locked
Windows 7 Build 7601 This Copy of Windows is not genuine RRS feed

  • Question

  • Am running Windows 7 Home Premium... I purchased an upgrade from Vista from Microsof directly (not eBay, not at a flea market, etc) a couple months ago. I had hard disk issues (CHKDSK) and since correcting the disk issues, I am getting an error with the licensing... seems my product ID has expired.

    Here's the diag report... I can't get to support without a working product ID... I have my product key, but have no means to activate.

    Thanks in advance.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0x8007041d
    Windows Product Key: *****-*****-Y2HCW-69V7W-TJDY9
    Windows Product Key Hash: rwfyDfz/hO215GDyiBMuPest+g0=
    Windows Product ID: 00359-032-9514853-85085
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {252E0FE4-EE5F-4894-BBF6-6B5A7C57DCDF}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_B4D0AA8B-920-80070057

    Browser Data-->
    Proxy settings: awbmpwbs01.awacgbl.com:8080
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{252E0FE4-EE5F-4894-BBF6-6B5A7C57DCDF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-TJDY9</PKey><PID>00359-032-9514853-85085</PID><PIDType>5</PIDType><SID>S-1-5-21-3749092035-1838626835-3585487450</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP G60 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.54</Version><SMBIOSVersion major="2" minor="4"/><Date>20090818000000.000000+000</Date></BIOS><HWID>1E8B3207018400F6</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>2375B0BB5C27F0C</Val><Hash>0yd20oVGZU6uKQetd1FX007m/XA=</Hash><Pid>81605-902-2944261-65580</Pid><PidType>1</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007041D' to display the error text.
    Error: 0x8007041D

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000008000
    Event Time Stamp: 7:26:2011 21:21
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: NgAAAAEABAABAAEAAAACAAAAAwABAAEAeqgieGzbHvKWklYQILV63BSWgjLgtrBrPESkWX4o

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HPQOEM  SLIC-MPC
      FACP   HPQOEM  SLIC-MPC
      HPET   HPQOEM  SLIC-MPC
      BOOT   HPQOEM  SLIC-MPC
      MCFG   HPQOEM  SLIC-MPC
      SLIC   HPQOEM  SLIC-MPC
      SSDT   HPQOEM   SLIC-MP

     

    Wednesday, August 24, 2011 12:26 AM

Answers

  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    • Marked as answer by Darin Smith MS Wednesday, August 31, 2011 8:15 PM
    Wednesday, August 31, 2011 8:15 PM

All replies

  • "BrentD500" wrote in message news:1c0ceb59-198b-4917-a23f-6dac7303e9c6...

    Am running Windows 7 Home Premium... I purchased an upgrade from Vista from Microsof directly (not eBay, not at a flea market, etc) a couple months ago. I had hard disk issues (CHKDSK) and since correcting the disk issues, I am getting an error with the licensing... seems my product ID has expired.

    Here's the diag report... I can't get to support without a working product ID... I have my product key, but have no means to activate.

    Thanks in advance.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0x8007041d
    Windows Product Key: *****-*****-Y2HCW-69V7W-TJDY9
    Windows Product Key Hash: rwfyDfz/hO215GDyiBMuPest+g0=
    Windows Product ID: 00359-032-9514853-85085
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007041D' to display the error text.
    Error: 0x8007041D

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

     

     

    Your problem is the highlighted parts above – it looks as if the Software Protection Service has been disabled in some way.
    Please try this
    Open Windows Explorer (Computer) – and look for the file C:\Windows\system32\sppsvc.exe
    right-click on it and select Properties.
    click on the Security tab – look in the list of ‘Group or User names’ – what’s listed?
    It should only be SYSTEM, Administrators, Users, and TrustedInstaller
    If there’s anything else there, please tell us what, and the Permissions which it’s been given.
    Please then click on the Advanced button, then the Owner tab – Who is the Current Owner?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, August 24, 2011 1:05 AM
    Moderator
  • Thanks for the reply...

     

    The list containtsexactly those four members.   The current owner is TrustedInstaller

    Wednesday, August 24, 2011 1:16 AM
  • "BrentD500" wrote in message news:8c4fa65b-c4d0-4dfb-8f80-9e4e33a9d40c...

    Thanks for the reply...

     

    The list containtsexactly those four members.   The current owner is TrustedInstaller

    OK – we'll need to look deeper then.
    Open the sppsvc.exe properties again and click on the Security tab.
    Click on Advanced
    In the Permissions tab, loo at the details for each user name (all should be Read & execute, except for TrustedInstaller, which should be Full control)
     
    If they are all OK, please open an Elevated (Admin) Command Prompt – Click on Start>All Programs>Accessories, and right-click on Command Prompt – select Run as Administrator)
     
    enter the following commands
    net start sppsvc
    sc qc sppsvc
    sc queryex sppsvc
    sc qprivs sppsvc
    sc qsidtype sppsvc
    sc sdshow sppsvc

    then copy the results to your response.
    (to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, August 24, 2011 8:49 AM
    Moderator
  • Here you go... thanks!

     

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service was started successfully.


    C:\Windows\system32>sc qc sppsvc
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: sppsvc
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\sppsvc.exe
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Software Protection
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\NetworkService

    C:\Windows\system32>sc queryex sppsvc

    SERVICE_NAME: sppsvc
            TYPE               : 10  WIN32_OWN_PROCESS
            STATE              : 4  RUNNING
                                    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
            WIN32_EXIT_CODE    : 0  (0x0)
            SERVICE_EXIT_CODE  : 0  (0x0)
            CHECKPOINT         : 0x0
            WAIT_HINT          : 0x0
            PID                : 5080
            FLAGS              :

    C:\Windows\system32>sc qprivs sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
            PRIVILEGES       : SeAuditPrivilege
                             : SeChangeNotifyPrivilege
                             : SeCreateGlobalPrivilege
                             : SeImpersonatePrivilege

    C:\Windows\system32>sc qsidtype sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
    SERVICE_SID_TYPE:  UNRESTRICTED

    C:\Windows\system32>sc sdshow sppsvc

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
    CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCW
    DWO;;;WD)

    C:\Windows\system32>

    Wednesday, August 24, 2011 1:02 PM
  • "BrentD500" wrote in message news:7ffd5739-64a4-4cdc-9aa1-97b7d733ddf1...

    Here you go... thanks!

     

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>net start sppsvc
    The Software Protection service is starting.
    The Software Protection service was started successfully.


    C:\Windows\system32>sc qc sppsvc
    [SC] QueryServiceConfig SUCCESS

     

     
    That all looks normal to me -
    let’s check for malware
    I would suggest scanning your system with a good anti-malware app - MalwareBytes Anti Malware is the current choice (www.malwarebytes.org ) get the free version , but do NOT take the option to activate real-time protection, just update it and use the scanner.
    Remove everything it finds.
    post back with details of any ‘severe’ malware found, and a new MGADiag report.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, August 24, 2011 1:48 PM
    Moderator
  • I use Norton360, and did a full scan yesterday... nothing found apart from a couple of tracking cookies.

     

     

    Wednesday, August 24, 2011 2:19 PM
  • I just installed MalwareBytes and the scan came up perfrectly clean...
    Wednesday, August 24, 2011 2:59 PM
  • "BrentD500" wrote in message news:51ca2e03-691b-4f42-9e92-fb961926b6ef...
    I just installed MalwareBytes and the scan came up perfrectly clean...
     
    That’s relatively unusual – Norton usually leaves a load of stuff behind.:) – maybe you’re just a clean-living individual.
    Having said that, it’s always possible that Norton IS the problem – wouldn’t be the first time.
    I suggest uninstalling it, and using the Norton Removal Tool to get rid of the dregs – then checking whether the SPPSVC is properly started again.
    You can always reinstall Norton again afterwards.
     
    What other AV’s have EVER been installed on this OS?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, August 24, 2011 4:26 PM
    Moderator
  • Yeah? - so why did it fail every other time someone brought it to this forum?

     

    Eventually, ALL loaders fail - with potentially dire consequences.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, August 24, 2011 9:16 PM
    Moderator
  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS
    • Marked as answer by Darin Smith MS Wednesday, August 31, 2011 8:15 PM
    Wednesday, August 31, 2011 8:15 PM