none
OEM Windows 7 Professional started reporting 'Not Genuine' after 1.5 years RRS feed

  • Question

  • I purchased a DELL laptop a year and half ago with Windows 7 Professional. I have the COA PRoduct key from under the laptop.  This week, I started receiving messages stating that my copy is not genuine.  When I go to MyComputer-->Properties, there is no link to Activate and all I see is Status Not Available; ProductID Not Available.

    I called DELL and they suggested updating the BIOS to their most recent version for Latititude E6510 which I did, with no success in eliminating the messages.  They suggested reinstalling Windows.  :-(   I went to the MS webpage to validate and it just sits there for hours spinning.  How can I activate the product key that I have from the COA?  The diagnostic report follows.

    Thanks for your guidance.

    Tina

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm

    Saturday, August 18, 2012 4:56 PM

Answers

All replies

  • Your error message is often associated with disk problems.....

     

    Please run a full CHKDSK and SFC scan....

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

     At the Command prompt, type

     CHKDSK C: /R

     and hit the Enter key.

     

     You will be told that the drive is locked,

     and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     The chkdsk will take a few hours depending on the size  of the drive, so be patient!

     After the CHKDSK has run, Windows should boot normally  (possibly after a second auto-reboot) - then run the SFC.

     

     SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     At the Command prompt, type

     SFC /SCANNOW

     and hit the Enter key

     

     Wait for the scan to finish - make a note of any error messages - and then reboot.

     Post an MGADiag report with details of any error messages encountered.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, August 18, 2012 5:23 PM
    Moderator
  • I've followed the instructions and pasted the results --the cbs.log file that was generated is too long to paste.  How should I send the information from the log?

     Also included is the diagnostic report.

    Thank you. Tina 

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 100% complete.
    Windows Resource Protection found corrupt files but was unable to fix some of th
    em.
    Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
    C:\Windows\Logs\CBS\CBS.log

    ===============================================================

    The diagnostic report:

    ===============================================================

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfNJ53oikvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm

     


    Kristina Weissenburg

    Saturday, August 18, 2012 8:12 PM
  • You can upload the CBS.log to your SkyDrive, and post a link to it in your reply - http://skydrive.live.com - then we can take a look and see what we can do with it.

    The report doesn't appear to have changed - so we'll try rebuilding the Licensing Store...

     

    Recreate the Licensing Store

    1. Go to Start > All Programs > Accessories
    1. Right-Click on Command Prompt and select      Run as Administrator - accept the UAC prompt
    2.  Run the following commands in the Command      Prompt window, using the Enter key at the end of each

     

    net stop sppsvc

    (wait until the service has stopped before entering the following lines)

     

    CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

    REN tokens.dat tokens.bar
    net start sppsvc
    slui.exe

     

    1. After a couple of seconds Windows Activation dialog will appear.

    You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.

    If you are asked for your Key, use the one on the COA sticker on the machine's case

     

    Reboot and Post back with a new MGADiag report

     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 4:48 AM
    Moderator
  • Noel,

    The CBS.log file is uploaded here: https://skydrive.live.com/redir?resid=11FA0B3417430472!247&authkey=!AHHmofLgNB7awSc

    When I ran slui.exe I received an error and was not able to go any further in attempting activation.  I've uploaded a jpg of the error message here: https://skydrive.live.com/redir?resid=11FA0B3417430472!248&authkey=!ALSj6h8KR8oXtV8

    I rebooted anyways and results of Diagnostic are as follows:

    Thanks. Tina

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
    Error: 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm


    Kristina Weissenburg

    Sunday, August 19, 2012 2:52 PM
  • The CBS log shows only one problem that I can see - and claims that was resolved.

    This is at odds with your error message.

    I suggest running the CheckSUR tool to see if that has anything that can help.....

    http://support.microsoft.com/kb/947821

    It will say 'Installing' and may take some time (anywhere from 5 minutes to a couple of hours, depending on how much it has to do), and will exit silently.

    Once complete, reboot and post the the CheckSUR.log file (depending on size, either copy/paste it to your reply, or upload it to your SkyDrive)

    I'd really like to nail this error down - so far we haven't had too much success with it :(


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 3:31 PM
    Moderator
  • Here is the info from the CheckSUR.log.

    Thanks!


    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.21645
    Package Version 15.0
    2012-08-19 10:53

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages

    Checking Component Store
    (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16443_none_d92d0b9d80d13684 
    (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_92265d142938cfae 
    (fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
    (f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_87d1b2c1f4d80db3 
    (fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
    (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_d9300c7b80ce8289 
    (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_e384b6cdb52f4484 
    (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_92a128cb4262260d 
    (fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
    (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_e3fe823ace59818c 
    (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_d9abd87c99f6f23f 
    (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_884c7e790e016412 
    (fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
    (f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_d9a9d7e899f8bf91 
    (fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
    (f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_e40082cece57b43a 
    (fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml

    Summary:
    Seconds executed: 540
     Found 11 errors
     Fixed 11 errors
      CSI Payload File Missing Total count: 11
      Fixed: CSI Payload File Missing.  Total count: 11

     


    Kristina Weissenburg

    Sunday, August 19, 2012 4:21 PM
  • Interesting - have you been having problems with IE9 at all? All the errors relate to that.

    please post a new MGADiag report and we'll see if anything has changed there.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 4:57 PM
    Moderator
  • I haven't noticed any problems with IE9.

    Here is the diagnostic:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
    Error: 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm


    Kristina Weissenburg

    Sunday, August 19, 2012 5:12 PM
  • Try running SFC again - see if it comes back any different this time.

    upload the new CBS.log and we'll see if it changes aything - post a new MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 5:33 PM
    Moderator
  • I've uploaded the latest CBS log file here: https://skydrive.live.com/redir?resid=11FA0B3417430472!249&authkey=!AJrKiLFl9rkcfwA

    CBS file has a lot more content than the first one. (12MB vs 1 MB)

    I rebooted after running SFC and the diagnostic follows:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
    Error: 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm


    Kristina Weissenburg

    Sunday, August 19, 2012 6:05 PM
  • Heh - a lot of work that the CheckSUR tool does also gets logged in the CBS system.

    Interestingly, the same corrupt file as before was found by the last run of SFC - which means that either something is corrupting it on the fly, or that it was never replaced. Having said that, I deleted the file completely from my test rig, with no ill effect.

    Let's check the file anyhow - please run the following commands and post the results.

    DIR C:\Windows\Help\mui\0409

    ICACLS  C:\Windows\Help\mui\0409\diskmgt.chm

    I need to play a bit and see if I can generate a similar error to yours :) - back tomorrow (UK time!)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Sunday, August 19, 2012 7:21 PM
    Moderator
  • Thanks Noel.

    Here are the results.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\Help\mui\0409
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\Help\mui\0409

    08/19/2012  12:52 PM    <DIR>          .
    08/19/2012  12:52 PM    <DIR>          ..
    06/10/2009  04:41 PM            85,096 aclui.CHM
    06/10/2009  03:41 PM           342,365 adam.CHM
    06/10/2009  03:41 PM           472,260 adfs.CHM
    06/10/2009  03:41 PM            20,562 adsiedit.CHM
    06/10/2009  03:41 PM           333,654 ad_ds.CHM
    06/10/2009  04:42 PM            46,942 applocker_help.CHM
    06/10/2009  03:42 PM            53,470 appserver.CHM
    06/10/2009  04:42 PM           372,080 authfw.CHM
    06/10/2009  04:42 PM           112,877 authm.CHM
    06/10/2009  03:42 PM           116,965 backup.CHM
    06/10/2009  03:42 PM           211,253 bitssrv.CHM
    06/10/2009  04:43 PM           155,016 certmgr.CHM
    06/10/2009  03:43 PM           190,421 certsvr.CHM
    06/10/2009  03:43 PM            81,738 certtmpl.CHM
    06/10/2009  04:40 PM           125,501 cliconf.chm
    06/10/2009  03:43 PM           344,970 cluadmin.CHM
    06/10/2009  04:43 PM            74,218 cmak_ops.CHM
    06/10/2009  04:44 PM            95,982 comexp.CHM
    06/10/2009  04:44 PM           188,582 connmgr.CHM
    06/10/2009  04:44 PM           252,657 devmgr.CHM
    06/10/2009  03:44 PM           281,966 dfs2.CHM
    06/10/2009  03:44 PM           290,126 dhcp.CHM
    06/10/2009  04:45 PM            79,785 diskmgt.CHM
    06/10/2009  03:45 PM           471,595 dnsmgr.CHM
    06/10/2009  03:45 PM           256,682 domadmin.CHM
    06/10/2009  03:45 PM            94,745 dsac.CHM
    06/10/2009  03:45 PM           123,456 dsadmin.CHM
    06/10/2009  03:46 PM            73,914 dssite.CHM
    06/10/2009  04:46 PM            74,963 eventviewer.CHM
    06/10/2009  03:46 PM            85,113 faxcons.CHM
    06/10/2009  03:46 PM           159,103 features.CHM
    06/10/2009  04:46 PM            37,281 file_srv.CHM
    06/10/2009  03:46 PM            30,084 fsm.CHM
    06/10/2009  03:46 PM            99,804 fsrm.CHM
    06/10/2009  04:47 PM            44,457 gpedit.CHM
    06/10/2009  03:47 PM           459,057 gpmc.CHM
    06/10/2009  03:47 PM           243,079 hra.CHM
    06/10/2009  04:47 PM            53,873 ieakmmc.CHM
    06/10/2009  04:47 PM           139,846 iismmc.CHM
    06/10/2009  04:48 PM           528,512 inetsrvmmc.CHM
    06/10/2009  04:48 PM            37,962 ipsecmonitor.CHM
    06/10/2009  04:48 PM            56,944 ipsecpolicy.CHM
    06/10/2009  04:48 PM            29,914 iscsi_init.CHM
    06/10/2009  04:48 PM            62,468 lug.CHM
    06/10/2009  03:56 PM           310,307 mail.chm
    06/10/2009  03:48 PM            32,302 migration.CHM
    06/10/2009  04:49 PM            54,320 mmc.CHM
    06/10/2009  04:40 PM            93,297 msdasc.chm
    06/10/2009  04:49 PM           288,691 msmq.CHM
    06/10/2009  05:22 PM            90,909 msorcl32.chm
    06/10/2009  04:49 PM            79,093 nap.CHM
    06/10/2009  03:49 PM            29,124 nas.CHM
    06/10/2009  04:49 PM            53,914 netcfg.CHM
    06/10/2009  04:50 PM            42,931 nfs_.CHM
    06/10/2009  03:50 PM           242,498 nfs__lh.CHM
    06/10/2009  03:50 PM           261,561 nlbmgr.CHM
    06/10/2009  03:50 PM            74,219 ocsp.CHM
    06/10/2009  04:40 PM            94,640 odbcinst.chm
    06/10/2009  05:22 PM           126,122 odbcjet.chm
    06/10/2009  04:50 PM            55,714 perfmon.CHM
    06/10/2009  03:50 PM            37,508 pkiview.CHM
    06/10/2009  04:50 PM            67,841 pmc.CHM
    06/10/2009  04:51 PM            30,083 qos.CHM
    06/10/2009  03:51 PM           408,580 radius.CHM
    06/10/2009  04:51 PM            32,881 regedit32.CHM
    06/10/2009  04:51 PM            35,087 reliab.CHM
    06/10/2009  04:51 PM            32,913 resmon.CHM
    11/04/2010  09:07 PM           241,169 rms_help.CHM
    06/10/2009  03:52 PM           135,366 rmt.CHM
    06/10/2009  03:52 PM           458,440 rras.CHM
    06/14/2009  03:49 AM            33,611 rsat_client.CHM
    06/10/2009  04:52 PM            20,698 rsop.CHM
    06/10/2009  04:52 PM            19,155 saferconcepts.CHM
    06/10/2009  03:52 PM            52,538 sanmgr.CHM
    06/10/2009  04:52 PM            49,468 scanmanagement.CHM
    06/10/2009  03:53 PM            40,760 schmmgmt.CHM
    06/10/2009  04:53 PM            25,306 snmp.CHM
    06/10/2009  04:53 PM            19,391 spolsconcepts.CHM
    06/10/2009  04:40 PM            94,792 sqlsodbc.chm
    06/10/2009  04:40 PM            81,564 sqlsoldb.chm
    06/10/2009  03:53 PM            51,367 storagemgmt.CHM
    06/10/2009  03:53 PM            45,168 stor_expl.CHM
    06/10/2009  04:54 PM            70,460 sua.CHM
    06/10/2009  04:54 PM            28,672 sys_srv.CHM
    06/10/2009  04:54 PM            64,597 taskscheduler.CHM
    06/10/2009  04:54 PM            30,960 tcpip.CHM
    06/10/2009  04:54 PM            59,267 tpmadmin.CHM
    06/10/2009  03:56 PM           151,250 tscc.CHM
    06/10/2009  03:54 PM            78,540 ts_admin.CHM
    06/10/2009  03:55 PM           115,921 ts_gateway.CHM
    06/10/2009  03:55 PM           102,367 ts_license.CHM
    06/10/2009  03:55 PM            49,218 ts_manager.CHM
    06/10/2009  03:55 PM            28,835 ts_remotedesktops.CHM
    06/10/2009  03:55 PM            73,201 ts_remoteprograms.CHM
    06/10/2009  03:55 PM            89,148 ts_workspace.CHM
    06/10/2009  03:56 PM           340,740 uim.CHM
    09/07/2009  03:28 PM            77,078 virtualpc.chm
    06/10/2009  03:56 PM            80,094 virtual_help.CHM
    06/10/2009  03:56 PM            24,005 w7_tablet_sm.CHM
    06/10/2009  03:56 PM           264,123 wds.CHM
    06/10/2009  04:40 PM         1,828,821 WindowsPowerShellHelp.chm
    06/10/2009  04:56 PM            30,027 wmicontrol.CHM
    06/10/2009  03:56 PM           127,890 wsrm.CHM
    06/10/2009  03:56 PM           186,770 wsus.CHM
                 104 File(s)     15,336,650 bytes
                   2 Dir(s)  55,822,528,512 bytes free

    C:\Windows\system32>ICACLS  C:\Windows\Help\mui\0409\diskmgt.chm
    C:\Windows\Help\mui\0409\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
                                         BUILTIN\Administrators:(RX)
                                         NT AUTHORITY\SYSTEM:(RX)
                                         BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>


    Kristina Weissenburg

    Sunday, August 19, 2012 7:28 PM
  • There's something odd there - you have more than twice as many files in the folder as I do!

    Is this machine in use on a domain network? - what other major software is installed? some of the files appear to be associated with the Remote Server Admin Tools add-on.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 8:05 PM
    Moderator
  • This is my personal machine, however I use VPN to access my work Domain every day.  So my machine is authenticated daily onto my company's network.  (It was not connected to the company domain during all the times that I gathered the diagnostics and ran the .exe's you requested).  I have all the normal apps installed (Office 2007, SQL Server 2008 R2, Visual Studio 2008 and 2010, Roxio CD creator software, SnagIt, SQL Sentry Plan Explorer, most recent install was Magix Video back in July (easy rescue your videotapes), Firefox, Google Chrome. I installed MS Remote Desktop Connection Manager when I first bought the machine, so I can manage my RDP sessions when I am on the company network. (I am the SQL Server DBA). I could ask another employee who also works remotely in the same manner that I do to send me the contents of the same directory you asked for to do a comparison if that would help.  Thanks. Tina

    Kristina Weissenburg


    • Edited by KJW_SQLDBA Sunday, August 19, 2012 8:26 PM
    Sunday, August 19, 2012 8:26 PM
  • Phew :) I thought for a minute we had some weird stuff going on!

    It does mean I'll have to be a little more careful about potential fixes, though, as I'm not totally certain what effects may carry through to that side of things (I don't think anything should but...)

    On the plus side, does it mean I can assume a reasonably high competence in command prompt?

    Please export the HKEY_USERS\S-1-5-20 key from regedit to a .REG file, and upload it to your public SkyDrive - post a link in your reply.

    Please also run the following commands and post the results.

    DIR C:\Windows\ServiceProfiles\NT*.* /ah

    DIR C:\Windows\ServiceProfiles\t*.* /s

    DIR C:\Windows\System32\Catroot2

    DIR C:\Windows\SoftwareDistribution


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Sunday, August 19, 2012 8:47 PM
    Moderator
  • I'd say fairly high competence!  I don't know all the commands, but know enough to be dangerous! :-)

    The reg key is uploaded: https://skydrive.live.com/redir?resid=11FA0B3417430472!250&authkey=!AJwwMfQBivb14Tc

    I received error messages for the first 2 directory commands.

    I have 2 folders in the C:\Windows\ServiceProfiles folder -->  LocalService   and   NetworkService. Each has the 9 basic folders (Desktop, Documents, Downloads, etc).  Do you want the contents of LocalService   and   NetworkService?

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:Windows\ServiceProfiles\NT*.* /ah
    The system cannot find the path specified.

    C:\Windows\system32>DIR C:Windows\ServiceProfiles\t*.* /s
    The system cannot find the path specified.

    C:\Windows\system32>DIR C:\Windows\System32\Catroot2
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\System32\Catroot2

    08/17/2012  06:32 PM    <DIR>          .
    08/17/2012  06:32 PM    <DIR>          ..
    08/19/2012  12:56 PM           112,106 dberr.txt
    08/19/2012  12:56 PM             8,192 edb.chk
    08/19/2012  12:58 PM            65,536 edb.log
    08/17/2012  06:09 PM            65,536 edb004D7.log
    07/13/2009  11:46 PM            65,536 edbres00001.jrs
    07/13/2009  11:46 PM            65,536 edbres00002.jrs
    08/17/2012  06:32 PM    <DIR>          {127D0A1D-4EF2-11D1-8608-00C04FC295EE}
    08/17/2012  06:32 PM    <DIR>          {F750E6C3-38EE-11D1-85E5-00C04FC295EE}
                   6 File(s)        382,442 bytes
                   4 Dir(s)  55,805,440,000 bytes free

    C:\Windows\system32>DIR C:\Windows\SoftwareDistribution
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\SoftwareDistribution

    01/15/2011  05:24 PM    <DIR>          .
    01/15/2011  05:24 PM    <DIR>          ..
    08/19/2012  03:41 PM    <DIR>          AuthCabs
    01/05/2011  12:43 AM    <DIR>          DataStore
    08/19/2012  11:18 AM    <DIR>          Download
    08/17/2012  06:06 PM    <DIR>          PostRebootEventCache
    08/19/2012  01:08 PM           900,506 ReportingEvents.log
    08/19/2012  10:51 AM    <DIR>          ScanFile
    06/24/2012  09:23 AM    <DIR>          SelfUpdate
    01/15/2011  02:37 PM    <DIR>          WuRedir
                   1 File(s)        900,506 bytes
                   9 Dir(s)  55,805,440,000 bytes free

    C:\Windows\system32>


    Kristina Weissenburg

    Sunday, August 19, 2012 8:58 PM
  • (that's what comes of trying to type with a technocolour migraine going on!)

    Sorry - I got two of the commands mistyped...please run these two again....

    DIR C:\Windows\ServiceProfiles\NT*.* /ah

    DIR C:\Windows\ServiceProfiles\t*.* /s


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 9:16 PM
    Moderator
  • Here is the output.  This can all wait till tomorrow!  Feel better!

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NT*.* /ah
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\ServiceProfiles

    File Not Found

    C:\Windows\system32>DIR C:\Windows\ServiceProfiles\t*.* /s
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local

    07/13/2012  02:49 PM    <DIR>          Temp
                   0 File(s)              0 bytes

     Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp

    01/24/2011  01:16 PM    <DIR>          TfsStore
                   0 File(s)              0 bytes

     Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStor
    e

    10/03/2011  10:06 AM    <DIR>          Tfs_DAV
                   0 File(s)              0 bytes

     Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\
    Windows

    07/13/2009  11:45 PM    <DIR>          Templates
                   0 File(s)              0 bytes

     Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetwor
    king\3168ba2136678329180997d5ea54982a891a3c48.HomeGroupClassifier\d5a75582ef50ec
    f4062ba6872c95d0af\grouping

    08/19/2012  03:30 PM            65,536 tmp.edb
                   1 File(s)         65,536 bytes

     Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Local

    08/19/2012  01:08 PM    <DIR>          Temp
                   0 File(s)              0 bytes

     Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
    t\SoftwareProtectionPlatform

    07/14/2012  08:57 PM         7,382,971 tokens.bar
    08/19/2012  09:41 AM                 0 tokens.dat
                   2 File(s)      7,382,971 bytes

     Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
    t\Windows

    07/13/2009  11:45 PM    <DIR>          Templates
                   0 File(s)              0 bytes

         Total Files Listed:
                   3 File(s)      7,448,507 bytes
                   6 Dir(s)  55,804,342,272 bytes free

    C:\Windows\system32>


    Kristina Weissenburg

    Sunday, August 19, 2012 9:23 PM
  • If I navigate one directory below ServiceProfiles to LocalService or NetworkService I do get files beginning with NT (not sure if this was what you were looking for). Pasting for LocalService and NetworkService just in case.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\localservice\NT*.* /ah
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\ServiceProfiles\localservice

    08/19/2012  03:30 PM           262,144 NTUSER.DAT
    07/14/2009  02:12 AM             1,024 NTUSER.DAT.LOG
    08/19/2012  03:30 PM           226,304 NTUSER.DAT.LOG1
    07/13/2009  11:45 PM                 0 NTUSER.DAT.LOG2
    07/14/2009  12:01 AM            65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TM.blf
    07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TMContainer00000000000000000001.regtrans-ms
    07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TMContainer00000000000000000002.regtrans-ms
    08/17/2012  07:55 PM            65,536 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
    2b2306}.TM.blf
    08/17/2012  07:55 PM           524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
    2b2306}.TMContainer00000000000000000001.regtrans-ms
    08/17/2012  07:55 PM           524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
    2b2306}.TMContainer00000000000000000002.regtrans-ms
    08/17/2012  06:32 PM            65,536 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
    2b2306}.TM.blf
    08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
    2b2306}.TMContainer00000000000000000001.regtrans-ms
    08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
    2b2306}.TMContainer00000000000000000002.regtrans-ms
    01/18/2012  12:20 PM            65,536 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
    34d0a5}.TM.blf
    01/18/2012  12:20 PM           524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
    34d0a5}.TMContainer00000000000000000001.regtrans-ms
    01/18/2012  12:20 PM           524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
    34d0a5}.TMContainer00000000000000000002.regtrans-ms
                  16 File(s)      4,945,920 bytes
                   0 Dir(s)  55,803,899,904 bytes free

    C:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\networkservice\NT*.* /ah
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\ServiceProfiles\networkservice

    08/19/2012  03:30 PM           524,288 NTUSER.DAT
    07/14/2009  02:12 AM             1,024 NTUSER.DAT.LOG
    08/19/2012  03:30 PM           226,304 NTUSER.DAT.LOG1
    07/13/2009  11:45 PM                 0 NTUSER.DAT.LOG2
    07/14/2009  12:01 AM            65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TM.blf
    07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TMContainer00000000000000000001.regtrans-ms
    07/14/2009  12:01 AM           524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
    cde3ec}.TMContainer00000000000000000002.regtrans-ms
    08/17/2012  07:55 PM            65,536 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
    2b2306}.TM.blf
    08/17/2012  07:55 PM           524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
    2b2306}.TMContainer00000000000000000001.regtrans-ms
    08/17/2012  07:55 PM           524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
    2b2306}.TMContainer00000000000000000002.regtrans-ms
    08/17/2012  06:32 PM            65,536 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
    2b2306}.TM.blf
    08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
    2b2306}.TMContainer00000000000000000001.regtrans-ms
    08/17/2012  06:32 PM           524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
    2b2306}.TMContainer00000000000000000002.regtrans-ms
    01/18/2012  12:20 PM            65,536 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
    6e6963}.TM.blf
    01/18/2012  12:20 PM           524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
    6e6963}.TMContainer00000000000000000001.regtrans-ms
    01/18/2012  12:20 PM           524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
    6e6963}.TMContainer00000000000000000002.regtrans-ms
                  16 File(s)      5,208,064 bytes
                   0 Dir(s)  55,803,457,536 bytes free

    C:\Users\tweissenburg>


    Kristina Weissenburg

    Sunday, August 19, 2012 9:36 PM
  • I've had a quick look through your registry export, and the only thing that stands out for me is that there appears to be a CA Certificate installed where there didn't oughta be :) - but I'm not certain enough of that to do anything about it without further investigation, and it could be normal for a domain-connected PC anyhow.

    Please open certmgr.msc

    Do you have any certificates in the 'Enterprise Trust' folder? (who from?)

    Your tokens.dat file isn't being regenerated the way it should be - it's currently a 0-byte file, whereas it should be around 7MB.

    The Network Service hive seems to be being updated properly.

    I wonder - something seems to have happened to the system on or around the 14th July - please check the Update History, and see if any updates were successfuly installed that day - or whether all updates have failed since then (or when was the last successful updates)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 19, 2012 10:15 PM
    Moderator
  • There are no certificates in the Enterprise Trust folder.

    I've provided a Word doc that shows all the updates I've gotten since 7/14. I was able to get updates on 8/14 and 8/17 (and this was after I started receiving the WGA messages).  https://skydrive.live.com/redir?resid=11FA0B3417430472!251&authkey=!AEFwBlTbzAmhtp0

    Tina


    Kristina Weissenburg

    Sunday, August 19, 2012 10:39 PM
  • That pretty much eliminates some of the 'usual suspects', then.

    Please run the following commands...

    DIR C:\Windows\System32\7b*.*

    ICACLS C:\Windows\System32\7b*.*

    Please also export the Windows System and Application Event logs (from Event Viewer) then compress and  upload them to yor SkyDrive and post the link.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 8:34 AM
    Moderator
  • Application log: https://skydrive.live.com/redir?resid=11FA0B3417430472!252&authkey=!AIV1bITtgNvwYWE

    System log: https://skydrive.live.com/redir?resid=11FA0B3417430472!253&authkey=!AAvMG9Nytv3G3Rk

    CMD results:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\System32\7b*.*
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\System32

    File Not Found

    C:\Windows\system32>ICACLS C:\Windows\System32\7b*.*
    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
                                                                                                       BUILTIN\Administrators:(I)(F)
                                                                                                       BUILTIN\Users:(I)(RX)

    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
                                                                                                       BUILTIN\Administrators:(I)(F)
                                                                                                       BUILTIN\Users:(I)(RX)

    Successfully processed 2 files; Failed processing 0 files

    C:\Windows\system32>


    Kristina Weissenburg

    Monday, August 20, 2012 1:19 PM
  • Now THAT is interesting!

    Please run the following commands

    ATTRIB C:\Windows\System32\7B*.*

    ATTRIB -R -H -S C:\Windows\System32\7B*.*

    ATTRIB C:\Windows\System32\7B*.*

    post the result, reboot, and post another MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 1:26 PM
    Moderator
  • Here you go.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
    A   H        C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    A   H        C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    C:\Windows\system32>ATTRIB -R -H -S C:\Windows\System32\7B*.*

    C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
    A            C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    A            C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    C:\Windows\system32>

    ---------------

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
    Error: 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W96I0nmkvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm


    Kristina Weissenburg

    Monday, August 20, 2012 1:45 PM
  •  What happens if you attempt validation at www.microsoft.com/genuine/validate now?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 1:55 PM
    Moderator
  • It's still sitting there just spinning after 6 minutes.  Should I let it run? 

    Kristina Weissenburg

    Monday, August 20, 2012 2:05 PM
  • Nah - it's obviously stalled.

    I need to pop out for a bit - the walk may clear my head as well :)

    back soon.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 2:09 PM
    Moderator
  • OK - rechecking, it looks as though my 'normal' box for some reason had the attributes mis-set on the 7B*.* files - they should in fact be hidden.

    Please sun the following commands and post the results.

    ATTRIB +H  C:\Windows\System32\7B*.*

    DIR C:\Windows\System32 /AR /S /b

    DIR C:\Windows\SysWOW64 /AR /S /b

    DIR C:\Windows\ServiceProfiles /AR /S /b

    DIR C:\Windows /AL /S /b

    I'm slowly wading my way through the Event logs - nothing yet, though


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 4:33 PM
    Moderator
  • According to  the EvetnViewer logs, your problems began whe you got a little registry corruption between 13th and 14th Aug.

    I don't suppose your system has any System Restore points for the period just prior to that? If so, try going back to that (you'll have to reinstall all updates and programs installed since)

    It may be worth trying to reconstruct the licensing database using esentutl - but I'm by no means certain of all the ramifications.

    The actual problem is defined by

    C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005

    There is nothing I can find in Google about this error but here goes....

    run the following command and post the results...

    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0" /S

    ALso, please find the entry in Regedit, and let me know the permissions on it

    Run the following commands and post the results

    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a"
    ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
    ICACLS %windir%\system32\sppwinob.dll
    ATTRIB %windir%\system32\sppwinob.dll
    ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
    DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 5:06 PM
    Moderator
  • here are the results from CMD -- will work on the requests in your next post for Reg settings.  And no--unfortunately my earliest restore point is 8/8.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>ATTRIB +H  C:\Windows\System32\7B*.*

    C:\Windows\system32>DIR C:\Windows\System32 /AR /S /b
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\DelDrv64.exe
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\Setup.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstAR.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCN.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCZ.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDE.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDK.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstES.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFI.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFR.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstGR.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstHU.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstID.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstIT.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstJP.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstKR.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNL.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNO.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPL.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPT.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstRU.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstSE.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTH.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTR.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTW.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstUS.dll
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstAR.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCN.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCZ.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDE.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDK.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstES.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFI.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFR.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstGR.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstHU.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstID.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstIT.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstJP.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstKR.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNL.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNO.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPL.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPT.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstRU.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstSE.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTH.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTR.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTW.ini
    C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstUS.ini
    C:\Windows\System32\config\systemprofile\Contacts
    C:\Windows\System32\config\systemprofile\Documents
    C:\Windows\System32\inetsrv\config\schema\ASPNET_schema.xml
    C:\Windows\System32\inetsrv\config\schema\Ftp_schema.xml
    C:\Windows\System32\inetsrv\config\schema\FX_schema.xml
    C:\Windows\System32\inetsrv\config\schema\IIS_schema.xml
    C:\Windows\System32\inetsrv\config\schema\rscaext.xml
    C:\Windows\System32\inetsrv\config\schema\WebDAV_schema.xml
    C:\Windows\System32\Macromed\Flash\Flash64_11_3_300_271.ocx
    C:\Windows\System32\restore\MachineGuid.txt

    C:\Windows\system32>DIR C:\Windows\SysWOW64 /AR /S /b
    C:\Windows\SysWOW64\btwapi.dll
    C:\Windows\SysWOW64\d2hPopup.ocx
    C:\Windows\SysWOW64\config\systemprofile\Contacts
    C:\Windows\SysWOW64\config\systemprofile\Links
    C:\Windows\SysWOW64\config\systemprofile\Saved Games
    C:\Windows\SysWOW64\config\systemprofile\Searches
    C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
    C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_3_300_271.ocx

    C:\Windows\system32>DIR C:\Windows\ServiceProfiles /AR /S /b
    C:\Windows\ServiceProfiles\LocalService\Desktop
    C:\Windows\ServiceProfiles\LocalService\Documents
    C:\Windows\ServiceProfiles\LocalService\Downloads
    C:\Windows\ServiceProfiles\LocalService\Favorites
    C:\Windows\ServiceProfiles\LocalService\Links
    C:\Windows\ServiceProfiles\LocalService\Music
    C:\Windows\ServiceProfiles\LocalService\Pictures
    C:\Windows\ServiceProfiles\LocalService\Videos
    C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent
    C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo
    C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu
    C:\Windows\ServiceProfiles\NetworkService\Desktop
    C:\Windows\ServiceProfiles\NetworkService\Documents
    C:\Windows\ServiceProfiles\NetworkService\Downloads
    C:\Windows\ServiceProfiles\NetworkService\Favorites
    C:\Windows\ServiceProfiles\NetworkService\Links
    C:\Windows\ServiceProfiles\NetworkService\Music
    C:\Windows\ServiceProfiles\NetworkService\Pictures
    C:\Windows\ServiceProfiles\NetworkService\Videos
    C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent
    C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo
    C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu

    C:\Windows\system32>DIR C:\Windows /AL /S /b
    C:\Windows\SysWOW64\config\systemprofile\Application Data
    C:\Windows\SysWOW64\config\systemprofile\Cookies
    C:\Windows\SysWOW64\config\systemprofile\Local Settings
    C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Application Data
    C:\Windows\SysWOW64\config\systemprofile\AppData\Local\History
    C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Temporary Internet Files

    C:\Windows\system32>


    Kristina Weissenburg

    Monday, August 20, 2012 5:18 PM
  • Permissions on the reg key:

    SYSTEM: Full Control ALLOW; Read ALLOW

    Administrators: Full Control ALLOW; Read ALLOW

    USERs:  Read ALLOW

    Trusted Installer:  Full Control ALLOW; Read ALLOW

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctional
    ity/agent/7.0" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0
        ModuleId    REG_SZ    179b8a65-b0f6-41d9-acea-12006ef9b32a
        IsService    REG_DWORD    0x1

    C:\Windows\system32>


    C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12
    006ef9b32a"

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a
        ManifestFile    REG_SZ    %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
        PluginFile    REG_SZ    %windir%\system32\sppwinob.dll


    C:\Windows\system32>ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
    C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms NT SERVICE\TrustedInstaller:(F)
                                                                                               BUILTIN\Administrators:(RX)
                                                                                               NT AUTHORITY\SYSTEM:(RX)
                                                                                               BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS %windir%\system32\sppwinob.dll
    C:\Windows\system32\sppwinob.dll NT SERVICE\TrustedInstaller:(F)
                                     BUILTIN\Administrators:(RX)
                                     NT AUTHORITY\SYSTEM:(RX)
                                     BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ATTRIB %windir%\system32\sppwinob.dll
    A            C:\Windows\system32\sppwinob.dll

    C:\Windows\system32>
    C:\Windows\system32>ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
    A            C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms

    C:\Windows\system32>DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
     Volume in drive C is OS
     Volume Serial Number is 9ECD-D571

     Directory of C:\Windows\system32\spp\plugin-manifests-signed

    11/20/2010  08:43 AM             7,298 sppwinob-spp-plugin-manifest-signed.xrm-ms
                   1 File(s)          7,298 bytes
                   0 Dir(s)  55,685,804,032 bytes free

    C:\Windows\system32>


    Kristina Weissenburg

    Monday, August 20, 2012 5:24 PM
  • Now why on earth do Canon find it necessary to hide their driver uninstallers and/or make them Read-only??

    I can see no problems anywhere in that lot :(

    I cannot find any decent references anywhere to the precise error we're seeing, or even close approximations of it.

    The consensus is that the bare 0xc000034 error in the MGADiag report can only be cured by a repair install (or even a clean install) - which annoys me when we've got this close to identifying the problem!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Monday, August 20, 2012 6:26 PM
    Moderator
  • So does that mean we're giving up?  There's really no way I can reinstall this machine. Most of my programs come from my company and I work remotely in TX and they are in CA.  So until I went out there to reinstall everything I would be unable to work -- and as a DBA I really don't think that's an option.  :-)

    What are the ramifications of leaving the computer in the state it's currently in (with the WGA messages)?

    Thanks. Tina


    Kristina Weissenburg

    Monday, August 20, 2012 7:09 PM
  • Give up? Me? - just offering you a way out! :)

    You're nowhere near my record thread yet - 100+ posts.

    A repair install in theory wouldn't lose you anything, but there are obviously risks to the procedure. A clean install would entail reinstalling everything from scratch.

    I'll do some more searching (and try and review the registry you uploaded) - but I have to be out most of the day tomorrow so don't expect too much until Wednesday :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 7:46 PM
    Moderator
  • :-)  Thanks!

    I really appreciate your diligence on this.  Obviously reinstalling is a last resort. 

    We're only up to 35 posts -- so we've got a ways to go!  J/K!   I'd rather take the time to try to figure out the least intrusive way to get this fixed if at all possible.  Thanks again.  Tina


    Kristina Weissenburg

    Monday, August 20, 2012 8:05 PM
  • Ignore that last - I got my threads confused! (dealing with two very similar problems in the same forum)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 20, 2012 8:36 PM
    Moderator
  • This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th .  I checked if any programs were installed those days -- there was one.  On 7/13, I installed Silverlight version 5.1.10411.0.

    Thanks. Tina


    Kristina Weissenburg

    Tuesday, August 21, 2012 10:14 PM
  • This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th .  I checked if any programs were installed those days -- there was one.  On 7/13, I installed Silverlight version 5.1.10411.0.

    Thanks. Tina


    Kristina Weissenburg

    I certainly wouldn't expect Silverlight to cause any problem! Having said that I am aware of one or two cases where the claim was made that installing it caused odd problems (I attributed it to PEBCAK, rather than anything else).

    You could try uninstalling it to see what happens - it should come out cleanly.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, August 21, 2012 10:58 PM
    Moderator
  • yeah. I didn't think it would cause any issues either but thought I'd mention it.

    Uninstalling changed nothing as expected.


    Kristina Weissenburg

    Wednesday, August 22, 2012 12:15 AM
  • Sorry I've not got back sooner - it's been a little hectic in 'real life' this week, and this is only a quick note to let you know that I haven't forgotten you!

    I'll be back tomorrow with some more suggestions.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, August 23, 2012 8:17 AM
    Moderator
  • Trying to review the thread, and confusing myself even further here. (I hate databases! - the registry is nothing more than a database that holds the various bits of Windows and installed apps together)

    I'm having problems making sense out of it, so I'll have to check myself before committing you to anything. That's going to be tomorrow morning's first job - promise!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, August 24, 2012 6:46 PM
    Moderator
  • Hate databases!!  SHouldn't say that to a SQL DBA!!  :-) 

    Thanks for your efforts on this!


    Kristina Weissenburg

    Friday, August 24, 2012 7:28 PM
  • I had a feeling that'd get a rise out of you :)

    A quick Summary of what we've done....

    CHKDSK and SFC run - no problem in CHKDSK, a 'fixed' problem in SFC

    Licensing Store rebuilt - but SLUI fails with 0xD0000034 error

    CheckSUR run - with a clean bill of health

    SFC run again - and the same file had to be fixed again (C:\Windows\Help\mui\0409\diskmgt.chm)

    The following files and folders appear to be OK

    ServiceProfiles

    Catroot2

    SoftwareDistribution

    7b*.* licensing files

    sppwinob.dll

    Event Logs show a licensing problem with

    C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005

    So far, I've been unable to find ANY real references to help me here! :(

    ..and my 2G connection has been so flaky over the past few days that I have to try everything 5 times:(

    (Who said the Cloud is the answer? They were asking the wrong question!)

    I'll be on a landline this afternoon so more later - from the pub :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, August 25, 2012 9:00 AM
    Moderator
  • Well, I think I've been to every relevant link in Google!

    ...with no success :(

    The only practical solution appears to be a repair install - tbut even there, from the number of posts that have been made suggesting that, there has been no feedack at all as to whether it worked or not.

    If you're game for it, you'll need  a proper Win7 disk with SP1 embedded - if you don't have one handy, you can Download the SP1 Refresh for your chosen language and edition from the links on these pages...

    http://www.heidoc.net/joomla/technology-science/microsoft

    The links are for downloads from the Digital River server run for MS.

    Once downloaded, burn it (don't just copy the file!) to a DVD and check that it boots the system OK (but ONLY that, for the moment) then read and digest the instructions for a repair install here.... http://www.sevenforums.com/tutorials/3413-repair-install.html and make sure you understand them before setting out on the repair itself.

    If you're not prepared for the risks entailed in that, then all I can suggest is that you see if MS WGA support can assist -

    WGA Support can be found here

     

    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

     

    Outside North America:

    http://support.microsoft.com/contactus/?ws=support#tab0

     

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!    



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 26, 2012 12:33 PM
    Moderator
  • Thanks Noel,  I'll read through everything and decide if I want to try the repair install or not.  Thanks for the link to support as well.

    Tina


    Kristina Weissenburg

    Sunday, August 26, 2012 5:40 PM
  • One more question, when reviewing the results of the MGDIAG, should the Windows Product Key (first 2 groupings of characters have been obfuscating) match the Product Key that is on the COA sticker?  Seems like yes. However, the last 3 groupings in MGDIAG do not match the last 3 groupings of characters shown on my COA. Thanks.

    Kristina Weissenburg

    Sunday, August 26, 2012 6:44 PM
  • Computers that come pre-installed with Windows from large manufacturers usually come with two Product Keys.

     

    OEM SLP: This is the key that came in Windows (from the factory). It works by connecting to a BIOS flag (the SLIC table) found only on  computers from that Manufacturer. Once it sees the correct BIOS flag, it self activates.

     

    COA SLP: This is the key seen on the sticker located on the side, bottom or in the battery compartment of your machine. The purpose of this key is to be used in the case the OEM SLP self-activation stops working for whatever reason.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, August 26, 2012 7:01 PM
    Moderator
  • Thanks for your help on this problem, Noel.  I ended up speaking with MS Support who gave conflicting diagnoses and in the end could not help me.  First one of the engineers said the problem was that I had a domain policy setting that was prohibiting me from validating Windows.  So I removed my computer from the domain, rebooted, retried validating with no success.  So the next engineer said that I had some services that needed to be repaired and apparently the only way to repair them was to do an upgrade of Windows.  So they attempted to do so and after a few hours it almost got to the end, but it failed.  So thankfully the install rolled back.  But now I'm the same place that I was.  Their only suggestion was to perform a full re-install of Windows.  So at this point I've decided to live with the situation until I have time and all the work software to get my computer fully functional again. Tina

    Kristina Weissenburg

    Monday, September 10, 2012 4:53 PM
  • At least I didn't miss anything obvious, then :)

    Just for interest - could you please post a new MGADiag report so we can see if MS actually managed to make any significant progress?

    Thanks VERY much for coming back to let us know  - even bad news like this is good for us, as it helps us prove to MS that we are at least as good as the in-house support, and occasionally it even results in us getting a little crucial snippet of information that solves the problem next time around (or the time after that...)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, September 10, 2012 5:15 PM
    Moderator
  • Interestingly no one at MS ran MGDiag.  They all seemed totally stumped on what error code 0xD0000034 actuall means.  No one had ever seen it.

    Here are the latest results.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc0000034
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>E2     </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
    Error: 0xC0000034

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:18:2012 20:57
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W9J53oikvJYk4mxcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    E2    
      FACP   DELL    E2    
      HPET   DELL    E2    
      BOOT   DELL    E2     
      MCFG   A M I   GMCH945.
      TCPA     
      SLIC   DELL    E2    
      SSDT   PmRef  CpuPm


    Kristina Weissenburg

    Monday, September 10, 2012 11:26 PM
  • Still the same as far as I can tell :(

    I suspect that it's a permissions thing somewhere - but I have no idea where!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, September 11, 2012 7:21 AM
    Moderator