locked
Previously Valid now Invalid Windows RRS feed

  • Question

  • My computer is telling me that windows if invalid. I'm guessing from the diagnostic its something to do with the list as long as my arm of file mismatches, but have no idea how to fix this. This problem seems to have started after I downloaded a program called Regcure... do you think this could have caused this?






    The error code when attempting to validate is: [0x80070426]

    Diagnostic Report (1.7.0110.1):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-T3PCK-3FRWY-KKMRQ
    Windows Product Key Hash: l3Vu3XOYEcKE/ZqlRC9vew8kcKs=
    Windows Product ID: 89578-OEM-7332157-00180
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6001.2.00010300.1.0.003
    ID: {08DA0408-3CF9-4391-A116-6959DD92D5AD}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6001.vistasp1_gdr.080917-1612
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: 6.0.6002.16398

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    WGATray.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-458-80070005_025D1FF3-262-80070005_025D1FF3-170-80070005_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3_FA827CE6-153-8007007e_FA827CE6-180-8007007e

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Programs\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\Slsvc.exe[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\drivers\Spsys.sys[6.0.6001.16606]
    File Mismatch: C:\Windows\system32\Slcext.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\advapi32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\kernel32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\rpcrt4.dll[6.0.6001.18051]
    File Mismatch: C:\Windows\system32\authz.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\msvcrt.dll[7.0.6001.18000]
    File Mismatch: C:\Windows\system32\samlib.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ntdsapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\dnsapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ws2_32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\nsi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\user32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\gdi32.dll[6.0.6001.18023]
    File Mismatch: C:\Windows\system32\msimg32.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\powrprof.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\setupapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\oleaut32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ole32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\shell32.dll[6.0.6001.18062]
    File Mismatch: C:\Windows\system32\shlwapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\version.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winmm.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\oleacc.dll[4.2.5406.0]
    File Mismatch: C:\Windows\system32\mmdevapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\wtsapi32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\regapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\crypt32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\msasn1.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\userenv.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\secur32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\netapi32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\psapi.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\netrap.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\wldap32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winbrand.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\iphlpapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\dhcpcsvc.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winnsi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\dhcpcsvc6.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\gpapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\slc.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\gpsvc.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\sysntfy.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\winsta.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\nlaapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ncrypt.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\bcrypt.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\mpr.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\credui.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\cryptui.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\wintrust.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\imagehlp.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\dbghelp.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\mssign32.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\wininet.dll[7.0.6001.18148]
    File Mismatch: C:\Windows\system32\normaliz.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\iertutil.dll[7.0.6001.18148]
    File Mismatch: C:\Windows\system32\tapi32.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\rtutils.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\rasapi32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\rasman.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\rasdlg.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\mprapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\activeds.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\adsldpc.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\atl.dll[3.5.2284.0]
    File Mismatch: C:\Windows\system32\certcli.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winscard.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\netplwiz.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\urlmon.dll[7.0.6001.18148]
    File Mismatch: C:\Windows\system32\propsys.dll[7.0.6001.16503]
    File Mismatch: C:\Windows\system32\xmllite.dll[1.2.1009.0]
    File Mismatch: C:\Windows\system32\mlang.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\advpack.dll[7.0.6001.18000]
    File Mismatch: C:\Windows\system32\apphelp.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\msiltcfg.dll[4.0.6000.16386]
    File Mismatch: C:\Windows\system32\shunimpl.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\devmgr.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\newdev.dll[6.0.5054.0]
    File Mismatch: C:\Windows\system32\dwmapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winspool.drv[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\cscapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\uxtheme.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\windowscodecs.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ntshrui.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\feclient.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\shdocvw.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\browseui.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\imm32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\msctf.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\duser.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16386_none_9ea0ac9ec96e7127\gdiplus.dll[5.2.6000.16386]
    File Mismatch: C:\Windows\system32\msrating.dll[7.0.6001.18000]
    File Mismatch: C:\Windows\system32\ieframe.dll[7.0.6001.18148]
    File Mismatch: C:\Windows\system32\msi.dll[4.0.6001.18000]
    File Mismatch: C:\Windows\system32\mshtml.dll[7.0.6001.18148]
    File Mismatch: C:\Windows\system32\msls31.dll[3.10.349.0]
    File Mismatch: C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\comctl32.dll[5.82.6000.16386]
    File Mismatch: C:\Windows\system32\comdlg32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\printui.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\cfgmgr32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\puiapi.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\hlink.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\imgutil.dll[7.0.6001.18000]
    File Mismatch: C:\Windows\system32\usp10.dll[1.626.6001.18000]
    File Mismatch: C:\Windows\system32\inetcomm.dll[6.0.6001.18049]
    File Mismatch: C:\Windows\system32\msoert2.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ieui.dll[7.0.6001.18000]
    File Mismatch: C:\Windows\system32\efsadu.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\mfc42u.dll[6.6.8063.0]
    File Mismatch: C:\Windows\system32\odbc32.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\oledlg.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\linkinfo.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\query.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\clbcatq.dll[2001.12.6931.18000]
    File Mismatch: C:\Windows\system32\cabinet.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\scecli.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\w32topl.dll[6.0.6000.16386]
    File Mismatch: C:\Windows\system32\rpchttp.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\winhttp.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\fwpuclnt.dll[6.0.6001.18000]
    File Mismatch: C:\Windows\system32\ktmw32.dll[6.0.6001.18000]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{08DA0408-3CF9-4391-A116-6959DD92D5AD}</UGUID><Version>1.7.0110.1</Version><OS>6.0.6001.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-KKMRQ</PKey><PID>89578-OEM-7332157-00180</PID><PIDType>2</PIDType><SID>S-1-5-21-3939541778-3404142449-1981367920</SID><SYSTEM/><BIOS/><HWID>1B323507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DSGLTD</OEMID><OEMTableID>DSGVISTA</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software Licensing service is not running.

    HWID Data-->
    HWID Hash Current: PAAAAAEABAABAAIAAwABAAAAAwABAAEAJJTkMnKCNtuMWUaD/JBe76DxzGMYvmjm8vR8ynzAID+sViqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         CRESTLNE
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      MCFG            INTEL         CRESTLNE
      TMOR            PTLTD                
      APIC            INTEL         CRESTLNE
      SLIC            DSGLTD        DSGVISTA
      SSDT            SataRe        SataPri
      SSDT            SataRe        SataPri
      SSDT            SataRe        SataPri
      SSDT            SataRe        SataPri
      SSDT            SataRe        SataPri
      SSDT            SataRe        SataPri



    Thursday, January 15, 2009 2:50 PM

Answers

  • Good Morning Jmaciver,

    In your Microsoft Genuine Advantage Diagnostic Tool (MGADT) report, you will notice that under the "File Scan Data-->" line there are a large number of files that are listed as "Mismatched". All those files are Critical Windows Vista System files. Normally, when there is one or two Mismatched files, it means that those files have been tampered or have become corrupted in some way. But in your case the MGADT report is indicating that ALL your Critical Windows Vista System files are Tampered or Corrupted. This is highly unlikely. What is more likely is that your System Catalog has been tampered or corrupted. The System Catalog stores all the Signatures Hashes (fingerprints) for all the Critical Windows Vista System files. One of the things that Windows Vista uses the System Catalog for is to identify if a file has been tampered or corrupted because if the file had been modified, it's signature hash would not match what is listed in the System Catalog and in which case, Windows Vista would flag itself as Non-Genuine (as it has done, in your case).  

    I highly recommend that you repair Windows Vista using System Restore: 

    1. Reboot Vista into Safe Mode
    2. Go to Control Panel
    3. Click on Classic View located on the left hand side of the Control panel window
    4. Double-click Backup and Restore Center
    5. On the left hand side of the window, click Repair Windows using System Restore
    6. Put a check in the box that says Show restore points older than 5 day

    7. Select Choose Different Restore Point and select the restore point that corresponds to a date before you first experienced the issue.
    8. Click the Next button.
    9. Reboot back into Normal mode
    10. Run the MGADT again and paste the results into Notepad or Word doc and scroll down to the "File Scan Data-->" line.

    11a)     If there are any Mismatched files listed, they you will need to restore to a point further in the                           past.
    11b)     If there are No Mismatched files listed, then your Windows Vista should report as Genuine.

    If the above steps do not resolve your issue, your other options are to either reinstall Vista or contact Windows Vista support below:

    http://support.microsoft.com


    Take care,


    Stephen


    Stephen Holm
    • Marked as answer by Stephen Holm Thursday, January 15, 2009 6:18 PM
    Thursday, January 15, 2009 6:17 PM

All replies

  • So... I fixed it by looking at another thread and running /sfc scannow. This seems to have fixed the validation problem, but it says there are still errors and I should check the cbs.log (which of course I can't check because apparently administrators do not have high enough access to view this file) and I'm still kind of worried about all those file mismatches... should I be?

    *edit* looks like I spoke to soon! It passed the validation when I went to the link, but then when I attempted to update defender it once again told me that windows was not valid....
    Thursday, January 15, 2009 3:14 PM
  • Good Morning Jmaciver,

    In your Microsoft Genuine Advantage Diagnostic Tool (MGADT) report, you will notice that under the "File Scan Data-->" line there are a large number of files that are listed as "Mismatched". All those files are Critical Windows Vista System files. Normally, when there is one or two Mismatched files, it means that those files have been tampered or have become corrupted in some way. But in your case the MGADT report is indicating that ALL your Critical Windows Vista System files are Tampered or Corrupted. This is highly unlikely. What is more likely is that your System Catalog has been tampered or corrupted. The System Catalog stores all the Signatures Hashes (fingerprints) for all the Critical Windows Vista System files. One of the things that Windows Vista uses the System Catalog for is to identify if a file has been tampered or corrupted because if the file had been modified, it's signature hash would not match what is listed in the System Catalog and in which case, Windows Vista would flag itself as Non-Genuine (as it has done, in your case).  

    I highly recommend that you repair Windows Vista using System Restore: 

    1. Reboot Vista into Safe Mode
    2. Go to Control Panel
    3. Click on Classic View located on the left hand side of the Control panel window
    4. Double-click Backup and Restore Center
    5. On the left hand side of the window, click Repair Windows using System Restore
    6. Put a check in the box that says Show restore points older than 5 day

    7. Select Choose Different Restore Point and select the restore point that corresponds to a date before you first experienced the issue.
    8. Click the Next button.
    9. Reboot back into Normal mode
    10. Run the MGADT again and paste the results into Notepad or Word doc and scroll down to the "File Scan Data-->" line.

    11a)     If there are any Mismatched files listed, they you will need to restore to a point further in the                           past.
    11b)     If there are No Mismatched files listed, then your Windows Vista should report as Genuine.

    If the above steps do not resolve your issue, your other options are to either reinstall Vista or contact Windows Vista support below:

    http://support.microsoft.com


    Take care,


    Stephen


    Stephen Holm
    • Marked as answer by Stephen Holm Thursday, January 15, 2009 6:18 PM
    Thursday, January 15, 2009 6:17 PM