locked
Windows 7 says its not genuine after network card change RRS feed

  • Question

  • My primary WIndows 7 Ultimate x64 PC has been running fine for a while but I recently had to change the network card.  Now Windows 7 says windows is not genuine.  I also cannot enter a new product key because the Windows activation status says "Status Not Available" and "Product ID: Not Available" and there is no link to enter a new key.

    If I use "slmgr.vbs -ipk ...." in an Admin cmd.exe I also get an error.

    Below is output from MGADiag

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {DE06D167-5DEE-4E94-B68A-D8F36E5E16E9}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DE06D167-5DEE-4E94-B68A-D8F36E5E16E9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6R74M</PKey><PID>00426-065-1962541-86941</PID><PIDType>5</PIDType><SID>S-1-5-21-4193978010-3925695574-1335687084</SID><SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS><HWID>9F423507018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>bMk    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:10:2012 23:47
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEAAAABAAIAAgACAAAAAwABAAEA6GEMfZKCIowkQ1zBVspc3ibaqXk28J6BRLDI9A==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    bMk   
      FACP   DELL    bMk   
      HPET   DELL    bMk   
      BOOT   DELL    bMk   
      MCFG   DELL    bMk   
      SSDT   PTLTD   POWERNOW
      SLIC   DELL    bMk   


     

    Saturday, February 11, 2012 11:24 PM

Answers

  • "Mike Cooper SJ" wrote in message news:056351ce-d8f9-4a2d-be24-056b8948bcd6...

    Ok every single msft: entry has a ModuleID REG_SZ value.  Where you asking if they all had ModuleID or if it was missing on any?

    The Objects key Owner is Administrators.

     
     
    I was asking if it was missing on any – for most, the value should be
    c42d83ff-5958-4af4-a0dd-ba02fed39662
    for ‘bios’ and ‘windowsfunctionality/agent’, it’s
    179b8a65-b0f6-41d9-acea-12006ef9b32a
     
    - and I think I ended up going down a wrong path, as I rechecked your output, and found the entries (how I missed them I will never know!)
     
    Sorry for the confusion here – but I may have found the answer to one of our other perennial problems along the way :)
     
    I am now officially ‘out of ideas’!  :(
     
    My best advice would be a Repair Install, or contacting MS WGA Support (don’t forget, if your MSDN Subscription is still valid, you get a number of free Support incidents! – can’t remember what the rules are on how to use them are, though)
     
    WGA Support can be found here-
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Thursday, February 16, 2012 8:26 PM
    Wednesday, February 15, 2012 11:34 PM
    Moderator

All replies

  • "Mike Cooper SJ" wrote in message news:c3c53fea-8d23-4986-8f02-2b7ae0f0fa03...

    My primary WIndows 7 Ultimate x64 PC has been running fine for a while but I recently had to change the network card.  Now Windows 7 says windows is not genuine.  I also cannot enter a new product key because the Windows activation status says "Status Not Available" and "Product ID: Not Available" and there is no link to enter a new key.

    If I use "slmgr.vbs -ipk ...." in an Admin cmd.exe I also get an error.

    Below is output from MGADiag

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001

    Other data-->
    SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS

     

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012

     

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
     


     

    Your Windows Key is from a not-for-resale MSDN account. Activation has been enabled by an Activation Exploit (Loader) simulating an ACER CLIC table in the BIOS. You need to claim an immediate refund from the vendor - do NOT accept the offer of a new key.(all they are trying to do is to get past the 45-day claims window. or avoid you sending the evidence of their crimes to the authorities)

    Please read the following stickies.... ........................

    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/a2444f34-0aff-4f29-a8ac-67e28b0c0285

    and

    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/06698c46-8668-4ccd-a544-a88969265a6b

    The pirates have got VERY good at this over the past few years, as the price of equipment for manufacturing the packages drops, and as factories open in less well-policed countries.

    see also this post....

    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/46a58748-5a64-41ff-b7f4-f6d3b47beca9


    Also - have a look at this video....


    http://www.youtube.com/watch?v=hzqNNiOM0c

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 11, 2012 11:43 PM
    Moderator
  • To change the product key, click on the Start button and in the Start Search box type in:  slui.exe 3 and then press the Enter key on your keyboard.


    Carey Frisch

    Saturday, February 11, 2012 11:50 PM
    Moderator
  • My original windows key is a legit MSDN key direct from Microsoft.  It's worked fine for years.

    THanks for the suggestion on running "slui.exe 3".  I did that and entered my original MSDN windows 7 key and got:

    Code: 0x80070241

    Description: WIndows cannot verify the digital signature for this file. A Recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    I also gave slui a brand-new (never used) Windows 7 key from TechNet that I just got from microsoft.com.  Got the same exact error. 

    Help!

    Sunday, February 12, 2012 5:27 PM
  • Open a Command Prompt and run as Administrator: SFC /SCANNOW

    Carey Frisch

    Sunday, February 12, 2012 5:31 PM
    Moderator
  • "Mike Cooper SJ" wrote in message news:4f5ea5f6-8397-46b8-9e01-7e64610222f3...

    My original windows key is a legit MSDN key direct from Microsoft.  It's worked fine for years.

    THanks for the suggestion on running "slui.exe 3".  I did that and entered my original MSDN windows 7 key and got:

    Code: 0x80070241

    Description: WIndows cannot verify the digital signature for this file. A Recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    I also gave slui a brand-new (never used) Windows 7 key from TechNet that I just got from microsoft.com.  Got the same exact error.

    Help!

     
     
    Please post a new MGADiag report – things will have changed.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 12, 2012 6:07 PM
    Moderator
  • The scan ran but found some errors it could not repair.  You can grab the CBS.log file from:

    http://www.magnicomp.com/download/tmp/CBS.zip

    I have also attempted to restore the system from 7 different restore points from over the last 30 days.  Only the restore point created 2 days ago is succesfully restored (but the not genuine problem is still present in this restore point).  The other restore points fail to restore due to missing files.  Oh joy. :(  I'm back to the current restore point (created before the first restore attempt).

    Here is MGADiag output after the sfc /scannow and several attempts at entering a new product key:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {EAA4E1D9-B5DB-4FB9-90F3-C8B3A3AF4F4A}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EAA4E1D9-B5DB-4FB9-90F3-C8B3A3AF4F4A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6R74M</PKey><PID>00426-065-1962541-86941</PID><PIDType>5</PIDType><SID>S-1-5-21-4193978010-3925695574-1335687084</SID><SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS><HWID>9F423507018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>bMk    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:10:2012 23:47
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEAAAABAAIAAgACAAAAAwABAAEA6GEMfZKCIowkQ1zBVspc3ibaqXk28J6BRLDI9A==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    bMk   
      FACP   DELL    bMk   
      HPET   DELL    bMk   
      BOOT   DELL    bMk   
      MCFG   DELL    bMk   
      SSDT   PTLTD   POWERNOW
      SLIC   DELL    bMk   


     

    Sunday, February 12, 2012 11:00 PM
  • "Mike Cooper SJ" wrote in message news:5b6870dd-0bd5-45b7-aa80-fb98e5edf58f...

    The scan ran but found some errors it could not repair.  You can grab the CBS.log file from:

    http://www.magnicomp.com/download/tmp/CBS.zip

    I have also attempted to restore the system from 7 different restore points from over the last 30 days.  Only the restore point created 2 days ago is succesfully restored (but the not genuine problem is still present in this restore point).  The other restore points fail to restore due to missing files.  Oh joy. :(  I'm back to the current restore point (created before the first restore attempt).

    Here is MGADiag output after the sfc /scannow and several attempts at entering a new product key:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001

    Other data-->
    SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS

     

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
    Error: 0xC004F012

     


     

     
     
    There are two unrepairable files - NlsLexicons0009.dll and sppobjs.dll – which are causing SFC to fail. Both are because the backup copy has a hash which doesn’t match the expected value (i.e. it’s been corrupted somehow). (I’m surprised that the report doesn’t show the sppobjs.dll file as tampered – but it may be because it never gets tested)
     
    2012-02-12 09:52:28, Info                  CSI    0000030e [SR] Cannot repair member file [l:38{19}]"NlsLexicons0009.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
     
     
    2012-02-12 14:43:16, Info                  CSI    0000014c [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
     
     
    You could try replacing the files yourself, manually, using copies from a known-good system. (Interestingly, the NlsLexicons0009.dll file didn’t figure in the report from Friday – only today’s run – have you run a chkdsk?))
     
    You could also try the CheckSUR tool (I have no idea if it’d work – but it’s worth a go) - http://support.microsoft.com/kb/947821
    - if you do, please upload your CheckSUR.log file and post a link.
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 12, 2012 11:22 PM
    Moderator
  • Still haven't fix this issue.  Here is what I did:

    1) Boot off Win7 DVD media

    2) Run chkdsk /r

    3) Replace c:\Windows\System32\NlsLexicons0009.dll and sppobjs.dll with copies from a known working system which I had copied onto c: before booting off DVD.

    After this "sfc /scannow" still reports NlsLexicons0009.dll could not be repaired.

    I installed CheckSUR and it found no errors.

    The CBS.log and CheckSUR.log are available as

    http://www.magnicomp.com/download/tmp/cbs-2.zip

    Monday, February 13, 2012 5:49 PM
  • "Mike Cooper SJ" wrote in message news:f02fc76c-d269-4726-a334-498d0d8068a9...

    Still haven't fix this issue.  Here is what I did:

    1) Boot off Win7 DVD media

    2) Run chkdsk /r

    3) Replace c:\Windows\System32\NlsLexicons0009.dll and sppobjs.dll with copies from a known working system which I had copied onto c: before booting off DVD.

    After this "sfc /scannow" still reports NlsLexicons0009.dll could not be repaired.

    I installed CheckSUR and it found no errors.

    The CBS.log and CheckSUR.log are available as

    http://www.magnicomp.com/download/tmp/cbs-2.zip

    Assuming the files are still present in the system32 folder – did you remember to Unblock them if necessary?
    Please post another MGADiag report
    please also run the following commands
    icacls c:\windows\system32\sppobjs.dll
    icacls c:\windows\SysWOW64\NlsLexicons0009.dll
    and post the results – you may need to adjust permissions and/or put the files into the correct WinSxS place as well.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 13, 2012 5:58 PM
    Moderator
  • I'm not sure what you mean by "Unblock them" so I'm guessing a simply "copy" is not enough.  What's the full procedure to replace files in Windows/System32?

    Monday, February 13, 2012 6:06 PM
  • "Mike Cooper SJ" wrote in message news:ded9a147-9392-4ac3-b807-3f26ba910456...

    I'm not sure what you mean by "Unblock them" so I'm guessing a simply "copy" is not enough.  What's the full procedure to replace files in Windows/System32?

     
     
    If you right-click on the file that you put in the folder, and select Properties, you may find a Security section at the bottom of the General tab – if so, then the file is blocked from running, until you click on the Unblock button,  then OK out (rebooting and checking that the setting has held is a good idea).
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 13, 2012 6:11 PM
    Moderator
  • "Noel D Paton" wrote in message news:a0e47091-c07a-4dc7-a952-18da3b938fe6...
    "Mike Cooper SJ" wrote in message news:f02fc76c-d269-4726-a334-498d0d8068a9...

    Still haven't fix this issue.  Here is what I did:

    1) Boot off Win7 DVD media

    2) Run chkdsk /r

    3) Replace c:\Windows\System32\NlsLexicons0009.dll and sppobjs.dll with copies from a known working system which I had copied onto c: before booting off DVD.

    After this "sfc /scannow" still reports NlsLexicons0009.dll could not be repaired.

    I installed CheckSUR and it found no errors.

    The CBS.log and CheckSUR.log are available as

    http://www.magnicomp.com/download/tmp/cbs-2.zip

     
     
    Assuming the files are still present in the system32 folder – did you remember to Unblock them if necessary?
    Please post another MGADiag report
    please also run the following commands
    icacls c:\windows\system32\sppobjs.dll
    icacls c:\windows\sysWOW64\NlsLexicons0009.dll
     
    and post the results – you may need to adjust permissions and/or put the files into the correct WinSxS place as well.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
     
     
    You need to check the file versions that you copied over.
    The affected NlsLexocons0009.dll file is the one in SysWOW64 (not in System32) – so you should copy it from the SysWOW64 folder of the other machine, and make certain that the version number is 6.1.0.16385
     
    FWIW, what are the checksums (Hash values) of the backup files in the WinSxS folder?
    for NlsLexicons0009.dll I get an SHA1 of  7fdcb6a4c6d951acabf39b779027ffc5b377897d
    for sppobjs.dll I get an SHA1 of  a11563a32d83456e5c928ceadc7dda2d4ffd79c2
     
     
    It looks like the sppobjs.dll isn’t complaining in the latest SFC log – so at least that’s one down
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, February 14, 2012 11:08 PM
    • Unmarked as answer by Darin Smith MS Tuesday, February 14, 2012 11:09 PM
    Monday, February 13, 2012 6:40 PM
    Moderator
  • Got it working now.  Once I replaced NlsLexicons0009.dll in SysWOW64 everything started working again.

    Thanks again for everybody's help especially you Noel!

    mike

    Tuesday, February 14, 2012 2:47 AM
  • "Mike Cooper SJ" wrote in message news:88d81f26-7f5b-45b4-bec1-b3b1644f4588...

    Got it working now.  Once I replaced NlsLexicons0009.dll in SysWOW64 everything started working again.

    Thanks again for everybody's help especially you Noel!

    mike

     
     
    You’re welcome!
    FYI – that’s the first time we’ve ever actually solved that particular error message here, so consider yourself a pioneer!
     
    Please post a new MGADiag report so we can check that all’s well.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, February 14, 2012 9:03 AM
    Moderator
  • I always love being the first! :)

    Here is MGADiag with everything working:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {EAA4E1D9-B5DB-4FB9-90F3-C8B3A3AF4F4A}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EAA4E1D9-B5DB-4FB9-90F3-C8B3A3AF4F4A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6R74M</PKey><PID>00426-065-1962541-86941</PID><PIDType>5</PIDType><SID>S-1-5-21-4193978010-3925695574-1335687084</SID><SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS><HWID>9F423507018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>bMk    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: a0cde89c-3304-4157-b61c-c8ad785d1fad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00172-069-174560-00-1033-7601.0000-0432012
    Installation ID: 021202996994651853911166411135407592410470739103928733
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: CW7MY
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 2/14/2012 9:58:34 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000010
    Event Time Stamp: 2:12:2012 17:48
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll


    HWID Data-->
    HWID Hash Current: NAAAAAEAAAABAAIAAgACAAAAAwABAAEA6GEMfZKCIowkQ1zBVspc3ibaqXk28J6BRLDI9A==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          bMk    
      FACP            DELL          bMk    
      HPET            DELL          bMk    
      BOOT            DELL          bMk    
      MCFG            DELL          bMk    
      SSDT            PTLTD         POWERNOW
      SLIC            DELL          bMk    

    Tuesday, February 14, 2012 6:01 PM
  • "Mike Cooper SJ" wrote in message news:e6981313-dcf8-42a6-87a0-376ba0254981...

    I always love being the first! :)

    Here is MGADiag with everything working:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-HDWTF-DT3G9-6R74M
    Windows Product Key Hash: AkF6RuOMFmB6WZiINiLOLCAhhMs=
    Windows Product ID: 00426-065-1962541-86941
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001


    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003

    Other data-->
    SYSTEM><Manufacturer>Dell Inc</Manufacturer><Model>Dimension E521</Model></SYSTEM><BIOS><Manufacturer>Dell Inc</Manufacturer><Version>1.1.11</Version><SMBIOSVersion major="2" minor="4"/><Date>20070802000000.000000+000</Date></BIOS



    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Partial Product Key: CW7MY
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 2/14/2012 9:58:34 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000010
    Event Time Stamp: 2:12:2012 17:48
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
     

    Sorry – but we’re not finished yet :(
     
    The problem here is that one part of the system is saying one thing – and another part is saying something else.
    we need to reconcile the two.
    The
    0x80092003
    error makes me think taht there is a problem with access to the copy of the file in the c:\windows\syswow64 folder – please run the following command in a Command Prompt window.....
    ICACLS C:\windows\syswow64\sppobjs.dll
    ICACLS C:\windows\system32\sppobjs.dll
     
    It may be a simple permissions problem, which we need to address....
    hopefully the above commands will point in the right direction, if you post the results in your response.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, February 14, 2012 6:45 PM
    Moderator
  • Here we go:

    C:\Windows\system32>icacls C:\windows\system32\sppobjs.dll
    C:\windows\system32\sppobjs.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>icacls C:\windows\SysWOW64\sppobjs.dll
    C:\windows\SysWOW64\sppobjs.dll: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files

    There doesn't seem to be any syswow64/sppobjs.dll. 

    Tuesday, February 14, 2012 7:44 PM
  • "Mike Cooper SJ" wrote in message news:887235ea-d279-4a39-8d1e-e0c69369ce65...

    Here we go:

    C:\Windows\system32>icacls C:\windows\system32\sppobjs.dll
    C:\windows\system32\sppobjs.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    There doesn't seem to be any syswow64/sppobjs.dll

     
     
    not too surprising – there shouldn’t be! <g>
    I’m going to have to think about this one.... back later.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, February 14, 2012 9:27 PM
    Moderator
  • Windows is back to saying it's not genuine again.  I get a popup and there's a message on the background.  Also the "System" control panel under "Windows activation" shows "Not Available" for both Status and Product ID.

    Looks like we are back to square one. :(

    Wednesday, February 15, 2012 5:10 PM
  • "Mike Cooper SJ" wrote in message news:2db557d9-e8df-4db0-8069-ef6165b0f2fd...

    Windows is back to saying it's not genuine again.  I get a popup and there's a message on the background.  Also the "System" control panel under "Windows activation" shows "Not Available" for both Status and Product ID.

    Looks like we are back to square one. :(

     
    It does, rather – although I have to admit to not being too surprised, since I couldn’t see what the NlsLexicons file had to do with WGA :)
    Please run another SFC and post the new CBS log to your Skydrive
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 6:12 PM
    Moderator
  • I just ran "sfc /scannow" again and it "did not find any integrity violations".

    So it looks like that was a wild goose chase.

    Wednesday, February 15, 2012 6:30 PM
  • "Mike Cooper SJ" wrote in message news:f1c2f885-0107-4fae-b483-ce04c6f472b5...

    I just ran "sfc /scannow" again and it "did not find any integrity violations".

    So it looks like that was a wild goose chase.

     
     
     
    That means that the sppobjs.dll problem is either permissions or in the registry.
    The only visible registry entry I have is at
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662
     
    so – what response do you get to
    REG INI “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662”
     
    and what are the permissions on that SubKey?

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 6:56 PM
    Moderator
  • The REG command says 'INI' is an invalid argument.  What's the correct syntax?  You want this run from cmd.exe right?

    Wednesday, February 15, 2012 7:22 PM
  • "Mike Cooper SJ" wrote in message news:d7da8315-406d-49ea-9d8d-83ba32216784...

    The REG command says 'INI' is an invalid argument.  What's the correct syntax?  You want this run from cmd.exe right?

     
     
     
     
    Sorry about that – I’ve been trying to think about scripting registry permission changes all day :(
     
    The proper command is REG QUERY
     
    (FYI, if you run into similar problems in CMD, use a /? after the original command to get the help and syntax )
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 7:27 PM
    Moderator
  • The "REG QUERY "HKLM\...."" says "Invalid key name".

    Wednesday, February 15, 2012 7:31 PM
  • "Mike Cooper SJ" wrote in message news:fe8928d4-4f44-4034-ad53-0fe9b45d9b55...

    The "REG QUERY "HKLM\...."" says "Invalid key name".

     
     
    Use Regedit to get there – does the SubKey exist?
    What about
    REG QUERY “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform” /s
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 8:04 PM
    Moderator
  • RegEdit for .../Modules/...9662 shows:

    (Default) REG_SZ (value not set)

    ManifestFile REG_SZ %windir%\system32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms

    PluginFile REG_SZ %windir%\system32\sppobjs.dll

    Permissions on Modules/...9662 shows

    SYSTEM, TrustedInstaller,  and Administrators:

    Full Control  ALLOW

    Read ALLOW

    Users:

    Read ALLOW

    Wednesday, February 15, 2012 8:57 PM
  • This command fails:

    REG QUERY “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform” /s

    Again it says "Invalid key name".

    In regedit I see these keys directly under this location:

    InactivityShutdownDelay REG_DWORD 0x00000012c (300)

    KeepRunningTHresholdMinds REG_DWORD 0x00000000f (15)

    ServiceSessionId REG_BINARY e0 9b 79 da 6b a5 df 48 82 ...

    SkipRearm REG_DWORD 0x000000 (0)

    UserOperations REG_DWORD 0x00000000 (0)

    VLActivationInterval REG_DWOD 0x00000078 (120)

    VLRenewalInterval REG_DWORD 0x000002760 (10080)

    Wednesday, February 15, 2012 9:01 PM
  •  
     
    Bother – I know what the problem is, I think.
    If you copied and pasted the command from the forum, then the quotes aren’t properly translated for the Command Prompt.
    You need to paste, and then replace the quotes with new ones.
    please try this.with this (I’ll also try using a different font in the vague hope that it helps – this isn’t a problem in the Answers forums for some reason!)
     
    REG INI "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662" /s
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 9:23 PM
    Moderator
  • Yeah, the quotes must have been messed up from cut-and-paste:

    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4a
    f4-a0dd-ba02fed39662" /s

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39
    662
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppobjs.dll

    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform" /s

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform
        VLActivationInterval    REG_DWORD    0x78
        VLRenewalInterval    REG_DWORD    0x2760
        UserOperations    REG_DWORD    0x0
        InactivityShutdownDelay    REG_DWORD    0x12c
        KeepRunningThresholdMins    REG_DWORD    0xf
        SkipRearm    REG_DWORD    0x0
        ServiceSessionId    REG_BINARY    E09B79DA6BA5DF4882348DCF3151AD69

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation
        ActivationInterval    REG_DWORD    0xdbba0
        NotificationDisabled    REG_DWORD    0x0
        Schedule    REG_BINARY    400700002A0000002C000000FFFFFF7FFFFFFF7F00751200600000000000000025000000FFFFFFFFFFFFFFFFFFFFFFFF000000002C0000
    00FFFFFF7FFFFFFF7F80F40300100000000000000026000000FFFFFFFFFFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7F80510100040000000000000027000000FF
    FFFFFFFFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7F100E0000040000000000000028000000FFFFFFFFFFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF
    7FFFFFFF7F10000000000000002800000000010000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F10000000000000002E00000008000000FFFFFFFFFF
    FFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F10000000000000001200000000000000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F100000
    00000000001300000000020000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7F00751200FFFFFF7F600000000000000016000000FFFFFFFFFFFFFFFFFFFFFFFF000000002C
    000000FFFFFF7F80F40300FFFFFF7F100000000000000017000000FFFFFFFFFFFFFFFFFFFFFFFF000000002C000000FFFFFF7F80510100FFFFFF7F0400000000000000180000
    00FFFFFFFFFFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000004700000000000400FFFFFFFF20000000000000002C000000FFFFFF7FFF
    FFFF7FFFFFFF7F04000000000000004000000000080000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000004100000000100000FFFFFF
    FFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000003E00000000200000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04
    000000000000003A00000000400000FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000003F00000000800000FFFFFFFFFFFFFFFF000000
    002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000004200000000000100FFFFFFFFFFFFFFFF000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F040000000000000039
    00000000040000FFFFFFFFFFFFFFFF000000002C000000FDFFFFFFFFFFFF7FFFFFFF7F600000000000000002000000040000000200000011000000000000002C000000FDFFFF
    FFFFFFFF7FFFFFFF7F100000001E00000001000000040000000100000011000000020000002C00000003000000FFFFFF7FFFFFFF7F60000000000000000700000004000000FF
    FFFFFF11000000000000002C00000001000000FFFFFF7FFFFFFF7F10000000000000000800000004000000FFFFFFFF11000000000000002C0000001E000000FFFFFF7FFFFFFF
    7F60000000000000000200000001000000FFFFFFFF11000000040000002C00000003000000FFFFFF7FFFFFFF7F10000000000000000700000001000000FFFFFFFF1100000004
    0000002C00000001000000FFFFFF7FFFFFFF7F04000000000000000800000001000000FFFFFFFF11000000040000002C00000000000000FFFFFF7FFFFFFF7F60000000000000
    000900000002000000FFFFFFFF11000000000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000001C00000020000000FFFFFFFF02000000000000002C000000FD
    FFFFFFFFFFFF7FFFFFFF7F60000000000000004400000000000200FFFFFFFF20000000000000002C00000003000000FFFFFF7FFFFFFF7F100000000000000044000000000002
    00FFFFFFFF20000000000000002C00000001000000FFFFFF7FFFFFFF7F10000000000000004500000000000200FFFFFFFF20000000000000002C000000FDFFFFFFFFFFFF7FFF
    FFFF7F60000000000000001D00000040000000FFFFFFFF02000000000000002C00000003000000FFFFFF7FFFFFFF7F10000000000000001D00000040000000FFFFFFFF020000
    00000000002C00000001000000FFFFFF7FFFFFFF7F10000000000000001E00000040000000FFFFFFFF02000000000000002C000000FDFFFFFFFFFFFF7FFFFFFF7F6000000000
    0000001F00000080000000FFFFFFFF02000000000000002C00000003000000FFFFFF7FFFFFFF7F10000000000000001F00000080000000FFFFFFFF02000000000000002C0000
    0001000000FFFFFF7FFFFFFF7F10000000000000002000000080000000FFFFFFFF02000000000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F10000000000000002100000002
    000000FFFFFFFF02000000000000002C000000FDFFFFFFFFFFFF7FFFFFFF7F60000000000000002300000004000000FFFFFFFF04000000000000002C00000003000000FFFFFF
    7FFFFFFF7F10000000000000002300000004000000FFFFFFFF04000000000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F04000000000000002300000002000000FFFFFFFF04
    000000000000002C000000FFFFFF7FFFFFFF7FFFFFFF7F60000000000000002400000002000000FFFFFFFF0800000000000000
        Manual    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f
    }
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\slui.exe,-10

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f
    }\{005f5de3-3cf4-4b15-aa74-572af829fae6}
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wucltux.dll,-5
        DescriptionResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wucltux.dll,-6

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b
    32a
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppwinob.dll

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39
    662
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppobjs.dll

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0
        ModuleId    REG_SZ    179b8a65-b0f6-41d9-acea-12006ef9b32a
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/paylo
    adhandler/eul/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/paylo
    adhandler/pkc/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/paylo
    adhandler/rac/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/paylo
    adhandler/spc/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/seque
    nce/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/lice
    nserenewal/1.0
        ModuleId    REG_SZ    c42d83ff-5958-4af4-a0dd-ba02fed39662
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/age
    nt/7.0
        ModuleId    REG_SZ    179b8a65-b0f6-41d9-acea-12006ef9b32a
        IsService    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ReferralData

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ReferralData\APPID

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ReferralData\APPID\55c92734-d682-4d71-983e-d6ec3f
    16059f
        ReferralId    REG_SZ    000000

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Setup
        DoLicenseConsume    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Setup\LicenseFolders
        WindowsComponents    REG_SZ    %windir%\system32\spp\tokens
        OEM    REG_SZ    %windir%\system32\oem

     

    Wednesday, February 15, 2012 9:31 PM
  • "Mike Cooper SJ" wrote in message news:ae9957e5-5cce-4447-a527-d777fa9039b3...

    Yeah, the quotes must have been messed up from cut-and-paste:

    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4a
    f4-a0dd-ba02fed39662" /s

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39
    662
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppobjs.dll

     

    I’d forgotten the output was that long!!
    (and sorry for getting the command wrong again – comes of trying to do two things at once!)
    I *think* we may have found the problem :) – or at least *a* problem :)
     
    Please open Regedit and navigate to the
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects
    Key
    You’ll see a load of subkeys listed, starting ‘msft:’
    Please confirm that none of them have an entry for ModuleID with a REG_SZ value
    Please also check the Permissions for the Objects Key, and that the Owner is Administrators.
    (If it is, then it’ll be easy enough to craft a reg file to fix it)
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 10:35 PM
    Moderator
  • Ok every single msft: entry has a ModuleID REG_SZ value.  Where you asking if they all had ModuleID or if it was missing on any?

    The Objects key Owner is Administrators.

    Wednesday, February 15, 2012 11:00 PM
  • "Mike Cooper SJ" wrote in message news:056351ce-d8f9-4a2d-be24-056b8948bcd6...

    Ok every single msft: entry has a ModuleID REG_SZ value.  Where you asking if they all had ModuleID or if it was missing on any?

    The Objects key Owner is Administrators.

     
     
    I was asking if it was missing on any – for most, the value should be
    c42d83ff-5958-4af4-a0dd-ba02fed39662
    for ‘bios’ and ‘windowsfunctionality/agent’, it’s
    179b8a65-b0f6-41d9-acea-12006ef9b32a
     
    - and I think I ended up going down a wrong path, as I rechecked your output, and found the entries (how I missed them I will never know!)
     
    Sorry for the confusion here – but I may have found the answer to one of our other perennial problems along the way :)
     
    I am now officially ‘out of ideas’!  :(
     
    My best advice would be a Repair Install, or contacting MS WGA Support (don’t forget, if your MSDN Subscription is still valid, you get a number of free Support incidents! – can’t remember what the rules are on how to use them are, though)
     
    WGA Support can be found here-
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Thursday, February 16, 2012 8:26 PM
    Wednesday, February 15, 2012 11:34 PM
    Moderator
  • Noel,

    I really appreciate all your help.  I will open a support ticket. :)

    mike

    Wednesday, February 15, 2012 11:48 PM
  • "Mike Cooper SJ" wrote in message news:f80b2597-2c09-4c8a-afac-203a37204f10...

    Noel,

    I really appreciate all your help.  I will open a support ticket. :)

    mike

     
     
    You’re welcome – it’s been a pleasure working with you, and an educational thread for me, even if we came out not the better in the end in terms of activation/validation.
     
    Good Luck with MS  - and do let us know the outcome, please.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 15, 2012 11:52 PM
    Moderator