none
Windows activated but not genuine??

    Question

  • Hello,

    I have recently ran into a problem with my Windows 7.  I am continuosly receiving a message saying that I need to validate windows online, even though my windows subscription is valid.  I cannot run windows update, zune software, etc.  I ran MGADiag and received the following:

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {BBC7D618-2FD2-4D55-882C-0A1EAAFED740}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BBC7D618-2FD2-4D55-882C-0A1EAAFED740}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-147-7096686-86238</PID><PIDType>6</PIDType><SID>S-1-5-21-3565756811-2251584949-2882804363</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS><HWID>AABB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18936135D2778</Val><Hash>rHXuNisM4s32sgdyQsv2DtYoQEE=</Hash><Pid>81605-956-2315217-65034</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-147-709668-03-1033-7600.0000-3152011
    Installation ID: 002495313574045422558484258561984286406736449102082832
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 12:39:25 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: 0x00000000
    HealthStatus: 0x000000000003EFFF
    Event Time Stamp: 11:8:2011 18:21
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: NgAAAAEABQABAAIAAAABAAAAAgABAAEAeqi4/kioRoMGDBp8orxuU0q0wj9wvnYCSo+KmSqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      APIC            INTEL         CRESTLNE
      SLIC            ACRSYS        ACRPRDCT
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci


    Any ideas on what I can do to fix this?

    Thanks for your help.

    Friday, November 11, 2011 5:41 PM

Answers

  • "ccott23" wrote in message news:8bcd66b9-b49d-45ac-aae0-5fcb46090b2f...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86220
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
     
     
     
    Yay! – you have the honour of being the first person to have this problem solved without a reinstall! :)
     
    Well done, and thanks for sticking with it!
     
    Your report looks good to me.
     
    If you’re still having problems with Windows Updates, you should post in the Answers WU forum here.
     
    Good Luck!
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, November 14, 2011 4:58 PM

All replies

  • "ccott23" wrote in message news:4df28239-5015-45fc-8701-995650c6e772...

    Hello,

    I have recently ran into a problem with my Windows 7.  I am continuosly receiving a message saying that I need to validate windows online, even though my windows subscription is valid.  I cannot run windows update, zune software, etc.  I ran MGADiag and received the following:

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048


    Other data-->
    SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS



    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 12:39:25 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21



    Any ideas on what I can do to fix this?

    Thanks for your help.

    Your Windows installation is an MAK Volume License – you should talk to your System Admin.
    Having said that, go to the Validation site,and run the diagnostics – see what they report.
    Once it returns ‘all green’ then try the manual validation site
    what does that have to say?
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 6:05 PM
  • Try using System Restore to recover to a date prior to when this problem appeared. 
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Friday, November 11, 2011 6:15 PM
  • The first site returns all green.

    The second site returned this:

    "

    Files that Windows needs to work properly have been modified, removed, or disabled. To resolve, you need to install genuine Windows. Not to worry, we can help you with that."

    Friday, November 11, 2011 6:26 PM
  • "ccott23" wrote in message news:7bb6edec-b35d-4a4b-8f53-6af1afbe1b30...

    The first site returns all green.

    The second site returned this:

    "

    Files that Windows needs to work properly have been modified, removed, or disabled. To resolve, you need to install genuine Windows. Not to worry, we can help you with that."

     
    Please post a new MGADiag report – things may have changed.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 7:13 PM
  • The new report:

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {BBC7D618-2FD2-4D55-882C-0A1EAAFED740}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BBC7D618-2FD2-4D55-882C-0A1EAAFED740}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-147-7096686-86238</PID><PIDType>6</PIDType><SID>S-1-5-21-3565756811-2251584949-2882804363</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS><HWID>AABB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18936135D2778</Val><Hash>rHXuNisM4s32sgdyQsv2DtYoQEE=</Hash><Pid>81605-956-2315217-65034</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-147-709668-03-1033-7600.0000-3152011
    Installation ID: 002495313574045422558484258561984286406736449102082832
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 2:12:47 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: 0x00000000
    HealthStatus: 0x000000000003EFFF
    Event Time Stamp: 11:11:2011 13:23
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: NgAAAAEABQABAAIAAAABAAAAAgABAAEAeqi4/kioRoMGDBp8orxuU0q0wj9wvnYCSo+KmSqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      APIC            INTEL         CRESTLNE
      SLIC            ACRSYS        ACRPRDCT
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci


    Friday, November 11, 2011 7:15 PM
  • "ccott23" wrote in message news:17d71dbe-9e53-4ba5-9abe-0bccb69ba05e...

    The new report:

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21


     

    The above error message is a ‘self-heal failed’ error – the OS attempted to heal itself but failed.
    This probably means that the Licensing Store is corrupted.
    Note that if you are using a one-time Key (from a university, school , or college, or some other places) this fix may break activation and leave you without a valid Key.
     
    Recreate the Licensing Store
    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select Run as Administrator
    4) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection service may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.

    Reboot and attempt Validation again at www.microsoft.com/genuine/validate and Post back with a new MGADiag report and the validation result.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 7:33 PM
  • After following your steps, the validation result was the same as before.  The new MGAD tool will not allow me to copy anymore.  It says:

    "Failed to create output files, hr = 0x80070002. Please contact support."

    Friday, November 11, 2011 8:21 PM
  • "ccott23" wrote in message news:677a3e35-7188-4268-9986-04b9dd0e2ba1...

    After following your steps, the validation result was the same as before.  The new MGAD tool will not allow me to copy anymore.  It says:

    "Failed to create output files, hr = 0x80070002. Please contact support."

     
    The report will still paste – the error simply means that it was unable to save the backup files it created to the hard drive.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 8:41 PM
  • "Noel D Paton" wrote in message news:4743d7d6-c1b3-44bd-9631-7a009af0a190...
     
    The report will still paste – the error simply means that it was unable to save the backup files it created to the hard drive.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
     
     
    - and it may help if you actually used the latest version of MGADiag :)
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 9:01 PM
  • I am running Windows 7 Pro, and I have not installed SP1 yet.

    Here is the output of the latest version of the MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {BBC7D618-2FD2-4D55-882C-0A1EAAFED740}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BBC7D618-2FD2-4D55-882C-0A1EAAFED740}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-147-7096686-86238</PID><PIDType>6</PIDType><SID>S-1-5-21-3565756811-2251584949-2882804363</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS><HWID>AABB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18936135D2778</Val><Hash>rHXuNisM4s32sgdyQsv2DtYoQEE=</Hash><Pid>81605-956-2315217-65034</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-147-709668-03-1033-7600.0000-3152011
    Installation ID: 002495313574045422558484258561984286406736449102082832
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 4:02:17 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000200000003EFFF
    Event Time Stamp: 11:11:2011 15:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watadminsvc.exe
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\wat\watux.exe
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys
    Tampered Service: sppuinotify


    HWID Data-->
    HWID Hash Current: NgAAAAEABQABAAIAAAABAAAAAgABAAEAeqi4/kioRoMGDBp8orxuU0q0wj9wvnYCSo+KmSqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      APIC            INTEL         CRESTLNE
      SLIC            ACRSYS        ACRPRDCT
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci



    Friday, November 11, 2011 9:05 PM
  • "ccott23" wrote in message news:529743cd-8f5a-415a-8e10-75e3df51e560...

    I am running Windows 7 Pro, and I have not installed SP1 yet.

    Here is the output of the latest version of the MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000200000003EFFF
    Event Time Stamp: 11:11:2011 15:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watadminsvc.exe
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\wat\watux.exe
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys
    Tampered Service: sppuinotify



     
     
     
     
    Now it all makes sense :)
     
     
    The list of affected files usually appears also in the File Mismatches – the fact that they don’t probably means that their permissions have been altered in some way.
     
    The Tampered Service – sppuinotify – is critical to the Software Protection Service and WAT – which raises the thought that these problems arise as a result of attempts to circumvent Activation and/or validation.
     
    Let’s attack that point first.
    Please open an Elevated (Administrator) Command Prompt window and use the following commands....

    net start sppuinotify
    sc qc sppuinotify
    sc queryex sppuinotify
    sc qprivs sppuinotify
    sc qsidtype sppuinotify
    sc sdshow sppuinotify


    copy and paste the results into your response,(to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.) together with the EXACT error message you get when you attempt to start the service from the Services control panel..

     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 9:21 PM
  • Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>net start sppuinotify
    The SPP Notification Service service is starting.
    The SPP Notification Service service could not be started.

    The service did not report an error.

    More help is available by typing NET HELPMSG 3534.


    C:\Windows\system32>sc qc sppuinotify
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: sppuinotify
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k LocalService
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : SPP Notification Service
            DEPENDENCIES       : EventSystem
            SERVICE_START_NAME : NT AUTHORITY\LocalService

    C:\Windows\system32>sc queryex sppuinotify

    SERVICE_NAME: sppuinotify
            TYPE               : 20  WIN32_SHARE_PROCESS
            STATE              : 1  STOPPED
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 0
            FLAGS              :

    C:\Windows\system32>sc qprivs sppuinotify
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppuinotify
            PRIVILEGES       : SeChangeNotifyPrivilege
                             : SeImpersonatePrivilege

    C:\Windows\system32>sc qsidtype sppuinotify
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppuinotify
    SERVICE_SID_TYPE:  UNRESTRICTED

    C:\Windows\system32>sc sdshow sppuinotify

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-123231216-259288
    3651-3715271367-3753151631-4175906628)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CC
    LCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDR
    CWDWO;;;WD)

    C:\Windows\system32>

     

    i am no longer getting an error message from the Services control panel for some reason...

     

    Friday, November 11, 2011 10:28 PM
  • "ccott23" wrote in message news:f8eb96b7-12b7-45fe-aec0-26e784001623...

    Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>net start sppuinotify
    The SPP Notification Service service is starting.
    The SPP Notification Service service could not be started.

    The service did not report an error.

    More help is available by typing NET HELPMSG 3534.


    C:\Windows\system32>sc qc sppuinotify
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: sppuinotify
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k LocalService
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : SPP Notification Service
            DEPENDENCIES       : EventSystem
            SERVICE_START_NAME : NT AUTHORITY\LocalService

     

    I think I know why :)
     
    The only problem I see there is that the service is set to Auto-start – it should be on Manual start.
     
    Please reset it to that in the Services control panel, and reboot.
    Then run another MGADiag report
    Then try starting the service – report any error found (hopefully, it will report that it started OK)
     
    post the results.
     
     
    I suspect that the errors in starting are caused by the fact that the service is too busy trying to shut down, and failing because it’s on auto-start :)
    The results of the MGADiag and the test should help.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 11, 2011 10:40 PM
  • There was no error involved with starting the SPP Notification Service after the reboot, so we should be good there.  I once again got the same error when attempting to copy the MGADiag report, however.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {BBC7D618-2FD2-4D55-882C-0A1EAAFED740}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BBC7D618-2FD2-4D55-882C-0A1EAAFED740}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-147-7096686-86238</PID><PIDType>6</PIDType><SID>S-1-5-21-3565756811-2251584949-2882804363</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS><HWID>AABB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18936135D2778</Val><Hash>rHXuNisM4s32sgdyQsv2DtYoQEE=</Hash><Pid>81605-956-2315217-65034</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-147-709668-03-1033-7600.0000-3152011
    Installation ID: 002495313574045422558484258561984286406736449102082832
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 7:27:15 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000003EFFF
    Event Time Stamp: 11:11:2011 15:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watadminsvc.exe
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\wat\watux.exe
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys


    HWID Data-->
    HWID Hash Current: NgAAAAEABQABAAIAAAABAAAAAgABAAEAeqi4/kioRoMGDBp8orxuU0q0wj9wvnYCSo+KmSqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      APIC            INTEL         CRESTLNE
      SLIC            ACRSYS        ACRPRDCT
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci
      SSDT            SataRe        SataAhci


    Saturday, November 12, 2011 12:31 AM
  • The error is not in copying the report but in creating a file.  The file is not needed.  This is expected behavior.
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Saturday, November 12, 2011 1:03 AM
  • "ccott23" wrote in message news:088f790f-9d2f-4dc1-9ff4-540f148a9c8f...

    There was no error involved with starting the SPP Notification Service after the reboot, so we should be good there.  I once again got the same error when attempting to copy the MGADiag report, however.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86238
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048


    Other data-->
    SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/11/2011 7:27:15 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000003EFFF
    Event Time Stamp: 11:11:2011 15:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\wat\watadminsvc.exe
    Tampered File: %systemroot%\system32\wat\watweb.dll
    Tampered File: %systemroot%\system32\wat\npwatweb.dll
    Tampered File: %systemroot%\system32\wat\watux.exe
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    Tampered File: %systemroot%\system32\drivers\spldr.sys


     
     
    One down, quite a few to go. :)
     
    Next we’ll take what should be an easy hit.
    go to the Control Panel > Programs & Features:> Uninstall a Program> Installed Updates.
    Look for the update KB971033
    Uninstall it if present.
    Now download the update from a direct download
    Note that you will need the 64-bit (x64) version of the file.
    Install it, and reboot.
    Then post back with a new MGADiag report.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, November 12, 2011 7:56 AM
  • Alright I uninstalled the update, but when I went to install the new download, I received the following error from the Windows Update Standalone Installer:

    "Installer encountered an error: 0x800b0001

    Unknown trust provider."

    Saturday, November 12, 2011 3:35 PM
  • "ccott23" wrote in message news:0c07c6bb-a3a5-4da9-8371-9b07f28d528c...

    Alright I uninstalled the update, but when I went to install the new download, I received the following error from the Windows Update Standalone Installer:

    "Installer encountered an error: 0x800b0001

    Unknown trust provider."

    OK – it sounds as if certificates are missing.
    (Have you been using some kind of cleanup utility? – a registry cleaner, or a disk cleaner?)
     
     
    may help
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, November 13, 2011 6:03 AM
  • Yes, I have CCleaner and have been using it regularly.

    Sunday, November 13, 2011 8:08 PM
  • "ccott23" wrote in message news:8c3210d4-508f-421c-8fde-84173b54187c...

    Yes, I have CCleaner and have been using it regularly.

    CCLeaner has its uses – but it’s also capable of doing things that shouldn’t be done. Like all Registry cleaners, it can rip out parts of the system that should be left well alone.
     
    Try undoing anything CCleaner did in the three days prior to the system fouling up.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, November 13, 2011 10:56 PM
  • Ok.  After running the "windows fix it" that you linked to earlier, it seemed to clear everything up.  Windows update is now working and my windows is saying it is validated, even online.  Now that I've run windows update, however, it has failed to update both Windows 7 Pro SP1 and IE9.. I'm not sure if this could be a related issue or not, but I thought I would see if you knew anything about that as well.

    Thanks a lot for your help, I really appreciate it.

    Monday, November 14, 2011 1:21 AM
  • "ccott23" wrote in message news:146cad74-48c7-4609-b4bc-16111ac19f43...

    Ok.  After running the "windows fix it" that you linked to earlier, it seemed to clear everything up.  Windows update is now working and my windows is saying it is validated, even online.  Now that I've run windows update, however, it has failed to update both Windows 7 Pro SP1 and IE9.. I'm not sure if this could be a related issue or not, but I thought I would see if you knew anything about that as well.

    Thanks a lot for your help, I really appreciate it.

    Please post a new MGADiag report – your system may simply have gone into Grace mode.
     
     
    I’m not too surprised by the problem with WU – you may have to post elsewhere for assistance with that.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, November 14, 2011 9:03 AM
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86220
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {BBC7D618-2FD2-4D55-882C-0A1EAAFED740}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    File Scan Data-->
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{BBC7D618-2FD2-4D55-882C-0A1EAAFED740}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-147-7096686-86220</PID><PIDType>6</PIDType><SID>S-1-5-21-3565756811-2251584949-2882804363</SID><SYSTEM><Manufacturer>Acer, inc.</Manufacturer><Model>Aspire 5920     </Model></SYSTEM><BIOS><Manufacturer>Acer   </Manufacturer><Version>v1.3805</Version><SMBIOSVersion major="2" minor="4"/><Date>20071226000000.000000+000</Date></BIOS><HWID>AABB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18936135D2778</Val><Hash>rHXuNisM4s32sgdyQsv2DtYoQEE=</Hash><Pid>81605-956-2315217-65034</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
    Spsys.log Content: 0x80070002
    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-147-709668-03-1033-7600.0000-3172011
    Installation ID: 002495313574045422558484258561984286406736449102082832
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: J66MK
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 11/14/2011 11:35:12 AM
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:13:2011 18:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    HWID Data-->
    HWID Hash Current: NgAAAAEABQABAAIAAAABAAAAAgABAAEAeqi4/kioRoMGDBp8orxuU0q0wj9wvnYCSo+KmSqF
    OEM Activation 1.0 Data-->
    N/A
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC INTEL CRESTLNE
      FACP INTEL CRESTLNE
      HPET INTEL CRESTLNE
      BOOT PTLTD $SBFTBL$
      MCFG INTEL CRESTLNE
      APIC INTEL CRESTLNE
      SLIC ACRSYS ACRPRDCT
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
    btw, i am not longer receiving the error when attempting to copy the MGADiag report
    Monday, November 14, 2011 4:40 PM
  • "ccott23" wrote in message news:8bcd66b9-b49d-45ac-aae0-5fcb46090b2f...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-J66MK
    Windows Product Key Hash: NNohg/LyfxopVa+kufphep0Wlbk=
    Windows Product ID: 55041-147-7096686-86220
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
     
     
     
    Yay! – you have the honour of being the first person to have this problem solved without a reinstall! :)
     
    Well done, and thanks for sticking with it!
     
    Your report looks good to me.
     
    If you’re still having problems with Windows Updates, you should post in the Answers WU forum here.
     
    Good Luck!
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, November 14, 2011 4:58 PM