| Windows 7: Not genuine error after system restore. |
10 Jun 2012
|
#11 | | Win 7 x64 Home Premium (and x86 VirtualBox VM) Wales - probably in the pub |
You have some major problems with permissions - and possibly with system services.
Let's see if we can get the permissions right on the NetworkServices\AppData folder first.
First we have to go UP at least one level, and check the parent folders
Please note the instructions at the end - they are important from here on out.
Open an Elevated Command Prompt, and run the following commands ICACLS C:\Windows\ServiceProfiles\Networkservice ICACLS C:\Windows\ServiceProfiles ICACLS C:\Windows ICACLS C:\Windows\System32
Copy and paste the results to your response.
Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response. | My System Specs |
| Computer type Laptop System Manufacturer/Model Number Asus K52F OS Win 7 x64 Home Premium (and x86 VirtualBox VM) CPU i3 370M Motherboard Asus Memory 8GB - finally :) Graphics Card it's an i3, dude! Sound Card onboard Monitor(s) Displays 15.6" built-in Screen Resolution 1366x768 PSU n/a Hard Drives 750GB Seagate internal
Sundry external drives attached to other computers on the local network Internet Speed as much as I can get - usually on a dongle, so <1Mb/s Antivirus MSE Browser IE10/Chrome/FF(if I must) |
11 Jun 2012
|
#12 | | Windows 7 Home Premium 64-bit |
Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Robert>ICACLS C:\Windows\ServiceProfiles\Networkservice
C:\Windows\ServiceProfiles\Networkservice NT AUTHORITY\SYSTEM:(F)
BUILTIN\Administrators:(F)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Robert>ICACLS C:\Windows\ServiceProfiles
C:\Windows\ServiceProfiles NT SERVICE\TrustedInstaller:(I)(F)
NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(I)(F)
NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
BUILTIN\Users:(I)(RX)
BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
CREATOR OWNER:(I)(OI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Robert>ICACLS C:\Windows
C:\Windows NT SERVICE\TrustedInstaller:(F)
NT SERVICE\TrustedInstaller:(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(M)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(M)
BUILTIN\Administrators:(OI)(CI)(IO)(F)
BUILTIN\Users:(RX)
BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
CREATOR OWNER:(OI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Robert>ICACLS C:\Windows\System32
C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
NT SERVICE\TrustedInstaller:(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(M)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(M)
BUILTIN\Administrators:(OI)(CI)(IO)(F)
BUILTIN\Users:(RX)
BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
CREATOR OWNER:(OI)(CI)(IO)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Robert>
Last edited by Brink; 12 Jun 2012 at 10:38 AM..
Reason: code box
| My System Specs | | System Manufacturer/Model Number Gateway LX6810-01 OS Windows 7 Home Premium 64-bit CPU Intel Core 2 Quad Q8200 @ 2.33 GHz Memory 8.0 GB |
12 Jun 2012
|
#13 | | Win 7 x64 Home Premium (and x86 VirtualBox VM) Wales - probably in the pub |
OK _ I think I see where the problem lies.
please open Windows Explorer (Computer)
Navigate to the C:\Windows\ServiceProfiles folder
Right-click on the NetworkService folder, and select Properties.
in the popup, click on the Security tab.
Now click on the Advanced button, and then the Owner tab
Who is the Current Owner?? (by default, Windows is unable to display the current owner)
Click on the Edit button - this should appear to make Administrators the owner, if not then highlight the Administrators entry in the list
Put a check in the 'Replace owner..' box
Click OK, and accept the warning
Click OK again twice (accept warnings as necessary)
now right-click on the NetworkService folder again, and select Properties, Security, and click on the Advanced button again
This time, in Permissions, click on the Continue button
Now you need to add Full permissions for
SYSTEM
Administrators (which is already set)
NETWORK SERVICE
To do this
Click 'Add'
In the Entry box, enter the following, EXACTLY SYSTEM;NETWORK SERVICE
Click on 'Check Names' to make sure you got them right - if you get an error, check your typing. If it persists post back with the EXACT error you get.
Click OK once
Now highlight the SYSTEM entry in the list
click on Full control/Allow
Highlight the NETWORK SERVICE entry
click on Full Control/Allow
Click Apply
Click OK once
Click on Advanced, then Continue
Now put a tick in the
'Replace all child....' box
Click on OK and accept the two warnings, then OK out.
Reboot, and run another MGADiag report. | My System Specs | | Computer type Laptop System Manufacturer/Model Number Asus K52F OS Win 7 x64 Home Premium (and x86 VirtualBox VM) CPU i3 370M Motherboard Asus Memory 8GB - finally :) Graphics Card it's an i3, dude! Sound Card onboard Monitor(s) Displays 15.6" built-in Screen Resolution 1366x768 PSU n/a Hard Drives 750GB Seagate internal
Sundry external drives attached to other computers on the local network Internet Speed as much as I can get - usually on a dongle, so <1Mb/s Antivirus MSE Browser IE10/Chrome/FF(if I must) |
12 Jun 2012
|
#14 | | Windows 7 Home Premium 64-bit |
Quote: To do this
Click 'Add'
In the Entry box, enter the following, EXACTLY SYSTEM;NETWORK SERVICE
Click on 'Check Names' to make sure you got them right - if you get an error, check your typing. If it persists post back with the EXACT error you get. With this, I get an error stating "Only one name can be entered and the name cannot contain a semicolon. Enter a valid name." I even did a copy and paste to make sure I was not making a typo. | My System Specs | | System Manufacturer/Model Number Gateway LX6810-01 OS Windows 7 Home Premium 64-bit CPU Intel Core 2 Quad Q8200 @ 2.33 GHz Memory 8.0 GB |
12 Jun 2012
|
#15 | | Win 7 x64 Home Premium (and x86 VirtualBox VM) Wales - probably in the pub |
Duh? (I tested that first, as well!)
OK then, enter the two separately.
Add one, check it, and OK once, then go back and add the other in the same way
SYSTEM
NETWORK SERVICE | My System Specs | | Computer type Laptop System Manufacturer/Model Number Asus K52F OS Win 7 x64 Home Premium (and x86 VirtualBox VM) CPU i3 370M Motherboard Asus Memory 8GB - finally :) Graphics Card it's an i3, dude! Sound Card onboard Monitor(s) Displays 15.6" built-in Screen Resolution 1366x768 PSU n/a Hard Drives 750GB Seagate internal
Sundry external drives attached to other computers on the local network Internet Speed as much as I can get - usually on a dongle, so <1Mb/s Antivirus MSE Browser IE10/Chrome/FF(if I must) |
12 Jun 2012
|
#16 | | Windows 7 Home Premium 64-bit |
I think you may have done it. I am not longer seeing the message in the corner of my screen. Haven't tested Windows Update yet though. I don't want to do anything until you say it seems to be fixed as well. Code:
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M4XPX-9B87B-H4CCP
Windows Product Key Hash: 6RANQcpFhswbmvHhxBXQr7hm8N4=
Windows Product ID: 00359-OEM-8882565-77148
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120330-1504
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Word 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H4CCP</PKey><PID>00359-OEM-8882565-77148</PID><PIDType>3</PIDType><SID>S-1-5-21-3721916230-3852787314-3077266025</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>LX6810-01</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R01-A1C0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090717000000.000000+000</Date></BIOS><HWID>C64A3407018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-001B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Word 2007</Name><Ver>12</Ver><Val>BCD72299F752D86</Val><Hash>068lO0ay6rs9LAvgHDhjVT63wL4=</Hash><Pid>89407-707-6552566-63226</Pid><PidType>14</PidType></Product></Products><Applications><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1131, 5) (null): 0xC004F012
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAMAAAABAAEAAwABAAAAAQABAAEAln3Y5040xN5OzXA6ZFuSvEYL3oigFwRBTFg=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC1138
FACP ACRSYS FACP1138
HPET ACRSYS OEMHPET0
MCFG ACRSYS OEMMCFG
WDRT ACRSYS NV-WDRT
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB1138
NVHD ACRSYS NVHDCP
AWMI ACRSYS OEMB1138
SSDT DpgPmm CpuPm
Last edited by Brink; 15 Jun 2012 at 10:08 PM..
Reason: code box
| My System Specs | | System Manufacturer/Model Number Gateway LX6810-01 OS Windows 7 Home Premium 64-bit CPU Intel Core 2 Quad Q8200 @ 2.33 GHz Memory 8.0 GB |
12 Jun 2012
|
#17 | | Windows 7 Home Premium 64-bit |
Okay, I spoke too soon. After another reboot, the message is back. However, on booting again, it tells me that an unauthorized change was made and that I need to either reinstall or restore Windows. Code:
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-M4XPX-9B87B-H4CCP
Windows Product Key Hash: 6RANQcpFhswbmvHhxBXQr7hm8N4=
Windows Product ID: 00359-OEM-8882565-77148
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120330-1504
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Word 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H4CCP</PKey><PID>00359-OEM-8882565-77148</PID><PIDType>3</PIDType><SID>S-1-5-21-3721916230-3852787314-3077266025</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>LX6810-01</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R01-A1C0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090717000000.000000+000</Date></BIOS><HWID>C64A3407018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-001B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Word 2007</Name><Ver>12</Ver><Val>BCD72299F752D86</Val><Hash>068lO0ay6rs9LAvgHDhjVT63wL4=</Hash><Pid>89407-707-6552566-63226</Pid><PidType>14</PidType></Product></Products><Applications><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Error: product key not found.
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAMAAAABAAEAAwABAAAAAQABAAEAln3Y5040xN5OzXA6ZFuSvEYL3oigFwRBTFg=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC1138
FACP ACRSYS FACP1138
HPET ACRSYS OEMHPET0
MCFG ACRSYS OEMMCFG
WDRT ACRSYS NV-WDRT
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB1138
NVHD ACRSYS NVHDCP
AWMI ACRSYS OEMB1138
SSDT DpgPmm CpuPm
Last edited by Brink; 15 Jun 2012 at 10:08 PM..
Reason: code box
| My System Specs | | System Manufacturer/Model Number Gateway LX6810-01 OS Windows 7 Home Premium 64-bit CPU Intel Core 2 Quad Q8200 @ 2.33 GHz Memory 8.0 GB |
12 Jun 2012
|
#18 | | Win 7 x64 Home Premium (and x86 VirtualBox VM) Wales - probably in the pub |
That's OK - I know how to fix this error
Open Windows Explorer and navigate to the C:\Windows\System32 folder. find the Catroot2 folder there, and right-click on it - select Properties.
In the General tab, clear the box beside 'Read-only (Only.....' by clicking in it until it's empty (it cycles around three values)
Click Apply.
Accept any warnings that come up - if you get a 'Ignore/Ignore All/Try again' option, pick 'Ignore all'
Once complete (may be almost instantaneous), reboot, and run another MGADiag report. | My System Specs | | Computer type Laptop System Manufacturer/Model Number Asus K52F OS Win 7 x64 Home Premium (and x86 VirtualBox VM) CPU i3 370M Motherboard Asus Memory 8GB - finally :) Graphics Card it's an i3, dude! Sound Card onboard Monitor(s) Displays 15.6" built-in Screen Resolution 1366x768 PSU n/a Hard Drives 750GB Seagate internal
Sundry external drives attached to other computers on the local network Internet Speed as much as I can get - usually on a dongle, so <1Mb/s Antivirus MSE Browser IE10/Chrome/FF(if I must) |
12 Jun 2012
|
#19 | | Windows 7 Home Premium 64-bit |
Windows is a strange animal in my book. The diag shows the product key and then later says the product key can't be found. Just doesn't make sense to me. I'm glad you are making some sense out of this thing.
Okay, I still get the message in the corner of my screen and I get the error stating that I need to reinstall or restore Windows. Code:
MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-M4XPX-9B87B-H4CCP
Windows Product Key Hash: 6RANQcpFhswbmvHhxBXQr7hm8N4=
Windows Product ID: 00359-OEM-8882565-77148
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120330-1504
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Word 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C40AB5B8-1DE1-45C0-A7FB-1B35ACF6E8AE}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H4CCP</PKey><PID>00359-OEM-8882565-77148</PID><PIDType>3</PIDType><SID>S-1-5-21-3721916230-3852787314-3077266025</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>LX6810-01</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R01-A1C0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090717000000.000000+000</Date></BIOS><HWID>C64A3407018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-001B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Word 2007</Name><Ver>12</Ver><Val>BCD72299F752D86</Val><Hash>068lO0ay6rs9LAvgHDhjVT63wL4=</Hash><Pid>89407-707-6552566-63226</Pid><PidType>14</PidType></Product></Products><Applications><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Error: product key not found.
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAMAAAABAAEAAwABAAAAAQABAAEAln3Y5040xN5OzXA6ZFuSvEYL3oigFwRBTFg=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC1138
FACP ACRSYS FACP1138
HPET ACRSYS OEMHPET0
MCFG ACRSYS OEMMCFG
WDRT ACRSYS NV-WDRT
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB1138
NVHD ACRSYS NVHDCP
AWMI ACRSYS OEMB1138
SSDT DpgPmm CpuPm
Last edited by Brink; 15 Jun 2012 at 10:09 PM..
Reason: code box
| My System Specs | | System Manufacturer/Model Number Gateway LX6810-01 OS Windows 7 Home Premium 64-bit CPU Intel Core 2 Quad Q8200 @ 2.33 GHz Memory 8.0 GB |
12 Jun 2012
|
#20 | | Win 7 x64 Home Premium (and x86 VirtualBox VM) Wales - probably in the pub |
OK - now go to www.microsoft.com/genuine/validate and see what happens.
If it fails, go to www.microsoft.com/genuine/diag and see what that has to say
Post another report together with the results
(I was expecting more to change in that last report) | My System Specs | | Computer type Laptop System Manufacturer/Model Number Asus K52F OS Win 7 x64 Home Premium (and x86 VirtualBox VM) CPU i3 370M Motherboard Asus Memory 8GB - finally :) Graphics Card it's an i3, dude! Sound Card onboard Monitor(s) Displays 15.6" built-in Screen Resolution 1366x768 PSU n/a Hard Drives 750GB Seagate internal
Sundry external drives attached to other computers on the local network Internet Speed as much as I can get - usually on a dongle, so <1Mb/s Antivirus MSE Browser IE10/Chrome/FF(if I must) Not genuine error after system restore. problems? All times are GMT -5. The time now is 12:03 AM. | |