Windows 7 Build 7601 thinks it is not genuine.

Page 1 of 5 123 ... LastLast

  1. Posts : 21
    Windows 7 Home Premium 64bit
       #1

    Windows 7 Build 7601 thinks it is not genuine.


    I'm having a problem similar to many I have seen on these forums. Yesterday (2012.08.04) the little text message appeared in the bottom corner of the screen saying:
    Windows 7
    Build 7601
    This copy of Windows is not genuine
    Yesterday the desktop went black after a while and then periodically there came pop up dialogues both large and small telling me to go to the microsoft site to resolve the problem. At the site I was informed that my Windows was not genuine and that I could buy a new one for <I can't remember the price>.

    When I go to the System page of the Control Panel, at the bottom of the window where you would expect to see the option to provide an alternative product key, it says:
    Status Not Available
    Product ID: Not Available
    The machine is an Acer Predator which I've owned for some eighteen months. It was purchased from a reputable source and I have no reason to suspect that the OS is anything other than genuine.

    I've read some of the other similar threads and I've tried the following:


    C:\Windows\system32>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service could not be started.

    A system error has occurred.

    System error 2 has occurred.

    The system cannot find the file specified.
    As you might imagine I am still getting the error.

    This is the last report from MGADiag:

    Code:
     
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
     
    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {25B64C62-865F-49BA-99B6-E96B76B9356D}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
     
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
     
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
     
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
     
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
     
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
     
    File Scan Data-->
     
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{25B64C62-865F-49BA-99B6-E96B76B9356D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-3673603920-1938417040-2204823040</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Predator G5900</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0 </Version><SMBIOSVersion major="2" minor="6"/><Date>20100720000000.000000+000</Date></BIOS><HWID>DFAF3907018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
     
    Spsys.log Content: 0x80070002
     
    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 
     
    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 8:5:2012 04:43
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc
     
     
    HWID Data-->
    HWID Hash Current: LgAAAAEAAAABAAIAAQACAAAAAQABAAEAonYIPKg3DPHOcDb9WBjaNDEKeIR2Vg==
     
    OEM Activation 1.0 Data-->
    N/A
     
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ACRSYS APIC2208
    FACP ACRSYS FACP2208
    HPET ACRSYS OEMHPET 
    MCFG ACRSYS OEMMCFG 
    SLIC ACRSYS ACRPRDCT
    OEMB ACRSYS OEMB2208
    ASF! LEGEND I865PASF
    ASPT ACRSYS PerfTune
    WDTT ACRSYS OEDWDTT 
    AWMI ACRSYS OEMB2208
    SSDT DpgPmm CpuPm
      My Computer


  2. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #2

    Click on Start
    in the Search box, type
    SERVICES.MSC
    and hit the Enter key - accept the UAC prompt if you get one.
    Look in the console for the Software Protection service, right-click on it and select Properties.
    make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.
    Try starting the service now - do you get an error message? Does it start? does it almost immediately stop again?
    Post back with your results, and a new MGADiag report.
    If it doesn't start, then please do the following...
    Please open an Elevated (Administrator) Command Prompt window and use the following commands....
    net start sppsvc
    sc qc sppsvc
    sc queryex sppsvc
    sc qprivs sppsvc
    sc qsidtype sppsvc
    sc sdshow sppsvc
    Here are some instructions to make life easier :)
    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
      My Computer


  3. Posts : 21
    Windows 7 Home Premium 64bit
    Thread Starter
       #3

    Thanks for the quick reply Noel,

    The Software Protection service was set to Automatic (Delayed Start) but when I attempted to start it manually it failed immediately with the following error:
    Windows could not start the Software Protection service on Local Computer.
    Error 2: The system cannot find the file specified.
    Transcript of sppsvc commands:
    Code:
     
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.
     
    C:\Windows\system32>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service could not be started.
     
    A system error has occurred.
     
    System error 2 has occurred.
     
    The system cannot find the file specified.
     
     
    C:\Windows\system32>sc qc sppsvc
    [SC] QueryServiceConfig SUCCESS
     
    SERVICE_NAME: sppsvc
    TYPE : 10 WIN32_OWN_PROCESS
    START_TYPE : 2 AUTO_START (DELAYED)
    ERROR_CONTROL : 1 NORMAL
    BINARY_PATH_NAME : C:\Windows\system32\sppsvc.exe
    LOAD_ORDER_GROUP :
    TAG : 0
    DISPLAY_NAME : Software Protection
    DEPENDENCIES : RpcSs
    SERVICE_START_NAME : NT AUTHORITY\NetworkService
     
    C:\Windows\system32> sc queryex sppsvc
     
    SERVICE_NAME: sppsvc
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 1 STOPPED
    WIN32_EXIT_CODE : 2 (0x2)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    PID : 0
    FLAGS :
     
    C:\Windows\system32> sc qprivs sppsvc
    [SC] QueryServiceConfig2 SUCCESS
     
    SERVICE_NAME: sppsvc
    PRIVILEGES : SeAuditPrivilege
    : SeChangeNotifyPrivilege
    : SeCreateGlobalPrivilege
    : SeImpersonatePrivilege
     
    C:\Windows\system32> sc qsidtype sppsvc
    [SC] QueryServiceConfig2 SUCCESS
     
    SERVICE_NAME: sppsvc
    SERVICE_SID_TYPE: UNRESTRICTED
     
    C:\Windows\system32> sc sdshow sppsvc
     
    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOC
    RRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDW
    O;;;WD)
     
    C:\Windows\system32>
    MGADiag Report
    Code:
     
    
    Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: N/A, hr = 0xc0000022 Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7 Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34= Windows Product ID: 00359-OEM-8992687-00006 Windows Product ID Type: 2 Windows License Type: OEM SLP Windows OS version: 6.1.7601.2.00010300.1.0.003 ID: {25B64C62-865F-49BA-99B6-E96B76B9356D}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Home Premium Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.120503-2030 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{25B64C62-865F-49BA-99B6-E96B76B9356D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-3673603920-1938417040-2204823040</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Predator G5900</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0 </Version><SMBIOSVersion major="2" minor="6"/><Date>20100720000000.000000+000</Date></BIOS><HWID>DFAF3907018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text. Error: 0x80070426 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0001000000000000 Event Time Stamp: 8:5:2012 04:43 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered Service: sppsvc HWID Data--> HWID Hash Current: LgAAAAEAAAABAAIAAQACAAAAAQABAAEAonYIPKg3DPHOcDb9WBjaNDEKeIR2Vg== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes Windows marker version: 0x20001 OEMID and OEMTableID Consistent: yes BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC ACRSYS APIC2208 FACP ACRSYS FACP2208 HPET ACRSYS OEMHPET MCFG ACRSYS OEMMCFG SLIC ACRSYS ACRPRDCT OEMB ACRSYS OEMB2208 ASF! LEGEND I865PASF ASPT ACRSYS PerfTune WDTT ACRSYS OEDWDTT AWMI ACRSYS OEMB2208 SSDT DpgPmm CpuPm
    Last edited by Brink; 05 Aug 2012 at 15:07. Reason: please use a code box #
      My Computer


  4. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #4

    the output from the commands looks normal, so we'll have to do some hunt-and-peck at likely failure points.

    One other possibility is malware action – try using Malwarebytes Anti-Malware (www.malwarebytes.org) free version. Download it, update it, and do a full system scan (do NOT enable the Pro trial – it may conflict with your existing AV or malware scanners)

    Please run the following commands from an elevated Command Prompt window
    Code:
     
    ICACLS C:\Windows\System32\sppsvc.exe
    ICACLS C:\Windows\System32\en-US\sppsvc.exe.mui
    DIR C:\windows\sppsvc.* /S
    REG QUERY HKU
    REG QUERY HKU\S-1-5-20
    DIR %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    ICACLS %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    (that should be enough for the moment <g>)
      My Computer


  5. Posts : 21
    Windows 7 Home Premium 64bit
    Thread Starter
       #5

    I ran a quick scan with scanned with Malwarebytes Anti-Malware last night. Nothing untoward was reported. I'm running a full scan as I write, but I think it's going to be a while. I'll report back on the result.

    Meanwhile, here's the transcript of ICACLS et al.:
    Code:
     
    C:\Windows\system32> ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    C:\Windows\system32> ICACLS C:\Windows\System32\en-US\sppsvc.exe.mui
    C:\Windows\System32\en-US\sppsvc.exe.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    C:\Windows\system32> ICACLS C:\Windows\SysWOW64\sppsvc.exe
    C:\Windows\SysWOW64\sppsvc.exe: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
     
    C:\Windows\system32> ICACLS C:\Windows\SysWOW64\en-US\sppsvc.exe.mui
    C:\Windows\SysWOW64\en-US\sppsvc.exe.mui: The system cannot find the file specifi
    ed.
    Successfully processed 0 files; Failed processing 1 files
     
    C:\Windows\system32> DIR C:\windows\sppsvc.* /S
    Volume in drive C is Acer
    Volume Serial Number is 6AE0-2930
     
    Directory of C:\windows\Prefetch
     
    05/08/2012 21:20 17,474 SPPSVC.EXE-96070FE0.pf
    1 File(s) 17,474 bytes
     
    Directory of C:\windows\System32
     
    20/11/2010 14:25 3,524,608 sppsvc.exe
    1 File(s) 3,524,608 bytes
     
    Directory of C:\windows\System32\en-US
     
    14/07/2009 03:26 18,944 sppsvc.exe.mui
    1 File(s) 18,944 bytes
     
    Directory of C:\windows\winsxs\amd64_microsoft-windows-security-spp.resources_31
    bf3856ad364e35_6.1.7600.16385_en-us_f8bce8b9508ba1f6
     
    14/07/2009 03:26 18,944 sppsvc.exe.mui
    1 File(s) 18,944 bytes
     
    Directory of C:\windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad36
    4e35_6.1.7600.16385_none_7656491f3aa3f98d
     
    14/07/2009 02:39 3,524,608 sppsvc.exe
    1 File(s) 3,524,608 bytes
     
    Directory of C:\windows\winsxs\amd64_microsoft-windows-security-spp_31bf3856ad36
    4e35_6.1.7601.17514_none_78875ce737927d27
     
    20/11/2010 14:25 3,524,608 sppsvc.exe
    1 File(s) 3,524,608 bytes
     
    Total Files Listed:
    6 File(s) 10,629,186 bytes
    0 Dir(s) 358,339,162,112 bytes free
     
    C:\Windows\system32> REG QUERY HKU
     
    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-20
    HKEY_USERS\S-1-5-21-3673603920-1938417040-2204823040-1001
    HKEY_USERS\S-1-5-21-3673603920-1938417040-2204823040-1001_Classes
    HKEY_USERS\S-1-5-18
     
    C:\Windows\system32> REG QUERY HKU\S-1-5-20
     
    HKEY_USERS\S-1-5-20\AppEvents
    HKEY_USERS\S-1-5-20\Console
    HKEY_USERS\S-1-5-20\Control Panel
    HKEY_USERS\S-1-5-20\Environment
    HKEY_USERS\S-1-5-20\EUDC
    HKEY_USERS\S-1-5-20\Keyboard Layout
    HKEY_USERS\S-1-5-20\Network
    HKEY_USERS\S-1-5-20\Printers
    HKEY_USERS\S-1-5-20\Software
    HKEY_USERS\S-1-5-20\System
     
    C:\Windows\system32> DIR %windir%\ServiceProfiles\NetworkService\AppData\Roaming\
    Microsoft\SoftwareProtectionPlatform
    Volume in drive C is Acer
    Volume Serial Number is 6AE0-2930
     
    Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft
    \SoftwareProtectionPlatform
     
    05/08/2012 04:19 <DIR> .
    05/08/2012 04:19 <DIR> ..
    14/07/2009 05:46 <DIR> Cache
    11/07/2012 22:04 7,113,258 tokens.bar
    1 File(s) 7,113,258 bytes
    3 Dir(s) 358,339,162,112 bytes free
     
    C:\Windows\system32> ICACLS %windir%\ServiceProfiles\NetworkService\AppData\Roami
    ng\Microsoft\SoftwareProtectionPlatform\tokens.dat
    C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProte
    ctionPlatform\tokens.dat: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
    The missing tokens.dat is presumably left over from my trying to recreate the license store last night.

    Thanks again for the quick replies :c)
    Last edited by Brink; 05 Aug 2012 at 17:53.
      My Computer


  6. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #6

    OK - so we know that the SPPSVC isn't functioning at all, as it's not recreated the tokens.dat file as it should have done.
    Everything else looks normal enough at the moment - the other two 'not found' errors are me being over-enthusiastic :)


    Please run the following commands
    dir C:\Windows\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
    dir C:\Windows\SysWOW64\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
    icacls C:\Windows\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
    icacls C:\Windows\SysWOW64\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms

    post the results, and then CAREFULLY do the following
    (NOTE: making changes to the registry can kill your machine - there is no 'undo' option except System Restore)

    Open Regedit - click on the Start button, and in the Search box type
    Regedit
    hit the Enter key
    in the left pane, navigate to
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sppsvc
    right-click on the 'folder' name (sppsvc)
    Select Permissions
    Make a note of the permissions showing for each user - post that list.
    Close the popup, and close Regedit
      My Computer


  7. Posts : 21
    Windows 7 Home Premium 64bit
    Thread Starter
       #7

    Transcript from commands:
    Code:
     
    PS C:\Users\Sandry> dir C:\Windows\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
     
     
    Directory: C:\Windows\System32\spp\tokens\pkeyconfig
     
     
    Mode LastWriteTime Length Name
    ---- ------------- ------ ----
    -a--- 20/11/2010 12:33 1018920 pkeyconfig.xrm-ms
     
     
    PS C:\Users\Sandry> dir C:\Windows\SysWOW64\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
     
     
    Directory: C:\Windows\SysWOW64\spp\tokens\pkeyconfig
     
     
    Mode LastWriteTime Length Name
    ---- ------------- ------ ----
    -a--- 20/11/2010 12:33 1018920 pkeyconfig.xrm-ms
     
     
    PS C:\Users\Sandry> icacls C:\Windows\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
    C:\Windows\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> icacls C:\Windows\SysWOW64\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms
    C:\Windows\SysWOW64\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
    Registry Permissions for sppsvc

    CREATOR OWNER
    Special Permissions: Allow (Everything else unchecked)
    SYSTEM
    Full Control: Allow
    Read: Allow
    Administrators
    Full Control: Allow
    Read: Allow
    Users
    Read: Allow
    If I go into the Advanced settings to check the Special Permissions for CREATOR OWNER, I see the settings in the screen shot.
    Attached Thumbnails Attached Thumbnails Windows 7 Build 7601 thinks it is not genuine.-sppsvc_registry_perms.jpg  
    Last edited by Brink; 05 Aug 2012 at 17:55.
      My Computer


  8. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #8

    Hmm - you're a more advanced user than I thought! :)
    Great - that's all normal... which means I'll have to really put a thinking cap on now.

    ICACLS C:\Windows\System32\slui.exe
    ICACLS C:\Windows\System32\en-US\slui.exe.mui
    ICACLS C:\Windows\System32\sppobjs.dll
    ICACLS C:\Windows\System32\sppcext.dll
    ICACLS C:\Windows\System32\en-US\sppcext.dll.mui
    ICACLS C:\Windows\SysWOW64\sppcext.dll
    ICACLS C:\Windows\SysWOW64\en-US\sppcext.dll.mui
    ICACLS C:\Windows\System32\sppc.dll
    ICACLS C:\Windows\System32\en-US\sppc.dll.mui
    ICACLS C:\Windows\SysWOW64\sppc.dll
    ICACLS C:\Windows\SysWOW64\en-US\sppc.dll.mui
    ICACLS C:\Windows\System32\slc.dll
    ICACLS C:\Windows\System32\en-US\slc.dll.mui
    ICACLS C:\Windows\SysWOW64\slc.dll
    ICACLS C:\Windows\SysWOW64\en-US\slc.dll.mui
    ICACLS C:\Windows\System32\sppuinotify.dll
    ICACLS C:\Windows\System32\en-US\sppuinotify.dll.mui
      My Computer


  9. Posts : 21
    Windows 7 Home Premium 64bit
    Thread Starter
       #9

    I dunno about "advanced". I spend my life in front of my machine, but in reality I know precious little about Windows and most of what we're doing is a foreign language. I'm just following your clear instructions ;c)

    Transcript from commands:

    Code:
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\slui.exe
    C:\Windows\System32\slui.exe: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\en-US\slui.exe.mui
    C:\Windows\System32\en-US\slui.exe.mui: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\sppobjs.dll
    C:\Windows\System32\sppobjs.dll: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\sppcext.dll
    C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\en-US\sppcext.dll.mui
    C:\Windows\System32\en-US\sppcext.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\sppcext.dll
    C:\Windows\SysWOW64\sppcext.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\en-US\sppcext.dll.mui
    C:\Windows\SysWOW64\en-US\sppcext.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\sppc.dll
    C:\Windows\System32\sppc.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\en-US\sppc.dll.mui
    C:\Windows\System32\en-US\sppc.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\sppc.dll
    C:\Windows\SysWOW64\sppc.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\en-US\sppc.dll.mui
    C:\Windows\SysWOW64\en-US\sppc.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\slc.dll
    C:\Windows\System32\slc.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\en-US\slc.dll.mui
    C:\Windows\System32\en-US\slc.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\slc.dll
    C:\Windows\SysWOW64\slc.dll NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\SysWOW64\en-US\slc.dll.mui
    C:\Windows\SysWOW64\en-US\slc.dll.mui NT SERVICE\TrustedInstaller:(F)
    BUILTIN\Administrators:(RX)
    NT AUTHORITY\SYSTEM:(RX)
    BUILTIN\Users:(RX)
     
    Successfully processed 1 files; Failed processing 0 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\sppuinotify.dll
    C:\Windows\System32\sppuinotify.dll: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
     
    PS C:\Users\Sandry> ICACLS C:\Windows\System32\en-US\sppuinotify.dll.mui
    C:\Windows\System32\en-US\sppuinotify.dll.mui: The system cannot find the file specified.
    Successfully processed 0 files; Failed processing 1 files
    Just for info: the Malwarebytes Anti-Malware scan finished. No problems detected.
      My Computer


  10. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #10

    VERY strange - you sure the SFC completed without error?
    The fact that those three files failed is worrying.

    SFC /SCANFILE=C:\Windows\System32\slui.exe
    SFC /SCANFILE=C:\Windows\System32\en-US\slui.exe.mui
    SFC /SCANFILE=C:\Windows\System32\sppobjs.dll

    DIR C:\Windows\System32\slui.exe
    DIR C:\Windows\System32\en-US\slui.exe.mui
    DIR C:\Windows\System32\sppobjs.dll
    Last edited by NoelDP; 05 Aug 2012 at 18:15. Reason: add checks
      My Computer


 
Page 1 of 5 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:37.
Find Us