none
"Windows not genuine" after years of being okay. RRS feed

  • Question

  • I'm helping a not-so technical friend with his Win7 computer which suddenly started complaining about not being genuine after a very long time (at least 2 years) of no troubles.

    Windows Update fails with "Code C0000034 Windows Update encountered an unknown error."

    Windows validation just sits there with a spinny circle for hours and hours at a stretch.

    I tried reverting to a restore point near the last successful windows update, according to update history (around Aug 17th, 2013). The not genuine message on the desktop disappeared but Win Update still failed, same message. The validate web page still spins forever.

    The MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-V3HQK-6WCGH-D8Y6B
    Windows Product Key Hash: pQvbHvIuFYG7mIg19/OdwK/8B5k=
    Windows Product ID: 00359-113-2275023-85769
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-D8Y6B</PKey><PID>00359-113-2275023-85769</PID><PIDType>5</PIDType><SID>S-1-5-21-4097822248-1904197473-1477101413</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KM400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040406000000.000000+000</Date></BIOS><HWID>C4B03B07018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 7:31:2013 21:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAnJ/K6OgPIq2g1ZRKpGVoJfKReE4=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      FACP   KM400   AWRDACPI

    Wednesday, September 18, 2013 5:51 AM

Answers

  • WRT the 8bit display [...snip...]

    the fix for this turned out to be absurdly easy! I went to "device manager >> display", disabled the Standard VGA Adapter and rebooted. All standard display resolutions and colour depths are now available and working.

    WRT to the false Windows Not Genuine error, I'm just going to give up on solving it and nuke and pave the machine.

    Noel, thank you very much for all the time you've put in over the last month or so trying to help me resolve this. I'm sorry it didn't come to a happy resolution, but hey, c'est la vie!

    Best wishes to you and yours,

    -matt

    Sunday, October 20, 2013 6:55 PM

All replies

  • Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, September 18, 2013 7:35 AM
    Moderator
  • thank you for your time Noel.

    The CBS file is at http://sdrv.ms/16t3kEp

    And the post-scan MGADiag results are:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-V3HQK-6WCGH-D8Y6B
    Windows Product Key Hash: pQvbHvIuFYG7mIg19/OdwK/8B5k=
    Windows Product ID: 00359-113-2275023-85769
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-D8Y6B</PKey><PID>00359-113-2275023-85769</PID><PIDType>5</PIDType><SID>S-1-5-21-4097822248-1904197473-1477101413</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KM400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040406000000.000000+000</Date></BIOS><HWID>C4B03B07018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 7:31:2013 21:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAnJ/K6OgPIq2g1ZRKpGVoJfKReE4=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      FACP   KM400   AWRDACPI


    • Edited by matt wilkie Friday, September 20, 2013 5:25 AM
    Friday, September 20, 2013 5:22 AM
  • 	Line 11819: 2013-09-19 22:10:10, Info                  CSI    000001bc [SR] Repairing 1 components
    	Line 11820: 2013-09-19 22:10:10, Info                  CSI    000001bd [SR] Beginning Verify and Repair transaction
    	Line 11821: 2013-09-19 22:10:11, Info                  CSI    000001be [SR] Cannot repair member file [l:16{8}]"slui.exe" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    

     

     I'll post a fix protocol for that later.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, September 20, 2013 11:04 AM
    Moderator
  • ok, thank you Noel!

    standing by.

    Saturday, September 21, 2013 1:41 AM
  • I've uploaded a file - mweaa.zip - to my SkyDrive at Noel's SkyDrive

    Please download and save it.

    Right-click on the saved file and select Extract all...

    Change the target to C:\ and click on Extract

    Close all windows (it would be a good idea to print these
    instructions!)

    Now reboot to the Repair Environment - as soon as the machine restarts, start
    tapping F8 - this should bring up the Advanced Boot Menu, at the top of which
    should be the option 'Repair my Computer'

    Pick that

    You'll have to log in with your username and password.

    Pick the option to use a Command Prompt

    At the prompt type

    DIR C:\iukaa

    hit the enter key - if you get a 'Not Found' error try

    DIR D:\iukaa

    or

    DIR E:\iukaa

     

    The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following
    command...

     

    XCOPY
    <drive>:\iukaa<drive>:\windows\winsxs /y /i /s /v /h

     

    (e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

     

    run the command (it should take almost no time)and when the prompt returns, type

    EXIT

    and hit the Enter key to exit Command
    Prompt - reboot to Normal Mode Windows.

    Now run SFC /SCANNOW in an Elevated Command Prompt

    then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link

    Also run a new MGADiag report, and post the result.

     



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, September 21, 2013 12:39 PM
    Moderator
  • ok, I downloaded the archive, extracted the slui.exe file and placed in `c:\windows\winsxs` while in the recovery console command prompt.

    However when I tried to run slui.exe from there I received the error message that it couldn't run because  `sppcommdlg.dll` was missing. I rebooted and started Windows normally, opened an administrative Command Prompt, and ran slui.exe from there. For a few moments the shell cursor went away and then returned, perhaps 20 seconds later.

    I then ran `sfc /scannow` which appears to have the same complaint as before, that slui.exe is corrupt. A new MGADIAG result follows the CBS.log excerpt; full log at http://sdrv.ms/1feLgY0

    ----- CBS.log excerpt -------

    2013-09-23 21:34:47, Info                  CSI    000001bb [SR] Verify complete
    2013-09-23 21:34:47, Info                  CSI    000001bc [SR] Repairing 1 components
    2013-09-23 21:34:47, Info                  CSI    000001bd [SR] Beginning Verify and Repair transaction
    2013-09-23 21:34:47, Info                  CSI    000001be [SR] Cannot repair member file [l:16{8}]"slui.exe" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    2013-09-23 21:34:47, Info                  CSI    000001bf [SR] Cannot repair member file [l:16{8}]"slui.exe" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
    2013-09-23 21:34:47, Info                  CSI    000001c0 [SR] This component was referenced by [l:198{99}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.WindowsFoundationDelivery"
    2013-09-23 21:34:47, Info                  CSI    000001c1 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:16{8}]"slui.exe"; source file in store is also corrupted
    2013-09-23 21:34:47, Info                  CSI    000001c2 Repair results created:
    POQ 86 starts:
     
    POQ 86 ends.

    ---------- MGADIAG -----------

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-V3HQK-6WCGH-D8Y6B
    Windows Product Key Hash: pQvbHvIuFYG7mIg19/OdwK/8B5k=
    Windows Product ID: 00359-113-2275023-85769
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-D8Y6B</PKey><PID>00359-113-2275023-85769</PID><PIDType>5</PIDType><SID>S-1-5-21-4097822248-1904197473-1477101413</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KM400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040406000000.000000+000</Date></BIOS><HWID>C4B03B07018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 7:31:2013 21:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAnJ/K6OgPIq2g1ZRKpGVoJfKReE4=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      FACP   KM400   AWRDACPI

     

    Tuesday, September 24, 2013 5:12 AM
  • PLEASE just follow the instructions that I posted - I have no idea currently what you did, but whatever it was, it didn't work.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, September 25, 2013 8:46 PM
    Moderator
  • Hi Noel, 

    At first I was really confused by your latest response, because I _did_ follow the instructions. Then after re-reading a couple of times I saw where I went astray. At the point where you said  "run the command (it should take almost no time)...." I understood it as "run the command [slui.exe] ...", because by that time I had already run the xcopy command...

    Anyway, pushing that confusion aside. I did it all again, this time without running slui.exe while in Recovery Mode, and get similar results. The CBS log still reports that the slui.exe file is corrupt and cannot be repaired. I'm not on that machine right now so can't post the most recent log and the MGADiag results, but will do so again when I get back to that machine.

    thanks again for taking the time to try and help.

    -matt

    Sunday, September 29, 2013 5:33 AM
  • Hmm- either the registry is damaged, or the filecopy didn't work properly.

    Please run the following commands, and post the results.

    DIR C:\mweaa

    DIR C:\Windows\winsxs\mwe*


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, September 29, 2013 2:17 PM
    Moderator
  • you're right, I didn't copy the file correctly. Instead of recreating the directory structure in the zipfile under Winsxs I had only copied slui.exe to Winsxs.

    I repeated the steps again from the beginning. This time CBS.log reports successfully repairing slui.exe (Yay!!) --- however after reboot the display is set to 16 colour 800x600, and resists my attempts to select different settings, across multiple reboots. Also, Windows Update still fails.

    The CBS.log: http://sdrv.ms/GAggCo

    and mgdiag results:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-V3HQK-6WCGH-D8Y6B
    Windows Product Key Hash: pQvbHvIuFYG7mIg19/OdwK/8B5k=
    Windows Product ID: 00359-113-2275023-85769
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{698012A7-3440-4DFE-A6DB-0C2C50E6A8A0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-D8Y6B</PKey><PID>00359-113-2275023-85769</PID><PIDType>5</PIDType><SID>S-1-5-21-4097822248-1904197473-1477101413</SID><SYSTEM><Manufacturer>VIA Technologies, Inc.</Manufacturer><Model>KM400-8235</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20040406000000.000000+000</Date></BIOS><HWID>C4B03B07018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:31:2013 21:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAnJ/K6OgPIq2g1ZRKpGVoJfKReE4=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      FACP   KM400   AWRDACPI

    -------------------------------

    Here are the directory results now:

    -----------------------------

    C:\>dir c:\mweaa
     Volume in drive C has no label.
     Volume Serial Number is 18A7-229A

     Directory of c:\mweaa

    02-Oct-13  19:29    <DIR>          .
    02-Oct-13  19:29    <DIR>          ..
    02-Oct-13  19:29    <DIR>          x86_microsoft-windows-security-spp-ux_31bf385
    6ad364e35_6.1.7601.17514_none_5dc908a6fd144a83
                   0 File(s)              0 bytes
                   3 Dir(s)  42,477,162,496 bytes free

    C:\>dir c:\Windows\winsxs\mw*
     Volume in drive C has no label.
     Volume Serial Number is 18A7-229A

     Directory of c:\Windows\winsxs

    File Not Found

    C:\>dir windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.
    1.7601.17514_none_5dc908a6fd144a83
     Volume in drive C has no label.
     Volume Serial Number is 18A7-229A

     Directory of C:\windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad
    364e35_6.1.7601.17514_none_5dc908a6fd144a83

    02-Oct-13  20:34    <DIR>          .
    02-Oct-13  20:34    <DIR>          ..
    13-Jul-09  18:25             3,030 Security-SPP-UX-ppdlic.xrm-ms
    20-Nov-10  22:29           325,632 slui.exe
    20-Nov-10  05:21           193,536 sppcomapi.dll
    13-Jul-09  18:16           345,088 sppcommdlg.dll
    20-Nov-10  05:21            53,760 sppuinotify.dll
                   5 File(s)        921,046 bytes
                   2 Dir(s)  42,477,166,592 bytes free

    --------------------

    There is similarly named directory with similar contents:

    -----------------

    C:\>dir windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.
    1.7600.16385_none_5b97f4df0025c6e9
     Volume in drive C has no label.
     Volume Serial Number is 18A7-229A

     Directory of C:\windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad
    364e35_6.1.7600.16385_none_5b97f4df0025c6e9

    13-Jul-09  19:37    <DIR>          .
    13-Jul-09  19:37    <DIR>          ..
    13-Jul-09  18:25             3,030 Security-SPP-UX-ppdlic.xrm-ms
    13-Jul-09  18:14           325,632 slui.exe
    13-Jul-09  18:16           193,024 sppcomapi.dll
    13-Jul-09  18:16           345,088 sppcommdlg.dll
    13-Jul-09  18:16            53,760 sppuinotify.dll
                   5 File(s)        920,534 bytes
                   2 Dir(s)  42,477,764,608 bytes free

    ----------------------

    Thursday, October 3, 2013 4:38 AM
  • That appears to have corrected the file error - but we now have some kind of permissions problem.

    Open Windows
    Explorer (Computer)

    Navigate to the C:\Windows folder

    Find the System32 sub-folder and right-click on it

    select Properties

     

    Clear the 'blob'
    from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.

    Click on Apply.

     

    Make sure that
    the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.

     

    Accept the
    Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.

     

    Wait for it to finish - it could take a couple of minutes.

     

    OK out, and exit Windows Explorer.

     

    Reboot twice

     

    Post a new MGADiag report.



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, October 3, 2013 6:54 AM
    Moderator
  • Any update on this??

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, October 10, 2013 1:16 PM
    Moderator
  • Hi Noel, sorry for the long silence. A combination of sick and extra duties kept me occupied.

    anyway, sorry no, removing the read-only attributes  on System32 and sub-folders didn't change anything. Still stuck in 800x600 by 16 colours and Windows Update error C0000034.

    Thursday, October 10, 2013 11:48 PM
  • Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

     

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

     

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, October 11, 2013 6:53 AM
    Moderator
  • Here is the CheckSUR report Noel:

    http://sdrv.ms/1grTUDc

    mentions some IE hyphenation files that it couldn't find/repair.

    ---

    WRT the 8bit display, I found some references to some display drivers that can't be used unless dotnet is installed. Dotnet v4 is installed on this machine, according to "Control Panel >> Uninstall Programs".

    Saturday, October 19, 2013 4:54 AM
  • Those 'errors' are perfectly normal for an IE10 installation on Win7 - MS screwed the backporting :)

    I suspect that there's a problem with permissions somewhere - let's check a few of the more important ones....

    Please open an Elevated Command Prompt, and run the following commands.

    ICACLS C:\Windows

    ICACLS C:\Windows\System32

    ICACLS C:\Windows\System32\slmgr.vbs

    SC SDSHOW SPPSVC

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, October 19, 2013 6:00 AM
    Moderator
  • C:\apps>ICACLS C:\Windows
    C:\Windows NT SERVICE\TrustedInstaller:(F)
               NT SERVICE\TrustedInstaller:(CI)(IO)(F)
               NT AUTHORITY\SYSTEM:(M)
               NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
               BUILTIN\Administrators:(M)
               BUILTIN\Administrators:(OI)(CI)(IO)(F)
               BUILTIN\Users:(RX)
               BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
               CREATOR OWNER:(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\apps>ICACLS C:\Windows\System32
    C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                        NT AUTHORITY\SYSTEM:(M)
                        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                        BUILTIN\Administrators:(M)
                        BUILTIN\Administrators:(OI)(CI)(IO)(F)
                        BUILTIN\Users:(RX)
                        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                        CREATOR OWNER:(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\apps>ICACLS C:\Windows\System32\slmgr.vbs
    C:\Windows\System32\slmgr.vbs NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\apps>SC SDSHOW SPPSVC

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
    CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCW
    DWO;;;WD)

    Saturday, October 19, 2013 6:10 PM
  • WRT the 8bit display [...snip...]

    the fix for this turned out to be absurdly easy! I went to "device manager >> display", disabled the Standard VGA Adapter and rebooted. All standard display resolutions and colour depths are now available and working.

    WRT to the false Windows Not Genuine error, I'm just going to give up on solving it and nuke and pave the machine.

    Noel, thank you very much for all the time you've put in over the last month or so trying to help me resolve this. I'm sorry it didn't come to a happy resolution, but hey, c'est la vie!

    Best wishes to you and yours,

    -matt

    Sunday, October 20, 2013 6:55 PM
  • I can appreciate your frustration! - and I sympathise.

    It's one of those errors unfortunately for which none of the 'standard' fixes have worked - which means that I've probably missed something, or there's a combination of problems which confuse the issue, and make the problem very much more difficult to diagnose and solve.

    Good luck with the fresh install!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, October 20, 2013 7:46 PM
    Moderator
  • Matt 

    I see that you've unmarked my response as an answer - could you please let us know why?

    It would help us all to know.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, November 8, 2013 7:50 PM
    Moderator
  • I unmarked my own post as an answer, or at least that was my intent. The reason being that it was great to have solved the 8bit display issue, but that wasn't the core problem; Windows on this machine still thinks it's not valid, in spite of all efforts to remind it  otherwise.

    So sadly  the question is not answered, and will stay that way since my friend has decided to take the machine back and live with it as best he can until a replacement can be found.

    -matt

    Tuesday, November 12, 2013 1:59 AM
  • I'm re-marking your post as the answer, on the basis that it's probably the best solution all round, considering the problems encountered in this thread.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, November 21, 2013 12:19 PM
    Moderator