Answered by:
OEM Windows 7 Professional started reporting 'Not Genuine' after 1.5 years

Question
-
I purchased a DELL laptop a year and half ago with Windows 7 Professional. I have the COA PRoduct key from under the laptop. This week, I started receiving messages stating that my copy is not genuine. When I go to MyComputer-->Properties, there is no link to Activate and all I see is Status Not Available; ProductID Not Available.
I called DELL and they suggested updating the BIOS to their most recent version for Latititude E6510 which I did, with no success in eliminating the messages. They suggested reinstalling Windows. :-( I went to the MS webpage to validate and it just sits there for hours spinning. How can I activate the product key that I have from the COA? The diagnostic report follows.
Thanks for your guidance.
Tina
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmSaturday, August 18, 2012 4:56 PM
Answers
-
Well, I think I've been to every relevant link in Google!
...with no success :(
The only practical solution appears to be a repair install - tbut even there, from the number of posts that have been made suggesting that, there has been no feedack at all as to whether it worked or not.
If you're game for it, you'll need a proper Win7 disk with SP1 embedded - if you don't have one handy, you can Download the SP1 Refresh for your chosen language and edition from the links on these pages...
http://www.heidoc.net/joomla/technology-science/microsoft
The links are for downloads from the Digital River server run for MS.
Once downloaded, burn it (don't just copy the file!) to a DVD and check that it boots the system OK (but ONLY that, for the moment) then read and digest the instructions for a repair install here.... http://www.sevenforums.com/tutorials/3413-repair-install.html and make sure you understand them before setting out on the repair itself.
If you're not prepared for the risks entailed in that, then all I can suggest is that you see if MS WGA support can assist -
WGA Support can be found here
North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
Outside North America:
http://support.microsoft.com/contactus/?ws=support#tab0
Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Sunday, September 9, 2012 2:54 PM
- Marked as answer by KJW_SQLDBA Monday, September 10, 2012 3:44 PM
Sunday, August 26, 2012 12:33 PMModerator
All replies
-
Your error message is often associated with disk problems.....
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, and then reboot.
The chkdsk will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Post an MGADiag report with details of any error messages encountered.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Saturday, August 18, 2012 5:23 PMModerator -
I've followed the instructions and pasted the results --the cbs.log file that was generated is too long to paste. How should I send the information from the log?
Also included is the diagnostic report.
Thank you. Tina
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>SFC /SCANNOW
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log===============================================================
The diagnostic report:
===============================================================
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) (null): 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfNJ53oikvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Saturday, August 18, 2012 8:12 PM -
You can upload the CBS.log to your SkyDrive, and post a link to it in your reply - http://skydrive.live.com - then we can take a look and see what we can do with it.
The report doesn't appear to have changed - so we'll try rebuilding the Licensing Store...
Recreate the Licensing Store
- Go to Start > All Programs > Accessories
- Right-Click on Command Prompt and select Run as Administrator - accept the UAC prompt
- Run the following commands in the Command Prompt window, using the Enter key at the end of each
net stop sppsvc
(wait until the service has stopped before entering the following lines)
CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
REN tokens.dat tokens.bar
net start sppsvc
slui.exe- After a couple of seconds Windows Activation dialog will appear.
You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.
If you are asked for your Key, use the one on the COA sticker on the machine's case
Reboot and Post back with a new MGADiag report
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 4:48 AMModerator -
Noel,
The CBS.log file is uploaded here: https://skydrive.live.com/redir?resid=11FA0B3417430472!247&authkey=!AHHmofLgNB7awSc
When I ran slui.exe I received an error and was not able to go any further in attempting activation. I've uploaded a jpg of the error message here: https://skydrive.live.com/redir?resid=11FA0B3417430472!248&authkey=!ALSj6h8KR8oXtV8
I rebooted anyways and results of Diagnostic are as follows:
Thanks. Tina
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
Error: 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Sunday, August 19, 2012 2:52 PM -
The CBS log shows only one problem that I can see - and claims that was resolved.
This is at odds with your error message.
I suggest running the CheckSUR tool to see if that has anything that can help.....
http://support.microsoft.com/kb/947821
It will say 'Installing' and may take some time (anywhere from 5 minutes to a couple of hours, depending on how much it has to do), and will exit silently.
Once complete, reboot and post the the CheckSUR.log file (depending on size, either copy/paste it to your reply, or upload it to your SkyDrive)
I'd really like to nail this error down - so far we haven't had too much success with it :(
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 3:31 PMModerator -
Here is the info from the CheckSUR.log.
Thanks!
=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 15.0
2012-08-19 10:53Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store
(f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16443_none_d92d0b9d80d13684
(fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_92265d142938cfae
(fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
(f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16447_none_87d1b2c1f4d80db3
(fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
(f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_d9300c7b80ce8289
(fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16446_none_e384b6cdb52f4484
(fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 wow64_Microsoft-Windows-IE-HTMLRendering.ptxml wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_92a128cb4262260d
(fix) CSI Payload File Missing CSI File Replaced File: wow64_Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_9235fb30292dffc2\wow64_Microsoft-Windows-IE-HTMLRendering.ptxml
(f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_e3fe823ace59818c
(fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_d9abd87c99f6f23f
(fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 Microsoft-Windows-IE-HTMLRendering.ptxml amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.20553_none_884c7e790e016412
(fix) CSI Payload File Missing CSI File Replaced File: Microsoft-Windows-IE-HTMLRendering.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_9.4.8112.16421_none_87e150ddf4cd3dc7\Microsoft-Windows-IE-HTMLRendering.ptxml
(f) CSI Payload File Missing 0x00000000 ieframe.ptxml amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20551_none_d9a9d7e899f8bf91
(fix) CSI Payload File Missing CSI File Replaced File: ieframe.ptxml From: C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_d940aae180c2cbf4\ieframe.ptxml
(f) CSI Payload File Missing 0x00000000 wow64_ieframe.ptxml wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.20553_none_e40082cece57b43a
(fix) CSI Payload File Missing CSI File Replaced File: wow64_ieframe.ptxml From: C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_9.4.8112.16421_none_e3955533b5238def\wow64_ieframe.ptxmlSummary:
Seconds executed: 540
Found 11 errors
Fixed 11 errors
CSI Payload File Missing Total count: 11
Fixed: CSI Payload File Missing. Total count: 11Kristina Weissenburg
Sunday, August 19, 2012 4:21 PM -
Interesting - have you been having problems with IE9 at all? All the errors relate to that.
please post a new MGADiag report and we'll see if anything has changed there.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 4:57 PMModerator -
I haven't noticed any problems with IE9.
Here is the diagnostic:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
Error: 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Sunday, August 19, 2012 5:12 PM -
Try running SFC again - see if it comes back any different this time.
upload the new CBS.log and we'll see if it changes aything - post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 5:33 PMModerator -
I've uploaded the latest CBS log file here: https://skydrive.live.com/redir?resid=11FA0B3417430472!249&authkey=!AJrKiLFl9rkcfwA
CBS file has a lot more content than the first one. (12MB vs 1 MB)
I rebooted after running SFC and the diagnostic follows:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
Error: 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0PlvAfN6I0nmkvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Sunday, August 19, 2012 6:05 PM -
Heh - a lot of work that the CheckSUR tool does also gets logged in the CBS system.
Interestingly, the same corrupt file as before was found by the last run of SFC - which means that either something is corrupting it on the fly, or that it was never replaced. Having said that, I deleted the file completely from my test rig, with no ill effect.
Let's check the file anyhow - please run the following commands and post the results.
DIR C:\Windows\Help\mui\0409
ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
I need to play a bit and see if I can generate a similar error to yours :) - back tomorrow (UK time!)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Sunday, August 19, 2012 7:22 PM
Sunday, August 19, 2012 7:21 PMModerator -
Thanks Noel.
Here are the results.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>DIR C:\Windows\Help\mui\0409
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\Help\mui\0409
08/19/2012 12:52 PM <DIR> .
08/19/2012 12:52 PM <DIR> ..
06/10/2009 04:41 PM 85,096 aclui.CHM
06/10/2009 03:41 PM 342,365 adam.CHM
06/10/2009 03:41 PM 472,260 adfs.CHM
06/10/2009 03:41 PM 20,562 adsiedit.CHM
06/10/2009 03:41 PM 333,654 ad_ds.CHM
06/10/2009 04:42 PM 46,942 applocker_help.CHM
06/10/2009 03:42 PM 53,470 appserver.CHM
06/10/2009 04:42 PM 372,080 authfw.CHM
06/10/2009 04:42 PM 112,877 authm.CHM
06/10/2009 03:42 PM 116,965 backup.CHM
06/10/2009 03:42 PM 211,253 bitssrv.CHM
06/10/2009 04:43 PM 155,016 certmgr.CHM
06/10/2009 03:43 PM 190,421 certsvr.CHM
06/10/2009 03:43 PM 81,738 certtmpl.CHM
06/10/2009 04:40 PM 125,501 cliconf.chm
06/10/2009 03:43 PM 344,970 cluadmin.CHM
06/10/2009 04:43 PM 74,218 cmak_ops.CHM
06/10/2009 04:44 PM 95,982 comexp.CHM
06/10/2009 04:44 PM 188,582 connmgr.CHM
06/10/2009 04:44 PM 252,657 devmgr.CHM
06/10/2009 03:44 PM 281,966 dfs2.CHM
06/10/2009 03:44 PM 290,126 dhcp.CHM
06/10/2009 04:45 PM 79,785 diskmgt.CHM
06/10/2009 03:45 PM 471,595 dnsmgr.CHM
06/10/2009 03:45 PM 256,682 domadmin.CHM
06/10/2009 03:45 PM 94,745 dsac.CHM
06/10/2009 03:45 PM 123,456 dsadmin.CHM
06/10/2009 03:46 PM 73,914 dssite.CHM
06/10/2009 04:46 PM 74,963 eventviewer.CHM
06/10/2009 03:46 PM 85,113 faxcons.CHM
06/10/2009 03:46 PM 159,103 features.CHM
06/10/2009 04:46 PM 37,281 file_srv.CHM
06/10/2009 03:46 PM 30,084 fsm.CHM
06/10/2009 03:46 PM 99,804 fsrm.CHM
06/10/2009 04:47 PM 44,457 gpedit.CHM
06/10/2009 03:47 PM 459,057 gpmc.CHM
06/10/2009 03:47 PM 243,079 hra.CHM
06/10/2009 04:47 PM 53,873 ieakmmc.CHM
06/10/2009 04:47 PM 139,846 iismmc.CHM
06/10/2009 04:48 PM 528,512 inetsrvmmc.CHM
06/10/2009 04:48 PM 37,962 ipsecmonitor.CHM
06/10/2009 04:48 PM 56,944 ipsecpolicy.CHM
06/10/2009 04:48 PM 29,914 iscsi_init.CHM
06/10/2009 04:48 PM 62,468 lug.CHM
06/10/2009 03:56 PM 310,307 mail.chm
06/10/2009 03:48 PM 32,302 migration.CHM
06/10/2009 04:49 PM 54,320 mmc.CHM
06/10/2009 04:40 PM 93,297 msdasc.chm
06/10/2009 04:49 PM 288,691 msmq.CHM
06/10/2009 05:22 PM 90,909 msorcl32.chm
06/10/2009 04:49 PM 79,093 nap.CHM
06/10/2009 03:49 PM 29,124 nas.CHM
06/10/2009 04:49 PM 53,914 netcfg.CHM
06/10/2009 04:50 PM 42,931 nfs_.CHM
06/10/2009 03:50 PM 242,498 nfs__lh.CHM
06/10/2009 03:50 PM 261,561 nlbmgr.CHM
06/10/2009 03:50 PM 74,219 ocsp.CHM
06/10/2009 04:40 PM 94,640 odbcinst.chm
06/10/2009 05:22 PM 126,122 odbcjet.chm
06/10/2009 04:50 PM 55,714 perfmon.CHM
06/10/2009 03:50 PM 37,508 pkiview.CHM
06/10/2009 04:50 PM 67,841 pmc.CHM
06/10/2009 04:51 PM 30,083 qos.CHM
06/10/2009 03:51 PM 408,580 radius.CHM
06/10/2009 04:51 PM 32,881 regedit32.CHM
06/10/2009 04:51 PM 35,087 reliab.CHM
06/10/2009 04:51 PM 32,913 resmon.CHM
11/04/2010 09:07 PM 241,169 rms_help.CHM
06/10/2009 03:52 PM 135,366 rmt.CHM
06/10/2009 03:52 PM 458,440 rras.CHM
06/14/2009 03:49 AM 33,611 rsat_client.CHM
06/10/2009 04:52 PM 20,698 rsop.CHM
06/10/2009 04:52 PM 19,155 saferconcepts.CHM
06/10/2009 03:52 PM 52,538 sanmgr.CHM
06/10/2009 04:52 PM 49,468 scanmanagement.CHM
06/10/2009 03:53 PM 40,760 schmmgmt.CHM
06/10/2009 04:53 PM 25,306 snmp.CHM
06/10/2009 04:53 PM 19,391 spolsconcepts.CHM
06/10/2009 04:40 PM 94,792 sqlsodbc.chm
06/10/2009 04:40 PM 81,564 sqlsoldb.chm
06/10/2009 03:53 PM 51,367 storagemgmt.CHM
06/10/2009 03:53 PM 45,168 stor_expl.CHM
06/10/2009 04:54 PM 70,460 sua.CHM
06/10/2009 04:54 PM 28,672 sys_srv.CHM
06/10/2009 04:54 PM 64,597 taskscheduler.CHM
06/10/2009 04:54 PM 30,960 tcpip.CHM
06/10/2009 04:54 PM 59,267 tpmadmin.CHM
06/10/2009 03:56 PM 151,250 tscc.CHM
06/10/2009 03:54 PM 78,540 ts_admin.CHM
06/10/2009 03:55 PM 115,921 ts_gateway.CHM
06/10/2009 03:55 PM 102,367 ts_license.CHM
06/10/2009 03:55 PM 49,218 ts_manager.CHM
06/10/2009 03:55 PM 28,835 ts_remotedesktops.CHM
06/10/2009 03:55 PM 73,201 ts_remoteprograms.CHM
06/10/2009 03:55 PM 89,148 ts_workspace.CHM
06/10/2009 03:56 PM 340,740 uim.CHM
09/07/2009 03:28 PM 77,078 virtualpc.chm
06/10/2009 03:56 PM 80,094 virtual_help.CHM
06/10/2009 03:56 PM 24,005 w7_tablet_sm.CHM
06/10/2009 03:56 PM 264,123 wds.CHM
06/10/2009 04:40 PM 1,828,821 WindowsPowerShellHelp.chm
06/10/2009 04:56 PM 30,027 wmicontrol.CHM
06/10/2009 03:56 PM 127,890 wsrm.CHM
06/10/2009 03:56 PM 186,770 wsus.CHM
104 File(s) 15,336,650 bytes
2 Dir(s) 55,822,528,512 bytes freeC:\Windows\system32>ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
C:\Windows\Help\mui\0409\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>
Kristina Weissenburg
Sunday, August 19, 2012 7:28 PM -
There's something odd there - you have more than twice as many files in the folder as I do!
Is this machine in use on a domain network? - what other major software is installed? some of the files appear to be associated with the Remote Server Admin Tools add-on.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 8:05 PMModerator -
This is my personal machine, however I use VPN to access my work Domain every day. So my machine is authenticated daily onto my company's network. (It was not connected to the company domain during all the times that I gathered the diagnostics and ran the .exe's you requested). I have all the normal apps installed (Office 2007, SQL Server 2008 R2, Visual Studio 2008 and 2010, Roxio CD creator software, SnagIt, SQL Sentry Plan Explorer, most recent install was Magix Video back in July (easy rescue your videotapes), Firefox, Google Chrome. I installed MS Remote Desktop Connection Manager when I first bought the machine, so I can manage my RDP sessions when I am on the company network. (I am the SQL Server DBA). I could ask another employee who also works remotely in the same manner that I do to send me the contents of the same directory you asked for to do a comparison if that would help. Thanks. Tina
Kristina Weissenburg
- Edited by KJW_SQLDBA Sunday, August 19, 2012 8:26 PM
Sunday, August 19, 2012 8:26 PM -
Phew :) I thought for a minute we had some weird stuff going on!
It does mean I'll have to be a little more careful about potential fixes, though, as I'm not totally certain what effects may carry through to that side of things (I don't think anything should but...)
On the plus side, does it mean I can assume a reasonably high competence in command prompt?
Please export the HKEY_USERS\S-1-5-20 key from regedit to a .REG file, and upload it to your public SkyDrive - post a link in your reply.
Please also run the following commands and post the results.
DIR C:\Windows\ServiceProfiles\NT*.* /ah
DIR C:\Windows\ServiceProfiles\t*.* /s
DIR C:\Windows\System32\Catroot2
DIR C:\Windows\SoftwareDistribution
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Sunday, August 19, 2012 9:17 PM correct typos
Sunday, August 19, 2012 8:47 PMModerator -
I'd say fairly high competence! I don't know all the commands, but know enough to be dangerous! :-)
The reg key is uploaded: https://skydrive.live.com/redir?resid=11FA0B3417430472!250&authkey=!AJwwMfQBivb14Tc
I received error messages for the first 2 directory commands.
I have 2 folders in the C:\Windows\ServiceProfiles folder --> LocalService and NetworkService. Each has the 9 basic folders (Desktop, Documents, Downloads, etc). Do you want the contents of LocalService and NetworkService?
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>DIR C:Windows\ServiceProfiles\NT*.* /ah
The system cannot find the path specified.C:\Windows\system32>DIR C:Windows\ServiceProfiles\t*.* /s
The system cannot find the path specified.C:\Windows\system32>DIR C:\Windows\System32\Catroot2
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\System32\Catroot2
08/17/2012 06:32 PM <DIR> .
08/17/2012 06:32 PM <DIR> ..
08/19/2012 12:56 PM 112,106 dberr.txt
08/19/2012 12:56 PM 8,192 edb.chk
08/19/2012 12:58 PM 65,536 edb.log
08/17/2012 06:09 PM 65,536 edb004D7.log
07/13/2009 11:46 PM 65,536 edbres00001.jrs
07/13/2009 11:46 PM 65,536 edbres00002.jrs
08/17/2012 06:32 PM <DIR> {127D0A1D-4EF2-11D1-8608-00C04FC295EE}
08/17/2012 06:32 PM <DIR> {F750E6C3-38EE-11D1-85E5-00C04FC295EE}
6 File(s) 382,442 bytes
4 Dir(s) 55,805,440,000 bytes freeC:\Windows\system32>DIR C:\Windows\SoftwareDistribution
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\SoftwareDistribution
01/15/2011 05:24 PM <DIR> .
01/15/2011 05:24 PM <DIR> ..
08/19/2012 03:41 PM <DIR> AuthCabs
01/05/2011 12:43 AM <DIR> DataStore
08/19/2012 11:18 AM <DIR> Download
08/17/2012 06:06 PM <DIR> PostRebootEventCache
08/19/2012 01:08 PM 900,506 ReportingEvents.log
08/19/2012 10:51 AM <DIR> ScanFile
06/24/2012 09:23 AM <DIR> SelfUpdate
01/15/2011 02:37 PM <DIR> WuRedir
1 File(s) 900,506 bytes
9 Dir(s) 55,805,440,000 bytes freeC:\Windows\system32>
Kristina Weissenburg
Sunday, August 19, 2012 8:58 PM -
(that's what comes of trying to type with a technocolour migraine going on!)
Sorry - I got two of the commands mistyped...please run these two again....
DIR C:\Windows\ServiceProfiles\NT*.* /ah
DIR C:\Windows\ServiceProfiles\t*.* /s
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 9:16 PMModerator -
Here is the output. This can all wait till tomorrow! Feel better!
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>DIR C:\Windows\ServiceProfiles\NT*.* /ah
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\ServiceProfiles
File Not Found
C:\Windows\system32>DIR C:\Windows\ServiceProfiles\t*.* /s
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\ServiceProfiles\LocalService\AppData\Local
07/13/2012 02:49 PM <DIR> Temp
0 File(s) 0 bytesDirectory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp
01/24/2011 01:16 PM <DIR> TfsStore
0 File(s) 0 bytesDirectory of C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStor
e10/03/2011 10:06 AM <DIR> Tfs_DAV
0 File(s) 0 bytesDirectory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\
Windows07/13/2009 11:45 PM <DIR> Templates
0 File(s) 0 bytesDirectory of C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetwor
king\3168ba2136678329180997d5ea54982a891a3c48.HomeGroupClassifier\d5a75582ef50ec
f4062ba6872c95d0af\grouping08/19/2012 03:30 PM 65,536 tmp.edb
1 File(s) 65,536 bytesDirectory of C:\Windows\ServiceProfiles\NetworkService\AppData\Local
08/19/2012 01:08 PM <DIR> Temp
0 File(s) 0 bytesDirectory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
t\SoftwareProtectionPlatform07/14/2012 08:57 PM 7,382,971 tokens.bar
08/19/2012 09:41 AM 0 tokens.dat
2 File(s) 7,382,971 bytesDirectory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
t\Windows07/13/2009 11:45 PM <DIR> Templates
0 File(s) 0 bytesTotal Files Listed:
3 File(s) 7,448,507 bytes
6 Dir(s) 55,804,342,272 bytes freeC:\Windows\system32>
Kristina Weissenburg
Sunday, August 19, 2012 9:23 PM -
If I navigate one directory below ServiceProfiles to LocalService or NetworkService I do get files beginning with NT (not sure if this was what you were looking for). Pasting for LocalService and NetworkService just in case.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\localservice\NT*.* /ah
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\ServiceProfiles\localservice
08/19/2012 03:30 PM 262,144 NTUSER.DAT
07/14/2009 02:12 AM 1,024 NTUSER.DAT.LOG
08/19/2012 03:30 PM 226,304 NTUSER.DAT.LOG1
07/13/2009 11:45 PM 0 NTUSER.DAT.LOG2
07/14/2009 12:01 AM 65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TM.blf
07/14/2009 12:01 AM 524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TMContainer00000000000000000001.regtrans-ms
07/14/2009 12:01 AM 524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TMContainer00000000000000000002.regtrans-ms
08/17/2012 07:55 PM 65,536 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
2b2306}.TM.blf
08/17/2012 07:55 PM 524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
2b2306}.TMContainer00000000000000000001.regtrans-ms
08/17/2012 07:55 PM 524,288 NTUSER.DAT{03549658-e8c2-11e1-a0e1-5c260a
2b2306}.TMContainer00000000000000000002.regtrans-ms
08/17/2012 06:32 PM 65,536 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
2b2306}.TM.blf
08/17/2012 06:32 PM 524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
2b2306}.TMContainer00000000000000000001.regtrans-ms
08/17/2012 06:32 PM 524,288 NTUSER.DAT{79a3c959-e8bf-11e1-9432-5c260a
2b2306}.TMContainer00000000000000000002.regtrans-ms
01/18/2012 12:20 PM 65,536 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
34d0a5}.TM.blf
01/18/2012 12:20 PM 524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
34d0a5}.TMContainer00000000000000000001.regtrans-ms
01/18/2012 12:20 PM 524,288 NTUSER.DAT{84986600-3092-11e1-9012-c0cb38
34d0a5}.TMContainer00000000000000000002.regtrans-ms
16 File(s) 4,945,920 bytes
0 Dir(s) 55,803,899,904 bytes freeC:\Users\tweissenburg>DIR C:\Windows\ServiceProfiles\networkservice\NT*.* /ah
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\ServiceProfiles\networkservice
08/19/2012 03:30 PM 524,288 NTUSER.DAT
07/14/2009 02:12 AM 1,024 NTUSER.DAT.LOG
08/19/2012 03:30 PM 226,304 NTUSER.DAT.LOG1
07/13/2009 11:45 PM 0 NTUSER.DAT.LOG2
07/14/2009 12:01 AM 65,536 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TM.blf
07/14/2009 12:01 AM 524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TMContainer00000000000000000001.regtrans-ms
07/14/2009 12:01 AM 524,288 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0b
cde3ec}.TMContainer00000000000000000002.regtrans-ms
08/17/2012 07:55 PM 65,536 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
2b2306}.TM.blf
08/17/2012 07:55 PM 524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
2b2306}.TMContainer00000000000000000001.regtrans-ms
08/17/2012 07:55 PM 524,288 NTUSER.DAT{0354965c-e8c2-11e1-a0e1-5c260a
2b2306}.TMContainer00000000000000000002.regtrans-ms
08/17/2012 06:32 PM 65,536 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
2b2306}.TM.blf
08/17/2012 06:32 PM 524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
2b2306}.TMContainer00000000000000000001.regtrans-ms
08/17/2012 06:32 PM 524,288 NTUSER.DAT{79a3c95d-e8bf-11e1-9432-5c260a
2b2306}.TMContainer00000000000000000002.regtrans-ms
01/18/2012 12:20 PM 65,536 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
6e6963}.TM.blf
01/18/2012 12:20 PM 524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
6e6963}.TMContainer00000000000000000001.regtrans-ms
01/18/2012 12:20 PM 524,288 NTUSER.DAT{849865fc-3092-11e1-9012-806e6f
6e6963}.TMContainer00000000000000000002.regtrans-ms
16 File(s) 5,208,064 bytes
0 Dir(s) 55,803,457,536 bytes freeC:\Users\tweissenburg>
Kristina Weissenburg
Sunday, August 19, 2012 9:36 PM -
I've had a quick look through your registry export, and the only thing that stands out for me is that there appears to be a CA Certificate installed where there didn't oughta be :) - but I'm not certain enough of that to do anything about it without further investigation, and it could be normal for a domain-connected PC anyhow.
Please open certmgr.msc
Do you have any certificates in the 'Enterprise Trust' folder? (who from?)
Your tokens.dat file isn't being regenerated the way it should be - it's currently a 0-byte file, whereas it should be around 7MB.
The Network Service hive seems to be being updated properly.
I wonder - something seems to have happened to the system on or around the 14th July - please check the Update History, and see if any updates were successfuly installed that day - or whether all updates have failed since then (or when was the last successful updates)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 19, 2012 10:15 PMModerator -
There are no certificates in the Enterprise Trust folder.
I've provided a Word doc that shows all the updates I've gotten since 7/14. I was able to get updates on 8/14 and 8/17 (and this was after I started receiving the WGA messages). https://skydrive.live.com/redir?resid=11FA0B3417430472!251&authkey=!AEFwBlTbzAmhtp0
Tina
Kristina Weissenburg
Sunday, August 19, 2012 10:39 PM -
That pretty much eliminates some of the 'usual suspects', then.
Please run the following commands...
DIR C:\Windows\System32\7b*.*
ICACLS C:\Windows\System32\7b*.*
Please also export the Windows System and Application Event logs (from Event Viewer) then compress and upload them to yor SkyDrive and post the link.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 8:34 AMModerator -
Application log: https://skydrive.live.com/redir?resid=11FA0B3417430472!252&authkey=!AIV1bITtgNvwYWE
System log: https://skydrive.live.com/redir?resid=11FA0B3417430472!253&authkey=!AAvMG9Nytv3G3Rk
CMD results:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>DIR C:\Windows\System32\7b*.*
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\System32
File Not Found
C:\Windows\system32>ICACLS C:\Windows\System32\7b*.*
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Users:(I)(RX)C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Users:(I)(RX)Successfully processed 2 files; Failed processing 0 files
C:\Windows\system32>
Kristina Weissenburg
Monday, August 20, 2012 1:19 PM -
Now THAT is interesting!
Please run the following commands
ATTRIB C:\Windows\System32\7B*.*
ATTRIB -R -H -S C:\Windows\System32\7B*.*
ATTRIB C:\Windows\System32\7B*.*
post the result, reboot, and post another MGADiag report.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 1:26 PMModerator -
Here you go.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
A H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
A H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0C:\Windows\system32>ATTRIB -R -H -S C:\Windows\System32\7B*.*
C:\Windows\system32>ATTRIB C:\Windows\System32\7B*.*
A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0C:\Windows\system32>
---------------
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
Error: 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W96I0nmkvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Monday, August 20, 2012 1:45 PM -
What happens if you attempt validation at www.microsoft.com/genuine/validate now?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 1:55 PMModerator -
It's still sitting there just spinning after 6 minutes. Should I let it run?
Kristina Weissenburg
Monday, August 20, 2012 2:05 PM -
Nah - it's obviously stalled.
I need to pop out for a bit - the walk may clear my head as well :)
back soon.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 2:09 PMModerator -
OK - rechecking, it looks as though my 'normal' box for some reason had the attributes mis-set on the 7B*.* files - they should in fact be hidden.
Please sun the following commands and post the results.
ATTRIB +H C:\Windows\System32\7B*.*
DIR C:\Windows\System32 /AR /S /b
DIR C:\Windows\SysWOW64 /AR /S /b
DIR C:\Windows\ServiceProfiles /AR /S /b
DIR C:\Windows /AL /S /b
I'm slowly wading my way through the Event logs - nothing yet, though
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 4:33 PMModerator -
According to the EvetnViewer logs, your problems began whe you got a little registry corruption between 13th and 14th Aug.
I don't suppose your system has any System Restore points for the period just prior to that? If so, try going back to that (you'll have to reinstall all updates and programs installed since)
It may be worth trying to reconstruct the licensing database using esentutl - but I'm by no means certain of all the ramifications.
The actual problem is defined by
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005
There is nothing I can find in Google about this error but here goes....run the following command and post the results...
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0" /S
ALso, please find the entry in Regedit, and let me know the permissions on it
Run the following commands and post the results
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a" ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms ICACLS %windir%\system32\sppwinob.dll ATTRIB %windir%\system32\sppwinob.dll ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 5:06 PMModerator -
here are the results from CMD -- will work on the requests in your next post for Reg settings. And no--unfortunately my earliest restore point is 8/8.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>ATTRIB +H C:\Windows\System32\7B*.*
C:\Windows\system32>DIR C:\Windows\System32 /AR /S /b
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\DelDrv64.exe
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\Setup.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstAR.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCN.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstCZ.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDE.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstDK.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstES.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFI.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstFR.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstGR.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstHU.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstID.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstIT.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstJP.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstKR.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNL.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstNO.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPL.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstPT.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstRU.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstSE.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTH.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTR.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstTW.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\DLL\IJInstUS.dll
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstAR.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCN.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstCZ.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDE.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstDK.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstES.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFI.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstFR.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstGR.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstHU.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstID.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstIT.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstJP.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstKR.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNL.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstNO.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPL.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstPT.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstRU.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstSE.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTH.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTR.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstTW.ini
C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series\RES\STRING\IJInstUS.ini
C:\Windows\System32\config\systemprofile\Contacts
C:\Windows\System32\config\systemprofile\Documents
C:\Windows\System32\inetsrv\config\schema\ASPNET_schema.xml
C:\Windows\System32\inetsrv\config\schema\Ftp_schema.xml
C:\Windows\System32\inetsrv\config\schema\FX_schema.xml
C:\Windows\System32\inetsrv\config\schema\IIS_schema.xml
C:\Windows\System32\inetsrv\config\schema\rscaext.xml
C:\Windows\System32\inetsrv\config\schema\WebDAV_schema.xml
C:\Windows\System32\Macromed\Flash\Flash64_11_3_300_271.ocx
C:\Windows\System32\restore\MachineGuid.txtC:\Windows\system32>DIR C:\Windows\SysWOW64 /AR /S /b
C:\Windows\SysWOW64\btwapi.dll
C:\Windows\SysWOW64\d2hPopup.ocx
C:\Windows\SysWOW64\config\systemprofile\Contacts
C:\Windows\SysWOW64\config\systemprofile\Links
C:\Windows\SysWOW64\config\systemprofile\Saved Games
C:\Windows\SysWOW64\config\systemprofile\Searches
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_3_300_271.ocxC:\Windows\system32>DIR C:\Windows\ServiceProfiles /AR /S /b
C:\Windows\ServiceProfiles\LocalService\Desktop
C:\Windows\ServiceProfiles\LocalService\Documents
C:\Windows\ServiceProfiles\LocalService\Downloads
C:\Windows\ServiceProfiles\LocalService\Favorites
C:\Windows\ServiceProfiles\LocalService\Links
C:\Windows\ServiceProfiles\LocalService\Music
C:\Windows\ServiceProfiles\LocalService\Pictures
C:\Windows\ServiceProfiles\LocalService\Videos
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu
C:\Windows\ServiceProfiles\NetworkService\Desktop
C:\Windows\ServiceProfiles\NetworkService\Documents
C:\Windows\ServiceProfiles\NetworkService\Downloads
C:\Windows\ServiceProfiles\NetworkService\Favorites
C:\Windows\ServiceProfiles\NetworkService\Links
C:\Windows\ServiceProfiles\NetworkService\Music
C:\Windows\ServiceProfiles\NetworkService\Pictures
C:\Windows\ServiceProfiles\NetworkService\Videos
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start MenuC:\Windows\system32>DIR C:\Windows /AL /S /b
C:\Windows\SysWOW64\config\systemprofile\Application Data
C:\Windows\SysWOW64\config\systemprofile\Cookies
C:\Windows\SysWOW64\config\systemprofile\Local Settings
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Application Data
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\History
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Temporary Internet FilesC:\Windows\system32>
Kristina Weissenburg
Monday, August 20, 2012 5:18 PM -
Permissions on the reg key:
SYSTEM: Full Control ALLOW; Read ALLOW
Administrators: Full Control ALLOW; Read ALLOW
USERs: Read ALLOW
Trusted Installer: Full Control ALLOW; Read ALLOW
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctional
ity/agent/7.0" /SHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0
ModuleId REG_SZ 179b8a65-b0f6-41d9-acea-12006ef9b32a
IsService REG_DWORD 0x1C:\Windows\system32>
C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12
006ef9b32a"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a
ManifestFile REG_SZ %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
PluginFile REG_SZ %windir%\system32\sppwinob.dll
C:\Windows\system32>ICACLS %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS %windir%\system32\sppwinob.dll
C:\Windows\system32\sppwinob.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ATTRIB %windir%\system32\sppwinob.dll
A C:\Windows\system32\sppwinob.dllC:\Windows\system32>
C:\Windows\system32>ATTRIB %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
A C:\Windows\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-msC:\Windows\system32>DIR %windir%\system32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
Volume in drive C is OS
Volume Serial Number is 9ECD-D571Directory of C:\Windows\system32\spp\plugin-manifests-signed
11/20/2010 08:43 AM 7,298 sppwinob-spp-plugin-manifest-signed.xrm-ms
1 File(s) 7,298 bytes
0 Dir(s) 55,685,804,032 bytes freeC:\Windows\system32>
Kristina Weissenburg
Monday, August 20, 2012 5:24 PM -
Now why on earth do Canon find it necessary to hide their driver uninstallers and/or make them Read-only??
I can see no problems anywhere in that lot :(
I cannot find any decent references anywhere to the precise error we're seeing, or even close approximations of it.
The consensus is that the bare 0xc000034 error in the MGADiag report can only be cured by a repair install (or even a clean install) - which annoys me when we've got this close to identifying the problem!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Monday, August 20, 2012 6:27 PM
Monday, August 20, 2012 6:26 PMModerator -
So does that mean we're giving up? There's really no way I can reinstall this machine. Most of my programs come from my company and I work remotely in TX and they are in CA. So until I went out there to reinstall everything I would be unable to work -- and as a DBA I really don't think that's an option. :-)
What are the ramifications of leaving the computer in the state it's currently in (with the WGA messages)?
Thanks. Tina
Kristina Weissenburg
Monday, August 20, 2012 7:09 PM -
Give up? Me? - just offering you a way out! :)
You're nowhere near my record thread yet - 100+ posts.
A repair install in theory wouldn't lose you anything, but there are obviously risks to the procedure. A clean install would entail reinstalling everything from scratch.
I'll do some more searching (and try and review the registry you uploaded) - but I have to be out most of the day tomorrow so don't expect too much until Wednesday :)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 7:46 PMModerator -
:-) Thanks!
I really appreciate your diligence on this. Obviously reinstalling is a last resort.
We're only up to 35 posts -- so we've got a ways to go! J/K! I'd rather take the time to try to figure out the least intrusive way to get this fixed if at all possible. Thanks again. Tina
Kristina Weissenburg
Monday, August 20, 2012 8:05 PM -
Ignore that last - I got my threads confused! (dealing with two very similar problems in the same forum)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, August 20, 2012 8:36 PMModerator -
This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th . I checked if any programs were installed those days -- there was one. On 7/13, I installed Silverlight version 5.1.10411.0.
Thanks. Tina
Kristina Weissenburg
Tuesday, August 21, 2012 10:14 PM -
This is probably nothing, but you mentioned that it appears the corruption occurred between July 13th and 14th . I checked if any programs were installed those days -- there was one. On 7/13, I installed Silverlight version 5.1.10411.0.
Thanks. Tina
Kristina Weissenburg
I certainly wouldn't expect Silverlight to cause any problem! Having said that I am aware of one or two cases where the claim was made that installing it caused odd problems (I attributed it to PEBCAK, rather than anything else).
You could try uninstalling it to see what happens - it should come out cleanly.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Tuesday, August 21, 2012 10:58 PMModerator -
yeah. I didn't think it would cause any issues either but thought I'd mention it.
Uninstalling changed nothing as expected.
Kristina Weissenburg
Wednesday, August 22, 2012 12:15 AM -
Sorry I've not got back sooner - it's been a little hectic in 'real life' this week, and this is only a quick note to let you know that I haven't forgotten you!
I'll be back tomorrow with some more suggestions.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Thursday, August 23, 2012 8:17 AMModerator -
Trying to review the thread, and confusing myself even further here. (I hate databases! - the registry is nothing more than a database that holds the various bits of Windows and installed apps together)
I'm having problems making sense out of it, so I'll have to check myself before committing you to anything. That's going to be tomorrow morning's first job - promise!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Friday, August 24, 2012 6:46 PMModerator -
Hate databases!! SHouldn't say that to a SQL DBA!! :-)
Thanks for your efforts on this!
Kristina Weissenburg
Friday, August 24, 2012 7:28 PM -
I had a feeling that'd get a rise out of you :)
A quick Summary of what we've done....
CHKDSK and SFC run - no problem in CHKDSK, a 'fixed' problem in SFC
Licensing Store rebuilt - but SLUI fails with 0xD0000034 error
CheckSUR run - with a clean bill of health
SFC run again - and the same file had to be fixed again (C:\Windows\Help\mui\0409\diskmgt.chm)
The following files and folders appear to be OK
ServiceProfiles
Catroot2
SoftwareDistribution
7b*.* licensing files
sppwinob.dll
Event Logs show a licensing problem with
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0xD0000034, 0x80004005
So far, I've been unable to find ANY real references to help me here! :(
..and my 2G connection has been so flaky over the past few days that I have to try everything 5 times:(
(Who said the Cloud is the answer? They were asking the wrong question!)
I'll be on a landline this afternoon so more later - from the pub :)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Saturday, August 25, 2012 9:00 AMModerator -
Well, I think I've been to every relevant link in Google!
...with no success :(
The only practical solution appears to be a repair install - tbut even there, from the number of posts that have been made suggesting that, there has been no feedack at all as to whether it worked or not.
If you're game for it, you'll need a proper Win7 disk with SP1 embedded - if you don't have one handy, you can Download the SP1 Refresh for your chosen language and edition from the links on these pages...
http://www.heidoc.net/joomla/technology-science/microsoft
The links are for downloads from the Digital River server run for MS.
Once downloaded, burn it (don't just copy the file!) to a DVD and check that it boots the system OK (but ONLY that, for the moment) then read and digest the instructions for a repair install here.... http://www.sevenforums.com/tutorials/3413-repair-install.html and make sure you understand them before setting out on the repair itself.
If you're not prepared for the risks entailed in that, then all I can suggest is that you see if MS WGA support can assist -
WGA Support can be found here
North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
Outside North America:
http://support.microsoft.com/contactus/?ws=support#tab0
Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Sunday, September 9, 2012 2:54 PM
- Marked as answer by KJW_SQLDBA Monday, September 10, 2012 3:44 PM
Sunday, August 26, 2012 12:33 PMModerator -
Thanks Noel, I'll read through everything and decide if I want to try the repair install or not. Thanks for the link to support as well.
Tina
Kristina Weissenburg
Sunday, August 26, 2012 5:40 PM -
One more question, when reviewing the results of the MGDIAG, should the Windows Product Key (first 2 groupings of characters have been obfuscating) match the Product Key that is on the COA sticker? Seems like yes. However, the last 3 groupings in MGDIAG do not match the last 3 groupings of characters shown on my COA. Thanks.
Kristina Weissenburg
Sunday, August 26, 2012 6:44 PM -
Computers that come pre-installed with Windows from large manufacturers usually come with two Product Keys.
OEM SLP: This is the key that came in Windows (from the factory). It works by connecting to a BIOS flag (the SLIC table) found only on computers from that Manufacturer. Once it sees the correct BIOS flag, it self activates.
COA SLP: This is the key seen on the sticker located on the side, bottom or in the battery compartment of your machine. The purpose of this key is to be used in the case the OEM SLP self-activation stops working for whatever reason.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, August 26, 2012 7:01 PMModerator -
Thanks for your help on this problem, Noel. I ended up speaking with MS Support who gave conflicting diagnoses and in the end could not help me. First one of the engineers said the problem was that I had a domain policy setting that was prohibiting me from validating Windows. So I removed my computer from the domain, rebooted, retried validating with no success. So the next engineer said that I had some services that needed to be repaired and apparently the only way to repair them was to do an upgrade of Windows. So they attempted to do so and after a few hours it almost got to the end, but it failed. So thankfully the install rolled back. But now I'm the same place that I was. Their only suggestion was to perform a full re-install of Windows. So at this point I've decided to live with the situation until I have time and all the work software to get my computer fully functional again. Tina
Kristina Weissenburg
Monday, September 10, 2012 4:53 PM -
At least I didn't miss anything obvious, then :)
Just for interest - could you please post a new MGADiag report so we can see if MS actually managed to make any significant progress?
Thanks VERY much for coming back to let us know - even bad news like this is good for us, as it helps us prove to MS that we are at least as good as the in-house support, and occasionally it even results in us getting a little crucial snippet of information that solves the problem next time around (or the time after that...)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, September 10, 2012 5:15 PMModerator -
Interestingly no one at MS ran MGDiag. They all seemed totally stumped on what error code 0xD0000034 actuall means. No one had ever seen it.
Here are the latest results.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc0000034
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {DC3D1A68-73A3-497D-B605-B7E6A7AD7764}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DC3D1A68-73A3-497D-B605-B7E6A7AD7764}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2830686900-3038575540-1413554922</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20120509000000.000000+000</Date></BIOS><HWID>8C183D07018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>E2 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7A8B80AE203F586</Val><Hash>A+RBzYuwSRW1Ud8gTcpr7o1mHy8=</Hash><Pid>89388-707-4972157-65619</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
Error: 0xC0000034Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:18:2012 20:57
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAgABAAAAAgABAAEAln1cqU40UzmAC7j0wHw+W9J53oikvJYk4mxcXQ==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL E2
FACP DELL E2
HPET DELL E2
BOOT DELL E2
MCFG A M I GMCH945.
TCPA
SLIC DELL E2
SSDT PmRef CpuPmKristina Weissenburg
Monday, September 10, 2012 11:26 PM -
Still the same as far as I can tell :(
I suspect that it's a permissions thing somewhere - but I have no idea where!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Tuesday, September 11, 2012 7:21 AMModerator