locked
Sudden WGA failure, corrupt files in report RRS feed

  • Question

  • Hi, have already been through voice support for this to no avail (they took me through releasing and reinstating product key and reactivating using slmgr) but the problem persists (tampered files in the diagnostic report).  I have a retail Windows 7 Home Premium that has had no problems for a year until recently installed Microsoft Keyboard Mouse combo and Samsung montitor plus a host of January Microsoft updates.  No other installs or threats.  Now getting annoying WGA pop-ups - failed online tools validation (directs to purchase again saying files are corrupt), software licensing only responds through slmgr, not slui.exe (Product key change links are dead in computer properties).  Diag report says two corrupt files.  Hope reinstall can be avoided.  Thanks,

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-*****-*****-2HPM4
    Windows Product Key Hash: APpija6DKxPIeg1aE/WixE/uE80=
    Windows Product ID: 00359-029-9396672-85553
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {AF908666-ECD0-433C-B1FB-F8E9AB9635D9}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Project Professional 2007 - 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\en-US\slui.exe.mui[Hr = 0x800b0003]
    File Mismatch: C:\Windows\system32\en-US\sppcomapi.dll.mui[Hr = 0x800b0003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{AF908666-ECD0-433C-B1FB-F8E9AB9635D9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>00359-029-9396672-85553</PID><PIDType>5</PIDType><SID>S-1-5-21-3066196655-3326560567-443829108</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>DG965RY_</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>MQ96510J.86A.1761.2009.0326.0001</Version><SMBIOSVersion major="2" minor="4"/><Date>20090326000000.000000+000</Date></BIOS><HWID>96BB3607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-003B-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Project Professional 2007</Name><Ver>12</Ver><Val>3AB862DE70D8D86</Val><Hash>UfpXsJvSSVcPufbDdjd0NK73+ug=</Hash><Pid>89403-707-4159871-63571</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1DBEC884C19F778</Val><Hash>jE9cPPXuvZMYYGHZpJNk0HTgVOE=</Hash><Pid>81605-956-2351406-65300</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="3A" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00170-029-939667-01-1033-7600.0000-0142011
    Installation ID: 006940249705729273803303808505232116770690043923884781
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 2HPM4
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 1/15/2011 1:44:18 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000002800
    Event Time Stamp: 1:15:2011 13:43
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui


    HWID Data-->
    HWID Hash Current: OgAAAAIABgABAAEAAQABAAAAAgABAAEA6GGI1040blHUwezYJNou98aYviQ4eP6w3ojwL1sAfjgqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   INTEL   DG965RY
      FACP   INTEL   DG965RY
      MCFG   INTEL   DG965RY
      WDDT   INTEL   DG965RY
      ASF!   INTEL   DG965RY
      SSDT   INTEL   CpuPm
      SSDT   INTEL   CpuPm
      SSDT   INTEL   CpuPm
      SSDT   INTEL   CpuPm
      SSDT   INTEL   CpuPm

     

    Saturday, January 15, 2011 7:00 PM

Answers

  • You have tampered files, please try the steps below.

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    SFC/system restore

    type cmd in the search box of the start menu, right click on the icon that appears and type sfc /scannow without the qoutes and press enter, allow SFC to run, reboot when directed. If you get any error messages write them down exactly as they appear. After rebooting go to www.microsoft.com/genuine and attempt to validate.

     

    If that does not work then type system restore in the search box, click on the resulting program and follow the wizards prompts to restore to a previous point prior to the non-genuine status.

     

    If that does not work then start a no cost wga tech support incident at the following link http://support.microsoft.com/gp/contactwga

    Sunday, January 16, 2011 1:49 AM

All replies

  • You have tampered files, please try the steps below.

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    SFC/system restore

    type cmd in the search box of the start menu, right click on the icon that appears and type sfc /scannow without the qoutes and press enter, allow SFC to run, reboot when directed. If you get any error messages write them down exactly as they appear. After rebooting go to www.microsoft.com/genuine and attempt to validate.

     

    If that does not work then type system restore in the search box, click on the resulting program and follow the wizards prompts to restore to a previous point prior to the non-genuine status.

     

    If that does not work then start a no cost wga tech support incident at the following link http://support.microsoft.com/gp/contactwga

    Sunday, January 16, 2011 1:49 AM
  • Thank you Carl, that was a great idea.  SFC did confirm the corrupt files but couldn't replace them because the cached files are also corrupt.  I tried a system restore back almost 6 weeks to no avail.  I think I have to repair, unless other ideas.  Thanks again, M
    Monday, January 17, 2011 3:06 PM
  • You can always try the WGA support, however if you are more comfortable with a clean install that is a viable option also. If the problem reocurrs after you get it fixed try to notate what was installed or changed just prior to the non-genuine.

    Another trick using SFC commands is to run them from the repair enviroment (boot from CD), the files may be accesable for changes when the OS is offline, in either event, back up your important files before proceeding.

    Monday, January 17, 2011 7:06 PM
  • Hi Carl, right I cut to the chase did a full backup then a repair install from my retail CD (fired up setup within existing Windows and "upgraded" for an in place repair).  It fixed things effortlessly and without loss of any programs and settings.  Issue solved.  Thank you! M  
    Thursday, January 20, 2011 9:10 AM
  • "mcameronm" wrote in message news:76e2811a-ceec-4a2a-9d49-fc386484f3f8...
    Hi Carl, right I cut to the chase did a full backup then a repair install from my retail CD (fired up setup within existing Windows and "upgraded" for an in place repair).  It fixed things effortlessly and without loss of any programs and settings.  Issue solved.  Thank you! M  

    Don't forget to check your update status!
     Bo to Windows Updates, and get things up-to-date, then use Belarc Advisor to check the status of all Windows Updates - do a manual reinstall of any broken updates. (www.belarc.com)

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, January 20, 2011 10:31 AM
    Moderator