Windows 7 Genuine (had for 2 years) all of a sudden pop up says it isn't

All replies

• 

  

  0

  Sign in to vote

  "Reldraw" wrote in message news:057166d6-52e4-470b-b4f1-7b9b6ce175bd...

  So I have had this copy for about 2 years now, no issues.  Around 2 weeks ago I had to run scandisk because some files became corrupted (first time ever having to run that due to corruption).

  It fixed the files supposedly but now I get this pop up occassionally that says windows is not genuine and to resolve online now.

  I have called in to the support center, they verified my copy is genuine and that I should not be getting this pop up.

  
  Here is the MGAdiag report, any help would be greatly appreciated because I am at a loss at this point......

   

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-*****-*****-BC2YF
  Windows Product Key Hash: pajBsdcbu6CWIVW8g86AehHcCww=
  Windows Product ID: 55041-007-1403402-86006
  Windows Product ID Type: 6
  Windows License Type: Volume MAK
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  
  
  File Scan Data-->
  File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
  File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
  
  
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x000000000001EFF0
  Event Time Stamp: 8:30:2011 16:55
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\sppobjs.dll
  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
  Tampered File: %systemroot%\system32\sppwinob.dll
  Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
  Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
  Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
  Tampered File: %systemroot%\system32\drivers\spsys.sys
  
  
  
  

   

   

  Your problem is caused by the file mismatches highlighted above – unfortunately, we have had no success troubleshooting this set of errors in the forums here , so your best bet is either a repair install (which you cannot do with a Recovery disk set) or contacting MS WGA Support direct for assistance....

  WGA Support can be found here-

  North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
  
  Outside North America:
  http://support.microsoft.com/contactus/?ws=support#tab0
  
  Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
  

   

  p.s. – one thing that may be worth trying before going to extremes is uninstalling and reinstalling the WAT Update (KB971033) from Programs & Features > Installed Updates.

  http://support.microsoft.com/kb/971033

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Marked as answer by Darin Smith MS Wednesday, August 31, 2011 8:48 PM

  Wednesday, August 31, 2011 10:25 AM

  Moderator
• 

  

  0

  Sign in to vote

  Uninstalling the WAT Update seems to have removed the pop-up but will that affect me being able to obtain updates through windows update?

  I know ever since this started happening I cannot get update KB2570791.

  Wednesday, August 31, 2011 11:25 AM
• 

  

  0

  Sign in to vote

  "Reldraw" wrote in message news:2d6b2037-b533-4959-90c4-0cd35c96e4fb...

  Uninstalling the WAT Update seems to have removed the pop-up but will that affect me being able to obtain updates through windows update?

  I know ever since this started happening I cannot get update KB2570791.

  Please reinstall the update, and post a new MGADiag report

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Wednesday, August 31, 2011 9:11 PM

  Moderator
• 

  

  0

  Sign in to vote

  I can't.  I receive an error code: 8000FFFF

   

  Windows Update works for Non KB updates but any KB updates will not install now.

  
  Edit: 

   

  Called MS support, they had to direct connect, reset my update folders and windows update and then it reinstalled both and we verified it and no more issues.

  It appears that the WAT update was corrupted and didn't uninstall correctly thus causing the issue with windows update.

  Thursday, September 1, 2011 1:12 AM
• 

  

  0

  Sign in to vote

  "Reldraw" wrote in message news:f1eda3ec-d87d-4843-ae97-b10efbff95eb...

  I can't.  I receive an error code: 8000FFFF

   

  Windows Update works for Non KB updates but any KB updates will not install now.

  
  Edit:

   

  Called MS support, they had to direct connect, reset my update folders and windows update and then it reinstalled both and we verified it and no more issues.

  It appears that the WAT update was corrupted and didn't uninstall correctly thus causing the issue with windows update.

  Please post a new MGADiag report so that we can sign off on this.

  Do you have any of the detail of what they did? – this would  be very helpful for others.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, September 1, 2011 6:19 AM

  Moderator
• 

  

  0

  Sign in to vote

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-*****-*****-BC2YF
  Windows Product Key Hash: pajBsdcbu6CWIVW8g86AehHcCww=
  Windows Product ID: 55041-007-1403402-86006
  Windows Product ID Type: 6
  Windows License Type: Volume MAK
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {658324C8-1D9D-40ED-B64E-2C160AA3FE1B}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.110622-1506
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{658324C8-1D9D-40ED-B64E-2C160AA3FE1B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-007-1403402-86006</PID><PIDType>6</PIDType><SID>S-1-5-21-2357796690-3688390163-4000976688</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1503</Version><SMBIOSVersion major="2" minor="6"/><Date>20110310000000.000000+000</Date></BIOS><HWID>1B8D3A07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, Professional edition
  Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
  Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 55041-00172-007-140340-03-1033-7601.0000-2422011
  Installation ID: 002772572081900783078990333042239933705523241442853471
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: BC2YF
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 9/1/2011 5:57:44 AM
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 8:31:2011 05:51
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  
  
  HWID Data-->
  HWID Hash Current: OAAAAAIAAQABAAEAAQAEAAAAAwABAAEAln1MA86DmA4aXbYm7J8Op06R1q2DSrFssuJUq/R3LnM=
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information:
    ACPI Table Name    OEMID Value    OEMTableID Value
    APIC            ALASKA        A M I
    FACP            ALASKA        A M I
    HPET            ALASKA        A M I
    MCFG            ALASKA        A M I
    SSDT            AMICPU        PROC
  
  
  The tech had to take control, ran a scan in the command prompt that reset my windows update.

  Above is the new MGAdiag.

   

  Sorry I don't remember the exact command he put into the prompt, if it helps the case ID was 1160998347 if you have access to the case ID system you can pull it from there.

  Thursday, September 1, 2011 9:58 AM
• 

  

  0

  Sign in to vote

  Your report looks fine now -

  Darin may have access to the system, but unfortunately, I don't. However, there are enough clues there that I may be able to puzzle it out eventually :)

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, September 1, 2011 2:49 PM

  Moderator
• 

  

  0

  Sign in to vote

  Alright well I hope you are able to post an official fix for this beyond calling into MGA support so that others can fix their issues!

  If there is any other information I can provide let me know.

  Thursday, September 1, 2011 3:06 PM