locked
Not running Genuine Windows RRS feed

  • Question

  • Bought this PC at Microcenter about 2 years ago. All was well until recently when I am getting the Not running genuine windows error. I had a problem with a keyboard recently and had to do a system restore from about 2 weeks back.

    I've pasted the mga diagnostic below. How can I fix it?

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2086857786-1397154865-1144760544</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0</Version><SMBIOSVersion major="2" minor="6"/><Date>20091117000000.000000+000</Date></BIOS><HWID>FB023407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x800700C1' to display the error text.
    Error: 0x800700C1

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 3:10:2012 19:25
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAonaCdSB1Qsh6CQBr+HOkwLzwXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1654
      FACP   ACRSYS  FACP1654
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1654
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1654
      SSDT   DpgPmm  CpuPm


     

    Monday, March 12, 2012 10:50 AM

Answers

  • "lesliepear" wrote in message news:e17a1e9a-2045-451e-a19b-f634739b5d53...

    Here are the results:

     

    C:\windows\system32>

    All of that looks fine, as far as I can tell – I have no idea why MGADiag is flagging it as a tampered file, unless it’s being tampered with when loaded, which would mean a malware infection.
     
     
    The only two options I see you having now, realistically, are
    1) a Repair install of Windows 7 over itself – see here for assistance/instructions - Repair Install
    2) Contact WGS Support direct, and see if they can help without a reinstall.
    WGA Support can be found here-
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, March 15, 2012 10:36 PM
    Moderator

All replies

  • "lesliepear" wrote in message news:456beda4-e248-4d5c-9714-c35d60e8ae7b...

    Bought this PC at Microcenter about 2 years ago. All was well until recently when I am getting the Not running genuine windows error. I had a problem with a keyboard recently and had to do a system restore from about 2 weeks back.

    I've pasted the mga diagnostic below. How can I fix it?

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003

    Other data-->
    SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0</Version><SMBIOSVersion major="2" minor="6"/><Date>20091117000000.000000+000</Date></BIOS

     

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x800700C1' to display the error text.
    Error: 0x800700C1

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes


     

    The only three times I have records of seeing this error messages, the problem required a repair install of the OS to fix.
     
    If you’re will to spend some time on it, then I’m happy to do so – otherwise I suggest that you prepare for a repair install by backing up your data to external media for safe-keeping, then do the repair.
     
    If you want to attempt to fix the problem, please open a Command Prompt window, and run the following command
     
    CScript  C:\Windows\System32\slmgr.vbs  /dlv
    WScript  C:\Windows\System32\slmgr.vbs  /dlv
     
    please post the output of the first, or give the EXACT error message you get.
    please tell us what happens when you run the second – the output should be the same, but in a Windows message box – or the EXACT error message you get.
    This may point to what the problem is.
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, March 12, 2012 11:04 AM
    Moderator
  • Output of first command

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Leslie>CScript  C:\Windows\System32\slmgr.vbs  /dlv
    Microsoft (R) Windows Script Host Version 5.8
    Copyright (C) Microsoft Corporation. All rights reserved.

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800006-02-1033-7600.0000-3202009
    Installation ID: 013224733393169990341192521335448780819122265501810736
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 7QJB7
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 3/12/2012 7:16:23 AM

     

    C:\Users\Leslie>

    Output of second command is exactly the same in a windows message box

    Monday, March 12, 2012 11:20 AM
  • "lesliepear" wrote in message news:4ae44a14-fa2a-4b9a-9612-b664073ba962...

    Output of first command

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Leslie>CScript  C:\Windows\System32\slmgr.vbs  /dlv
    Microsoft (R) Windows Script Host Version 5.8
    Copyright (C) Microsoft Corporation. All rights reserved.

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800006-02-1033-7600.0000-3202009
    Installation ID: 013224733393169990341192521335448780819122265501810736
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 7QJB7
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 3/12/2012 7:16:23 AM

     

    C:\Users\Leslie>

    Output of second command is exactly the same in a windows message box

     
     
    Bother – that’s an easy fix gone by the wayside :)
    Obviously the problem doesn’t reside where I thought it did.
     
    Please run the following commands
     
    NET START SPPSVC
    SC QC SPPSVC
    ICACLS C:\Windows\System32\sppsvc.exe
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, March 12, 2012 4:42 PM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Leslie>NET START SPPSVC
    The requested service has already been started.

    More help is available by typing NET HELPMSG 2182.


    C:\Users\Leslie>SC QC SPPSVC
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: SPPSVC
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\windows\system32\sppsvc.exe
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Software Protection
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\NetworkService

    C:\Users\Leslie>ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Leslie>

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     


     

    Monday, March 12, 2012 6:56 PM
  • "lesliepear" wrote in message news:209c849d-c958-419b-9037-5c7da750f2d0...

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Leslie>NET START SPPSVC
    The requested service has already been started.

    More help is available by typing NET HELPMSG 2182.


    C:\Users\Leslie>SC QC SPPSVC
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: SPPSVC
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\windows\system32\sppsvc.exe
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Software Protection
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\NetworkService

    C:\Users\Leslie>ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Leslie>
     

    That’s also ‘normal’.
    This is where things could get complicated :)
    ....but first, let’s try something easy....
     
    Uninstall the WAT Update from Installed Updates (Sort in order of Name, then look for Update for ‘Microsoft Windows (KB971033)’)
     
    Reboot, and run another MGADiag report – post the results, then download and install the KB971033 Update manually from http://support.microsoft.com/kb/971033 – you’ll need the 64-bit (x64) version.
     
    Run another MGADiag report, and post the result again.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, March 12, 2012 7:20 PM
    Moderator
  • After uninstalling,rebooting and running MGA

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2086857786-1397154865-1144760544</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0</Version><SMBIOSVersion major="2" minor="6"/><Date>20091117000000.000000+000</Date></BIOS><HWID>FB023407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x800700C1' to display the error text.
    Error: 0x800700C1

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 3:10:2012 19:25
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAonaCdSB1Qsh6CQBr+HOkwLzwXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1654
      FACP   ACRSYS  FACP1654
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1654
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1654
      SSDT   DpgPmm  CpuPm


     

    Tuesday, March 13, 2012 1:42 AM
  • nd after reinstall and reboot

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2086857786-1397154865-1144760544</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0</Version><SMBIOSVersion major="2" minor="6"/><Date>20091117000000.000000+000</Date></BIOS><HWID>FB023407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x800700C1' to display the error text.
    Error: 0x800700C1

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 3:10:2012 19:25
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAonaCdSB1Qsh6CQBr+HOkwLzwXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1654
      FACP   ACRSYS  FACP1654
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1654
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1654
      SSDT   DpgPmm  CpuPm


     

    Tuesday, March 13, 2012 1:53 AM
  • I did run Norton Internet Security recently with a system file optimizer. Could that have corrupted things?

    Tuesday, March 13, 2012 1:55 AM
  • "lesliepear" wrote in message news:dcdb0aa5-ff8e-4f7d-a8cb-c93e79845289...

    I did run Norton Internet Security recently with a system file optimizer. Could that have corrupted things?

     
     
     
    Very easily!
     
    I think we have found a source of the problem at least...

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    (which I seem to have missed earlier, somehow – sorry about that)

    Please run the following commands from an Elevated command prompt (or the last two line will fail)

    DIR \Windows\sppcext.* /S

    ICACLS C:\Windows\System32\sppcext.dll

    ICACLS C:\Windows\System32\en-US\sppcext.dll.mui

    SFC /SCANFILE=C:\Windows\System32\sppcext.dll

    SFC /SCANFILE=C:\Windows\System32\en-US\sppcext.dll.mui

    post the results.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, March 13, 2012 10:59 AM
    Moderator
  • Here are the results:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\windows\system32>DIR \Windows\sppcext.* /S
     Volume in drive C is Gateway
     Volume Serial Number is 3A5F-C7F4

     Directory of C:\Windows\System32

    07/13/2009  09:41 PM         1,203,712 sppcext.dll
                   1 File(s)      1,203,712 bytes

     Directory of C:\Windows\System32\en-US

    07/13/2009  10:30 PM            17,408 sppcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\SysWOW64

    07/13/2009  09:16 PM         1,111,552 sppcext.dll
                   1 File(s)      1,111,552 bytes

     Directory of C:\Windows\SysWOW64\en-US

    07/13/2009  10:04 PM            17,408 sppcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..clientext.resources_3
    1bf3856ad364e35_6.1.7600.16385_en-us_c2382769078e1059

    07/13/2009  10:30 PM            17,408 sppcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-security-spp-clientext_3
    1bf3856ad364e35_6.1.7600.16385_none_28bbe77bcacffbe4

    07/13/2009  09:41 PM         1,203,712 sppcext.dll
                   1 File(s)      1,203,712 bytes

     Directory of C:\Windows\winsxs\x86_microsoft-windows-s..clientext.resources_31b
    f3856ad364e35_6.1.7600.16385_en-us_66198be54f309f23

    07/13/2009  10:04 PM            17,408 sppcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\winsxs\x86_microsoft-windows-security-spp-clientext_31b
    f3856ad364e35_6.1.7600.16385_none_cc9d4bf812728aae

    07/13/2009  09:16 PM         1,111,552 sppcext.dll
                   1 File(s)      1,111,552 bytes

         Total Files Listed:
                   8 File(s)      4,700,160 bytes
                   0 Dir(s)  881,067,102,208 bytes free

    C:\windows\system32>ICACLS C:\Windows\System32\sppcext.dll
    C:\Windows\System32\sppcext.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>ICACLS C:\Windows\System32\en-US\sppcext.dll.mui
    C:\Windows\System32\en-US\sppcext.dll.mui NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\windows\system32>SFC /SCANFILE=C:\Windows\System32\sppcext.dll


    Windows Resource Protection did not find any integrity violations.

    C:\windows\system32>SFC /SCANFILE=C:\Windows\System32\en-US\sppcext.dll.mui


    Windows Resource Protection did not find any integrity violations.

    C:\windows\system32>

    Thursday, March 15, 2012 9:53 PM
  • "lesliepear" wrote in message news:e17a1e9a-2045-451e-a19b-f634739b5d53...

    Here are the results:

     

    C:\windows\system32>

    All of that looks fine, as far as I can tell – I have no idea why MGADiag is flagging it as a tampered file, unless it’s being tampered with when loaded, which would mean a malware infection.
     
     
    The only two options I see you having now, realistically, are
    1) a Repair install of Windows 7 over itself – see here for assistance/instructions - Repair Install
    2) Contact WGS Support direct, and see if they can help without a reinstall.
    WGA Support can be found here-
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0

    Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, March 15, 2012 10:36 PM
    Moderator
  • Yep.  Backup your important files and reinstall the Windows 7 operating system.  See: How to Restore Windows 7 Gateway Computer Using the Recovery Partition

    Carey Frisch

    Thursday, March 15, 2012 10:55 PM
    Moderator
  • Microsoft was able to correct the problem. I gave them the # from the sticker on the side of the machine, they had me type in a SLU command and then they gave me a code to type in. (Probably reset something on their end). It took less than 5 minutes!

    Wednesday, April 18, 2012 8:11 PM
  • "lesliepear" wrote in message news:cff73c41-603a-4ff0-b863-c88e6cea3666...

    Microsoft was able to correct the problem. I gave them the # from the sticker on the side of the machine, they had me type in a SLU command and then they gave me a code to type in. (Probably reset something on their end). It took less than 5 minutes!

     
     
    Sorry - I don't believe it. (not you  - them! it was NOT that simple - )
    Please post a new MGADiag report so we can see, and you can complain. :)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, April 18, 2012 8:14 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-RC3YY-H73CJ-CMWPY
    Windows Product Key Hash: +w7dVXcrXZ2HV07qozO2drujeyg=
    Windows Product ID: 00359-OEM-9804185-96573
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120305-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CBBC9EBB-ADCF-4049-8FB1-22366DB5095B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-CMWPY</PKey><PID>00359-OEM-9804185-96573</PID><PIDType>8</PIDType><SID>S-1-5-21-2086857786-1397154865-1144760544</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4831</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A0</Version><SMBIOSVersion major="2" minor="6"/><Date>20091117000000.000000+000</Date></BIOS><HWID>FB023407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x800700C1' to display the error text.
    Error: 0x800700C1

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000040
    Event Time Stamp: 4:15:2012 13:08
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAQABAAAAAQABAAEAonaCdSB1Qsh6CQBr+HOkwLzwXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1654
      FACP   ACRSYS  FACP1654
      HPET   ACRSYS  OEMHPET
      MCFG   ACRSYS  OEMMCFG
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1654
      GSCI   ACRSYS  GMCHSCI
      AWMI   ACRSYS  OEMB1654
      SSDT   DpgPmm  CpuPm

    Thursday, April 19, 2012 1:04 AM
  • I would call MS back and point out that your system is in exactly the same state as it was previously - direct them to this thread.

    They will either assist you to repair the system, or suggest that you reinstall - either by a repair install or by reformat/reinstall.

    Once they consider they have fixed the system this time, do NOT let them off the hook until you've run another MGADiag report and it reports properly


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, April 19, 2012 7:26 AM
    Moderator