locked
My windows is all of a sudden saying its no longer genuine after formatting and a fresh install. RRS feed

  • Question

  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.111025-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00182-797-308778-02-3081-7601.0000-0292012
    Installation ID: 013946086045019865730524702702273421543425173325566910
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: WTDC3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 29/01/2012 5:48:35 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 1:29:2012 17:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    HWID Data-->
    HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAeqgeKIimBgwKM0aDdCb2Dka8zIBCPjIoEBbDKDimKAoqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            A_M_I_        OEMAPIC
      FACP            A_M_I_        OEMFACP
      DBGP            A_M_I_        OEMDBGP
      HPET            A_M_I_        OEMHPET
      BOOT            A_M_I_        OEMBOOT
      MCFG            A_M_I_        OEMMCFG
      OEMX            A_M_I_        OEMXLIC
      ECDT            A_M_I_        OEMECDT
      OEMB            A_M_I_        AMI_OEM
      ATKG            A_M_I_        OEMATKG
      SSDT            PmRef        CpuPm


    Sunday, January 29, 2012 7:53 AM

Answers

  • "opd223" wrote in message news:f0a37690-a6f1-48a6-a270-fd5434f1a267...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
    First parameter must be a file name pattern or "/?"

    That didnt work. for some reason. would formatting again fix the problem?

    Sorry – my fault – a Typo crept in.
    ICACLS /GRANT "NT Service\TrustedInstaller":(F)
    Yes, a format would fix it, but that’s a little drastic :)
    A Repair install would probably fix it without needing to reinstall everything.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, February 14, 2012 10:26 PM
    Saturday, February 11, 2012 9:16 AM
    Moderator

All replies

  • "opd223" wrote in message news:f8efa8cb-225b-4b8b-ad59-fba0b4df3fd2...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001


    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Partial Product Key: WTDC3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 29/01/2012 5:48:35 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 1:29:2012 17:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table



     
    Please open Windows Explorer and look for the file
    C:\Windows\System32\SPPCEXT.DLL
    right-click on it and select Properties
    what is the exact size of the file?
    If you click on the details tab, what does it say there?
    repeat for C:\Windows\SysWOW64\SPPCEXT.DLL as well -
     
     
    Please run the following commands in a Command Prompt window.
    ICACLS C:\Windows\System32\sppcext.dll
    ICACLS C:\Windows\System32\en-us\sppcext.dll.mui
    ICACLS C:\Windows\SysWOW64\sppcext.dll
    ICACLS C:\Windows\SysWOW64\en-us\sppcext.dll.mui
    Copy/paste the results to your response.
    (to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.)
    post back with details, and we may be able to assist.
     
     
    Also, please attempt a System File Checker run – it may fix the problem (although it’s unlikely)
    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type

    SFC /SCANNOW

    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, January 29, 2012 12:12 PM
    Moderator
  • C:\Windows\System32\SPPCEXT.DLL - Size - 1,111,552 bytes, Size on Disc - 1,114,112 bytes
    I dont have C:\Windows\SysWOW64\SPPCEXT.DLL
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>^V
    '▬' is not recognized as an internal or external command,
    operable program or batch file.

    C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
    C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Scotty>ICACLS C:\Windows\System32\en-us\sppcext.dll.mui
    C:\Windows\System32\en-us\sppcext.dll.mui NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Scotty>ICACLS C:\Windows\SysWOW64\sppcext.dll
    C:\Windows\SysWOW64\sppcext.dll: The system cannot find the path specified.
    Successfully processed 0 files; Failed processing 1 files

    C:\Users\Scotty>ICACLS C:\Windows\SysWOW64\en-us\sppcext.dll.mui
    C:\Windows\SysWOW64\en-us\sppcext.dll.mui: The system cannot find the path speci
    fied.
    Successfully processed 0 files; Failed processing 1 files

    C:\Users\Scotty>
    Scan results
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 100% complete.
    Windows Resource Protection found corrupt files but was unable to fix some of th
    em.
    Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
    C:\Windows\Logs\CBS\CBS.log

    C:\Windows\system32>
    I tried to open the log but it says access denied.
    Sunday, January 29, 2012 8:34 PM
  • "opd223" wrote in message news:f8efa8cb-225b-4b8b-ad59-fba0b4df3fd2...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001


    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Partial Product Key: WTDC3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 29/01/2012 5:48:35 PM

    Windows Activation Technologies-->
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table



     
    The SLCEXT.DLL is not a genuine Windows file – you will need to replace it
    (You don’t have the SysWOW64 versions because  you have a 32-bit installation, not a 64-bit one)
     
    To do this open an Elevated Command Prompt window, and type
    TAKEOWN /F C:\windows\System32\slcext.dll /A
    ICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)
    REN C:\Windows\System32\slcext.dll slc.odd
    SFC \SCANFILE=C:\Windows\System32\slcext.dll
     
    DO NOT reboot or shut the system down unless SFC succeeds!
    With any luck that will then replace the file .
     
    If not, COPY the file from the folder
    C:\Windows\winsxs\x86_microsoft-windows-security-spp-clientext_31bf3856ad364e35_6.1.7600.16385_none_cc9d4bf812728aae
     
    to the C:\Windows\System32 folder
     
     
    and then you can reboot
    and run another MGADiag report
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, January 30, 2012 10:50 AM
    Moderator
  • Tried to do your things, the top bit didnt work so i copied the file from the folder, I had to kill explorer.exe before it would let me do it. ran another sfc scan and its saying the same message.

     

    i ran the mgadiag again any way.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.111025-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00182-797-308778-02-3081-7601.0000-0292012
    Installation ID: 013946086045019865730524702702273421543425173325566910
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: WTDC3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 31/01/2012 9:03:20 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 1:29:2012 17:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    HWID Data-->
    HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAeqgeKIimBgwKM0aDdCb2Dka8zIBCPjIoEBbDKDimKAoqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            A_M_I_        OEMAPIC
      FACP            A_M_I_        OEMFACP
      DBGP            A_M_I_        OEMDBGP
      HPET            A_M_I_        OEMHPET
      BOOT            A_M_I_        OEMBOOT
      MCFG            A_M_I_        OEMMCFG
      OEMX            A_M_I_        OEMXLIC
      ECDT            A_M_I_        OEMECDT
      OEMB            A_M_I_        AMI_OEM
      ATKG            A_M_I_        OEMATKG
      SSDT            PmRef        CpuPm



    Monday, January 30, 2012 11:05 PM
  • "opd223" wrote in message news:5770a967-f1fb-4d8a-80fe-96ce2018def1...

    Tried to do your things, the top bit didnt work so i copied the file from the folder, I had to kill explorer.exe before it would let me do it. ran another sfc scan and its saying the same message.

     

    i ran the mgadiag again any way.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS



    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Partial Product Key: WTDC3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 31/01/2012 9:03:20 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 1:29:2012 17:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui





    OK – please check the permissions on the file using the following command
     
    ICACLS C:\Windows\System32\sppcext.dll
    post the results.
     
    Then try SFC /SCANNOW again.
     
    Please create a Copy of your CBS.log file, and upload it to your public SkyDrive, and post a link here
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, January 30, 2012 11:33 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
    C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Scotty>SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 100% complete.
    Windows Resource Protection found corrupt files but was unable to fix some of th
    em.
    Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
    C:\Windows\Logs\CBS\CBS.log

    C:\Users\Scotty>

     

     

    Link to skydrive

     

    https://skydrive.live.com/redir.aspx?cid=42a19dce13070118&resid=42A19DCE13070118!1231&parid=root

     

    Tuesday, January 31, 2012 10:50 PM
  • "opd223" wrote in message news:4bb48ef5-1ae7-4acb-a89e-eca5d286ec1f...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS C:\Windows\System32\sppcext.dll
    C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

     
    I’ve uploaded a copy of the SLCEXT.DLL file to the above address – Save it to  your desktop
    Please upload your current copy of the file to your Skydrive so that I can take a look at it.
     
    Please replace your copy with my copy using the following procedure
     
    Open an elevated Command prompt Window
    At the  prompt, use the following commands (you can copy and past the block into the command prompt)
     
    TAKEOWN /F C:\windows\System32\slcext.dll /A
    ICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)
    REN C:\Windows\System32\slcext.dll slcext.old2
    COPY %UserProfile%\Desktop\slcext.dll C:\Windows\System32
    ICACLS C:\Windows\System32\slcext.dll /grant “NT SERVICE\TrustedInstaller”:(F)
    ICACLS C:\Windows\System32\slcext.dll
    Copy and paste the results to your response – DO NOT reboot until you get my input!
    (but please let me know it you’re likely to be more than an hour – it’s getting near my bedtime<g>)
     
    Note that the last but one line may throw an error message 'Invalid Parameter....’
    If it does, then type it in instead, and then repeat the last line as well.
    (there seems to be a mismatch between the Windows and CP characters at this end!)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth





    Tuesday, January 31, 2012 11:44 PM
    Moderator
  • My file https://skydrive.live.com/redir.aspx?cid=42a19dce13070118&resid=42A19DCE13070118!1232&parid=42A19DCE13070118!1195&authkey=!AC-wId0Ubu75dsY

     

    Sorry im in Australia, so my day is your night.

     

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>TAKEOWN /F C:\windows\System32\slcext.dll /A

    SUCCESS: The file (or folder): "C:\windows\System32\slcext.dll" now owned by the
     administrators group.

    C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll /grant Administrators:(F)
    processed file: C:\Windows\System32\slcext.dll
    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Scotty>REN C:\Windows\System32\slcext.dll slcext.old2
    A duplicate file name exists, or the file
    cannot be found.

    C:\Users\Scotty>COPY %UserProfile%\Desktop\slcext.dll C:\Windows\System32
    Overwrite C:\Windows\System32\slcext.dll? (Yes/No/All): yes
            1 file(s) copied.

    C:\Users\Scotty>

    Thursday, February 2, 2012 12:49 AM
  • Sorry - I seem to have missed the notification on your response -

    Please post a new MGADiag report

    Please also post the results of the following command

    ICACLS C:\Windows\System32\slcext.dll

     

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 6, 2012 11:08 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll
    C:\Windows\System32\slcext.dll BUILTIN\Administrators:(F)
                                   NT AUTHORITY\SYSTEM:(I)(F)
                                   BUILTIN\Administrators:(I)(F)
                                   BUILTIN\Users:(I)(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Scotty>

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0x8007043c
    Windows Product Key: *****-*****-XKHT9-RWW7T-WTDC3
    Windows Product Key Hash: UsYYCnoSc1OQ1Z98QW1HtH1Nvog=
    Windows Product ID: 00426-OEM-9179736-08778
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {DB988726-2CD7-4B4E-A830-B1E00B668066}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.111025-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DB988726-2CD7-4B4E-A830-B1E00B668066}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WTDC3</PKey><PID>00426-OEM-9179736-08778</PID><PIDType>3</PIDType><SID>S-1-5-21-3901185652-619906453-767538898</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc.        </Manufacturer><Model>G2S                 </Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>300    </Version><SMBIOSVersion major="2" minor="4"/><Date>20071231000000.000000+000</Date></BIOS><HWID>E08D3707018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>E. Australia Standard Time(GMT+10:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
    Error: 0x8007043C

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:5:2012 19:34
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Not Registered - 0x8007043c
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEABwABAAEAAAAAAAAAAgABAAEAeqgeKIimzIAGDAozRoN0JvYORrxCPjIoOKYoCiqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            A_M_I_        OEMAPIC
      FACP            A_M_I_        OEMFACP
      DBGP            A_M_I_        OEMDBGP
      HPET            A_M_I_        OEMHPET
      BOOT            A_M_I_        OEMBOOT
      MCFG            A_M_I_        OEMMCFG
      OEMX            A_M_I_        OEMXLIC
      ECDT            A_M_I_        OEMECDT
      OEMB            A_M_I_        AMI_OEM
      ATKG            A_M_I_        OEMATKG
      SSDT            PmRef        CpuPm

    Thursday, February 9, 2012 10:30 PM
  • "opd223" wrote in message news:c7512273-8d99-4526-bf4b-53a91ea4d1fd...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS C:\Windows\System32\slcext.dll
    C:\Windows\System32\slcext.dll BUILTIN\Administrators:(F)
                                   NT AUTHORITY\SYSTEM:(I)(F)
                                   BUILTIN\Administrators:(I)(F)
                                   BUILTIN\Users:(I)(RX)


     
     
     
     
    The file is missing the permissions for TrustedInstaller – please open an Elevated Command Prompt window and run the following command -
    ICACLS /GRANT “NT Service/TrustedInstaller”:(F)
     
    The reboot and run another MGADiag report, and post the results.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, February 10, 2012 9:41 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
    First parameter must be a file name pattern or "/?"

    ICACLS name /save aclfile [/T] [/C] [/L] [/Q]
        stores the DACLs for the files and folders that match the name
        into aclfile for later use with /restore. Note that SACLs,
        owner, or integrity labels are not saved.

    ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile
                     [/C] [/L] [/Q]
        applies the stored DACLs to files in directory.

    ICACLS name /setowner user [/T] [/C] [/L] [/Q]
        changes the owner of all matching names. This option does not
        force a change of ownership; use the takeown.exe utility for
        that purpose.

    ICACLS name /findsid Sid [/T] [/C] [/L] [/Q]
        finds all matching names that contain an ACL
        explicitly mentioning Sid.

    ICACLS name /verify [/T] [/C] [/L] [/Q]
        finds all files whose ACL is not in canonical form or whose
        lengths are inconsistent with ACE counts.

    ICACLS name /reset [/T] [/C] [/L] [/Q]
        replaces ACLs with default inherited ACLs for all matching files.

    ICACLS name [/grant[:r] Sid:perm[...]]
           [/deny Sid:perm [...]]
           [/remove[:g|:d]] Sid[...]] [/T] [/C] [/L] [/Q]
           [/setintegritylevel Level:policy[...]]

        /grant[:r] Sid:perm grants the specified user access rights. With :r,
            the permissions replace any previouly granted explicit permissions.
            Without :r, the permissions are added to any previously granted
            explicit permissions.

        /deny Sid:perm explicitly denies the specified user access rights.
            An explicit deny ACE is added for the stated permissions and
            the same permissions in any explicit grant are removed.

        /remove[:[g|d]] Sid removes all occurrences of Sid in the ACL. With
            :g, it removes all occurrences of granted rights to that Sid. With
            :d, it removes all occurrences of denied rights to that Sid.

        /setintegritylevel [(CI)(OI)]Level explicitly adds an integrity
            ACE to all matching files.  The level is to be specified as one
            of:
                L[ow]
                M[edium]
                H[igh]
            Inheritance options for the integrity ACE may precede the level
            and are applied only to directories.

        /inheritance:e|d|r
            e - enables inheritance
            d - disables inheritance and copy the ACEs
            r - remove all inherited ACEs


    Note:
        Sids may be in either numerical or friendly name form. If a numerical
        form is given, affix a * to the start of the SID.

        /T indicates that this operation is performed on all matching
            files/directories below the directories specified in the name.

        /C indicates that this operation will continue on all file errors.
            Error messages will still be displayed.

        /L indicates that this operation is performed on a symbolic link
           itself versus its target.

        /Q indicates that icacls should supress success messages.

        ICACLS preserves the canonical ordering of ACE entries:
                Explicit denials
                Explicit grants
                Inherited denials
                Inherited grants

        perm is a permission mask and can be specified in one of two forms:
            a sequence of simple rights:
                    N - no access
                    F - full access
                    M - modify access
                    RX - read and execute access
                    R - read-only access
                    W - write-only access
                    D - delete access
            a comma-separated list in parentheses of specific rights:
                    DE - delete
                    RC - read control
                    WDAC - write DAC
                    WO - write owner
                    S - synchronize
                    AS - access system security
                    MA - maximum allowed
                    GR - generic read
                    GW - generic write
                    GE - generic execute
                    GA - generic all
                    RD - read data/list directory
                    WD - write data/add file
                    AD - append data/add subdirectory
                    REA - read extended attributes
                    WEA - write extended attributes
                    X - execute/traverse
                    DC - delete child
                    RA - read attributes
                    WA - write attributes
            inheritance rights may precede either form and are applied
            only to directories:
                    (OI) - object inherit
                    (CI) - container inherit
                    (IO) - inherit only
                    (NP) - don't propagate inherit
                    (I) - permission inherited from parent container

    Examples:

            icacls c:\windows\* /save AclFile /T
            - Will save the ACLs for all files under c:\windows
              and its subdirectories to AclFile.

            icacls c:\windows\ /restore AclFile
            - Will restore the Acls for every file within
              AclFile that exists in c:\windows and its subdirectories.

            icacls file /grant Administrator:(D,WDAC)
            - Will grant the user Administrator Delete and Write DAC
              permissions to file.

            icacls file /grant *S-1-1-0:(D,WDAC)
            - Will grant the user defined by sid S-1-1-0 Delete and
              Write DAC permissions to file.

    C:\Users\Scotty>

    That didnt work. for some reason. would formatting again fix the problem?

    Saturday, February 11, 2012 8:18 AM
  • "opd223" wrote in message news:f0a37690-a6f1-48a6-a270-fd5434f1a267...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Scotty>ICACLS /GRANT "NT Service/TrustedInstaller":(F)
    First parameter must be a file name pattern or "/?"

    That didnt work. for some reason. would formatting again fix the problem?

    Sorry – my fault – a Typo crept in.
    ICACLS /GRANT "NT Service\TrustedInstaller":(F)
    Yes, a format would fix it, but that’s a little drastic :)
    A Repair install would probably fix it without needing to reinstall everything.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Tuesday, February 14, 2012 10:26 PM
    Saturday, February 11, 2012 9:16 AM
    Moderator
  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS

    Tuesday, February 14, 2012 10:26 PM