Answered Retail Win 7- worked for less than a month

  • Saturday, March 20, 2010 3:40 AM
     
     

    Here is my MGA:

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50

    Cached Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-PDG8D-YYW87-F999Q
    Windows Product Key Hash: FSXUS2BeCgqCCnXXPCsv8XYvls8=
    Windows Product ID: 00426-067-3238694-86936
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {2637669D-E48A-4A07-B076-5F99B627CDF4}(1)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error: T:20100319120705024-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watux.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2637669D-E48A-4A07-B076-5F99B627CDF4}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-F999Q</PKey><PID>00426-067-3238694-86936</PID><PIDType>5</PIDType><SID>S-1-5-21-3450380053-3063142792-1189452693</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-SLI Premium ACPI BIOS Revision 1303</Version><SMBIOSVersion major="2" minor="3"/><Date>20060810000000.000000+000</Date></BIOS><HWID>3DB93607018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: a0cde89c-3304-4157-b61c-c8ad785d1fad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00172-067-323869-00-1033-7600.0000-0782010
    Installation ID: 003292126074484656744122351835749222852032755472675165
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: F999Q
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 4
    Trusted time: 3/19/2010 11:18:20 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: PASS
    Event Time Stamp: 3:1:2010 10:14
    WAT Activex: Not Registered - 0x80040154
    WAT Admin Service: Not Registered - 0x80040154

    HWID Data-->
    HWID Hash Current: OAAAAAIABgABAAEAAAACAAAAAQABAAEA6GFSi0x2Ih1+COrUdOoAhz6O3pOobCCqtg4hk3pu2iI=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Nvidia  AWRDACPI
      FACP   Nvidia  AWRDACPI
      MCFG   Nvidia  AWRDACPI


    Appreciate anything to resolve this issue.

All Replies

  • Saturday, March 20, 2010 4:10 AM
     
     

    Hit the pause and win-key simultaneously, system properties should pop up, now scroll to the bottom of the box, look for the activate windows link in the activation section. Click on the activate link and attempt to reactivate. If activation is successful then re-run the MGAdiag utility and post it here.

    It actually appears as if windows never activated after the initial install, hopefully a simple activation will fix it.
  • Saturday, March 20, 2010 4:43 AM
     
     

    Hit the pause and win-key simultaneously, system properties should pop up, now scroll to the bottom of the box, look for the activate windows link in the activation section. Click on the activate link and attempt to reactivate. If activation is successful then re-run the MGAdiag utility and post it here.

    It actually appears as if windows never activated after the initial install, hopefully a simple activation will fix it.

    I did activate about 2 wweeks after install and got the GENUINE logo on computer properties page. Also I I have tried to reactivate a few times and failed. Since then after alot of reading on this forum I unistalled update KB971033 so now when I follow your intructions windows wants me to download/intall uppdate that I"m guessing is KB971033. Should I ?
    • Marked As Answer by Getphuct Saturday, March 20, 2010 7:21 AM
    • Unmarked As Answer by Getphuct Saturday, March 20, 2010 7:21 AM
    •  
  • Saturday, March 20, 2010 4:51 AM
     
     

    Also yesterday I added 2 HDD for storage only nothing to do with or changing anything to with win7 boot HDD.

  • Saturday, March 20, 2010 5:21 AM
     
     

    Another thing now that I think about it is one of the HHD had a partition so I played around with the disk manager to make it a single volume. As i did this I ended up making the status of that HDD "active" and now I notice that the only other one marked active is the win7 boot HDD.

    Below is how it looks on disk managment page (E:) and (H:) the ones added yesterday. (H:) being the one I ended up making "active"

     (C:) simple  basic  NTFS  healthy (system,boot,pagefile,active,crash dump,primary partition)                                                                                                                    

     (D:) simple  basic  NTFS  healthy (primary partition)

     (E:) simple   basic NTFS  healthy (primary partition)

     (H:) simple   basic NTFS  healthy (active,primary partition)

    Think this may a factor in my validation equation ?

  • Saturday, March 20, 2010 5:28 AM
     
     

    I don't believe the HDD's would be enough of a hardware change to cause a reactivation. I think you should reinstall the WAT update then post the MGAdiag results, with the update involved it may give us more information about the cause of the problem. You can install it by going to www.microsoft.com/genuine and running the validation.

    I understand you may not want to install it, but consider giving it a shot, allot of information is not available without that update installed.

     

    EDIT:

    This entry is strange. Have you ever used a program called Vistalizator? I don't know if this could be a symptom of vistalizator but it does look like a problem. Maybe Darin will know what it means.

    Spsys.log Content: U1BMRwEAAAAAAQAACAAAAC0nAAAAAAAAWmICAAAAAAAs1Ng

  • Saturday, March 20, 2010 5:56 AM
     
     
    Whats Vistalizator? Pretty sure I haven't used though. Installing update now. MGA results in a minute. Also would to say that I appreciate your time on this matter.Thanks.
  • Saturday, March 20, 2010 6:19 AM
     
     Answered

    Validation sucess! Still going to run MGA and post in just a minute. I have a question and a statement.

    1: On system properties page under windows activation line it says - "Windows activated" but on the other side there is no "Genuine logo" instead has "get genuine" in blue letters as a link to same "Windows Genuine validation" which I did again with sucsess. Question is after that still no "Genuine logo". Do you think it is a matter of rebooting ? if yes would you like me to run MGA before doing so ?

    2: After I reinstalled KB971033 update but before going to (sucsessful)validation web page I went back to disk manager and deleted active volume and formatted it back to a simple volume.   

     

    • Marked As Answer by Getphuct Saturday, March 20, 2010 7:21 AM
    •  
  • Saturday, March 20, 2010 7:25 AM
     
     

    Please look at this and let know about any issues you might see. PM me if unrelated to thread subject.

    Thanks

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-PDG8D-YYW87-F999Q
    Windows Product Key Hash: FSXUS2BeCgqCCnXXPCsv8XYvls8=
    Windows Product ID: 00426-067-3238694-86936
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {2637669D-E48A-4A07-B076-5F99B627CDF4}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error: T:20100319120705024-
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2637669D-E48A-4A07-B076-5F99B627CDF4}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-F999Q</PKey><PID>00426-067-3238694-86936</PID><PIDType>5</PIDType><SID>S-1-5-21-3450380053-3063142792-1189452693</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-SLI Premium ACPI BIOS Revision 1303</Version><SMBIOSVersion major="2" minor="3"/><Date>20060810000000.000000+000</Date></BIOS><HWID>3DB93607018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: a0cde89c-3304-4157-b61c-c8ad785d1fad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00172-067-323869-00-1033-7600.0000-0782010
    Installation ID: 003292126074484656744122351835749222852032755472675165
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: F999Q
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 3/20/2010 2:38:16 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: PASS
    Event Time Stamp: 3:1:2010 10:14
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: OAAAAAIABgABAAEAAAACAAAAAQABAAEA6GFSi0x2Ih1+COrUdOoAhz6O3pOobCCqtg4hk3pu2iI=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Nvidia  AWRDACPI
      FACP   Nvidia  AWRDACPI
      MCFG   Nvidia  AWRDACPI

     

  • Wednesday, March 24, 2010 7:46 PM
    Owner
     
     

    Hello Getphuct,

    The line "TTS Error: T:20100319120705024-" in your Diagnostic Report, is indicating a Trusted Store Tamper is occuring.

      TTS stands for Tamper Time Stamp, the long number is the date/time of the last tamper event (Year:2010 Month:03 Day:19 Time:1207 Milisec:05024)and the "T" in front of the long number stands for Trusted Store. 

      Trusted Store Tampers are fairly rare.  There are files, in Windows, that have a Digital Signature. A Digital Signature is an industry standard that ensures that a file, in fact, came from a specified source and has not been modified in any way. 

    Example: lets say you get a Printer Driver that is Digitally Signed from HP. Since the Digital Signature was created by a Trusted Source a Certificate is created within Window's Trusted Store. The Digital Signature is dependent on the file's Hash (think fingerprint) so if the file is changed in any way it's Digital Signature then becomes invalid.  So lets say that the HP Driver got modified by some sort of Malware. The File's Hash would no longer match the hash listed in the Digitally Signature (or the Signature may not even be readable at all, at that point). The Digital Signature become invalid because windows now don't know what has been done to that file, so the file can no longer be trusted. This in turn invalidates the corresponding Certificate within the Trusted Store.

      What I have described in the above example is basically what is happening with your Windows 7.  Some Digitally Signed file (I don't know which) has been modified in some way (replaced, rewritten or just become corrupt) and the Certificate within Windows's Trusted Store has become invalid (i.e. no longer trusted) and that is what has triggered the Non-Genuine messaging. (if you are not seeing a Non-Genuine message, it may be that either a) the issue was resolved by you, somehow or b) The Windows Service that detects tampers has not run yet. But once it does, you will likely see Non-Genuine messaging) 

      Unfortunatly, none of my tools are able to pinpoint which file/signature/certificate is causing the problem. However there are a few things you can try that may correct the issue.

    a) System Restore to a point before the issue occurred:

    1) Boot into Windows
    2) Click the Start button
    3) In the Start Search field, type: System Restore and hit Enter
    4) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to a date Before you first noticed the issue.
    5) Click the Next button.
    6) Reboot
    7) Confirm the issue is resolved

    b) Attempt to repair using sfc /scannow

    1) Boot into Windows
    2) Click the Start button
    3) In the Start Search field, type: CMD
    4) Right-click the CMD.exe file and select 'Run as Administrator'
    5) In the CMD window, type: sfc /scannow
    8) Reboot twice and see if that resolves the issue.


    If none of my suggestions resolves the issue, then the only other thing I can suggest is to either create a (no cost) support request at http://support.microsoft.com/gp/contactwga for further assistance or reinstall Vista.  (note: just to set your expectations, contactwga support uses the same tools as I do, so are just as unlikely to be able to identify the file that is causeing the problem, for you)


    Hope that helps,
    Darin MS

     


    Darin MS