Answered by:
My windows is all of a sudden saying its no longer genuine after formatting and a fresh install.

Question
-
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.111025-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: cfb3e52c-d707-4861-af51-11b27ee6169c
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00182-797-308778-02-3081-7601.0000-0292012
Installation ID: 013946086045019865730524702702273421543425173325566910
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: WTDC3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 29/01/2012 5:48:35 PM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000040
Event Time Stamp: 1:29:2012 17:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
HWID Data-->
HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAeqgeKIimBgwKM0aDdCb2Dka8zIBCPjIoEBbDKDimKAoqhQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
DBGP A_M_I_ OEMDBGP
HPET A_M_I_ OEMHPET
BOOT A_M_I_ OEMBOOT
MCFG A_M_I_ OEMMCFG
OEMX A_M_I_ OEMXLIC
ECDT A_M_I_ OEMECDT
OEMB A_M_I_ AMI_OEM
ATKG A_M_I_ OEMATKG
SSDT PmRef CpuPm
Sunday, January 29, 2012 7:53 AM
Answers
-
"opd223" wrote in message news:f0a37690-a6f1-48a6-a270-fd5434f1a267...
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
First parameter must be a file name pattern or "/?"
That didnt work. for some reason. would formatting again fix the problem?
Sorry – my fault – a Typo crept in.ICACLS /GRANT "NT Service\TrustedInstaller":(F)
Yes, a format would fix it, but that’s a little drastic :)A Repair install would probably fix it without needing to reinstall everything.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, February 14, 2012 10:26 PM
Saturday, February 11, 2012 9:16 AMModerator
All replies
-
"opd223" wrote in message news:f8efa8cb-225b-4b8b-ad59-fba0b4df3fd2...Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: WTDC3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 29/01/2012 5:48:35 PM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000040
Event Time Stamp: 1:29:2012 17:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Please open Windows Explorer and look for the fileC:\Windows\System32\SPPCEXT.DLLright-click on it and select Propertieswhat is the exact size of the file?If you click on the details tab, what does it say there?repeat for C:\Windows\SysWOW64\SPPCEXT.DLL as well -Please run the following commands in a Command Prompt window.ICACLS C:\Windows\System32\sppcext.dllICACLS C:\Windows\System32\en-us\sppcext.dll.muiICACLS C:\Windows\SysWOW64\sppcext.dllICACLS C:\Windows\SysWOW64\en-us\sppcext.dll.muiCopy/paste the results to your response.(to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.)post back with details, and we may be able to assist.Also, please attempt a System File Checker run – it may fix the problem (although it’s unlikely)SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, January 29, 2012 12:12 PMModerator -
C:\Windows\System32\SPPCEXT.DLL - Size - 1,111,552 bytes, Size on Disc - 1,114,112 bytesI dont have C:\Windows\SysWOW64\SPPCEXT.DLLMicrosoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>^V
'▬' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Scotty>ICACLS C:\Windows\System32\en-us\sppcext.dll.mui
C:\Windows\System32\en-us\sppcext.dll.mui NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Scotty>ICACLS C:\Windows\SysWOW64\sppcext.dll
C:\Windows\SysWOW64\sppcext.dll: The system cannot find the path specified.
Successfully processed 0 files; Failed processing 1 files
C:\Users\Scotty>ICACLS C:\Windows\SysWOW64\en-us\sppcext.dll.mui
C:\Windows\SysWOW64\en-us\sppcext.dll.mui: The system cannot find the path speci
fied.
Successfully processed 0 files; Failed processing 1 files
C:\Users\Scotty>Scan resultsMicrosoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>SFC /SCANNOW
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log
C:\Windows\system32>I tried to open the log but it says access denied.Sunday, January 29, 2012 8:34 PM -
"opd223" wrote in message news:f8efa8cb-225b-4b8b-ad59-fba0b4df3fd2...Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: WTDC3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 29/01/2012 5:48:35 PM
Windows Activation Technologies-->
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
The SLCEXT.DLL is not a genuine Windows file – you will need to replace it(You don’t have the SysWOW64 versions because you have a 32-bit installation, not a 64-bit one)To do this open an Elevated Command Prompt window, and typeTAKEOWN /F C:\windows\System32\slcext.dll /AICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)REN C:\Windows\System32\slcext.dll slc.oddSFC \SCANFILE=C:\Windows\System32\slcext.dllDO NOT reboot or shut the system down unless SFC succeeds!With any luck that will then replace the file .If not, COPY the file from the folderC:\Windows\winsxs\x86_microsoft-windows-security-spp-clientext_31bf3856ad364e35_6.1.7600.16385_none_cc9d4bf812728aaeto the C:\Windows\System32 folderand then you can rebootand run another MGADiag report
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, January 30, 2012 10:50 AMModerator -
Tried to do your things, the top bit didnt work so i copied the file from the folder, I had to kill explorer.exe before it would let me do it. ran another sfc scan and its saying the same message.
i ran the mgadiag again any way.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.111025-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: cfb3e52c-d707-4861-af51-11b27ee6169c
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00182-797-308778-02-3081-7601.0000-0292012
Installation ID: 013946086045019865730524702702273421543425173325566910
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: WTDC3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 31/01/2012 9:03:20 AM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000040
Event Time Stamp: 1:29:2012 17:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
HWID Data-->
HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAeqgeKIimBgwKM0aDdCb2Dka8zIBCPjIoEBbDKDimKAoqhQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
DBGP A_M_I_ OEMDBGP
HPET A_M_I_ OEMHPET
BOOT A_M_I_ OEMBOOT
MCFG A_M_I_ OEMMCFG
OEMX A_M_I_ OEMXLIC
ECDT A_M_I_ OEMECDT
OEMB A_M_I_ AMI_OEM
ATKG A_M_I_ OEMATKG
SSDT PmRef CpuPm
Monday, January 30, 2012 11:05 PM -
"opd223" wrote in message news:5770a967-f1fb-4d8a-80fe-96ce2018def1...
Tried to do your things, the top bit didnt work so i copied the file from the folder, I had to kill explorer.exe before it would let me do it. ran another sfc scan and its saying the same message.
i ran the mgadiag again any way.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: WTDC3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 31/01/2012 9:03:20 AM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000040
Event Time Stamp: 1:29:2012 17:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
OK – please check the permissions on the file using the following commandICACLS C:\Windows\System32\sppcext.dllpost the results.Then try SFC /SCANNOW again.Please create a Copy of your CBS.log file, and upload it to your public SkyDrive, and post a link here
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, January 30, 2012 11:33 PMModerator -
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Scotty>SFC /SCANNOW
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log
C:\Users\Scotty>Link to skydrive
https://skydrive.live.com/redir.aspx?cid=42a19dce13070118&resid=42A19DCE13070118!1231&parid=root
Tuesday, January 31, 2012 10:50 PM -
"opd223" wrote in message news:4bb48ef5-1ae7-4acb-a89e-eca5d286ec1f...
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
BUILTIN\Administrators:(RX)
NT AUTHORITY\SYSTEM:(RX)
BUILTIN\Users:(RX)
Successfully processed 1 files; Failed processing 0 files
I’ve uploaded a copy of the SLCEXT.DLL file to the above address – Save it to your desktopPlease upload your current copy of the file to your Skydrive so that I can take a look at it.Please replace your copy with my copy using the following procedureOpen an elevated Command prompt WindowAt the prompt, use the following commands (you can copy and past the block into the command prompt)TAKEOWN /F C:\windows\System32\slcext.dll /AICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)REN C:\Windows\System32\slcext.dll slcext.old2COPY %UserProfile%\Desktop\slcext.dll C:\Windows\System32ICACLS C:\Windows\System32\slcext.dll /grant “NT SERVICE\TrustedInstaller”:(F)ICACLS C:\Windows\System32\slcext.dllCopy and paste the results to your response – DO NOT reboot until you get my input!(but please let me know it you’re likely to be more than an hour – it’s getting near my bedtime<g>)Note that the last but one line may throw an error message 'Invalid Parameter....’If it does, then type it in instead, and then repeat the last line as well.(there seems to be a mismatch between the Windows and CP characters at this end!)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Wednesday, February 1, 2012 12:12 AM formatting
Tuesday, January 31, 2012 11:44 PMModerator -
My file https://skydrive.live.com/redir.aspx?cid=42a19dce13070118&resid=42A19DCE13070118!1232&parid=42A19DCE13070118!1195&authkey=!AC-wId0Ubu75dsY
Sorry im in Australia, so my day is your night.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>TAKEOWN /F C:\windows\System32\slcext.dll /A
SUCCESS: The file (or folder): "C:\windows\System32\slcext.dll" now owned by the
administrators group.
C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)
processed file: C:\Windows\System32\slcext.dll
Successfully processed 1 files; Failed processing 0 files
C:\Users\Scotty>REN C:\Windows\System32\slcext.dll slcext.old2
A duplicate file name exists, or the file
cannot be found.
C:\Users\Scotty>COPY %UserProfile%\Desktop\slcext.dll C:\Windows\System32
Overwrite C:\Windows\System32\slcext.dll? (Yes/No/All): yes
1 file(s) copied.
C:\Users\Scotty>Thursday, February 2, 2012 12:49 AM -
Sorry - I seem to have missed the notification on your response -
Please post a new MGADiag report
Please also post the results of the following command
ICACLS C:\Windows\System32\slcext.dll
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, February 6, 2012 11:08 AMModerator -
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll
C:\Windows\System32\slcext.dll BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Users:(I)(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Scotty>Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0x8007043c
Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
Windows Product ID: 00426-OEM-9179736-08778
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.111025-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>G2S </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300 </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
Error: 0x8007043C
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 2:5:2012 19:34
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x8007043c
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NgAAAAEABwABAAEAAAAAAAAAAgABAAEAeqgeKIimzIAGDAozRoN0JvYORrxCPjIoOKYoCiqF
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
DBGP A_M_I_ OEMDBGP
HPET A_M_I_ OEMHPET
BOOT A_M_I_ OEMBOOT
MCFG A_M_I_ OEMMCFG
OEMX A_M_I_ OEMXLIC
ECDT A_M_I_ OEMECDT
OEMB A_M_I_ AMI_OEM
ATKG A_M_I_ OEMATKG
SSDT PmRef CpuPm
Thursday, February 9, 2012 10:30 PM -
"opd223" wrote in message news:c7512273-8d99-4526-bf4b-53a91ea4d1fd...
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll
C:\Windows\System32\slcext.dll BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Users:(I)(RX)
The file is missing the permissions for TrustedInstaller – please open an Elevated Command Prompt window and run the following command -ICACLS /GRANT “NT Service/TrustedInstaller”:(F)The reboot and run another MGADiag report, and post the results.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothFriday, February 10, 2012 9:41 AMModerator -
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
First parameter must be a file name pattern or "/?"
ICACLS name /save aclfile [/T] [/C] [/L] [/Q]
stores the DACLs for the files and folders that match the name
into aclfile for later use with /restore. Note that SACLs,
owner, or integrity labels are not saved.
ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile
[/C] [/L] [/Q]
applies the stored DACLs to files in directory.
ICACLS name /setowner user [/T] [/C] [/L] [/Q]
changes the owner of all matching names. This option does not
force a change of ownership; use the takeown.exe utility for
that purpose.
ICACLS name /findsid Sid [/T] [/C] [/L] [/Q]
finds all matching names that contain an ACL
explicitly mentioning Sid.
ICACLS name /verify [/T] [/C] [/L] [/Q]
finds all files whose ACL is not in canonical form or whose
lengths are inconsistent with ACE counts.
ICACLS name /reset [/T] [/C] [/L] [/Q]
replaces ACLs with default inherited ACLs for all matching files.
ICACLS name [/grant[:r] Sid:perm[...]]
[/deny Sid:perm [...]]
[/remove[:g|:d]] Sid[...]] [/T] [/C] [/L] [/Q]
[/setintegritylevel Level:policy[...]]
/grant[:r] Sid:perm grants the specified user access rights. With :r,
the permissions replace any previouly granted explicit permissions.
Without :r, the permissions are added to any previously granted
explicit permissions.
/deny Sid:perm explicitly denies the specified user access rights.
An explicit deny ACE is added for the stated permissions and
the same permissions in any explicit grant are removed.
/remove[:[g|d]] Sid removes all occurrences of Sid in the ACL. With
:g, it removes all occurrences of granted rights to that Sid. With
:d, it removes all occurrences of denied rights to that Sid.
/setintegritylevel [(CI)(OI)]Level explicitly adds an integrity
ACE to all matching files. The level is to be specified as one
of:
L[ow]
M[edium]
H[igh]
Inheritance options for the integrity ACE may precede the level
and are applied only to directories.
/inheritance:e|d|r
e - enables inheritance
d - disables inheritance and copy the ACEs
r - remove all inherited ACEs
Note:
Sids may be in either numerical or friendly name form. If a numerical
form is given, affix a * to the start of the SID.
/T indicates that this operation is performed on all matching
files/directories below the directories specified in the name.
/C indicates that this operation will continue on all file errors.
Error messages will still be displayed.
/L indicates that this operation is performed on a symbolic link
itself versus its target.
/Q indicates that icacls should supress success messages.
ICACLS preserves the canonical ordering of ACE entries:
Explicit denials
Explicit grants
Inherited denials
Inherited grants
perm is a permission mask and can be specified in one of two forms:
a sequence of simple rights:
N - no access
F - full access
M - modify access
RX - read and execute access
R - read-only access
W - write-only access
D - delete access
a comma-separated list in parentheses of specific rights:
DE - delete
RC - read control
WDAC - write DAC
WO - write owner
S - synchronize
AS - access system security
MA - maximum allowed
GR - generic read
GW - generic write
GE - generic execute
GA - generic all
RD - read data/list directory
WD - write data/add file
AD - append data/add subdirectory
REA - read extended attributes
WEA - write extended attributes
X - execute/traverse
DC - delete child
RA - read attributes
WA - write attributes
inheritance rights may precede either form and are applied
only to directories:
(OI) - object inherit
(CI) - container inherit
(IO) - inherit only
(NP) - don't propagate inherit
(I) - permission inherited from parent container
Examples:
icacls c:\windows\* /save AclFile /T
- Will save the ACLs for all files under c:\windows
and its subdirectories to AclFile.
icacls c:\windows\ /restore AclFile
- Will restore the Acls for every file within
AclFile that exists in c:\windows and its subdirectories.
icacls file /grant Administrator:(D,WDAC)
- Will grant the user Administrator Delete and Write DAC
permissions to file.
icacls file /grant *S-1-1-0:(D,WDAC)
- Will grant the user defined by sid S-1-1-0 Delete and
Write DAC permissions to file.
C:\Users\Scotty>That didnt work. for some reason. would formatting again fix the problem?
Saturday, February 11, 2012 8:18 AM -
"opd223" wrote in message news:f0a37690-a6f1-48a6-a270-fd5434f1a267...
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
First parameter must be a file name pattern or "/?"
That didnt work. for some reason. would formatting again fix the problem?
Sorry – my fault – a Typo crept in.ICACLS /GRANT "NT Service\TrustedInstaller":(F)
Yes, a format would fix it, but that’s a little drastic :)A Repair install would probably fix it without needing to reinstall everything.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, February 14, 2012 10:26 PM
Saturday, February 11, 2012 9:16 AMModerator -
No reply from the Original Poster.
Issue is assumed to be resolved.
Darin MS
Tuesday, February 14, 2012 10:26 PM