New
#1
Windows Ungenuine, Unable to reactivate
After replacing a failing hard drive, I have been bitten with the This copy of Windows is not Genuine, and am unable to (re)activate. While looking at the black desktop and searching for a solution, I have done the following:
Run a complete scandisk with fix (of course the damage was already done)
Checked for virus, malware, rootkits, etc. I am positive the damage was from a failing hard drive.
I have tried the sfc -scannow and this was the results:
I have looked through the CBS.log file, and these are what I believe to be the relevant lines:Code:C:\Windows\system32>sfc -scannow Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log
Code:2015-11-01 17:27:04, Info CSI 00000498 [SR] Verify complete 2015-11-01 17:27:04, Info CSI 00000499 [SR] Repairing 2 components 2015-11-01 17:27:04, Info CSI 0000049a [SR] Beginning Verify and Repair transaction 2015-11-01 17:27:04, Info CSI 0000049b Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" : Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=} 2015-11-01 17:27:04, Info CSI 0000049c [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-11-01 17:27:04, Info CSI 0000049d Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" : Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=} 2015-11-01 17:27:04, Info CSI 0000049e [SR] Cannot repair member file [l:38{19}]"NlsLexicons0009.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-11-01 17:27:05, Info CSI 0000049f Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" : Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=} 2015-11-01 17:27:05, Info CSI 000004a0 [SR] Cannot repair member file [l:22{11}]"sppobjs.dll" of Microsoft-Windows-Security-SPP-Plugin-Common, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-11-01 17:27:05, Info CSI 000004a1 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery" 2015-11-01 17:27:05, Info CSI 000004a2 Hashes for file member \??\C:\Windows\System32\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" : Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=} 2015-11-01 17:27:05, Info CSI 000004a3 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..y-spp-plugin-common_31bf3856ad364e35_6.1.7601.17514_none_2136d8ac9cfcea8b\sppobjs.dll do not match actual file [l:22{11}]"sppobjs.dll" : Found: {l:32 b:15hamyuG4FeQorXOBMZN6sS2LOB4l76JsENcwuF2Ls4=} Expected: {l:32 b:p+IgzDZhQp14ZpOyd6fznV2eJChLHZ5V22KVr32X0QQ=} 2015-11-01 17:27:05, Info CSI 000004a4 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"sppobjs.dll"; source file in store is also corrupted 2015-11-01 17:27:06, Info CSI 000004a5 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" : Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=} 2015-11-01 17:27:06, Info CSI 000004a6 [SR] Cannot repair member file [l:38{19}]"NlsLexicons0009.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-11-01 17:27:06, Info CSI 000004a7 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery" 2015-11-01 17:27:07, Info CSI 000004a8 Hashes for file member \??\C:\Windows\SysWOW64\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" : Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=} 2015-11-01 17:27:07, Info CSI 000004a9 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.1.7601.17514_none_9fe23e2588fdee38\NlsLexicons0009.dll do not match actual file [l:38{19}]"NlsLexicons0009.dll" : Found: {l:32 b:CuhViW1xOZKAdOiSByUC7qhj/da/9If/tfWmkZhqfRQ=} Expected: {l:32 b:lKvzSMcOS+ORuTRMxzCgqY1usELqHQMYQNo9t0p2hJw=} 2015-11-01 17:27:07, Info CSI 000004aa [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:38{19}]"NlsLexicons0009.dll"; source file in store is also corrupted 2015-11-01 17:27:08, Info CSI 000004ab Repair results created:It appears the biggest hangup is with the system file sppobjs.dll.Code:Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: N/A, hr = 0xc004f012 Windows Product Key: N/A, hr=0x80070241 Windows Product Key Hash: N/A, hr=0x80070241 Windows Product ID: 00371-OEM-9045827-59608 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.1.7601.2.00010100.1.0.048 ID: {F9BDE8D4-2F00-4AEC-BD0E-EBADBAF925E4}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Professional Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.150928-1507 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files\Internet Explorer\iexplore.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003 Other data--> Office Details: <GenuineResults><MachineData><UGUID>{F9BDE8D4-2F00-4AEC-BD0E-EBADBAF925E4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>00371-OEM-9045827-59608</PID><PIDType>3</PIDType><SID>S-1-5-21-2788353574-3577127994-1328140465</SID><SYSTEM><Manufacturer>ASUS</Manufacturer><Model>All Series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1204</Version><SMBIOSVersion major="2" minor="8"/><Date>20140707000000.000000+000</Date></BIOS><HWID>8BB13D07018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F012' to display the error text. Error: 0xC004F012 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0000000000000010 Event Time Stamp: 11:1:2015 01:24 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered File: %systemroot%\system32\sppobjs.dll HWID Data--> HWID Hash Current: NAAAAAEAAAABAAEAAwACAAAAAwABAAEAHKIgFU5bNkMG31SOQti+tYqboppM0mK/5qXI9g== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC ALASKA A M I FACP ALASKA A M I HPET ALASKA A M I MCFG ALASKA A M I FPDT ALASKA A M I SSDT Ther_R Ther_Rvp SSDT Ther_R Ther_Rvp SSDT Ther_R Ther_Rvp SSDT Ther_R Ther_Rvp SSDT Ther_R Ther_Rvp
How to I replace this file and where do I get it from? Apparently I will not be able to go much further until the digital signatures match what they should have been.