OEM Windows 7 Professional started reporting 'Not Genuine' after 1.5 years

All replies

• 

  

  0

  Sign in to vote

  Your error message is often associated with disk problems.....

   

  Please run a full CHKDSK and SFC scan....

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

   At the Command prompt, type

   CHKDSK C: /R

   and hit the Enter key.

   

   You will be told that the drive is locked,

   and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

   The chkdsk will take a few hours depending on the size  of the drive, so be patient!

   After the CHKDSK has run, Windows should boot normally  (possibly after a second auto-reboot) - then run the SFC.

   

   SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   At the Command prompt, type

   SFC /SCANNOW

   and hit the Enter key

   

   Wait for the scan to finish - make a note of any error messages - and then reboot.

   Post an MGADiag report with details of any error messages encountered.     

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Saturday, August 18, 2012 5:23 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  I've followed the instructions and pasted the results --the cbs.log file that was generated is too long to paste.  How should I send the information from the log?

   Also included is the diagnostic report.

  Thank you. Tina 

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>SFC /SCANNOW

  Beginning system scan.  This process will take some time.

  Beginning verification phase of system scan.
  Verification 100% complete.
  Windows Resource Protection found corrupt files but was unable to fix some of th
  em.
  Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
  C:\Windows\Logs\CBS\CBS.log

  ===============================================================

  The diagnostic report:

  ===============================================================

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfNJ53oikvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

   

  ---

  Kristina Weissenburg

  Saturday, August 18, 2012 8:12 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  You can upload the CBS.log to your SkyDrive, and post a link to it in your reply - http://skydrive.live.com - then we can take a look and see what we can do with it.

  The report doesn't appear to have changed - so we'll try rebuilding the Licensing Store...

   

  Recreate the Licensing Store

  1. Go to Start > All Programs > Accessories

  2. Right-Click on Command Prompt and select      Run as Administrator - accept the UAC prompt
  3.  Run the following commands in the Command      Prompt window, using the Enter key at the end of each

   

  net stop sppsvc

  (wait until the service has stopped before entering the following lines)

   

  CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

  REN tokens.dat tokens.bar
  net start sppsvc
  slui.exe

   

  4. After a couple of seconds Windows Activation dialog will appear.

  You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.

  If you are asked for your Key, use the one on the COA sticker on the machine's case

   

  Reboot and Post back with a new MGADiag report

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 4:48 AM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Noel,

  The CBS.log file is uploaded here: https://skydrive.live.com/redir?resid=11FA0B3417430472!247&authkey=!AHHmofLgNB7awSc

  When I ran slui.exe I received an error and was not able to go any further in attempting activation.  I've uploaded a jpg of the error message here: https://skydrive.live.com/redir?resid=11FA0B3417430472!248&authkey=!ALSj6h8KR8oXtV8

  I rebooted anyways and results of Diagnostic are as follows:

  Thanks. Tina

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 2:52 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  The CBS log shows only one problem that I can see - and claims that was resolved.

  This is at odds with your error message.

  I suggest running the CheckSUR tool to see if that has anything that can help.....

  http://support.microsoft.com/kb/947821

  It will say 'Installing' and may take some time (anywhere from 5 minutes to a couple of hours, depending on how much it has to do), and will exit silently.

  Once complete, reboot and post the the CheckSUR.log file (depending on size, either copy/paste it to your reply, or upload it to your SkyDrive)

  I'd really like to nail this error down - so far we haven't had too much success with it :(

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 3:31 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Here is the info from the CheckSUR.log.

  Thanks!

  
  =================================
  Checking System Update Readiness.
  Binary Version 6.1.7601.21645
  Package Version 15.0
  2012-08-19 10:53

  Checking Windows Servicing Packages

  Checking Package Manifests and Catalogs

  Checking Package Watchlist

  Checking Component Watchlist

  Checking Packages

  Checking Component Store
  (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16443_none_d92d0b9d80d13684 
  (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_92265d142938cfae 
  (fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
  (f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_87d1b2c1f4d80db3 
  (fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
  (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_d9300c7b80ce8289 
  (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_e384b6cdb52f4484 
  (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_92a128cb4262260d 
  (fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
  (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_e3fe823ace59818c 
  (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_d9abd87c99f6f23f 
  (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_884c7e790e016412 
  (fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
  (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_d9a9d7e899f8bf91 
  (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
  (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_e40082cece57b43a 
  (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml

  Summary:
  Seconds executed: 540
   Found 11 errors
   Fixed 11 errors
    CSI Payload File Missing Total count: 11
    Fixed: CSI Payload File Missing.  Total count: 11

   

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 4:21 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Interesting - have you been having problems with IE9 at all? All the errors relate to that.

  please post a new MGADiag report and we'll see if anything has changed there.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 4:57 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  I haven't noticed any problems with IE9.

  Here is the diagnostic:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 5:12 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Try running SFC again - see if it comes back any different this time.

  upload the new CBS.log and we'll see if it changes aything - post a new MGADiag report.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 5:33 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  I've uploaded the latest CBS log file here: https://skydrive.live.com/redir?resid=11FA0B3417430472!249&authkey=!AJrKiLFl9rkcfwA

  CBS file has a lot more content than the first one. (12MB vs 1 MB)

  I rebooted after running SFC and the diagnostic follows:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 6:05 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Heh - a lot of work that the CheckSUR tool does also gets logged in the CBS system.

  Interestingly, the same corrupt file as before was found by the last run of SFC - which means that either something is corrupting it on the fly, or that it was never replaced. Having said that, I deleted the file completely from my test rig, with no ill effect.

  Let's check the file anyhow - please run the following commands and post the results.

  DIR C:\Windows\Help\mui\0409

  ICACLS  C:\Windows\Help\mui\0409\diskmgt.chm

  I need to play a bit and see if I can generate a similar error to yours :) - back tomorrow (UK time!)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  
  

  • Edited by Noel D PatonModerator Sunday, August 19, 2012 7:22 PM

  Sunday, August 19, 2012 7:21 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Thanks Noel.

  Here are the results.

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>DIR C:\Windows\Help\mui\0409
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\Help\mui\0409

  08/19/2012  12:52 PM    <DIR>          .
  08/19/2012  12:52 PM    <DIR>          ..
  06/10/2009  04:41 PM            85,096 aclui.CHM
  06/10/2009  03:41 PM           342,365 adam.CHM
  06/10/2009  03:41 PM           472,260 adfs.CHM
  06/10/2009  03:41 PM            20,562 adsiedit.CHM
  06/10/2009  03:41 PM           333,654 ad_ds.CHM
  06/10/2009  04:42 PM            46,942 applocker_help.CHM
  06/10/2009  03:42 PM            53,470 appserver.CHM
  06/10/2009  04:42 PM           372,080 authfw.CHM
  06/10/2009  04:42 PM           112,877 authm.CHM
  06/10/2009  03:42 PM           116,965 backup.CHM
  06/10/2009  03:42 PM           211,253 bitssrv.CHM
  06/10/2009  04:43 PM           155,016 certmgr.CHM
  06/10/2009  03:43 PM           190,421 certsvr.CHM
  06/10/2009  03:43 PM            81,738 certtmpl.CHM
  06/10/2009  04:40 PM           125,501 cliconf.chm
  06/10/2009  03:43 PM           344,970 cluadmin.CHM
  06/10/2009  04:43 PM            74,218 cmak_ops.CHM
  06/10/2009  04:44 PM            95,982 comexp.CHM
  06/10/2009  04:44 PM           188,582 connmgr.CHM
  06/10/2009  04:44 PM           252,657 devmgr.CHM
  06/10/2009  03:44 PM           281,966 dfs2.CHM
  06/10/2009  03:44 PM           290,126 dhcp.CHM
  06/10/2009  04:45 PM            79,785 diskmgt.CHM
  06/10/2009  03:45 PM           471,595 dnsmgr.CHM
  06/10/2009  03:45 PM           256,682 domadmin.CHM
  06/10/2009  03:45 PM            94,745 dsac.CHM
  06/10/2009  03:45 PM           123,456 dsadmin.CHM
  06/10/2009  03:46 PM            73,914 dssite.CHM
  06/10/2009  04:46 PM            74,963 eventviewer.CHM
  06/10/2009  03:46 PM            85,113 faxcons.CHM
  06/10/2009  03:46 PM           159,103 features.CHM
  06/10/2009  04:46 PM            37,281 file_srv.CHM
  06/10/2009  03:46 PM            30,084 fsm.CHM
  06/10/2009  03:46 PM            99,804 fsrm.CHM
  06/10/2009  04:47 PM            44,457 gpedit.CHM
  06/10/2009  03:47 PM           459,057 gpmc.CHM
  06/10/2009  03:47 PM           243,079 hra.CHM
  06/10/2009  04:47 PM            53,873 ieakmmc.CHM
  06/10/2009  04:47 PM           139,846 iismmc.CHM
  06/10/2009  04:48 PM           528,512 inetsrvmmc.CHM
  06/10/2009  04:48 PM            37,962 ipsecmonitor.CHM
  06/10/2009  04:48 PM            56,944 ipsecpolicy.CHM
  06/10/2009  04:48 PM            29,914 iscsi_init.CHM
  06/10/2009  04:48 PM            62,468 lug.CHM
  06/10/2009  03:56 PM           310,307 mail.chm
  06/10/2009  03:48 PM            32,302 migration.CHM
  06/10/2009  04:49 PM            54,320 mmc.CHM
  06/10/2009  04:40 PM            93,297 msdasc.chm
  06/10/2009  04:49 PM           288,691 msmq.CHM
  06/10/2009  05:22 PM            90,909 msorcl32.chm
  06/10/2009  04:49 PM            79,093 nap.CHM
  06/10/2009  03:49 PM            29,124 nas.CHM
  06/10/2009  04:49 PM            53,914 netcfg.CHM
  06/10/2009  04:50 PM            42,931 nfs_.CHM
  06/10/2009  03:50 PM           242,498 nfs__lh.CHM
  06/10/2009  03:50 PM           261,561 nlbmgr.CHM
  06/10/2009  03:50 PM            74,219 ocsp.CHM
  06/10/2009  04:40 PM            94,640 odbcinst.chm
  06/10/2009  05:22 PM           126,122 odbcjet.chm
  06/10/2009  04:50 PM            55,714 perfmon.CHM
  06/10/2009  03:50 PM            37,508 pkiview.CHM
  06/10/2009  04:50 PM            67,841 pmc.CHM
  06/10/2009  04:51 PM            30,083 qos.CHM
  06/10/2009  03:51 PM           408,580 radius.CHM
  06/10/2009  04:51 PM            32,881 regedit32.CHM
  06/10/2009  04:51 PM            35,087 reliab.CHM
  06/10/2009  04:51 PM            32,913 resmon.CHM
  11/04/2010  09:07 PM           241,169 rms_help.CHM
  06/10/2009  03:52 PM           135,366 rmt.CHM
  06/10/2009  03:52 PM           458,440 rras.CHM
  06/14/2009  03:49 AM            33,611 rsat_client.CHM
  06/10/2009  04:52 PM            20,698 rsop.CHM
  06/10/2009  04:52 PM            19,155 saferconcepts.CHM
  06/10/2009  03:52 PM            52,538 sanmgr.CHM
  06/10/2009  04:52 PM            49,468 scanmanagement.CHM
  06/10/2009  03:53 PM            40,760 schmmgmt.CHM
  06/10/2009  04:53 PM            25,306 snmp.CHM
  06/10/2009  04:53 PM            19,391 spolsconcepts.CHM
  06/10/2009  04:40 PM            94,792 sqlsodbc.chm
  06/10/2009  04:40 PM            81,564 sqlsoldb.chm
  06/10/2009  03:53 PM            51,367 storagemgmt.CHM
  06/10/2009  03:53 PM            45,168 stor_expl.CHM
  06/10/2009  04:54 PM            70,460 sua.CHM
  06/10/2009  04:54 PM            28,672 sys_srv.CHM
  06/10/2009  04:54 PM            64,597 taskscheduler.CHM
  06/10/2009  04:54 PM            30,960 tcpip.CHM
  06/10/2009  04:54 PM            59,267 tpmadmin.CHM
  06/10/2009  03:56 PM           151,250 tscc.CHM
  06/10/2009  03:54 PM            78,540 ts_admin.CHM
  06/10/2009  03:55 PM           115,921 ts_gateway.CHM
  06/10/2009  03:55 PM           102,367 ts_license.CHM
  06/10/2009  03:55 PM            49,218 ts_manager.CHM
  06/10/2009  03:55 PM            28,835 ts_remotedesktops.CHM
  06/10/2009  03:55 PM            73,201 ts_remoteprograms.CHM
  06/10/2009  03:55 PM            89,148 ts_workspace.CHM
  06/10/2009  03:56 PM           340,740 uim.CHM
  09/07/2009  03:28 PM            77,078 virtualpc.chm
  06/10/2009  03:56 PM            80,094 virtual_help.CHM
  06/10/2009  03:56 PM            24,005 w7_tablet_sm.CHM
  06/10/2009  03:56 PM           264,123 wds.CHM
  06/10/2009  04:40 PM         1,828,821 WindowsPowerShellHelp.chm
  06/10/2009  04:56 PM            30,027 wmicontrol.CHM
  06/10/2009  03:56 PM           127,890 wsrm.CHM
  06/10/2009  03:56 PM           186,770 wsus.CHM
               104 File(s)     15,336,650 bytes
                 2 Dir(s)  55,822,528,512 bytes free

  C:\Windows\system32>ICACLS  C:\Windows\Help\mui\0409\diskmgt.chm
  C:\Windows\Help\mui\0409\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
                                       BUILTIN\Administrators:(RX)
                                       NT AUTHORITY\SYSTEM:(RX)
                                       BUILTIN\Users:(RX)

  Successfully processed 1 files; Failed processing 0 files

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 7:28 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  There's something odd there - you have more than twice as many files in the folder as I do!

  Is this machine in use on a domain network? - what other major software is installed? some of the files appear to be associated with the Remote Server Admin Tools add-on.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 8:05 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  This is my personal machine, however I use VPN to access my work Domain every day.  So my machine is authenticated daily onto my company's network.  (It was not connected to the company domain during all the times that I gathered the diagnostics and ran the .exe's you requested).  I have all the normal apps installed (Office 2007, SQL Server 2008 R2, Visual Studio 2008 and 2010, Roxio CD creator software, SnagIt, SQL Sentry Plan Explorer, most recent install was Magix Video back in July (easy rescue your videotapes), Firefox, Google Chrome. I installed MS Remote Desktop Connection Manager when I first bought the machine, so I can manage my RDP sessions when I am on the company network. (I am the SQL Server DBA). I could ask another employee who also works remotely in the same manner that I do to send me the contents of the same directory you asked for to do a comparison if that would help.  Thanks. Tina

  ---

  Kristina Weissenburg

  
  

  • Edited by KJW_SQLDBA Sunday, August 19, 2012 8:26 PM

  Sunday, August 19, 2012 8:26 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Phew :) I thought for a minute we had some weird stuff going on!

  It does mean I'll have to be a little more careful about potential fixes, though, as I'm not totally certain what effects may carry through to that side of things (I don't think anything should but...)

  On the plus side, does it mean I can assume a reasonably high competence in command prompt?

  Please export the HKEY_USERS\S-1-5-20 key from regedit to a .REG file, and upload it to your public SkyDrive - post a link in your reply.

  Please also run the following commands and post the results.

  DIR C:\Windows\ServiceProfiles\NT*.* /ah

  DIR C:\Windows\ServiceProfiles\t*.* /s

  DIR C:\Windows\System32\Catroot2

  DIR C:\Windows\SoftwareDistribution

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  
  

  • Edited by Noel D PatonModerator Sunday, August 19, 2012 9:17 PM correct typos

  Sunday, August 19, 2012 8:47 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  I'd say fairly high competence!  I don't know all the commands, but know enough to be dangerous! :-)

  The reg key is uploaded: https://skydrive.live.com/redir?resid=11FA0B3417430472!250&authkey=!AJwwMfQBivb14Tc

  I received error messages for the first 2 directory commands.

  I have 2 folders in the C:\Windows\ServiceProfiles folder -->  LocalService   and   NetworkService. Each has the 9 basic folders (Desktop, Documents, Downloads, etc).  Do you want the contents of LocalService   and   NetworkService?

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>DIR C:Windows\ServiceProfiles\NT*.* /ah
  The system cannot find the path specified.

  C:\Windows\system32>DIR C:Windows\ServiceProfiles\t*.* /s
  The system cannot find the path specified.

  C:\Windows\system32>DIR C:\Windows\System32\Catroot2
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\System32\Catroot2

  08/17/2012  06:32 PM    <DIR>          .
  08/17/2012  06:32 PM    <DIR>          ..
  08/19/2012  12:56 PM           112,106 dberr.txt
  08/19/2012  12:56 PM             8,192 edb.chk
  08/19/2012  12:58 PM            65,536 edb.log
  08/17/2012  06:09 PM            65,536 edb004D7.log
  07/13/2009  11:46 PM            65,536 edbres00001.jrs
  07/13/2009  11:46 PM            65,536 edbres00002.jrs
  08/17/2012  06:32 PM    <DIR>          {127D0A1D-4EF2-11D1-8608-00C04FC295EE}
  08/17/2012  06:32 PM    <DIR>          {F750E6C3-38EE-11D1-85E5-00C04FC295EE}
                 6 File(s)        382,442 bytes
                 4 Dir(s)  55,805,440,000 bytes free

  C:\Windows\system32>DIR C:\Windows\SoftwareDistribution
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\SoftwareDistribution

  01/15/2011  05:24 PM    <DIR>          .
  01/15/2011  05:24 PM    <DIR>          ..
  08/19/2012  03:41 PM    <DIR>          AuthCabs
  01/05/2011  12:43 AM    <DIR>          DataStore
  08/19/2012  11:18 AM    <DIR>          Download
  08/17/2012  06:06 PM    <DIR>          PostRebootEventCache
  08/19/2012  01:08 PM           900,506 ReportingEvents.log
  08/19/2012  10:51 AM    <DIR>          ScanFile
  06/24/2012  09:23 AM    <DIR>          SelfUpdate
  01/15/2011  02:37 PM    <DIR>          WuRedir
                 1 File(s)        900,506 bytes
                 9 Dir(s)  55,805,440,000 bytes free

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 8:58 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  (that's what comes of trying to type with a technocolour migraine going on!)
  

  Sorry - I got two of the commands mistyped...please run these two again....

  DIR C:\Windows\ServiceProfiles\NT*.* /ah

  DIR C:\Windows\ServiceProfiles\t*.* /s

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 9:16 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Here is the output.  This can all wait till tomorrow!  Feel better!

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NT*.* /ah
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\ServiceProfiles

  File Not Found

  C:\Windows\system32>DIR C:\Windows\ServiceProfiles\t*.* /s
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local

  07/13/2012  02:49 PM    <DIR>          Temp
                 0 File(s)              0 bytes

   Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp

  01/24/2011  01:16 PM    <DIR>          TfsStore
                 0 File(s)              0 bytes

   Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStor
  e

  10/03/2011  10:06 AM    <DIR>          Tfs_DAV
                 0 File(s)              0 bytes

   Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\
  Windows

  07/13/2009  11:45 PM    <DIR>          Templates
                 0 File(s)              0 bytes

   Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetwor
  king\3168ba2136678329180997d5ea54982a891a3c48.HomeGroupClassifier\d5a75582ef50ec
  f4062ba6872c95d0af\grouping

  08/19/2012  03:30 PM            65,536 tmp.edb
                 1 File(s)         65,536 bytes

   Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Local

  08/19/2012  01:08 PM    <DIR>          Temp
                 0 File(s)              0 bytes

   Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
  t\SoftwareProtectionPlatform

  07/14/2012  08:57 PM         7,382,971 tokens.bar
  08/19/2012  09:41 AM                 0 tokens.dat
                 2 File(s)      7,382,971 bytes

   Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
  t\Windows

  07/13/2009  11:45 PM    <DIR>          Templates
                 0 File(s)              0 bytes

       Total Files Listed:
                 3 File(s)      7,448,507 bytes
                 6 Dir(s)  55,804,342,272 bytes free

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 9:23 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  If I navigate one directory below ServiceProfiles to LocalService or NetworkService I do get files beginning with NT (not sure if this was what you were looking for). Pasting for LocalService and NetworkService just in case.

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\localservice\NT*.* /ah
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\ServiceProfiles\localservice

  08/19/2012  03:30 PM           262,144 NTUSER.DAT
  07/14/2009  02:12 AM             1,024 NTUSER.DAT.LOG
  08/19/2012  03:30 PM           226,304 NTUSER.DAT.LOG1
  07/13/2009  11:45 PM                 0 NTUSER.DAT.LOG2
  07/14/2009  12:01 AM            65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TM.blf
  07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TMContainer00000000000000000001.regtrans-ms
  07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TMContainer00000000000000000002.regtrans-ms
  08/17/2012  07:55 PM            65,536 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
  2b2306}.TM.blf
  08/17/2012  07:55 PM           524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
  2b2306}.TMContainer00000000000000000001.regtrans-ms
  08/17/2012  07:55 PM           524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
  2b2306}.TMContainer00000000000000000002.regtrans-ms
  08/17/2012  06:32 PM            65,536 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
  2b2306}.TM.blf
  08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
  2b2306}.TMContainer00000000000000000001.regtrans-ms
  08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
  2b2306}.TMContainer00000000000000000002.regtrans-ms
  01/18/2012  12:20 PM            65,536 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
  34d0a5}.TM.blf
  01/18/2012  12:20 PM           524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
  34d0a5}.TMContainer00000000000000000001.regtrans-ms
  01/18/2012  12:20 PM           524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
  34d0a5}.TMContainer00000000000000000002.regtrans-ms
                16 File(s)      4,945,920 bytes
                 0 Dir(s)  55,803,899,904 bytes free

  C:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\networkservice\NT*.* /ah
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\ServiceProfiles\networkservice

  08/19/2012  03:30 PM           524,288 NTUSER.DAT
  07/14/2009  02:12 AM             1,024 NTUSER.DAT.LOG
  08/19/2012  03:30 PM           226,304 NTUSER.DAT.LOG1
  07/13/2009  11:45 PM                 0 NTUSER.DAT.LOG2
  07/14/2009  12:01 AM            65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TM.blf
  07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TMContainer00000000000000000001.regtrans-ms
  07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
  cde3ec}.TMContainer00000000000000000002.regtrans-ms
  08/17/2012  07:55 PM            65,536 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
  2b2306}.TM.blf
  08/17/2012  07:55 PM           524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
  2b2306}.TMContainer00000000000000000001.regtrans-ms
  08/17/2012  07:55 PM           524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
  2b2306}.TMContainer00000000000000000002.regtrans-ms
  08/17/2012  06:32 PM            65,536 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
  2b2306}.TM.blf
  08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
  2b2306}.TMContainer00000000000000000001.regtrans-ms
  08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
  2b2306}.TMContainer00000000000000000002.regtrans-ms
  01/18/2012  12:20 PM            65,536 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
  6e6963}.TM.blf
  01/18/2012  12:20 PM           524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
  6e6963}.TMContainer00000000000000000001.regtrans-ms
  01/18/2012  12:20 PM           524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
  6e6963}.TMContainer00000000000000000002.regtrans-ms
                16 File(s)      5,208,064 bytes
                 0 Dir(s)  55,803,457,536 bytes free

  C:\Users\tweissenburg>

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 9:36 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  I've had a quick look through your registry export, and the only thing that stands out for me is that there appears to be a CA Certificate installed where there didn't oughta be :) - but I'm not certain enough of that to do anything about it without further investigation, and it could be normal for a domain-connected PC anyhow.

  Please open certmgr.msc

  Do you have any certificates in the 'Enterprise Trust' folder? (who from?)

  Your tokens.dat file isn't being regenerated the way it should be - it's currently a 0-byte file, whereas it should be around 7MB.

  The Network Service hive seems to be being updated properly.

  I wonder - something seems to have happened to the system on or around the 14th July - please check the Update History, and see if any updates were successfuly installed that day - or whether all updates have failed since then (or when was the last successful updates)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 19, 2012 10:15 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  There are no certificates in the Enterprise Trust folder.

  I've provided a Word doc that shows all the updates I've gotten since 7/14. I was able to get updates on 8/14 and 8/17 (and this was after I started receiving the WGA messages).  https://skydrive.live.com/redir?resid=11FA0B3417430472!251&authkey=!AEFwBlTbzAmhtp0

  Tina

  ---

  Kristina Weissenburg

  Sunday, August 19, 2012 10:39 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  That pretty much eliminates some of the 'usual suspects', then.

  Please run the following commands...

  DIR C:\Windows\System32\7b*.*

  ICACLS C:\Windows\System32\7b*.*

  Please also export the Windows System and Application Event logs (from Event Viewer) then compress and  upload them to yor SkyDrive and post the link.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 8:34 AM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Application log: https://skydrive.live.com/redir?resid=11FA0B3417430472!252&authkey=!AIV1bITtgNvwYWE

  System log: https://skydrive.live.com/redir?resid=11FA0B3417430472!253&authkey=!AAvMG9Nytv3G3Rk

  CMD results:

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>DIR C:\Windows\System32\7b*.*
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\System32

  File Not Found

  C:\Windows\system32>ICACLS C:\Windows\System32\7b*.*
  C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
                                                                                                     BUILTIN\Administrators:(I)(F)
                                                                                                     BUILTIN\Users:(I)(RX)

  C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
                                                                                                     BUILTIN\Administrators:(I)(F)
                                                                                                     BUILTIN\Users:(I)(RX)

  Successfully processed 2 files; Failed processing 0 files

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 1:19 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Now THAT is interesting!

  Please run the following commands

  ATTRIB C:\Windows\System32\7B*.*

  ATTRIB -R -H -S C:\Windows\System32\7B*.*

  ATTRIB C:\Windows\System32\7B*.*

  post the result, reboot, and post another MGADiag report.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 1:26 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Here you go.

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
  A   H        C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  A   H        C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

  C:\Windows\system32>ATTRIB -R -H -S C:\Windows\System32\7B*.*

  C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
  A            C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  A            C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

  C:\Windows\system32>

  ---------------

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W96I0nmkvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 1:45 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

   What happens if you attempt validation at www.microsoft.com/genuine/validate now?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 1:55 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  It's still sitting there just spinning after 6 minutes.  Should I let it run? 

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 2:05 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Nah - it's obviously stalled.

  I need to pop out for a bit - the walk may clear my head as well :)

  back soon.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 2:09 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  OK - rechecking, it looks as though my 'normal' box for some reason had the attributes mis-set on the 7B*.* files - they should in fact be hidden.

  Please sun the following commands and post the results.

  ATTRIB +H  C:\Windows\System32\7B*.*

  DIR C:\Windows\System32 /AR /S /b

  DIR C:\Windows\SysWOW64 /AR /S /b

  DIR C:\Windows\ServiceProfiles /AR /S /b

  DIR C:\Windows /AL /S /b

  I'm slowly wading my way through the Event logs - nothing yet, though

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 4:33 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  According to  the EvetnViewer logs, your problems began whe you got a little registry corruption between 13th and 14th Aug.

  I don't suppose your system has any System Restore points for the period just prior to that? If so, try going back to that (you'll have to reinstall all updates and programs installed since)

  It may be worth trying to reconstruct the licensing database using esentutl - but I'm by no means certain of all the ramifications.

  The actual problem is defined by

  C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005

  There is nothing I can find in Google about this error but here goes....

  run the following command and post the results...

  REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0" /S

  
  

  ALso, please find the entry in Regedit, and let me know the permissions on it

  Run the following commands and post the results

  REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a"
  ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
  ICACLS %windir%\system32\sppwinob.dll
  ATTRIB %windir%\system32\sppwinob.dll
  ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
  DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 5:06 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  here are the results from CMD -- will work on the requests in your next post for Reg settings.  And no--unfortunately my earliest restore point is 8/8.

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>ATTRIB +H  C:\Windows\System32\7B*.*

  C:\Windows\system32>DIR C:\Windows\System32 /AR /S /b
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\DelDrv64.exe
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\Setup.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstAR.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCN.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCZ.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDE.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDK.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstES.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFI.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFR.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstGR.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstHU.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstID.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstIT.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstJP.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstKR.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNL.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNO.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPL.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPT.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstRU.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstSE.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTH.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTR.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTW.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstUS.dll
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstAR.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCN.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCZ.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDE.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDK.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstES.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFI.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFR.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstGR.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstHU.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstID.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstIT.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstJP.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstKR.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNL.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNO.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPL.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPT.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstRU.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstSE.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTH.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTR.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTW.ini
  C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstUS.ini
  C:\Windows\System32\config\systemprofile\Contacts
  C:\Windows\System32\config\systemprofile\Documents
  C:\Windows\System32\inetsrv\config\schema\ASPNET_schema.xml
  C:\Windows\System32\inetsrv\config\schema\Ftp_schema.xml
  C:\Windows\System32\inetsrv\config\schema\FX_schema.xml
  C:\Windows\System32\inetsrv\config\schema\IIS_schema.xml
  C:\Windows\System32\inetsrv\config\schema\rscaext.xml
  C:\Windows\System32\inetsrv\config\schema\WebDAV_schema.xml
  C:\Windows\System32\Macromed\Flash\Flash64_11_3_300_271.ocx
  C:\Windows\System32\restore\MachineGuid.txt

  C:\Windows\system32>DIR C:\Windows\SysWOW64 /AR /S /b
  C:\Windows\SysWOW64\btwapi.dll
  C:\Windows\SysWOW64\d2hPopup.ocx
  C:\Windows\SysWOW64\config\systemprofile\Contacts
  C:\Windows\SysWOW64\config\systemprofile\Links
  C:\Windows\SysWOW64\config\systemprofile\Saved Games
  C:\Windows\SysWOW64\config\systemprofile\Searches
  C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
  C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
  C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_3_300_271.ocx

  C:\Windows\system32>DIR C:\Windows\ServiceProfiles /AR /S /b
  C:\Windows\ServiceProfiles\LocalService\Desktop
  C:\Windows\ServiceProfiles\LocalService\Documents
  C:\Windows\ServiceProfiles\LocalService\Downloads
  C:\Windows\ServiceProfiles\LocalService\Favorites
  C:\Windows\ServiceProfiles\LocalService\Links
  C:\Windows\ServiceProfiles\LocalService\Music
  C:\Windows\ServiceProfiles\LocalService\Pictures
  C:\Windows\ServiceProfiles\LocalService\Videos
  C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent
  C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo
  C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu
  C:\Windows\ServiceProfiles\NetworkService\Desktop
  C:\Windows\ServiceProfiles\NetworkService\Documents
  C:\Windows\ServiceProfiles\NetworkService\Downloads
  C:\Windows\ServiceProfiles\NetworkService\Favorites
  C:\Windows\ServiceProfiles\NetworkService\Links
  C:\Windows\ServiceProfiles\NetworkService\Music
  C:\Windows\ServiceProfiles\NetworkService\Pictures
  C:\Windows\ServiceProfiles\NetworkService\Videos
  C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent
  C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo
  C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu

  C:\Windows\system32>DIR C:\Windows /AL /S /b
  C:\Windows\SysWOW64\config\systemprofile\Application Data
  C:\Windows\SysWOW64\config\systemprofile\Cookies
  C:\Windows\SysWOW64\config\systemprofile\Local Settings
  C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Application Data
  C:\Windows\SysWOW64\config\systemprofile\AppData\Local\History
  C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Temporary Internet Files

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 5:18 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Permissions on the reg key:

  SYSTEM: Full Control ALLOW; Read ALLOW

  Administrators: Full Control ALLOW; Read ALLOW

  USERs:  Read ALLOW

  Trusted Installer:  Full Control ALLOW; Read ALLOW

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctional
  ity/agent/7.0" /S

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0
      ModuleId    REG_SZ    179b8a65-b0f6-41d9-acea-12006ef9b32a
      IsService    REG_DWORD    0x1

  C:\Windows\system32>

  
  C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12
  006ef9b32a"

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a
      ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
      PluginFile    REG_SZ    %windir%\system32\sppwinob.dll

  
  C:\Windows\system32>ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
  C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms NT SERVICE\TrustedInstaller:(F)
                                                                                             BUILTIN\Administrators:(RX)
                                                                                             NT AUTHORITY\SYSTEM:(RX)
                                                                                             BUILTIN\Users:(RX)

  Successfully processed 1 files; Failed processing 0 files

  C:\Windows\system32>ICACLS %windir%\system32\sppwinob.dll
  C:\Windows\system32\sppwinob.dll NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

  Successfully processed 1 files; Failed processing 0 files

  C:\Windows\system32>ATTRIB %windir%\system32\sppwinob.dll
  A            C:\Windows\system32\sppwinob.dll

  C:\Windows\system32>
  C:\Windows\system32>ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
  A            C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms

  C:\Windows\system32>DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
   Volume in drive C is OS
   Volume Serial Number is 9ECD-D571

   Directory of C:\Windows\system32\spp\plugin-manifests-signed

  11/20/2010  08:43 AM             7,298 sppwinob-spp-plugin-manifest-signed.xrm-ms
                 1 File(s)          7,298 bytes
                 0 Dir(s)  55,685,804,032 bytes free

  C:\Windows\system32>

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 5:24 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Now why on earth do Canon find it necessary to hide their driver uninstallers and/or make them Read-only??
  

  I can see no problems anywhere in that lot :(

  I cannot find any decent references anywhere to the precise error we're seeing, or even close approximations of it.

  The consensus is that the bare 0xc000034 error in the MGADiag report can only be cured by a repair install (or even a clean install) - which annoys me when we've got this close to identifying the problem!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  
  

  • Edited by Noel D PatonModerator Monday, August 20, 2012 6:27 PM

  Monday, August 20, 2012 6:26 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  So does that mean we're giving up?  There's really no way I can reinstall this machine. Most of my programs come from my company and I work remotely in TX and they are in CA.  So until I went out there to reinstall everything I would be unable to work -- and as a DBA I really don't think that's an option.  :-)

  What are the ramifications of leaving the computer in the state it's currently in (with the WGA messages)?

  Thanks. Tina

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 7:09 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Give up? Me? - just offering you a way out! :)

  You're nowhere near my record thread yet - 100+ posts.

  A repair install in theory wouldn't lose you anything, but there are obviously risks to the procedure. A clean install would entail reinstalling everything from scratch.

  I'll do some more searching (and try and review the registry you uploaded) - but I have to be out most of the day tomorrow so don't expect too much until Wednesday :)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 7:46 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  :-)  Thanks!

  I really appreciate your diligence on this.  Obviously reinstalling is a last resort. 

  We're only up to 35 posts -- so we've got a ways to go!  J/K!   I'd rather take the time to try to figure out the least intrusive way to get this fixed if at all possible.  Thanks again.  Tina

  ---

  Kristina Weissenburg

  Monday, August 20, 2012 8:05 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Ignore that last - I got my threads confused! (dealing with two very similar problems in the same forum)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, August 20, 2012 8:36 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th .  I checked if any programs were installed those days -- there was one.  On 7/13, I installed Silverlight version 5.1.10411.0.

  Thanks. Tina

  ---

  Kristina Weissenburg

  Tuesday, August 21, 2012 10:14 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th .  I checked if any programs were installed those days -- there was one.  On 7/13, I installed Silverlight version 5.1.10411.0.

  Thanks. Tina

  ---

  Kristina Weissenburg

  I certainly wouldn't expect Silverlight to cause any problem! Having said that I am aware of one or two cases where the claim was made that installing it caused odd problems (I attributed it to PEBCAK, rather than anything else).

  You could try uninstalling it to see what happens - it should come out cleanly.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, August 21, 2012 10:58 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  yeah. I didn't think it would cause any issues either but thought I'd mention it.

  Uninstalling changed nothing as expected.

  ---

  Kristina Weissenburg

  Wednesday, August 22, 2012 12:15 AM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Sorry I've not got back sooner - it's been a little hectic in 'real life' this week, and this is only a quick note to let you know that I haven't forgotten you!

  I'll be back tomorrow with some more suggestions.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, August 23, 2012 8:17 AM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Trying to review the thread, and confusing myself even further here. (I hate databases! - the registry is nothing more than a database that holds the various bits of Windows and installed apps together)

  I'm having problems making sense out of it, so I'll have to check myself before committing you to anything. That's going to be tomorrow morning's first job - promise!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Friday, August 24, 2012 6:46 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Hate databases!!  SHouldn't say that to a SQL DBA!!  :-) 

  Thanks for your efforts on this!

  ---

  Kristina Weissenburg

  Friday, August 24, 2012 7:28 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  I had a feeling that'd get a rise out of you :)

  A quick Summary of what we've done....

  CHKDSK and SFC run - no problem in CHKDSK, a 'fixed' problem in SFC

  Licensing Store rebuilt - but SLUI fails with 0xD0000034 error

  CheckSUR run - with a clean bill of health

  SFC run again - and the same file had to be fixed again (C:\Windows\Help\mui\0409\diskmgt.chm)

  The following files and folders appear to be OK

  ServiceProfiles

  Catroot2

  SoftwareDistribution

  7b*.* licensing files

  sppwinob.dll

  Event Logs show a licensing problem with

  C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005

  So far, I've been unable to find ANY real references to help me here! :(

  ..and my 2G connection has been so flaky over the past few days that I have to try everything 5 times:(

  (Who said the Cloud is the answer? They were asking the wrong question!)

  I'll be on a landline this afternoon so more later - from the pub :)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Saturday, August 25, 2012 9:00 AM

  Reply

  |

  Quote

  Moderator
• 

  

  1

  Sign in to vote

  Well, I think I've been to every relevant link in Google!

  ...with no success :(

  The only practical solution appears to be a repair install - tbut even there, from the number of posts that have been made suggesting that, there has been no feedack at all as to whether it worked or not.

  If you're game for it, you'll need  a proper Win7 disk with SP1 embedded - if you don't have one handy, you can Download the SP1 Refresh for your chosen language and edition from the links on these pages...

  http://www.heidoc.net/joomla/technology-science/microsoft

  The links are for downloads from the Digital River server run for MS.

  Once downloaded, burn it (don't just copy the file!) to a DVD and check that it boots the system OK (but ONLY that, for the moment) then read and digest the instructions for a repair install here.... http://www.sevenforums.com/tutorials/3413-repair-install.html and make sure you understand them before setting out on the repair itself.

  If you're not prepared for the risks entailed in that, then all I can suggest is that you see if MS WGA support can assist -

  WGA Support can be found here

   

  North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

   

  Outside North America:

  http://support.microsoft.com/contactus/?ws=support#tab0

   

  Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!    

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Proposed as answer by Noel D PatonModerator Sunday, September 9, 2012 2:54 PM
  • Marked as answer by KJW_SQLDBA Monday, September 10, 2012 3:44 PM

  Sunday, August 26, 2012 12:33 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Thanks Noel,  I'll read through everything and decide if I want to try the repair install or not.  Thanks for the link to support as well.

  Tina

  ---

  Kristina Weissenburg

  Sunday, August 26, 2012 5:40 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  One more question, when reviewing the results of the MGDIAG, should the Windows Product Key (first 2 groupings of characters have been obfuscating) match the Product Key that is on the COA sticker?  Seems like yes. However, the last 3 groupings in MGDIAG do not match the last 3 groupings of characters shown on my COA. Thanks.

  ---

  Kristina Weissenburg

  Sunday, August 26, 2012 6:44 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Computers that come pre-installed with Windows from large manufacturers usually come with two Product Keys.

   

  OEM SLP: This is the key that came in Windows (from the factory). It works by connecting to a BIOS flag (the SLIC table) found only on  computers from that Manufacturer. Once it sees the correct BIOS flag, it self activates.

   

  COA SLP: This is the key seen on the sticker located on the side, bottom or in the battery compartment of your machine. The purpose of this key is to be used in the case the OEM SLP self-activation stops working for whatever reason.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, August 26, 2012 7:01 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for your help on this problem, Noel.  I ended up speaking with MS Support who gave conflicting diagnoses and in the end could not help me.  First one of the engineers said the problem was that I had a domain policy setting that was prohibiting me from validating Windows.  So I removed my computer from the domain, rebooted, retried validating with no success.  So the next engineer said that I had some services that needed to be repaired and apparently the only way to repair them was to do an upgrade of Windows.  So they attempted to do so and after a few hours it almost got to the end, but it failed.  So thankfully the install rolled back.  But now I'm the same place that I was.  Their only suggestion was to perform a full re-install of Windows.  So at this point I've decided to live with the situation until I have time and all the work software to get my computer fully functional again. Tina

  ---

  Kristina Weissenburg

  Monday, September 10, 2012 4:53 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  At least I didn't miss anything obvious, then :)

  Just for interest - could you please post a new MGADiag report so we can see if MS actually managed to make any significant progress?

  Thanks VERY much for coming back to let us know  - even bad news like this is good for us, as it helps us prove to MS that we are at least as good as the in-house support, and occasionally it even results in us getting a little crucial snippet of information that solves the problem next time around (or the time after that...)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Monday, September 10, 2012 5:15 PM

  Reply

  |

  Quote

  Moderator
• 

  

  0

  Sign in to vote

  Interestingly no one at MS ran MGDiag.  They all seemed totally stumped on what error code 0xD0000034 actuall means.  No one had ever seen it.

  Here are the latest results.

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120503-2030
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 7:18:2012 20:57
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W9J53oikvJYk4mxcXQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    E2    
    FACP   DELL    E2    
    HPET   DELL    E2    
    BOOT   DELL    E2     
    MCFG   A M I   GMCH945.
    TCPA     
    SLIC   DELL    E2    
    SSDT   PmRef  CpuPm

  ---

  Kristina Weissenburg

  Monday, September 10, 2012 11:26 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Still the same as far as I can tell :(

  I suspect that it's a permissions thing somewhere - but I have no idea where!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, September 11, 2012 7:21 AM

  Reply

  |

  Quote

  Moderator