none
Windows 7 4/15/10 update causing WGA problem

    Question

  • After the automatic update of 4/15/10 occurred at 3 AM, the machine started having problems with WGA complaining that this was not a genuine copy of W7.  This is a Gateway SX2840 purchased less than a month ago with preinstalled software W7 home premium, and has been on automatic updates since then.  After purchase I installed the Adobe CS4 suite and it worked fine for a month (it still works).  When I try to do various actions which would result in being able to reenter the activation key, I get the error 0xC0000022.  The Gateway person had me check on the 'my computer' status, and insists that the response indicates that this copy of W7 is actually still activated.  But I still get the very annoying actions of the WGA software.  How do I kill this garbage?

    Most of the various ways to try to reactivate the machine ultimately produce this same error message 0xC0000022.  If I go to Start>search and enter <slui 4>, I get a popup window with a message 'an error has occurred, you can also contact Gateway by phone to help resolve this problem'.  I tried Gateway, their phone service is pitiful, all they could say was 'reinstall the operating system', which is not practical in a machine used for business with a lot of hard to install software and files already in place.  I am in CA, what is the slui phone number?

    I tried the thing of going to the windows directory \windows\system32, stopping sppsvc (it was not running), going to \windows\serviceprofiles\networkservice\appdata\roaming\microsoft\softwareprotectionplatform and renaming tokens.dat to tokens.bar and restarting sppsvc, but sppsvc could not be started.  It reported system error 2, the system cannot find the file specified.

    Something was wrong with the update of 4/15/10 which caused critical files to become unaccessible (error 0xC0000022).  How do I fix this problem?

    Thanks for your help.

    Saturday, April 17, 2010 6:12 PM

Answers

  • Hello Terry65,

    "Validation Code: 0x8004FE21" and "HrOffline: 0x8004FE21' lines are telling me that Windows detected that one or more of it's protected system file(s) has been modified (rewritten, replaced or become corrupt) and that when Windows tried to repair the files, it failed. These files can no longer be trusted because they have been modified in some way. Or in other words, the files are Non-Genuine.

    Below are things you can try to repair the files and resolve the issue:

    First try repairing Windows using System Restore:

    1) Click the Start button

    2) In the Start Search field, type: System Restore and hit “Enter”

    3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.

    4) Click the "Next" button.

    5) Reboot and see if that resolves the issue.

     

     If that doesn't work, try doing a System Scan. The scan will look for bad system files and will attempt to repair them, if possible.

            1) Click the Start Button
            2) Type: cmd.exe
            3) Right-click the cmd.exe file and select 'Run as Administrator'
            4) In the CMD window, type: sfc /scannow
            5) Reboot and see if that resolves the issue.

     If neither of these sets of steps resolves the issue, my only other suggestions would be to either create a (no cost) support request at http://support.microsoft.com/gp/contactwga or reinstall Windows.

     

     


    Darin MS

    Thank you,
    Monday, April 19, 2010 10:13 PM
    Owner

All replies

  • System restore to a point prior to 4/15/10 and if that doesn't fix it try SFC /scannow

    Also, download and run the following, click copy and past the results, it will help us diagnose the issue.

    http://go.microsoft.com/fwlink/?linkid=52012


    Saturday, April 17, 2010 8:56 PM
  • Additional information from running the MGA diagnostic tool:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {EBDE4496-781C-4DBD-A65A-8CEBBC06AD09}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office XP Small Business - 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_3E121E02-154-80070002_E5ECEA81-80-80070002_B4D0AA8B-967-80070002

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{EBDE4496-781C-4DBD-A65A-8CEBBC06AD09}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2914637436-2078603343-1859348761</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>SX2840</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20091216000000.000000+000</Date></BIOS><HWID>53BA3607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91130409-6000-11D3-8CFE-0050048383C9}"><LegitResult>101</LegitResult><Name>Microsoft Office XP Small Business</Name><Ver>10</Ver><Val>26CF7ACEE5921DA</Val><Hash>d2x+pTTNYu3JF4xxg4js/ZxMxeA=</Hash><Pid>54188-OEM-1792565-67565</Pid><PidType>4</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>A3BFFEE5C7B2614</Val><Hash>33OErZU0AKa4K6Bnmq5IOt5bHRw=</Hash><Pid>81602-778-4739813-68911</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="10" Result="101"/><App Id="19" Version="10" Result="101"/><App Id="1A" Version="10" Result="101"/><App Id="1B" Version="10" Result="101"/><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 4:16:2010 04:38
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEAonY2kiB1xrAmg7Y5Bod+BVxd

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1345
      FACP   ACRSYS  FACP1345
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1345
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1345
      SSDT   DpgPmm  CpuPm

    Does this help anything?  The key seems to be the 0xC0000022 error indicates the cached online validation files are locked out.  How do I fix this? (I want a computer without hidden permission hassles)

    Terry

    Saturday, April 17, 2010 8:58 PM
    1. Insure you are not running any programs that enable language packs (such as vistalizator)
    2. insure that the software protection service is running and is set to automatic (delayed start), type services.msc in the search box, hit enter, scroll down to software protection and verify the settings.
    3. Activate office XP and or 2007, neither of which is currently activated.

    If none of those work then try the instructions below.

     

    Pasted below are the instructions for rebuilding the licensing store, these were posted by a MS rep. You can give this a shot.

    1) Click Start button.
    2) Type: CMD.exe into the 'Search programs and files' field
    3) Right-Click on CMD.exe and select 'Run as Administrator'
    4) Type: net stop sppsvc   (It may ask you if you are sure, select yes)
    Note: the Software Protection servive may not be running, this is ok.
    5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    6) Type: rename tokens.dat tokens.bar
    7) Type: cd %windir%\system32
    8) Type: net start sppsvc
    9) Type: slui.exe
    10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automatically.


    Saturday, April 17, 2010 9:16 PM
  • Hi Carl,

    Thanks for your help. 

    1) I do not have any language packs installed to my knowledge, although Adobe CS4 is so big, I don't know what is really in it.  But Adobe should be good, shouldn't it?  The only software I have personally installed in this machine from the factory configuration (with Office) is the CS4 (whic is a giant package).

    2) If I try sfc /scannow, an obvious small cmd window pops up and then immediately disappears, with no results or continued operation visible.  Task manager does not see it to continue running in the background.  I can't read the window.

    3) Office was supposed to be activated, I paid good money for a key from Newegg and entered it a few days ago, and the program said it was activated.  This happened approximately 4/11/10, after the 4/10 restore point I used and before the 4/15 update which is causing the problems.

    So far, the machine is NOT fixed.  Here is what happened before I had to quit for the day yesterday:

    This might have been able to get it fixed, .........but I forgot to TURN OFF automatic updates before doing the restore.

    1) I started windows restore and selected the last point before the 4/15 update, which was 4/10.  The restore then churned the hard drive for about 45 minutes, and then announced it was restarting the computer.  When the restart occurred, the computer FAILED TO BOOT, reporting that windows could not be started.  Another program then popped up on its own, and announced that it would automatically repair the computer.  After 10 minutes of more churning, it said it selected another restore point to use (but did not tell me which one), and proceeded to go through the 45 minute restore process again.  This program appeared to be something put there by Gateway, as the graphics were crude and low resolution. 

    2) After the second restore occurred, the computer did boot correctly, to a black screen without the WGA message.  I replaced the desktop picture, and told the machine to do a stop and restart to check that all was OK.  It wasn't!  When the shutdown occurred, the computer announced that it would NOT shutdown until it finished installing 17 updates it had downloaded during the previous few minutes after the restore finished.  Then it did a shutdown and restart. 

    3) Things still looked OK after the restart, so I went away for a 1/2 hour.  When I came back, there was the WGA window in the middle of the screen again (but not black screen).  I had to leave for the day then.

    4) Just now I tried your instructions above to stop and restart sppsvc.  The 'net stop' command reported that the sppsvc was not running.  I did the tokens rename and then tried to restart the sppsvc.  Net start said it was being started.  After a moment, the net start command reported that sppsvc could not be started due to system error 2: the system could not find the file specified.  Why? I am running as administrator.

    5) Also, for interest, I tried  running sfc /scannow in the administrator mode cmd window used for your above sppsvc exploits, and it did run.  It completed verification and reported 'windows resource protection did not find any integrity violations' and stopped.  Now I just have a C:\> prompt in the cmd window again, so that seemed useless.

    6) Here is another dump of the machine internal state for your study:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {567E0DAD-00B9-43CD-A693-D04A82D9FD10}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office XP Small Business - 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_3E121E02-154-80070002_E5ECEA81-80-80070002_B4D0AA8B-967-80070002

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{567E0DAD-00B9-43CD-A693-D04A82D9FD10}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2914637436-2078603343-1859348761</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>SX2840</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20091216000000.000000+000</Date></BIOS><HWID>53BA3607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91130409-6000-11D3-8CFE-0050048383C9}"><LegitResult>101</LegitResult><Name>Microsoft Office XP Small Business</Name><Ver>10</Ver><Val>26CF7ACEE5921DA</Val><Hash>d2x+pTTNYu3JF4xxg4js/ZxMxeA=</Hash><Pid>54188-OEM-1792565-67565</Pid><PidType>4</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>A3BFFEE5C7B2614</Val><Hash>33OErZU0AKa4K6Bnmq5IOt5bHRw=</Hash><Pid>81602-778-4739813-68911</Pid><PidType>5</PidType></Product></Products><Applications><App Id="16" Version="10" Result="101"/><App Id="19" Version="10" Result="101"/><App Id="1A" Version="10" Result="101"/><App Id="1B" Version="10" Result="101"/><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 4:17:2010 15:44
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEAonY2kiB1xrAmg7Y5Bod+BVxd

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1345
      FACP   ACRSYS  FACP1345
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1345
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1345
      SSDT   DpgPmm  CpuPm


    Note in the above:

    a) The visible product key values DO NOT MATCH the windows key on the side of the machine.  Ihave never reentered a new key, the software came preloaded and activated.  Every time in the past several days when I have attempted to reenter the product key, the activation software would not run, usually producing the code 0xC0000022 as before.

    b) The validation software above seems to think that something has been done to sppsvc, the same program which will not start.

    c) I cannot get slui.exe to run either in the search line or in the admin cmd window.  When I try to run it, a window pops up: Windows activation - an error has occurred, contact gateway. details error code 0xC0000022, acces denied, a process has requested access to an object, but has not been granted those access rights (I really hate this permission garbage), same as many times before.

    Since writing the above words, I took an hour off, and came back to find a black screen again.

    I have turned OFF automatic updates, and will disconnect the machine from the internet and attempt to do a restore again to see if the machine runs OK after that restore.  I will restore to a much earlier date in March.  If it runs OK, then the question is, How do I find which update to prevent loading?

    See if you can sort out all of this.

    Thanks,  Terry

     

    Sunday, April 18, 2010 9:37 PM
  • sppsvc is the software protection service, it is basicly the services that handles activation. My suggestion for you is to wait until Darin Smith checks in and responds to your problem, he will review what you have done, what hasn't worked and my guess is he will give you information on starting a no cost support incident with the guys who can advise you further and hopefully fix your problem.

    As I understand it now,

    1. Windows won't activate or validate. (activation is automatic in this case, nothing the user should have to do because it is OEM SLP)

    2. Office was activated but no longer is, and won't reactivate.

    3. SPPSVC (software protection service) will not start and coincidently you could not rebuild your licensing store useing the MS directions that I posted.

    You mention the COA sticker not matching, this is by design, nothing to worry about. As a matter of fact ordinarily you would be advised to insert that key and activate by phone but I don't advise that if you can't start the software protection service, entering the key would do no good and may not even be possible with the service stopped.

    You could do a system restore but IMHO, it may be better to see if you can isolate what caused it with MS tech support so it doesn't happen again. It may not be a windows update that broke your system, it could be malware or a virus.

     


    Sunday, April 18, 2010 10:35 PM
  • Hi Carl,

    Well, as you see the machine is back on the internet.  The second restore cycle to 3/28/10 failed outright.  The machine reported that it was unable to perform the restore, cause unknown, and said it left the machine in the state from its previous restore yesterday.

    Since the restore yesterday, the windows update has installed several more 'critical updates', but not fixed the problem.  This seems to show that there certainly was some type of big problem with this last update cycle.

    I'm back to a black screen, although the 'not genuine' has not reappeared yet, and the bottom right corner is not marked.

    I was thinking about doing a full image restore from the Gateway partition on the hard drive (by clicking on 'advanced restore', what a misnomer!), but will wait until I hear from Darin.  I would like MS to get a good look at this machine's problem, as I think there is something there for them to learn about problems with their permission system getting screwed up by their updates. 

    On the malware or virus question, I generally practice safe methods on the internet, have had the Norton internet security suite running continuously, have actually done very little surfing, and received only about 10 mail messages from known good sources. 

    Any idea when I might hear from Darin?  Is he an MS 9-5 employee or what?  I need to figure out when we can get together, as I have work in other locations which I generally need to do during the day.

    Perhaps the best would be for Darin XXXXXXXXXXXXXXXXXX email still seems to work, but the Alert Me checkbox below doesn't seem to do anything useful.

    Thanks for your help,

    Terry

     

    • Edited by terry65 Monday, April 19, 2010 2:56 PM
    Monday, April 19, 2010 12:56 AM
  • I advise you remove your personal information, not wise to post.
    Monday, April 19, 2010 12:12 PM
  • Hello,
      I also suddenly got "This Windows Is not Genuine" garbage this morning - I was liking Windows 7, but this kind of headache makes me think about going back to Linux.

    Monday, April 19, 2010 12:39 PM
  • Hello critofur,

    Please read the announcements at the top of this forum.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Monday, April 19, 2010 1:49 PM
  • The machine is on again, still has WGA crock.
    Monday, April 19, 2010 2:57 PM
  • Hello Terry65,

    "Validation Code: 0x8004FE21" and "HrOffline: 0x8004FE21' lines are telling me that Windows detected that one or more of it's protected system file(s) has been modified (rewritten, replaced or become corrupt) and that when Windows tried to repair the files, it failed. These files can no longer be trusted because they have been modified in some way. Or in other words, the files are Non-Genuine.

    Below are things you can try to repair the files and resolve the issue:

    First try repairing Windows using System Restore:

    1) Click the Start button

    2) In the Start Search field, type: System Restore and hit “Enter”

    3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.

    4) Click the "Next" button.

    5) Reboot and see if that resolves the issue.

     

     If that doesn't work, try doing a System Scan. The scan will look for bad system files and will attempt to repair them, if possible.

            1) Click the Start Button
            2) Type: cmd.exe
            3) Right-click the cmd.exe file and select 'Run as Administrator'
            4) In the CMD window, type: sfc /scannow
            5) Reboot and see if that resolves the issue.

     If neither of these sets of steps resolves the issue, my only other suggestions would be to either create a (no cost) support request at http://support.microsoft.com/gp/contactwga or reinstall Windows.

     

     


    Darin MS

    Thank you,
    Monday, April 19, 2010 10:13 PM
    Owner
  • Hi Darin,

    You can close this thread.  Neither one of the two ideas you listed above worked.  All system restore points would act like it was working, but when the computer rebooted, it would report 'restore not done, critical system files could not be accessed', and revert to the previous operating state, which had the WGA problem.

    sfc /scannow ran OK in the cmd window if started with administrator priviledges, but it reported that the system was OK and no errors were found. 

    The /contactwga link did eventually work, but it took several tries with disconnections and dead ends, going through at least 4 support engineers, to finally arrive at one who actually seemed to know what I was talking about.  They used the Remote Assist to run diagnostics on my computer from India (the wonder of fiber links), but the diagnostics they were able to run were ones I had already found about from the forum and tried to run myself.  All diagnostics failed to run because, if you look at the diagnostic printout above, you see that the 'sppsvc' program is regarded as tampered, and therefore the system won't allow it to run.  But that program is required to run any of the activation diagnostics. 

    After burning up nearly 2 hours of long distance time (on MS's nickle), they and I gave up on the problem as not soluble, and requiring a full system reinstallation.  I had been avoiding this because it had taken me several days of difficult work to get all the software and internet links installed and working satisfactorily, and I did not want to have to repeat all that work again. 

    So I got out the system repair disk from Gateway, changed the machine to boot from CD, and ran it.  It booted a proprietary Gateway program which turned out to examine the W7 system files, and then apparently went about replacing critical files without touching the software, settings, and files which I had created in the 5 weeks I had been using the computer.

    At the end, the machine  is working again with good activation status, and I did not have to reinstall anything.  However, it did go back in time, so I did have to reactivate (but not reinstall) several programs.

    The machine runs OK now, but I cannot say that the MS support did anything useful to fix it.  Everthing hit a dead end. 

    MS needs to have diagnostic tools which will selectively replace system files which it thinks have been 'tampered', without (following their proceedures) having to do a blanket reinstallation of the system, and then reinstall all user software and files.  Fortunately the Gateway system repair disk was smarter than that.

    This whole problem was caused by the MS automatic update downloaded on 4/15/10 at 3 AM, and nothing MS was equipped to do could solve it without a system reinstall, which is like killing a fly with a sledgehammer.

    Terry

     

    Sunday, April 25, 2010 4:46 AM