locked
Genuine Windows Problem RRS feed

  • Question

  • Hi I am having some 'This copy of Windows is not genuine' issues

    here is my diagnostic

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {6ECD75DC-6163-44BF-A771-DDA9AC9B557C}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.111025-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Enterprise 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6ECD75DC-6163-44BF-A771-DDA9AC9B557C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-2613302245-1938289573-1163765208</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP 625</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68DVA Ver. F.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20110304000000.000000+000</Date></BIOS><HWID>0C973907018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>141AD850F4FE712</Val><Hash>Wav6bZyVVgQvu+Lk2lcFI8YVJBM=</Hash><Pid>81599-905-3958433-65215</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="101"/><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="19" Version="12" Result="101"/><App Id="1A" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="44" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/><App Id="BA" Version="12" Result="101"/></Applications></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1131, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2011 13:04
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: MAAAAAEAAgABAAEAAAACAAAAAgABAAEAeqhARoC9VPlUQYzfiGvqRZavICMofxh5

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HPQOEM  307E   
      FACP   HPQOEM  307E   
      HPET   HPQOEM  307E   
      MCFG   HPQOEM  307E   
      SLIC   HPQOEM  SLIC-MPC
      SSDT   AMD     POWERNOW

    I posted on another forum and here is what i was told

    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1131, 5) Microsoft VBScript runtime error: Permission denied

    This one is sometimes difficult to solve. Let's try the easy one first. if that doesn't fix it I mat have to send you to the WGA forum which specializes in these issues.


    Recreate the Licensing Store

        1) Click Start button.

        2) Type: CMD.exe into the 'Search programs and files' field

        3) Right-Click on CMD.exe and select Run as Administrator

        4) Type: net stop sppsvc   (It may ask you if you are sure, select yes)

        Note: the Software Protection service may not be running, this is ok.

        5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

        6) Type: rename tokens.dat tokens.bar

        7) Type: cd %windir%\system32

        8) Type: net start sppsvc

        9) Type: slui.exe

        10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.

    Reboot, then run MGADiag again, and post the report

    If that doesn't work I suggest you post on the WGA forums.

    http://social.microsoft.com/Forums/en-US/genuinewindows7/threads

    Read the announcements at the top of the forum and post your report there

    I got through 9 when i recieved an error message titled Windows activation saying and error has occured you can also contact hewlett-packard by phone to help resolve this problem.

    I then tried to rerun the diagnostic tool to paste into here and got a differetn error message.

    Any thoughts?

    I appreciate your help in advance :)

    Thank you.

    Friday, February 17, 2012 6:24 PM

Answers

  • That's OK as well - and I'm afraid that I'm out of ideas :(

    I really can only suggest that you contact WGA support as I suggested above - or perhaps the manufacturer, as the machine appears likely to be still under warranty.

    (be warned that the manufacturer's likely response it to be a Factory Recovery - so back up data first!)

    Sorry I couldn't cudgel a better outcome from the data.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, March 1, 2012 2:14 PM
    Moderator

All replies

  • Ignore the error messang. It will still copy and paste

    Please state the version and edition on your COA. do not state the product key.


    Friday, February 17, 2012 8:10 PM
    Answerer
  • "DG1707" wrote in message news:c4350b37-aee6-489a-92a7-8828b2ba3f32...

    Hi I am having some 'This copy of Windows is not genuine' issues

    here is my diagnostic

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048

    File Scan Data-->
    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP 625</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68DVA Ver. F.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20110304000000.000000+000</Date></BIOS

     

    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1131, 5) Microsoft VBScript runtime error: Permission denied

     

     

     

    Permission Denied errors are often caused by over-zealous Anti-Virus programs – which one are you using?
     
    Please try the following...
    Click on the Start button
    in the Search box, type
    SLMGR.VBS   /DLI
    and hit the Enter key -
    What happens? – if you get an error message, what EXACTLY does it say?
    You should get some details about your license – but we don’t need that, as this is just to test the source of the problem.
     
    Please install the WAT Update KB971033 from - http://support.microsoft.com/kb/971033 – you’ll need the 32-bit (x86) version.
     
    Then run another MGADiag report and post the results.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 18, 2012 10:11 AM
    Moderator
  • Noel,

    The error message reads as follows:

    Script: C;\windows\system32\SLMGR.VBS

    Line: 1131

    Char: 5

    Error: Permission denied

    Code: 800A0046

    Source: Microsoft VBSscript runtime erro

    Monday, February 20, 2012 3:44 AM
  • New diagnostic

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {6ECD75DC-6163-44BF-A771-DDA9AC9B557C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.111025-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Enterprise 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6ECD75DC-6163-44BF-A771-DDA9AC9B557C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-2613302245-1938289573-1163765208</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP 625</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68DVA Ver. F.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20110304000000.000000+000</Date></BIOS><HWID>0C973907018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>141AD850F4FE712</Val><Hash>Wav6bZyVVgQvu+Lk2lcFI8YVJBM=</Hash><Pid>81599-905-3958433-65215</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="101"/><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="19" Version="12" Result="101"/><App Id="1A" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="44" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/><App Id="BA" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1131, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:12:2011 13:04
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: MAAAAAEAAgABAAEAAAACAAAAAgABAAEAeqhARoC9VPlUQYzfiGvqRZavICMofxh5

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HPQOEM  307E   
      FACP   HPQOEM  307E   
      HPET   HPQOEM  307E   
      MCFG   HPQOEM  307E   
      SLIC   HPQOEM  SLIC-MPC
      SSDT   AMD     POWERNOW

     Thank you again fro your time:)

    Monday, February 20, 2012 3:48 AM
  • "DG1707" wrote in message news:3959848a-bd2f-42c2-8a98-bc54d840cf5d...

    New diagnostic

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048

    Licensing Data-->
    C:\windows\system32\slmgr.vbs(1131, 5) Microsoft VBScript runtime error: Permission denied

    Thank you again fro your time:)

     
     
    Still the same :(
    OK – so let’s go on a hunt for the source of the problem.
    Please open an Elevated Command Prompt window (see 1 at the bottom for instructions)
     
    At the prompt, run the following commands (see 2)
     
    ICACLS C:\Windows\System32
    ICACLS C:\Windows\System32\Slmgr.vbs
    ICACLS C:\Windows\System32\slmgr /T
    REG QUERY HKLM\SOFTWARE\Classes\VBSFile\Shell\Open2  /S
    REG QUERY HKLM\SOFTWARE\Classes\JSFile\Shell\Open2  /S
    REG QUERY HKLM\SOFTWARE\Classes\JSEFile\Shell\Open2 /S
     
    Copy and paste the results to your response (see 3)
     
     
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
     
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
     
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 20, 2012 11:31 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>ICACLS C:\Windows\System32
    C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                        NT AUTHORITY\SYSTEM:(M)
                        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                        BUILTIN\Administrators:(M)
                        BUILTIN\Administrators:(OI)(CI)(IO)(F)
                        BUILTIN\Users:(RX)
                        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                        CREATOR OWNER:(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\Slmgr.vbs
    C:\Windows\System32\Slmgr.vbs NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\slmgr /T
    C:\Windows\System32\slmgr NT SERVICE\TrustedInstaller:(I)(F)
                              NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
                              NT AUTHORITY\SYSTEM:(I)(F)
                              NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
                              BUILTIN\Administrators:(I)(F)
                              BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
                              BUILTIN\Users:(I)(RX)
                              BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
                              CREATOR OWNER:(I)(OI)(CI)(IO)(F)

    C:\Windows\System32\slmgr\0409 NT SERVICE\TrustedInstaller:(F)
                                   NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                                   NT AUTHORITY\SYSTEM:(M)
                                   NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                                   BUILTIN\Administrators:(M)
                                   BUILTIN\Administrators:(OI)(CI)(IO)(F)
                                   BUILTIN\Users:(RX)
                                   BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                                   CREATOR OWNER:(OI)(CI)(IO)(F)

    C:\Windows\System32\slmgr\0409\slmgr.ini NT SERVICE\TrustedInstaller:(F)
                                             BUILTIN\Administrators:(RX)
                                             NT AUTHORITY\SYSTEM:(RX)
                                             BUILTIN\Users:(RX)

    Successfully processed 3 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\VBSFile\Shell\Open2  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\Shell\Open2
        (Default)    REG_EXPAND_SZ    Open &with Command Prompt
        MUIVerb    REG_EXPAND_SZ    @%SystemRoot%\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\Shell\Open2\Command
        (Default)    REG_EXPAND_SZ    "%SystemRoot%\System32\CScript.exe" "%1" %*


    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\JSFile\Shell\Open2  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSFile\Shell\Open2
        (Default)    REG_SZ    Open &with Command Prompt
        MUIVerb    REG_SZ    @C:\Windows\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSFile\Shell\Open2\Command
        (Default)    REG_SZ    C:\Windows\System32\CScript.exe "%1" %*


    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\JSEFile\Shell\Open2 /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSEFile\Shell\Open2
        (Default)    REG_SZ    Open &with Command Prompt
        MUIVerb    REG_SZ    @C:\Windows\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSEFile\Shell\Open2\Command
        (Default)    REG_SZ    C:\Windows\System32\CScript.exe "%1" %*

    C:\windows\system32>

    Again, I truly appreciate your time and help :)

    Monday, February 20, 2012 2:45 PM
  • "DG1707" wrote in message news:d25fc222-eacb-454d-bc5b-872cceee65f6...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    Again, I truly appreciate your time and help :)

    Oh well – first shot across the bows failed dismally, as there’s no problem in those results that I can see.
    Try this group instead....
    ICACLS C:\Windows\System32\cscript.exe
    REG QUERY HKLM\SOFTWARE\Classes\VBScript /S
    REG QUERY HKCR\VBSFile
    REG QUERY HKCR\VBScript\CLSID
    I have to admit I’m groping here – so far we’ve never managed to solve this one in these forums, so I’m trying to break a duck :)
    If you need a solution in a hurry ( it may mean a reinstall), you could try WGA Support for assistance.
    WGA Support can be found here-

    North America

     Outside North America

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 20, 2012 3:02 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>ICACLS C:\Windows\System32
    C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                        NT AUTHORITY\SYSTEM:(M)
                        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                        BUILTIN\Administrators:(M)
                        BUILTIN\Administrators:(OI)(CI)(IO)(F)
                        BUILTIN\Users:(RX)
                        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                        CREATOR OWNER:(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\Slmgr.vbs
    C:\Windows\System32\Slmgr.vbs NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\slmgr /T
    C:\Windows\System32\slmgr NT SERVICE\TrustedInstaller:(I)(F)
                              NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
                              NT AUTHORITY\SYSTEM:(I)(F)
                              NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
                              BUILTIN\Administrators:(I)(F)
                              BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
                              BUILTIN\Users:(I)(RX)
                              BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
                              CREATOR OWNER:(I)(OI)(CI)(IO)(F)

    C:\Windows\System32\slmgr\0409 NT SERVICE\TrustedInstaller:(F)
                                   NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                                   NT AUTHORITY\SYSTEM:(M)
                                   NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                                   BUILTIN\Administrators:(M)
                                   BUILTIN\Administrators:(OI)(CI)(IO)(F)
                                   BUILTIN\Users:(RX)
                                   BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                                   CREATOR OWNER:(OI)(CI)(IO)(F)

    C:\Windows\System32\slmgr\0409\slmgr.ini NT SERVICE\TrustedInstaller:(F)
                                             BUILTIN\Administrators:(RX)
                                             NT AUTHORITY\SYSTEM:(RX)
                                             BUILTIN\Users:(RX)

    Successfully processed 3 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\VBSFile\Shell\Open2  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\Shell\Open2
        (Default)    REG_EXPAND_SZ    Open &with Command Prompt
        MUIVerb    REG_EXPAND_SZ    @%SystemRoot%\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\Shell\Open2\Command
        (Default)    REG_EXPAND_SZ    "%SystemRoot%\System32\CScript.exe" "%1" %*


    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\JSFile\Shell\Open2  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSFile\Shell\Open2
        (Default)    REG_SZ    Open &with Command Prompt
        MUIVerb    REG_SZ    @C:\Windows\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSFile\Shell\Open2\Command
        (Default)    REG_SZ    C:\Windows\System32\CScript.exe "%1" %*


    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\JSEFile\Shell\Open2 /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSEFile\Shell\Open2
        (Default)    REG_SZ    Open &with Command Prompt
        MUIVerb    REG_SZ    @C:\Windows\System32\wshext.dll,-4511

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JSEFile\Shell\Open2\Command
        (Default)    REG_SZ    C:\Windows\System32\CScript.exe "%1" %*


    C:\windows\system32>ICACLS C:\Windows\System32\cscript.exe
    C:\Windows\System32\cscript.exe NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\VBScript /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBScript
        (Default)    REG_SZ    VB Script Language

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBScript\CLSID
        (Default)    REG_SZ    {B54F3741-5B07-11cf-A4B0-00AA004A55E8}

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBScript\OLEScript
        (Default)    REG_NONE


    C:\windows\system32>
    C:\windows\system32>REG QUERY HKCR\VBSFile

    HKEY_CLASSES_ROOT\VBSFile
        FriendlyTypeName    REG_EXPAND_SZ    @%SystemRoot%\System32\wshext.dll,-4802

        (Default)    REG_SZ    VBScript Script File

    HKEY_CLASSES_ROOT\VBSFile\DefaultIcon
    HKEY_CLASSES_ROOT\VBSFile\ScriptEngine
    HKEY_CLASSES_ROOT\VBSFile\ScriptHostEncode
    HKEY_CLASSES_ROOT\VBSFile\Shell
    HKEY_CLASSES_ROOT\VBSFile\ShellEx

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKCR\VBScript\CLSID

    HKEY_CLASSES_ROOT\VBScript\CLSID
        (Default)    REG_SZ    {B54F3741-5B07-11cf-A4B0-00AA004A55E8}

    C:\windows\system32>

    I don't suppose you could tell me in layman's terms what is going on could you?

    Monday, February 20, 2012 3:18 PM
  • the link you posted could not be found. I'm not in too big a hurry. Personally it's kinda cool getting a glimpse of how deep all this goes. I'm more of a math physics person than a computer person (obviously) and I've always been one of those 'hey, it doesn't work, it must be trash' kind of people. this is pretty interesting for me, and I do so appreciate your time. I hope we can figure this out :)

    Monday, February 20, 2012 3:22 PM
  • "DG1707" wrote in message news:99e1b10c-62f6-4c28-98a4-a8f9b86280e4...

    the link you posted could not be found. I'm not in too big a hurry. Personally it's kinda cool getting a glimpse of how deep all this goes. I'm more of a math physics person than a computer person (obviously) and I've always been one of those 'hey, it doesn't work, it must be trash' kind of people. this is pretty interesting for me, and I do so appreciate your time. I hope we can figure this out :)

     
     
    I’ve hopefully corrected the links now – try again :)
     
    This is fun for me (Industrial chemist by training!).
     
    Unfortunately we seem to have drawn a blank on the latest set as well :(
     
    OK – an idea....
    let’s see if we can create and run a VBScript file. If it runs OK, then the problem is probably with something that slmgr.vbs is calling, rather than with scripting itself
     
    Copy the following lines into Notepad and save the results as ‘Hello.vbs’ to your desktop
     
    Option Explicit
    Dim objFS, objFolder
    Dim strDir
    strDir = "c:\deleteme"
    Set objFS = CreateObject("Scripting.FileSystemObject")
    Set objFolder = objFS.CreateFolder(strDir)
    WScript.Echo "I created the folder " & strDir & " all on my lonesome”
    WScript.Quit
     
     
    Double-click on the file – what happens?
    You should get a message-box come up with a message for you – if not, what exact error message do you get?
    Now delete the folder C:\deleteme using Windows explorer
    right-click on the Hello.vbs file, and select Create Shortcut
    Right-click on the shortcut, and select Properties
    in the Target box on the Shortcut tab, insert the word CSCRIPT before the path to your file.
    Close the Properties applet
    Now double-click on the shortcut – what happens? you should see a very brief flash of a Command Prompt window – and nothing else. If you now look in the C:\ directory, the deleteme folder should have returned.
    If you get any error message, then you have a problem with cscripting rather than vbscripting :)
     
     
    Please also Run an MGADiag report, making a note of the time – then once it’s complete, open Event Viewer and see if there’s anything in the Windows Application logs there for around that time that seems relevant.
    There’s not need to post the log (it won’t have changed) but make a note of any errors in Event Viewer and post the Source, EventID and the content of the General box
     
    I have to go out – may not be back until tomorrow a.m. UK time (just warning you not wait for a quick response!)
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 20, 2012 4:11 PM
    Moderator
  • Ok, no worries.

    So the error message i got was as follows:

    Script: C:\Users\TEMP\Desktop\Hello.vbs

    Line: 13

    Error: Unterminated string constant

    Code: 800A0409

    Source: Microsfot VBScript compilation error

    Monday, February 20, 2012 4:33 PM
  • Hmm, I can't seem to find C:\deleteme...

    Monday, February 20, 2012 4:37 PM
  • I am having trouble with this one...

    CSCRIPTC:\Users\TEMP\Desktop\Hello.vbs

    Is this what you meant by insert CSCRIPT before the path name? I got an error message... so I think i did something wrong :P Talk to you tomorrow :)

    Monday, February 20, 2012 4:40 PM
  • "DG1707" wrote in message news:a72fbf13-43d6-4649-bb54-2062f01972e7...

    I am having trouble with this one...

    CSCRIPTC:\Users\TEMP\Desktop\Hello.vbs

    Is this what you meant by insert CSCRIPT before the path name? I got an error message... so I think i did something wrong :P Talk to you tomorrow :)

     
     
    Yep – except you need to put a space between them :)
    CSCRIPT  C:\Users\TEMP\Desktop\Hello.vbs
     
    I’ve found out what the problem is with the original script – you have to go in and replace the quotes while in Notepad, and re-save them (they are saved as “x” rather than as " ) <grrr>
    It should run fine then :)
    So it appears to be a problem in the registry where part of the registry is not accessible to the MGADiag/slmgr queries
    I am now officially out of my depth and need a drink :) (which is what I’m going to do when the transport gets here)
    I’ll try learning to swim later and get back to you :D
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 20, 2012 4:59 PM
    Moderator
  • "DG1707" wrote in message news:a72fbf13-43d6-4649-bb54-2062f01972e7...

    I am having trouble with this one...

    CSCRIPTC:\Users\TEMP\Desktop\Hello.vbs

    Is this what you meant by insert CSCRIPT before the path name? I got an error message... so I think i did something wrong :P Talk to you tomorrow :)

     
     
    (see my earlier response)
     
    Please run the following command from an Elevated Command Prompt window....
    REG QUERY “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps”  /S
     
    (again – you’ll have to edit the quotes once in line, or you’ll get an error message)
     
    post the results – please also check the Permissions on that registry Key, and the subkeys under it (in Regedit – do NOT make any changes, as it could break your Windows!) All keys should be Owned by TrustedInstaller; and Users, Administrators and SYSTEM should have at least Read rights.
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, February 21, 2012 10:32 AM
    Moderator
  • "DG1707" wrote in message news:a72fbf13-43d6-4649-bb54-2062f01972e7...

    I am having trouble with this one...

    CSCRIPTC:\Users\TEMP\Desktop\Hello.vbs

    Is this what you meant by insert CSCRIPT before the path name? I got an error message... so I think i did something wrong :P Talk to you tomorrow :)

     
     
    Ahah! (told you I was groping<g>)
    I’ve found a way to access the registry permissions form the command line, to save you having to do it manually :)
     
    Extract the files to a temporary location, then copy the accesschk.exe file to C:\Windows\System32 (you will need to confirm the process)
     
    Back in an Elevated Command Prompt window, run the following command
    accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps"
     
    copy/paste the output to your response.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, February 21, 2012 12:03 PM
    Moderator
  • C:\windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    \SoftwareProtectionPlatform\GenuineApps"  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtecti
    onPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\slui.exe,-10


    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtecti
    onPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}\{005f5de3-3cf4-4b1
    5-aa74-572af829fae6}
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wucltux.dll,
    -5
        DescriptionResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wuclt
    ux.dll,-6


    C:\windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    \SoftwareProtectionPlatform\GenuineApps"  /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtecti
    onPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\slui.exe,-10


    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtecti
    onPlatform\GenuineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}\{005f5de3-3cf4-4b1
    5-aa74-572af829fae6}
        NameResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wucltux.dll,
    -5
        DescriptionResourceLocation    REG_EXPAND_SZ    @%systemroot%\system32\wuclt
    ux.dll,-6


    C:\windows\system32>

    Wednesday, February 22, 2012 12:46 AM
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\TEMP>"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtect
    ionPlatform\GenuineApps"
    The system cannot find the path specified.

    I downloaded the file and dragged it to the windows system32 file folder...

    Im guessing i did something wrong along the way

    Wednesday, February 22, 2012 12:55 AM
  • "DG1707" wrote in message news:5ec59d73-4f06-4774-9067-01f2083a75b8...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\TEMP>"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtect
    ionPlatform\GenuineApps"
    The system cannot find the path specified.

    I downloaded the file and dragged it to the windows system32 file folder...

    Im guessing i did something wrong along the way

     
     
    Sorta :)
    the command must be run from an Elevated Command Prompt window, and is....
     
    accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps"
     
    (busy composing long response to your last  - nearly finished)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 22, 2012 1:21 AM
    Moderator
  • "DG1707" wrote in message news:729e59bb-a0a5-4f02-a02c-cd4728db2046...

    C:\windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps"  /S


    C:\windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\GenuineApps"  /S


    C:\windows\system32>

     
     
    That all looks OK.
     
    To answer your earlier question – ‘I don't suppose you could tell me in layman's terms what is going on could you?’ – we’re looking for a registry entry that has been modified in some way to prevent the system using it properly.
    The registry is a massive database that contains (almost) all the links between the various parts of Windows itself, and between the installed applications and Windows. Each entry tells Windows in some way how it has to handle the various data that is flying around the system all the time (where to send it, which program to hand it off to, which printer is in use, what driver it’s using etc. etc.) If one is missing or has the wrong data, anything that depends on it won’t work properly.
    Each part of that database (a key or subkey) has ‘permissions’ which tell it what parts of the system are allowed to do with it.
     
    In your case, either a file has the wrong permissions, or a registry key has the wrong permissions, so that the program slmgr.vbs bombs out part-way through running because it isn’t allowed to read the appropriate data.
     
    There are two ways to try and find the problem (if you’re not the guy who wrote the program) – trial-and-error duplication of the fault on another machine (which is not that difficult if you know there’s only one failure-point – but there very rarely is), or trying to trace back through the registry from a failure-point to see if you can spot a deviation from the norm.
    Unfortunately a lot of this area is deliberately undocumented (publicly at least) by MS, to reduce the ease with which hackers can work around the Software Protection system (and my programming skills are limited to traditional BASIC) – so I’m groping around to try and get a feel for where the problem is likely to be.
     
    HTH?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 22, 2012 1:22 AM
    Moderator
  • Makes sense.

    Ok can you remind me how to get to the elevated command promt?

    Im assuming its different from the one I've been using..

    Wednesday, February 22, 2012 4:11 AM
  • I ran the command prompt as the admin...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"
    'accesschk' is not recognized as an internal or external command,
    operable program or batch file.

    C:\windows\system32>

    Wednesday, February 22, 2012 4:32 AM
  • "DG1707" wrote in message news:439d9879-d11c-4833-a42b-6f8ca2a3a35d...

    I ran the command prompt as the admin...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"
    'accesschk' is not recognized as an internal or external command,
    operable program or batch file.

    C:\windows\system32>

    That sounds as if you copied the .zip file to the System32 folder, rather than extracting the .exe file and copying that – find the .zip file and extract it to the desktop. Then copy the access.exe file to the System32 folder.
    Then run the command again.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 22, 2012 9:54 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"
    'accesschk' is not recognized as an internal or external command,
    operable program or batch file.

    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"

    Accesschk v5.02 - Reports effective permissions for securable objects
    Copyright (C) 2006-2011 Mark Russinovich
    Sysinternals - www.sysinternals.com

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Gen
    uineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}
      RW NT SERVICE\TrustedInstaller
      R  NT AUTHORITY\SYSTEM
      R  BUILTIN\Administrators
      R  BUILTIN\Users
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Gen
    uineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}\{005f5de3-3cf4-4b15-aa74-572af82
    9fae6}
      RW NT SERVICE\TrustedInstaller
      R  NT AUTHORITY\SYSTEM
      R  BUILTIN\Administrators
      R  BUILTIN\Users

    C:\windows\system32>
    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"

    Accesschk v5.02 - Reports effective permissions for securable objects
    Copyright (C) 2006-2011 Mark Russinovich
    Sysinternals - www.sysinternals.com

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Gen
    uineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}
      RW NT SERVICE\TrustedInstaller
      R  NT AUTHORITY\SYSTEM
      R  BUILTIN\Administrators
      R  BUILTIN\Users
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Gen
    uineApps\{55c92734-d682-4d71-983e-d6ec3f16059f}\{005f5de3-3cf4-4b15-aa74-572af82
    9fae6}
      RW NT SERVICE\TrustedInstaller
      R  NT AUTHORITY\SYSTEM
      R  BUILTIN\Administrators
      R  BUILTIN\Users

    C:\windows\system32>

    Hmmm, how's that?

    Wednesday, February 22, 2012 2:48 PM
  • "DG1707" wrote in message news:b4d2d431-58f2-45e5-9894-bd899f3f15d2...

     

    C:\windows\system32>accesschk -ks "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVer
    sion\SoftwareProtectionPlatform\GenuineApps"

    Accesschk v5.02 - Reports effective permissions for securable objects
    Copyright (C) 2006-2011 Mark Russinovich
    Sysinternals - www.sysinternals.com

     

    Hmmm, how's that?

     
     
    That’s better :)
     
    Unfortunately, it’s completely standard.
    I’m not sure where to go :( – I’ll have a think and get back to you later.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 22, 2012 3:17 PM
    Moderator
  • Any thing new?

    Sunday, February 26, 2012 2:11 AM
  • "DG1707" wrote in message news:abb35b14-05ed-47ce-a674-570c1e3d9b06...

    Any thing new?

     
     
    Sorry – it got a little hectic here yesterday:(
    back in a bit (an hour or so)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 26, 2012 10:37 AM
    Moderator
  • "DG1707" wrote in message news:b4d2d431-58f2-45e5-9894-bd899f3f15d2...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    Hmmm, how's that?

     
     
    Please run the following commands – some you will have run before, but it makes for easier viewing to have them all in one place :)
     
    ICACLS C:\Windows\System32\sppc.dll
    ICACLS C:\Windows\System32\slc.dll
    ICACLS C:\Windows\System32\slcext.dll
    ICACLS C:\Windows\System32\sppcomapi.dll
    ICACLS C:\Windows\System32\sppsvc.exe
    ICACLS C:\Windows\System32\SPPWMI.DLL
    ICACLS C:\Windows\System32\SPP.DLL
    ICACLS C:\Windows\System32\SLWGA.DLL
    REG QUERY HKU
    REG QUERY HKU\S-1-5-20
    REG QUERY HKU\S-1-5-20\Environment
    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"
    ICACLS C:\Windows\System32\cscript.exe
    ICACLS C:\Windows\System32\en.US\cscript.exe.mui
    ICACLS C:\Windows\System32\vbscript.dll
    ICACLS C:\Windows\System32\en-US\vbscript.dll.mui
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 26, 2012 11:15 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>ICACLS C:\Windows\System32\sppc.dll
    C:\Windows\System32\sppc.dll NT SERVICE\TrustedInstaller:(F)
                                 BUILTIN\Administrators:(RX)
                                 NT AUTHORITY\SYSTEM:(RX)
                                 BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\slc.dll
    C:\Windows\System32\slc.dll NT SERVICE\TrustedInstaller:(F)
                                BUILTIN\Administrators:(RX)
                                NT AUTHORITY\SYSTEM:(RX)
                                BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\slcext.dll
    C:\Windows\System32\slcext.dll NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\sppcomapi.dll
    C:\Windows\System32\sppcomapi.dll NT SERVICE\TrustedInstaller:(F)
                                      BUILTIN\Administrators:(RX)
                                      NT AUTHORITY\SYSTEM:(RX)
                                      BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\SPPWMI.DLL
    C:\Windows\System32\SPPWMI.DLL NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\SPP.DLL
    C:\Windows\System32\SPP.DLL NT SERVICE\TrustedInstaller:(F)
                                BUILTIN\Administrators:(RX)
                                NT AUTHORITY\SYSTEM:(RX)
                                BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\SLWGA.DLL
    C:\Windows\System32\SLWGA.DLL NT SERVICE\TrustedInstaller:(F)
                                  BUILTIN\Administrators:(RX)
                                  NT AUTHORITY\SYSTEM:(RX)
                                  BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKU

    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-20
    HKEY_USERS\S-1-5-21-2613302245-1938289573-1163765208-1001
    HKEY_USERS\S-1-5-21-2613302245-1938289573-1163765208-1001_Classes
    HKEY_USERS\S-1-5-18

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKU\S-1-5-20

    HKEY_USERS\S-1-5-20\AppEvents
    HKEY_USERS\S-1-5-20\Console
    HKEY_USERS\S-1-5-20\Control Panel
    HKEY_USERS\S-1-5-20\Environment
    HKEY_USERS\S-1-5-20\EUDC
    HKEY_USERS\S-1-5-20\Keyboard Layout
    HKEY_USERS\S-1-5-20\Network
    HKEY_USERS\S-1-5-20\Printers
    HKEY_USERS\S-1-5-20\Software
    HKEY_USERS\S-1-5-20\System

    C:\windows\system32>
    C:\windows\system32>REG QUERY HKU\S-1-5-20\Environment

    HKEY_USERS\S-1-5-20\Environment
        TEMP    REG_EXPAND_SZ    %USERPROFILE%\AppData\Local\Temp
        TMP    REG_EXPAND_SZ    %USERPROFILE%\AppData\Local\Temp


    C:\windows\system32>
    C:\windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    \ProfileList\S-1-5-20"

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\cscript.exe
    C:\Windows\System32\cscript.exe NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\en.US\cscript.exe.mui
    C:\Windows\System32\en.US\cscript.exe.mui: The system cannot find the path speci
    fied.
    Successfully processed 0 files; Failed processing 1 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\vbscript.dll
    C:\Windows\System32\vbscript.dll NT SERVICE\TrustedInstaller:(F)
                                     BUILTIN\Administrators:(RX)
                                     NT AUTHORITY\SYSTEM:(RX)
                                     BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\en-US\vbscript.dll.mui
    C:\Windows\System32\en-US\vbscript.dll.mui NT SERVICE\TrustedInstaller:(F)
                                               BUILTIN\Administrators:(RX)
                                               NT AUTHORITY\SYSTEM:(RX)
                                               BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>

    Monday, February 27, 2012 4:18 AM
  • "DG1707" wrote in message news:ecf38976-f096-462f-ad12-1297818d0481...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>
    C:\windows\system32>ICACLS C:\Windows\System32\en.US\cscript.exe.mui
    C:\Windows\System32\en.US\cscript.exe.mui: The system cannot find the path speci
    fied.
    Successfully processed 0 files; Failed processing 1 files

     

    C:\windows\system32>

    Bother – a typo crept in :(
    That should have been
    ICACLS C:\Windows\System32\en-US\cscript.exe.mui
     
    I don’t think it’s likely to be a problem – but please run it anyhow
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 27, 2012 8:41 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>ICACLS C:\Windows\System32\en-US\cscript.exe.mui
    C:\Windows\System32\en-US\cscript.exe.mui NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>

    Thursday, March 1, 2012 1:26 PM
  • That's OK as well - and I'm afraid that I'm out of ideas :(

    I really can only suggest that you contact WGA support as I suggested above - or perhaps the manufacturer, as the machine appears likely to be still under warranty.

    (be warned that the manufacturer's likely response it to be a Factory Recovery - so back up data first!)

    Sorry I couldn't cudgel a better outcome from the data.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, March 1, 2012 2:14 PM
    Moderator