderator