Windows 7: This computer is not running Genuine Windows

NoelDP · 22 Nov 2012

The sppcommdlg.dll file (and the .mui extension) aren't referenced in any 'normal' way in the registry, and it can't be 'registered' in the usual way
I'm trying to find a way to break and fix it on my VM - shout at me tomorrow if you haven't heard by then

Kipac · 22 Nov 2012

Okay, thank you for the hard work

NoelDP · 22 Nov 2012

The only way I've been able to reproduce the symptoms so far is by rendering one of the two .MUI files inoperable (by removing it).
Please open an Elevated Command Prompt, and run the following commands - post the results.....

SFC /SCANFILE=C:\Windows\System32\en-US\sppcommdlg.dll.mui
SFC /SCANFILE=C:\Windows\SysWOW64\en-US\sppcommdlg.dll.mui

Kipac · 22 Nov 2012

Here's a result of Command Prompt.

P.S. Also, there was a pop up message saying "sfc.exe - Corrupt File: The file or directory/Users/(my user name)/AppData/Local/Microsoft/Windows/Temporary Internet Files is corrupt and unreadable. Please run the Chkdsk utility".
Just wondering if that info was any helpful...

Code:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>SFC /SCANFILE=C:\Windows\System32\en-US\sppcommdlg.dll.mui


Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>SFC /SCANFILE=C:\Windows\SysWOW64\en-US\sppcommdlg.dll.mui


Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>

NoelDP · 22 Nov 2012

Hmmmmm... such messages can often mean hardware problems.

SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and attach it to your reply.

Kipac · 22 Nov 2012

This is the result of Command Prompt. (sfc.exe message popped up again while scanning.)
I'll now reboot and then post the CBS.

Code:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>SFC /SCANNOW

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

C:\Windows\system32>

Kipac · 22 Nov 2012

Here's a CBS.log file.

NoelDP · 22 Nov 2012

Code:

2012-11-22 15:56:24, Info                  CSI    000002fd [SR] Cannot repair member file [l:22{11}]"wscript.exe" of Microsoft-Windows-Scripting, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-11-22 15:56:27, Info                  CSI    000002fe [SR] Cannot repair member file [l:12{6}]"20.png" of Microsoft-Windows-Gadgets-Weather, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

(holding place - I can't do anything with it until tomorrow! )
one is very minor - the other is major.
please do as little as possible until I get back to you - but one thing you should do is run a malware scan.

Kipac · 22 Nov 2012

Okay, thanks. I don't know what those codes that you posted are, but I'll run anti-malware program (Malwarebytes) to scan for now!