After replacing a failing hard drive, I have been bitten with the This copy of Windows is not Genuine, and am unable to (re)activate. While looking at the black desktop and searching for a solution, I have done the following:
Run a complete scandisk with fix (of course the damage was already done)
Checked for virus, malware, rootkits, etc. I am positive the damage was from a failing hard drive.
I have tried the sfc -scannow and this was the results:
I have looked through the CBS.log file, and these are what I believe to be the relevant lines:
It appears the biggest hangup is with the system file sppobjs.dll.
How to I replace this file and where do I get it from? Apparently I will not be able to go much further until the digital signatures match what they should have been.
Run a complete scandisk with fix (of course the damage was already done)
Checked for virus, malware, rootkits, etc. I am positive the damage was from a failing hard drive.
I have tried the sfc -scannow and this was the results:
Code:
C:\Windows\system32>sfc -scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log
Code:
2015-11-01 17:27:04, Info CSI 00000498 [SR] Verify complete
2015-11-01 17:27:04, Info CSI 00000499 [SR] Repairing 2 components
2015-11-01 17:27:04, Info CSI 0000049a [SR] Beginning Verify and Repair transaction
2015-11-01 17:27:04, Info CSI 0000049b Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" :
Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=}
2015-11-01 17:27:04, Info CSI 0000049c [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-11-01 17:27:04, Info CSI 0000049d Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" :
Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=}
2015-11-01 17:27:04, Info CSI 0000049e [SR] Cannot repair member file [l:38{19}]"NlsLexicons0009.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-11-01 17:27:05, Info CSI 0000049f Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" :
Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=}
2015-11-01 17:27:05, Info CSI 000004a0 [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-11-01 17:27:05, Info CSI 000004a1 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2015-11-01 17:27:05, Info CSI 000004a2 Hashes for file member \??\C:\Windows\System32\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" :
Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=}
2015-11-01 17:27:05, Info CSI 000004a3 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" :
Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=}
2015-11-01 17:27:05, Info CSI 000004a4 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"sppobjs.dll"; source file in store is also corrupted
2015-11-01 17:27:06, Info CSI 000004a5 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" :
Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=}
2015-11-01 17:27:06, Info CSI 000004a6 [SR] Cannot repair member file [l:38{19}]"NlsLexicons0009.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-11-01 17:27:06, Info CSI 000004a7 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2015-11-01 17:27:07, Info CSI 000004a8 Hashes for file member \??\C:\Windows\SysWOW64\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" :
Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=}
2015-11-01 17:27:07, Info CSI 000004a9 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" :
Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=}
2015-11-01 17:27:07, Info CSI 000004aa [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:38{19}]"NlsLexicons0009.dll"; source file in store is also corrupted
2015-11-01 17:27:08, Info CSI 000004ab Repair results created:
Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: N/A, hr=0x80070241
Windows Product Key Hash: N/A, hr=0x80070241
Windows Product ID: 00371-OEM-9045827-59608
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {F9BDE8D4-2F00-4AEC-BD0E-EBADBAF925E4}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150928-1507
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{F9BDE8D4-2F00-4AEC-BD0E-EBADBAF925E4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>00371-OEM-9045827-59608</PID><PIDType>3</PIDType><SID>S-1-5-21-2788353574-3577127994-1328140465</SID><SYSTEM><Manufacturer>ASUS</Manufacturer><Model>All Series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1204</Version><SMBIOSVersion major="2" minor="8"/><Date>20140707000000.000000+000</Date></BIOS><HWID>8BB13D07018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text.
Error: 0xC004F012
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000010
Event Time Stamp: 11:1:2015 01:24
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
HWID Data-->
HWID Hash Current: NAAAAAEAAAABAAEAAwACAAAAAwABAAEAHKIgFU5bNkMG31SOQti+tYqboppM0mK/5qXI9g==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
FPDT ALASKA A M I
SSDT Ther_R Ther_Rvp
SSDT Ther_R Ther_Rvp
SSDT Ther_R Ther_Rvp
SSDT Ther_R Ther_Rvp
SSDT Ther_R Ther_RvpIt appears the biggest hangup is with the system file sppobjs.dll.
How to I replace this file and where do I get it from? Apparently I will not be able to go much further until the digital signatures match what they should have been.
My Computer
At a glance
Windows 7 Pro 64bitIntel Core I7 4790K
- Computer type
- PC/Desktop
- Computer Manufacturer/Model Number
- Custom Build
- OS
- Windows 7 Pro 64bit
- CPU
- Intel Core I7 4790K
- Motherboard
- Asus Z97-WS
