none
Another Windows 7 not genuine 0x8004FE21 issue after replacing one of two HDs in RAID 1 RRS feed

  • Question

  • Dear all!

    After running three years a legal installation Windows 7 ultimate 64 one of the HDs in my RAID1-System collapsed. After replacing it everything worked fine except the continuing error message "Windows 7 not genuine". The desktop background ist NOT getting black, Windows Update Service is not running (no way to start the service), Windows Defender ist not working.

    I contacted Microsoft twice: They confirmed twice I am running a legal copy. The Microsoft support tried to fix the problem online and confirmed again the product key to be correct and additionally it is definitely no activation issue. They also tried to "upgrade" my installation using a Windows 7 plus SP1 DVD, but the installation finally stopped with the error message "Windows can not be installed on this Hardware" (but the HW is still running under WIN7 64 ultimate anyway...).  Microsofts support ended up with "this might happen when replacing a HD in RAID 1. Unfortunately we are unexperienced when it comes to RAID systems. Please install a clean Windows".

    >>> I have read ALL related threads here and updated Intels RAID drivers. None of the so far published solutions helped.
    I've tried to fix the problem for about three month now and this thread is my last hope to solve it.

    Here are the results of Diagnostic Report (1.5.0540.0):

    -----------------------------------------

    WGA Data-->
    Genuine Validation Status: Unsupported OS
    Windows Product Key: Failed to get Product Key.
    Windows Product Key Hash: Failed to get Product Key.
    Windows Product ID: Failed to get Product ID.
    Windows Product ID Type:
    Windows License Type:
    Windows OS version: 6.1.7601.2.00010100.1.0.000

    Download Center code: Y***P
    ID: {ABF7F7C0-****-48D2-****-BF64182AC0A7}

    Is Admin: No
    AutoDial: No
    Registry: 0x0

    WGA Version: Failed to retireve file version. - 0x80070006

    Signature Type: Unknown.
    Validation Diagnostic:

    System Scan Data-->
    Scan: Complete
    Cryptography: Complete

    Notifications Data-->
    Cached Result: N/A
    Cache refresh Interval: N/A
    Extended notification delay(non-genuine): N/A
    Extended notification delay(un-activated): N/A
    All disabled: N/A
    Reminder reduced: N/A
    File Exists: No
    Version: N/A
    Signatue Type: N/A

    OGA Data-->
    Office Status: 111
    Office Diagnostics:

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: c:\windows\system32\kernel32.dll
    File Mismatch: c:\windows\system32\crypt32.dll
    File Mismatch: c:\windows\system32\advapi32.dll
    File Mismatch: c:\windows\system32\setupapi.dll

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{ABF7F7C0-6B4A-48D2-9289-BF64182AC0A7}</UGUID><Version>1.5.0540.0</Version><OS>6.1.7601.2.00010100.1.0.000</OS><PID/><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone></MachineData> <Software><Office><Result>111</Result><Products/></Office></Software></GenuineResults> 

    THANK YOU SO MUCH FOR ANY IDEA TO GET RID OF THIS ISSUE !!!!
    *****************************************************************

    Monday, July 21, 2014 3:03 PM

Answers

All replies

  • This looks like you have an old version of the diagnostic program.  You will need to get an updated version and re-run it.  Follow the instructions below:

    MGA Diagnostic Report:

    To properly analyze and solve problems with Activation and Validation, we need to see a full copy of the diagnostic report produced by the MGADiag tool (download and save to desktop -http://go.microsoft.com/fwlink/?linkid=52012 )

    Once downloaded, run the tool.
    Click on the Continue button, after a short time, the Continue button will change to a Copy button.
    Click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your post.

    One Issue Per Thread:

    Most Activation and Validation issues look the same, on the surface, but can have many different causes and fixes. This is why we ask for a diagnostic report and this is also why we ask that you create your own thread for your issue (in other words, don't post your issue in another person's thread). 

    It just becomes too complicated to try to troubleshoot multiple different issues in the same thread.

    New to the Forums?

    Note that if you are new to these forums, you may find that you are unable to post due to a restriction on the inclusion of links and pictures.
    Simply delete the only lines that contain links -  this will allow the remainder of the report to upload (and those lines are not generally critical to the report anyhow)


    Please do not read this sentence. Please ignore the previous sentence.

    Monday, July 21, 2014 4:12 PM
  • (that's twice in three days I've seen this version pop up - it doesn't even support Vista, let alone Win 7)

    MuellerLuedenscheid - please tell us the link you got this copy of MGADiag from - it's important that we try and get it removed, to protect people who may mistakenly use it.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, July 21, 2014 8:51 PM
    Moderator
  • Source is:

    http://winfuture.de/downloadvorschalt,1762.html

    SORRY - couldn't find the tool on microsoft.com, search results were 0 when searching for "mgadiag.exe" or "mgadiag"...

    Results of the new downloaded mgadiag version in a couple of minutes.

    Monday, July 21, 2014 9:46 PM
  • Thank you for submitting the link to the recent version of MGADIAG.EXE!!!

    Here is the result:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8H42B-HJWQM-J4X2W
    Windows Product Key Hash: iDRm6QNfpSJDqPb3rHcmjLbr9LA=
    Windows Product ID: 00426-OEM-9154252-83683
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {7C39917C-3517-48BC-9D2E-32A86C73FD78}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{5DE50E59-BBA4-4058-BE69-1514536F723B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-J4X2W</PKey><PID>00426-OEM-9154252-83683</PID><PIDType>3</PIDType><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Softwarelizenzierungsdienst-Version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Aktivierungs-ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Erweiterte PID: 00426-00182-542-583683-02-1031-7601.0000-1962014
    Installations-ID: 021720823435085540496412880040254991510930678642903213
    Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Teil-Product Key: J4X2W
    Lizenzstatus: Lizenziert
    Verbleibende Windows Rearm-Anzahl: 4
    Vertrauenswürdige Zeit: 21.07.2014 23:47:31

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 7:15:2014 20:56
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAEAAgADAAAAAgABAAEACrbEBi7gRPwInF72asju4uBFIE+JeFZ1RBDqgg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            051909        APIC1244
      FACP            051909        FACP1244
      HPET            051909        OEMHPET
      MCFG            051909        OEMMCFG
      OEMB            051909        OEMB1244
      OSFR            051909        OEMOSFR
      SSDT            DpgPmm        CpuPm

    Monday, July 21, 2014 9:52 PM
  • This may simply be caused by a bad set of Intel Storage Matrix Technology drivers -  

    Installing the Intel Drivers

    try downloading and installing them from here -

    https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=17882

    (IATA89ENU.exe)

    Once complete, please reboot twice, then post another MGADiag report. 


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, July 22, 2014 6:26 AM
    Moderator
  • Sorry - missed that you said that you've already tried that...

    Next potential fix is this...

    Please run the following commands in an Elevated Command Prompt

    NET STOP CRYPTSVC
    REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD
    NET START CRYPTSVC

    once complete, leave the system alone for at least an hour to rebuild the database, then reboot, and run another MGADiag report and post the results.

    Note that this may delete your Update History - but all updates will remain installed, and can be viewed in the Installed Updates listing.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, July 22, 2014 7:05 AM
    Moderator
  • THX! I run the three commands as advised (all 3 have been properly answered by the system), left the system alone for more than 4 hours and here comes the new Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8H42B-HJWQM-J4X2W
    Windows Product Key Hash: iDRm6QNfpSJDqPb3rHcmjLbr9LA=
    Windows Product ID: 00426-OEM-9154252-83683
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {B0317ADA-62A1-4659-B43F-A91D1084290D}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{4044C12F-AE3D-4A59-8BEF-134F7169922F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-J4X2W</PKey><PID>00426-OEM-9154252-83683</PID><PIDType>3</PIDType><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Softwarelizenzierungsdienst-Version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Aktivierungs-ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Erweiterte PID: 00426-00182-542-583683-02-1031-7601.0000-1962014
    Installations-ID: 021720823435085540496412880040254991510930678642903213
    Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Teil-Product Key: J4X2W
    Lizenzstatus: Lizenziert
    Verbleibende Windows Rearm-Anzahl: 4
    Vertrauenswürdige Zeit: 22.07.2014 19:59:17

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 7:15:2014 20:56
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAEAAgADAAAAAgABAAEACrbEBi7gRPwInF72asju4uBFIE+JeFZ1RBDqgg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            051909        APIC1244
      FACP            051909        FACP1244
      HPET            051909        OEMHPET
      MCFG            051909        OEMMCFG
      OEMB            051909        OEMB1244
      OSFR            051909        OEMOSFR
      SSDT            DpgPmm        CpuPm

    Tuesday, July 22, 2014 6:04 PM
  • Not good :(

    We have two options...

    1) attempt a manual fix - the history isn't good on this, but I do have some new(ish) information that may help

    2) a repair install of Windows 7 - it's not as painful as it used to be!

    The repair install will be much the quicker of the two.

    Your choice!


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, July 22, 2014 6:39 PM
    Moderator
  • Once again thank you for your support!

    I understand that option 2 "repair install" is what the German MS Support tried already: I received a link to an ISO-File, burned a Win7-64-Install-DVD including SP1 (which is not included in my original DVD) and started a so called "inplace upgrade". The process took a couple of hours and ended up with "Windows can not be installed on this Hardware". Finally the system was rolled back - and is still running under Windows 7/64 ultimate on the same hardware. If my understanding of option 2 is correct - the choice left is option 1.

    Let's try a manual fix ...?

    Tuesday, July 22, 2014 7:08 PM
  • Odd, since Windows 7 SP1 is already installed on the system!

    This may be the result of malware faking things. (a couple of recent posts elsewhere may indicate this type of problem)

     Boot to 'Safe Mode with Networking' rather than normal Windows, then  download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

    If MBAM is already installed, boot to Safe Mode with Networking, and update it while there - then run the scans.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Tuesday, July 22, 2014 7:29 PM
    Moderator
  • Yes, MBAM was already installed (I had read all the threads here and followed every hint during the last weeks ;-)).

    Just booted in safe mode with networking, updated MBAM and ran a full scan - with the same result like last week: System checked successfully - nothing found.
    On the one hand good to know on the other .... still no key found to solve the issue.

    Idea of a NON-professional: Do the file mismatches cause the trouble? Are the mismatches potentially caused by a windows update that might have run while RAID was just synchronizing the new HD with the "old" HD2? And if so, how can the mismatch be fixed?
    I know its not logic: RAID synchronizes one to one, but something must have gone wrong during the process of rebuilding RAID 1. This is when the whole trouble started.

    over...

    Tuesday, July 22, 2014 10:45 PM
  • before we get into RAID (which I've never had the mixed pleasures of using), let's try some standard troubleshooting diagnostics...

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt
    - the Elevated Command Prompt window should pop up.

    At the Command prompt, type

    SFC /SCANNOW

    and hit the Enter key

    Wait for the scan to finish - make a note of any error messages - and then reboot.

    Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.

    Also...

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

    Then zip the CheckSUR.log and upload it to your OneDrive Public folder so I can take a look - post a link in your reply.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 23, 2014 6:56 AM
    Moderator
  • THX! Will do that and come back later today.
    Wednesday, July 23, 2014 8:54 AM
  • Back again with the results:

    1. SFC /SCANNOW ran without any error messages. Please find the CBS.log file here https://dl.dropboxusercontent.com/u/77874112/CBS.zip

    2. New MGADiag Report
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8H42B-HJWQM-J4X2W
    Windows Product Key Hash: iDRm6QNfpSJDqPb3rHcmjLbr9LA=
    Windows Product ID: 00426-OEM-9154252-83683
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {4044C12F-AE3D-4A59-8BEF-134F7169922F}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{4044C12F-AE3D-4A59-8BEF-134F7169922F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-J4X2W</PKey><PID>00426-OEM-9154252-83683</PID><PIDType>3</PIDType><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Softwarelizenzierungsdienst-Version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Aktivierungs-ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Erweiterte PID: 00426-00182-542-583683-02-1031-7601.0000-1962014
    Installations-ID: 021720823435085540496412880040254991510930678642903213
    Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Teil-Product Key: J4X2W
    Lizenzstatus: Lizenziert
    Verbleibende Windows Rearm-Anzahl: 4
    Vertrauenswürdige Zeit: 23.07.2014 14:55:38

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 7:23:2014 01:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAEAAgADAAAAAgABAAEACrbEBi7gRPwInF72asju4uBFIE+JeFZ1RBDqgg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            051909        APIC1244
      FACP            051909        FACP1244
      HPET            051909        OEMHPET
      MCFG            051909        OEMMCFG
      OEMB            051909        OEMB1244
      OSFR            051909        OEMOSFR
      SSDT            DpgPmm        CpuPm
    **********************************************************************************************

    3. CheckSUR Tool downloaded for Win7/64 and started. Stopped with error message after about 20 seconds "installation stopped with error 0x8000247" (the original error message is in German).
    I tried twice with the same result - sigh........

    Wednesday, July 23, 2014 1:01 PM
  • I'm not surprised about CheckSUR - we have cause and effect here :(

    The CBS.log is interesting...

    2014-04-25 22:55:31, Error                 CSI    00000031 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    2014-04-25 22:55:31, Error                 CSI    00000032@2014/4/25:20:55:31.613 (F) d:\win7sp1_gdr\base\wcp\servicingapi\cmirepair.cpp(312): Error HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) originated in function Windows::ServicingAPI::CCSIRepairTransaction::LockComponent expression: HRESULT_FROM_WIN32(14081L)
    


    	Line 86207: 2014-07-23 01:59:23, Error                 CSI    00000031 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    	Line 86210: 2014-07-23 01:59:24, Error                 CSI    00000033 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    


     - so you've had the problem for at least 3 months ;)

    It's interesting that these errors don't show up in the conventional manner in the 'summary area' of the SFC scan at all.

    I'll post a potential fix protocol later - if I succeed in duplicating the problem. It could be simple permissions problems, so let's see what we can find there...

    Please open an Elevated Command Prompt, and run the following commands

    DIR C:\Windows\winsxs\amd64_microsoft-windows-security-spp-client_31bf3856ad364e35_6.1.7600.16385_none_f291e361c550b891
    DIR C:\Windows\winsxs\x86_microsoft-windows-security-spp-client_31bf3856ad364e35_6.1.7600.16385_none_967347de0cf3475b
    DIR C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7600.16385_none_b7b69062b883381f
    DIR C:\Windows\winsxs\wow64_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7600.16385_none_c20b3ab4ece3fa1a

    Post the results, and we'll see what we get.

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 23, 2014 1:42 PM
    Moderator
  • ...changing the Search criteria in the CBS.log brings things into a sharper focus....

    	Line 86207: 2014-07-23 01:59:23, Error                 CSI    00000031 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    	Line 86210: 2014-07-23 01:59:24, Error                 CSI    00000033 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    	Line 86255: 2014-07-23 01:59:25, Error                 CSI    0000004d (F) [SR] Component not found: Microsoft-Windows-Security-SPP-UX, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    	Line 86307: 2014-07-23 01:59:25, Error                 CSI    0000006b (F) [SR] Component not found: Microsoft-Windows-Security-SPP-UX, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    	Line 86310: 2014-07-23 01:59:26, Error                 CSI    0000006d (F) [SR] Component not found: Microsoft-Windows-Security-SPP-UX, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005]
    
    I'm not sure what to make of that, yet!


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 23, 2014 1:45 PM
    Moderator
  • I'm not going to buy fireworks yet but it looks like we got rid of the evil spirit!
    I followed the error message 0x8000247 produced by the CHECKSUR Installation and this lead my to another thread answered by you talking once again about the bad Intel RAID drivers.

    Although I really did update and install these drivers a couple of weeks ago and that was not successful, I followed the link once agin and tried it once more. Don't ask me why but it looks like the sesond try was a success story. My Windows started to download 41 Updates and installed them without any trouble. Also: defender is running again.

    Here is the latest Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8H42B-HJWQM-J4X2W
    Windows Product Key Hash: iDRm6QNfpSJDqPb3rHcmjLbr9LA=
    Windows Product ID: 00426-OEM-9154252-83683
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {4044C12F-AE3D-4A59-8BEF-134F7169922F}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{4044C12F-AE3D-4A59-8BEF-134F7169922F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-J4X2W</PKey><PID>00426-OEM-9154252-83683</PID><PIDType>3</PIDType><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Softwarelizenzierungsdienst-Version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Aktivierungs-ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Erweiterte PID: 00426-00182-542-583683-02-1031-7601.0000-1962014
    Installations-ID: 015631960551480995622560904812676582591736827844197582
    Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Teil-Product Key: J4X2W
    Lizenzstatus: Lizenziert
    Verbleibende Windows Rearm-Anzahl: 4
    Vertrauenswürdige Zeit: 23.07.2014 16:24:48

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:23:2014 01:59
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAEAAgADAAAAAgABAAEACrbEBhAb/qUInF72asju4uBFIE+JeFZ1RBDqgg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            051909        APIC1244
      FACP            051909        FACP1244
      HPET            051909        OEMHPET
      MCFG            051909        OEMMCFG
      OEMB            051909        OEMB1244
      OSFR            051909        OEMOSFR
      SSDT            DpgPmm        CpuPm

    ****************************************************************

    Looks pretty much better to me - but I'm curious to hear your thoughts ..........

    Wednesday, July 23, 2014 2:41 PM
  • Thanks for that! - I was wondering if it was worth trying the drivers again after running SFC (This has worked once or twice in the past).

    There are a couple of errors still present - but they should be easy enough to fix (more later)

    If you've managed to run CheckSUR now, please post the log - also please run a new SFC /SCANNOW and post the new CBS.log.

    this will do two things -

    1) make sure that the errors I saw earlier are now gone -

    2) ensure that there are no more errors surfacing.

    As to the remaining errors...

    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    I think these will result in another non-genuine notification down the line unless fixed. This is simply an uninstall and reinstall of the affected update...

    Close all open windows.

    Open an Elevated Command Prompt window, and type the following command

    wusa /uninstall /kb:971033

    and hit the Enter key

    Accept the warnings/confirmations, and wait for it to complete

    copy and paste the output (if any) from the command prompt window to a reply here,

    Reboot

    reinstall the update from http://support.microsoft.com/kb/971033

    Reboot

    run another MGADiag report, and post it.

    (and with any luck, that'll be it!)


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 23, 2014 3:33 PM
    Moderator
  • Back again...
    Here are the links to the new results of SFC /scannow and CheckSUR (this time it worked properly):

    https://dl.dropboxusercontent.com/u/77874112/CBS.zip
    https://dl.dropboxusercontent.com/u/77874112/CheckSUR.zip

    wusa /uninstall /kb:971033 resulted in "not installed on this computer"
    after a reboot I installed it with no problems.

    MGADiag Report in a minute...

    Wednesday, July 23, 2014 9:43 PM
  • how many years of our lifes did we spent waiting for a booting windows PC...?

    Here is the latest Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8H42B-HJWQM-J4X2W
    Windows Product Key Hash: iDRm6QNfpSJDqPb3rHcmjLbr9LA=
    Windows Product ID: 00426-OEM-9154252-83683
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {4044C12F-AE3D-4A59-8BEF-134F7169922F}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{4044C12F-AE3D-4A59-8BEF-134F7169922F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-J4X2W</PKey><PID>00426-OEM-9154252-83683</PID><PIDType>3</PIDType><SID>S-1-5-21-2297156878-3333489543-910567220</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0504   </Version><SMBIOSVersion major="2" minor="5"/><Date>20090519000000.000000+000</Date></BIOS><HWID>20C73907018400FE</HWID><UserLCID>0407</UserLCID><SystemLCID>0407</SystemLCID><TimeZone>Mitteleuropäische Zeit(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Softwarelizenzierungsdienst-Version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition
    Beschreibung: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Aktivierungs-ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Erweiterte PID: 00426-00182-542-583683-02-1031-7601.0000-1962014
    Installations-ID: 015631960551480995622560904812676582591736827844197582
    Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Teil-Product Key: J4X2W
    Lizenzstatus: Lizenziert
    Verbleibende Windows Rearm-Anzahl: 4
    Vertrauenswürdige Zeit: 23.07.2014 23:51:02

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:23:2014 20:56
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAEAAgADAAAAAgABAAEACrbEBhAb/qUInF72asju4uBFIE+JeFZ1RBDqgg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            051909        APIC1244
      FACP            051909        FACP1244
      HPET            051909        OEMHPET
      MCFG            051909        OEMMCFG
      OEMB            051909        OEMB1244
      OSFR            051909        OEMOSFR
      SSDT            DpgPmm        CpuPm

    Wednesday, July 23, 2014 9:54 PM
  • The report looks fine now.

    Interesting that KB971033 claimed not to be installed - that would give a completely different 'error' set in the report to anything that's been shown in that thread! (although it's not actually an error, it just looks like one, and is totally characteristic)

    We're done ;)

    I'll take a look at the logfiles later to make sure but I need some sleep zzzzz...

    Good luck!


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 23, 2014 10:12 PM
    Moderator
  • This thread is not finished before I thank you once again for your

    OUTSTANDING SUPPORT

    and help! Looks to me you are the only one worldwide who is able to solve issues like that one. After three months of hazzle and a lot of so called experts spending my time and leading me on the wrong path you asked the right questions and you hit it big with your know how.

    The final success is your personal achievement! Thank you!!!

    Thursday, July 24, 2014 11:56 AM
  • <blush> LOL!</blush>

    Thanks, and good luck.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, July 24, 2014 2:59 PM
    Moderator