Windows 7 failing Genuine Advantage Notification after hard disk replace

All Replies

• Saturday, April 14, 2012 4:22 PM

  Moderator

   

   
  

  0
  "daz 770" wrote in message news:de2b5c9b-d600-4e9f-8c54-0aa7a2c9d221...

  I've replaced a hard disk which failed and restored from an earlier (Ghost 15) backup. This backup was pre-Windows 7 sp1. Windows now keeps throwing up the Windows GA dialog stating "This copy of Windows is not genuine". I can't install any updates as Windows has blocked the Windows Update operation. I can't install SP1 as this fails with a 0x8000ffff error.

  Windows GA diagnostic tool reports Windows as genuine, however some files (which I can't overwrite manually) it states as mismatched (though my Ghost restore should have replaced the entire drive contents, so I can only guess they must be damaged somehow?).

  I know the copy of Windows is genuine as was supplied with the laptop from new.

  Results from the GA diagnostic tool as follows:

  Diagnostic Report (1.9.0019.0):
  -----------------------------------------
  WGA Data-->
  Validation Status: Genuine
  Validation Code: 0
  
  Cached Validation Code: 0x0
  Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
  Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
  Windows Product ID: 00359-OEM-8992687-00010
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7600.2.00010300.0.0.003
  

  
  
  File Scan Data-->
  File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395]
  File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395]
  File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0]
  File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0]
  File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385]
  File Mismatch: C:\Windows\system32\en-us\user32.dll.mui[6.1.7600.16385]
  
  Other data-->
  SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP G62 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.07</Version><SMBIOSVersion major="2" minor="6"/><Date>20100210000000.000000+000</Date></BIOS

  
  Licensing Data-->
  Software licensing service version: 6.1.7600.16385
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Partial Product Key: 3Q6C9
  License Status: Licensed
  Remaining Windows rearm count: 1
  Trusted time: 13/04/2012 23:17:40
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  

  
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  

  I have a Windows system image (which is more recent) from post my SP1 installation, however Windows fails to see this to allow me to restore from it. I see from plenty of posts on the net that Windows system image restore is quite flaky/fragile and finicky. (I have however managed to mount the vhd file and recover certain files, like documents). I've done the SFC /SCANNOW several times (then rebooted after each attempt) however without success (though the CBS.log entries generated have gone down now).

  Can anyone offer any help? I am on the verge of going back to my original manufacturer supplied image.

  Download the Intel Rapid Storage Drivers from here:
  
  http://bit.ly/xmcovN
  

   

  Install them and reboot -

  
  Once complete, please reboot twice, then post another MGADiag report.

   

  (sorry, George! - my index is rebuilding!)

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Marked As Answer by Darin Smith MSOwner Monday, April 16, 2012 7:29 PM
  •  
  • Reply
  • Quote

   
• Saturday, April 14, 2012 4:48 PM

   

   
  

  0

  Found the solution on this thread:

  http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/3b716d4c-fb5f-411b-9aee-38af1c529336

  and I too used Humprey's solution, which was to update the Intel Rapid Storage Technology Driver. It is a simple download from http://h10025.www1.hp.com/ewfrf/wc/document?docname=c02219204&cc=nl&lc=en&dlc=en&product (not forgetting to reboot after installing when prompted).

  If you are using notebooks with a hard drive larger than 700 GB you probably should update the Intel Rapid Storage Technology Driver. (I'd upgraded from a 320MB hard drive to a 750GB one.)

  This may only apply if you have an Intel CPU and storage driver. I have an HP G62-105SA (with Intel Core i3). I wasn't totally sure about the storage driver being Intel, but by then I was prepared to try anything and hey presto - problem sorted.

  GA Diagnostic tool no longer reports any files mismatched. Windows Update works once more. Windows Live works once more. Voila!

  • Edited by daz 770 Saturday, April 14, 2012 4:56 PM
  • Marked As Answer by Darin Smith MSOwner Monday, April 16, 2012 7:29 PM
  •  
  • Reply
  • Quote

   
• Saturday, April 14, 2012 4:52 PM

  Moderator

   

   
  

  0

  ...... which is what I posted :)

  Please post a new MGADiag report, so that we can check that the problem is properly solved, rather than just being hidden by a grace period access.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote

   
• Thursday, April 19, 2012 9:28 PM

   

   
  

  0

  Ok, update. Having installed this before, though GA Diag tool states Windows as genuine and that there are now no mismatched files and though Windows Update and Live are now working once more (allowing me to (eventually) update to Win 7 SP1, I am actually still getting the Windows not genuine nag windows.

  Windows GA Diagnostic tool reports as follows:

  Diagnostic Report (1.9.0019.0):
  -----------------------------------------
  WGA Data-->
  Validation Status: Genuine
  Validation Code: 0
  
  Cached Validation Code: 0x0
  Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
  Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
  Windows Product ID: 00359-OEM-8992687-00010
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {A6DD278E-A164-4E3C-9C2A-557905F87F54}(3)
  Is Admin: Yes
  TestCab: 0x0
  WGA Version: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120305-1505
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  WGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{A6DD278E-A164-4E3C-9C2A-557905F87F54}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-1368425605-2619647564-4251388506</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP G62 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.07</Version><SMBIOSVersion major="2" minor="6"/><Date>20100210000000.000000+000</Date></BIOS><HWID>69BB3607018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00178-926-800010-02-2057-7600.0000-0422010
  Installation ID: 003816338784740964201040244766800606018554704774785675
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 3Q6C9
  License Status: Licensed
  Remaining Windows rearm count: 2
  Trusted time: 19/04/2012 22:21:13
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: 0x00000000
  HealthStatus: 0x000000000001EFF0
  Event Time Stamp: 4:13:2012 22:33
  WAT Activex: Registered
  WAT Admin Service: Registered
  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAQABAAAAAwABAAEAonaYzM4PFT8wdPB3znCevnf2+IeC5Xwo4BlcXQ==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC HPQOEM SLIC-MPC
    FACP HPQOEM SLIC-MPC
    HPET HPQOEM SLIC-MPC
    BOOT HPQOEM SLIC-MPC
    MCFG HPQOEM SLIC-MPC
    WDAT HPQOEM SLIC-MPC
    ASF! HPQOEM SLIC-MPC
    SLIC HPQOEM SLIC-MPC
    ASPT HPQOEM SLIC-MPC
    SSDT PmRef CpuPm

  ____________________

  Note also that I reinstalled the Intel Rapid Storage drivers again from this link (which differs to the original) as the sp number was higher and therefore I assumed this was a more recent version. Intel RST service now reports that it is not running and the GUI for this fails to load - so possibly this has now conflicted. I am going to try to uninstall and reinstall just the latest version to try to resolve this.

  • Reply
  • Quote

   
• Thursday, April 19, 2012 9:51 PM

   

   
  

  0

   I've reverted to the earlier Instal RST driver (after an uninstall, f/by two reboots, re-install f/by two reboots (and here we are again). It turns out that the earlier version I've now reverted back to is 9.5.6.1001, whilst the version from Noel was 9.6.0.1014, which is later after all. I'll try an uninstall, double reboot then reinstall using this newer one once more as a clean install, to see if this resolves that issue.

  Anyhow, GA Diag tool now reports:

  Diagnostic Report (1.9.0019.0):
  -----------------------------------------
  WGA Data-->
  Validation Status: Genuine
  Validation Code: 0
  
  Cached Validation Code: 0x0
  Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
  Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
  Windows Product ID: 00359-OEM-8992687-00010
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {A6DD278E-A164-4E3C-9C2A-557905F87F54}(3)
  Is Admin: Yes
  TestCab: 0x0
  WGA Version: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.120305-1505
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  WGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{A6DD278E-A164-4E3C-9C2A-557905F87F54}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-1368425605-2619647564-4251388506</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP G62 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.07</Version><SMBIOSVersion major="2" minor="6"/><Date>20100210000000.000000+000</Date></BIOS><HWID>69BB3607018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00178-926-800010-02-2057-7600.0000-0422010
  Installation ID: 003816338784740964201040244766800606018554704774785675
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 3Q6C9
  License Status: Licensed
  Remaining Windows rearm count: 2
  Trusted time: 19/04/2012 22:51:20
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: 0x00000000
  HealthStatus: 0x000000000001EFF0
  Event Time Stamp: 4:13:2012 22:33
  WAT Activex: Registered
  WAT Admin Service: Registered
  
  HWID Data-->
  HWID Hash Current: NAAAAAIAAQABAAIAAQABAAAAAwABAAEAonaYzM4PFT8wdPB3znCevnf2+IeC5Xwo4BlcXQ==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC HPQOEM SLIC-MPC
    FACP HPQOEM SLIC-MPC
    HPET HPQOEM SLIC-MPC
    BOOT HPQOEM SLIC-MPC
    MCFG HPQOEM SLIC-MPC
    WDAT HPQOEM SLIC-MPC
    ASF! HPQOEM SLIC-MPC
    SLIC HPQOEM SLIC-MPC
    ASPT HPQOEM SLIC-MPC
    SSDT PmRef CpuPm
  
  

  • Reply
  • Quote

   
• Thursday, April 19, 2012 10:07 PM

   

   
  

  0

  BTW: sfc /scannow now reports "Windows Resource Protection did not find any integrity violations".

  I'll have to wait and see if any more GA fail nag windows appear.
  

  • Reply
  • Quote

   
• Friday, April 20, 2012 11:01 AM

  Moderator

   

   
  

  1

  Please go to the Validation page at www.microsoft.com/genuine/validate - you should pass, and be offered MSE and IE9 (you don't have to take them).

  If it fails for any reason, post the exact error message you get.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote

   
• Friday, April 20, 2012 5:51 PM

   

   
  

  0
  Validates ok and I am offered MSE (I already have IE9 and MSE). I am still getting the "not running genuine Windows" nag pop-ups once or twice a day. How can I remove these? Do I need a fresh version of the Windows Genuine Advantage tool? If so, how do I get this? I normally just get this from Windows Update when prompted, however this is not appearing on the list of available updates at present (though Windows Update is working and reporting other updates).
  • Reply
  • Quote

   
• Friday, April 20, 2012 6:30 PM

  Moderator

   

   
  

  0

  You obviously have a problem with race conditions.

  These are notoriously difficult to pinpoint, since merely looking for them can prevent them occuring.

  The usual culprits are Anti-Virus programs and similar scannins tools.

  What security software are you running? - What Anti Virus programs have EVER been installed on this machine since the last reformat? (include any that came pre-installed!)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote

   
• Saturday, April 21, 2012 12:50 PM

   

   
  

  0
  A trial copy of Norton came with the machine, though I can't now remember which version. I believe it was Norton AntiVirus as opposed to Norton 360 for instance. I did have Kaspersky 2010 installed for a while, though replaced this with MSE eventually (as Kaspersky was getting a little heavy on CPU usage).
  • Reply
  • Quote

   
• Saturday, April 21, 2012 4:32 PM

  Moderator

   

   
  

  0

  The most likely problem is that Norton is still partially installed - you need to get rid of it before anything else can make sense.

  To do so, download the Norton Removal Tool - https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

  Reboot after it's downloaded, and then run it - you may well need a few reboots afterward!

  Reboot once more. and then download Kaspersky's  version of the removal tool - http://support.kaspersky.com/faq/?qid=208279463

  and follow their instructions.

  then see how the system behaves.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Reply
  • Quote