locked
Windows 7 Professional 64-bit Suddenly Invalid RRS feed

  • Question

  • I have tried running the diagnostic tool several times, but I get an error when trying to copy it.  The error says "Failed to create output files, hr = 0x800700d. Please contact support."  This is an error code (0x800700d) that seems to keep popping up when trying to validate or register my windows in every way availible. 

    Yesterday, I tried to do some housecleaning and deleted Windows Live and an old Java 6 program since I never use them.  After that (I think, because thats when I noticed it) I see a little tiny notice that says my copy of windows is not genuine.  I bought it last fall at Staples to upgrade from Vista, so I doubt it's a fake.  It was working just fine until last night.  I clicked the option to resolve online, and the page comes up saying that it IS valid and "No problem, we can help you take care of that" along with links to buy Windows but no link to resolve the issue.  I have tried the slui thing, and keep getting the 0x8007000d error, the automatic phone option won't work, and I am getting nowhere.  I've read the other threads, and have tried everything I found to get it validated and accepted.  Nothing is working and I'm out of ideas. 

    Since I can't get the diagnostic tool to copy, here is everything I can see in the window and tabs:

    Validation Info:

    Validation Code:          50

    Product Key:               *****-*****-XKQ96-734BV-H3YBY

    Product Key Hash:       X5H/dX23m3x+UFn5/cLxNvuhAPc=

    Product ID:                 00371-154-4142604-85006

    Product ID Type:          5  -  Retail

    Windows OS version:    6.1.7600.2.00010100.0.0.048

    ID:                             {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)

    Administrator:               Yes

    TestCab:                      0x0

    LegitcheckControl:        N/A, hr = 0x80070002

    Signed By:                   N/A, hr = 0x80070002

    Product Name:             Windows 7 Professional

    Architecture and Build:  0x00000009  7600.win7_gdr.101026-1503

    TTS Error:                    N/A

    Validation Diagnostic:

    Resolution Status:         N/A

     

    Vista WgaER Settings:

    ThreatID(s):                    N/A, hr = 0x80070002

    Version:                          N/A, hr = 0x80070002

     

    Windows XP Notification Settings:

    Cached Result:                N/A, hr = 0x80070002

    Version:                          N/A, hr = 0x80070002

    WGATray.exe Signed by: N/A, hr = 0x80070002

    WGALogon.dll Signed By: N/A, hr = 0x80070002

    File Exists:                      no

     

    Office Notification settings:

    Cached Result:               N/A, hr = 0x80070002

    Version:                         N/A, hr = 0x80070002

    OGAExec.exe Signed by: N/A, hr = 0x80070002

    OGAAddin.dll Signed by:  N/A, hr = 0x80070002

     

    Office>

    Validation info:

    Validation Status:  101 Not Activated

    OGA Version:        N/A, 0x8007002

    Signed By:            N/A, hr = 0x80070002

    Dignostic:             B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-365-8

                               0041010_025D1FF3-229-80041010_025D1FF3-230-1_025

                               D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF

                               3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A

     

    General Browser Settings:

    Proxy settings:     N/A

    User Agent:          Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser:   c:\Program Files (x86)\Internet Explorer\IEXPLORE.exe

     

    Browser Security Settings: 

    Download signed ActiveX controls:              Prompt

    Download unsigned ActiveX controls:          Disabled

    Run ActiveX controls and plug-ins:              Allowed

    Initialize and script ActiveX

    controls not marked as safe:                      Disabled

    Allow scripting of Internet

    Explorer Webbrowser control:                    Disabled

    Active scripting:                                        Allowed

    Script ActiveX controls marked as

    safe for scripting:                                      Allowed

     

    Liscensing info:

    C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.

     

     

    I think I have everything typed up correctly...  I am running a Lenovo Thinkpad w700 with Windows 7 professional 64 bit that I upgraded from Vista 64 Pro last fall. 

    Wednesday, March 16, 2011 11:12 PM

Answers

  • This sounds very much as if you've got a rootkit infection - and they can be almost impossible to get rid of without a second operating system within which to work on the hard drive in question.

     I recommend a complete reformat/reinstall from Recovery Disks, or from the MS DVD.

    If you're not prepared for that , then try getting assistance from one of the anti-malware forums - a couple of the best are bleepingcomputer.com, and aumha.net  - make sure that you first read their submission instructions, and follow them to the letter, or they are unlikely to respond kindly <g>)

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, March 20, 2011 9:22 AM
    Moderator

All replies

  • Instead of trying to type just paste the entire output in your reply.  There are several large sections that are missing. 

    Run the report again then click Copy.  That puts the output on the clipboard.  Then open a reply here and press Ctrl-V (Paste).  Don't attempt to format.


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Wednesday, March 16, 2011 11:34 PM
    Answerer
  • I wouldn't have typed all of that if the program was letting me copy it and I also posted what the error was when I tried to copy it.  It's still not letting me copy it today either.  The error pops up when I hit the copy button saying "Failed to create output files, hr=0x8007000d.  Please contact support."

    Believe me, I didn't want to write out all of that stuff because it was seriously not fun and very long-winded; I just figured something was better than nothing.   How can I get the diag prog working so I can get that report for you?
    Thursday, March 17, 2011 4:50 PM
  • Try it again. ignore the error messages.

    Stole this answer from darin:

     The MGA Diag tool, creates support files when it is run.  I do not use those files because there is no way to post files in the forum.  The error message you received is just telling you that those support files failed to be created.  However, you should still be able to click the 'Copy" button and then Paste the report into this thread, regardless if those support files were created or not.

    Thursday, March 17, 2011 5:15 PM
    Answerer
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XKQ96-734BV-H3YBY
    Windows Product Key Hash: X5H/dX23m3x+UFn5/cLxNvuhAPc=
    Windows Product ID: 00371-154-4142604-85006
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A8F41-320-80004005_672A8F41-349-80004005_672A8F41-244-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{5617E18F-0457-4BF3-A6F2-D4EC82B443EC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H3YBY</PKey><PID>00371-154-4142604-85006</PID><PIDType>5</PIDType><SID>S-1-5-21-159440925-3690200664-178599724</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>27584SU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7ZETA3WW (2.03 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090416000000.000000+000</Date></BIOS><HWID>2FB80600010000F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7Z   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6562E50B2362738</Val><Hash>W6/OG8ORLxJsFc+HQK9n5tZWRtc=</Hash><Pid>81602-924-3919445-68905</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 3:16:2011 17:37
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007000d

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-7Z  
      FACP            LENOVO        TP-7Z  
      HPET            LENOVO        TP-7Z  
      BOOT            LENOVO        TP-7Z  
      MCFG            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      ECDT            LENOVO        TP-7Z  
      SLIC            LENOVO        TP-7Z  
      ASF!            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      TCPA                   
      SSDT            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  




    Eureka!  So much better!  Thanks!
    Thursday, March 17, 2011 5:22 PM
  • Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.

    There is a similar issue in the thread at

    http://social.microsoft.com/Forums/en/genuinewindows7/thread/7da922f3-0761-49e2-aca5-7128288dcb87

    where Darin Smith recommended this solution.

     The Licensing Data section of the Diagnostic Report isn't showing correct information. This usually indicates that Windows 7's Licensing Store may be corrupt or unreadable. Try the below steps to recreate the Store.

    1) Open an Internet Browser
    2) Type: %windir%\system32 into the browser address bar.
    3) Find the file CMD.exe
    4) Right-Click on CMD.exe and select 'Run as Administrator'
    5) Type: net stop sppsvc (It may ask you if you are sure, select yes)
    Note: the Software Protection servive may not be running, this is ok.
    6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
    7) Type: rename tokens.dat tokens.bar
    8) Type: cd %windir%\system32
    9) Type: net start sppsvc
    10) Type: slui.exe
    11) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automaticly.

    Thank you,
    Darin MS


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    • Proposed as answer by Darin Smith MS Thursday, March 17, 2011 9:40 PM
    Thursday, March 17, 2011 8:24 PM
    Answerer
  • I'm running into a problem at step #7.  Cmd.exe says that "A duplicate file name exists, or the file cannot be found."  Is that ok?  Should I just keep going?
    Thursday, March 17, 2011 10:56 PM
  • in that case, replace step #7 with one of the below

     

    7) Type: rename tokens.dat tokens.old

    or

    7) Type: rename tokens.dat tokens.123

    Whichever does not produce an error


    Darin MS
    Friday, March 18, 2011 8:06 PM
  • I finished the process, but I'm still getting the same error when I try to activate online, retype the serial number or use the automated phone service.  The error is "Error code 0x8007000D    The data is invalid."

     

    I tried the cmd.exe process a few times, in case it was a fluke, but it comes up every time.  :( 

    Friday, March 18, 2011 11:16 PM
  • Please run MGADiag again and post the new report - things have almost certainly changed
    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, March 19, 2011 12:02 AM
    Moderator
  • Here ya go!

    =================================================================

     

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-XKQ96-734BV-H3YBY
    Windows Product Key Hash: X5H/dX23m3x+UFn5/cLxNvuhAPc=
    Windows Product ID: 00371-154-4142604-85006
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 101 Not Activated
    Microsoft Office Home and Student 2007 - 101 Not Activated
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A8F41-320-80004005_672A8F41-349-80004005_672A8F41-244-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{5617E18F-0457-4BF3-A6F2-D4EC82B443EC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H3YBY</PKey><PID>00371-154-4142604-85006</PID><PIDType>5</PIDType><SID>S-1-5-21-159440925-3690200664-178599724</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>27584SU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7ZETA3WW (2.03 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090416000000.000000+000</Date></BIOS><HWID>2FB80600010000F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7Z   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6562E50B2362738</Val><Hash>W6/OG8ORLxJsFc+HQK9n5tZWRtc=</Hash><Pid>81602-924-3919445-68905</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 3:16:2011 17:37
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    N/A, hr = 0x8007000d

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-7Z  
      FACP            LENOVO        TP-7Z  
      HPET            LENOVO        TP-7Z  
      BOOT            LENOVO        TP-7Z  
      MCFG            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      ECDT            LENOVO        TP-7Z  
      SLIC            LENOVO        TP-7Z  
      ASF!            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      TCPA                   
      SSDT            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  
      SSDT            LENOVO        TP-7Z  



    Saturday, March 19, 2011 1:05 AM
  • I Think I see what the problem is.

    You have almost certainly got a hacker's Loader program installed - your computer BIOS is dated April 2009, but claims to have a Win7-compliant BIOS.

    This is simply not possible, as the BIOS changes were not released until the RTM of Windows 7 in July.

    You need to find the program and remove it, -hopefully it will then allow your system to activate normally.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, March 19, 2011 7:04 AM
    Moderator
  • Aw, man!  I wonder if it's part of the satan-spawn that smacked my laptop last Friday that called itself mrj.exe and was rooted pretty deep into the registry....  If so, it's been giving me grief for over a week now.  It disabled/destroyed MalwareBytes, SpyWare Doctor, Avast, and Windows Defender.  MalwareBytes and Avast are finally working again now and they haven't turned up anything suspicious.  All of their scans come up clean.  MalwareBytes also had me run the ESET online scanner, which came up clean.

     

    Any suggestions on how to find the program?  I'm not spotting anything unusual in the Task Manager, but if it's like the last one it could be disguising itself as a legitimate program. 

    Saturday, March 19, 2011 6:43 PM
  • This sounds very much as if you've got a rootkit infection - and they can be almost impossible to get rid of without a second operating system within which to work on the hard drive in question.

     I recommend a complete reformat/reinstall from Recovery Disks, or from the MS DVD.

    If you're not prepared for that , then try getting assistance from one of the anti-malware forums - a couple of the best are bleepingcomputer.com, and aumha.net  - make sure that you first read their submission instructions, and follow them to the letter, or they are unlikely to respond kindly <g>)

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, March 20, 2011 9:22 AM
    Moderator
  • All right.  A reinstall does sound like the best bet.  Figures this is during Finals week for school....

    I'll check out bleepingcomputer.com, though, just in case a reinstall can be avoided.  Thanks for all of your help!

    Sunday, March 20, 2011 4:56 PM