Answered by:
Windows 7 Professional 64-bit Suddenly Invalid

Question
-
I have tried running the diagnostic tool several times, but I get an error when trying to copy it. The error says "Failed to create output files, hr = 0x800700d. Please contact support." This is an error code (0x800700d) that seems to keep popping up when trying to validate or register my windows in every way availible.
Yesterday, I tried to do some housecleaning and deleted Windows Live and an old Java 6 program since I never use them. After that (I think, because thats when I noticed it) I see a little tiny notice that says my copy of windows is not genuine. I bought it last fall at Staples to upgrade from Vista, so I doubt it's a fake. It was working just fine until last night. I clicked the option to resolve online, and the page comes up saying that it IS valid and "No problem, we can help you take care of that" along with links to buy Windows but no link to resolve the issue. I have tried the slui thing, and keep getting the 0x8007000d error, the automatic phone option won't work, and I am getting nowhere. I've read the other threads, and have tried everything I found to get it validated and accepted. Nothing is working and I'm out of ideas.
Since I can't get the diagnostic tool to copy, here is everything I can see in the window and tabs:
Validation Info:
Validation Code: 50
Product Key: *****-*****-XKQ96-734BV-H3YBY
Product Key Hash: X5H/dX23m3x+UFn5/cLxNvuhAPc=
Product ID: 00371-154-4142604-85006
Product ID Type: 5 - Retail
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)
Administrator: Yes
TestCab: 0x0
LegitcheckControl: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture and Build: 0x00000009 7600.win7_gdr.101026-1503
TTS Error: N/A
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Settings:
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notification Settings:
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
WGATray.exe Signed by: N/A, hr = 0x80070002
WGALogon.dll Signed By: N/A, hr = 0x80070002
File Exists: no
Office Notification settings:
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed by: N/A, hr = 0x80070002
OGAAddin.dll Signed by: N/A, hr = 0x80070002
Office>
Validation info:
Validation Status: 101 Not Activated
OGA Version: N/A, 0x8007002
Signed By: N/A, hr = 0x80070002
Dignostic: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-365-8
0041010_025D1FF3-229-80041010_025D1FF3-230-1_025
D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF
3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A
General Browser Settings:
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: c:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Browser Security Settings:
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX
controls not marked as safe: Disabled
Allow scripting of Internet
Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as
safe for scripting: Allowed
Liscensing info:
C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.
I think I have everything typed up correctly... I am running a Lenovo Thinkpad w700 with Windows 7 professional 64 bit that I upgraded from Vista 64 Pro last fall.
Wednesday, March 16, 2011 11:12 PM
Answers
-
This sounds very much as if you've got a rootkit infection - and they can be almost impossible to get rid of without a second operating system within which to work on the hard drive in question.
I recommend a complete reformat/reinstall from Recovery Disks, or from the MS DVD.
If you're not prepared for that , then try getting assistance from one of the anti-malware forums - a couple of the best are bleepingcomputer.com, and aumha.net - make sure that you first read their submission instructions, and follow them to the letter, or they are unlikely to respond kindly <g>)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Monday, March 21, 2011 6:39 PM
Sunday, March 20, 2011 9:22 AMModerator
All replies
-
Instead of trying to type just paste the entire output in your reply. There are several large sections that are missing.
Run the report again then click Copy. That puts the output on the clipboard. Then open a reply here and press Ctrl-V (Paste). Don't attempt to format.
Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.Wednesday, March 16, 2011 11:34 PMAnswerer -
I wouldn't have typed all of that if the program was letting me copy it and I also posted what the error was when I tried to copy it. It's still not letting me copy it today either. The error pops up when I hit the copy button saying "Failed to create output files, hr=0x8007000d. Please contact support."
Believe me, I didn't want to write out all of that stuff because it was seriously not fun and very long-winded; I just figured something was better than nothing. How can I get the diag prog working so I can get that report for you?Thursday, March 17, 2011 4:50 PM -
Try it again. ignore the error messages.
Stole this answer from darin:
The MGA Diag tool, creates support files when it is run. I do not use those files because there is no way to post files in the forum. The error message you received is just telling you that those support files failed to be created. However, you should still be able to click the 'Copy" button and then Paste the report into this thread, regardless if those support files were created or not.
Thursday, March 17, 2011 5:15 PMAnswerer -
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XKQ96-734BV-H3YBY
Windows Product Key Hash: X5H/dX23m3x+UFn5/cLxNvuhAPc=
Windows Product ID: 00371-154-4142604-85006
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7600.win7_gdr.101026-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 101 Not Activated
Microsoft Office Home and Student 2007 - 101 Not Activated
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A8F41-320-80004005_672A8F41-349-80004005_672A8F41-244-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5617E18F-0457-4BF3-A6F2-D4EC82B443EC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H3YBY</PKey><PID>00371-154-4142604-85006</PID><PIDType>5</PIDType><SID>S-1-5-21-159440925-3690200664-178599724</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>27584SU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7ZETA3WW (2.03 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090416000000.000000+000</Date></BIOS><HWID>2FB80600010000F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7Z </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6562E50B2362738</Val><Hash>W6/OG8ORLxJsFc+HQK9n5tZWRtc=</Hash><Pid>81602-924-3919445-68905</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:16:2011 17:37
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
N/A, hr = 0x8007000d
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7Z
FACP LENOVO TP-7Z
HPET LENOVO TP-7Z
BOOT LENOVO TP-7Z
MCFG LENOVO TP-7Z
SSDT LENOVO TP-7Z
ECDT LENOVO TP-7Z
SLIC LENOVO TP-7Z
ASF! LENOVO TP-7Z
SSDT LENOVO TP-7Z
TCPA
SSDT LENOVO TP-7Z
SSDT LENOVO TP-7Z
SSDT LENOVO TP-7Z
Eureka! So much better! Thanks!Thursday, March 17, 2011 5:22 PM -
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.There is a similar issue in the thread at
http://social.microsoft.com/Forums/en/genuinewindows7/thread/7da922f3-0761-49e2-aca5-7128288dcb87
where Darin Smith recommended this solution.
The Licensing Data section of the Diagnostic Report isn't showing correct information. This usually indicates that Windows 7's Licensing Store may be corrupt or unreadable. Try the below steps to recreate the Store.
1) Open an Internet Browser
2) Type: %windir%\system32 into the browser address bar.
3) Find the file CMD.exe
4) Right-Click on CMD.exe and select 'Run as Administrator'
5) Type: net stop sppsvc (It may ask you if you are sure, select yes)
Note: the Software Protection servive may not be running, this is ok.
6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
7) Type: rename tokens.dat tokens.bar
8) Type: cd %windir%\system32
9) Type: net start sppsvc
10) Type: slui.exe
11) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key or Activation may occur automaticly.
Thank you,
Darin MS
Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.- Proposed as answer by Darin Smith MS Thursday, March 17, 2011 9:40 PM
Thursday, March 17, 2011 8:24 PMAnswerer -
I'm running into a problem at step #7. Cmd.exe says that "A duplicate file name exists, or the file cannot be found." Is that ok? Should I just keep going?Thursday, March 17, 2011 10:56 PM
-
in that case, replace step #7 with one of the below
7) Type: rename tokens.dat tokens.old
or
7) Type: rename tokens.dat tokens.123
Whichever does not produce an error
Darin MSFriday, March 18, 2011 8:06 PM -
I finished the process, but I'm still getting the same error when I try to activate online, retype the serial number or use the automated phone service. The error is "Error code 0x8007000D The data is invalid."
I tried the cmd.exe process a few times, in case it was a fluke, but it comes up every time. :(
Friday, March 18, 2011 11:16 PM -
Please run MGADiag again and post the new report - things have almost certainly changed
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, March 19, 2011 12:02 AMModerator -
Here ya go!
=================================================================
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XKQ96-734BV-H3YBY
Windows Product Key Hash: X5H/dX23m3x+UFn5/cLxNvuhAPc=
Windows Product ID: 00371-154-4142604-85006
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {5617E18F-0457-4BF3-A6F2-D4EC82B443EC}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7600.win7_gdr.101026-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 101 Not Activated
Microsoft Office Home and Student 2007 - 101 Not Activated
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_672A8F41-320-80004005_672A8F41-349-80004005_672A8F41-244-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5617E18F-0457-4BF3-A6F2-D4EC82B443EC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-H3YBY</PKey><PID>00371-154-4142604-85006</PID><PIDType>5</PIDType><SID>S-1-5-21-159440925-3690200664-178599724</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>27584SU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7ZETA3WW (2.03 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090416000000.000000+000</Date></BIOS><HWID>2FB80600010000F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7Z </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>101</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>101</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>6562E50B2362738</Val><Hash>W6/OG8ORLxJsFc+HQK9n5tZWRtc=</Hash><Pid>81602-924-3919445-68905</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="101"/><App Id="18" Version="12" Result="101"/><App Id="1B" Version="12" Result="101"/><App Id="A1" Version="12" Result="101"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:16:2011 17:37
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
N/A, hr = 0x8007000d
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC LENOVO TP-7Z
FACP LENOVO TP-7Z
HPET LENOVO TP-7Z
BOOT LENOVO TP-7Z
MCFG LENOVO TP-7Z
SSDT LENOVO TP-7Z
ECDT LENOVO TP-7Z
SLIC LENOVO TP-7Z
ASF! LENOVO TP-7Z
SSDT LENOVO TP-7Z
TCPA
SSDT LENOVO TP-7Z
SSDT LENOVO TP-7Z
SSDT LENOVO TP-7Z
Saturday, March 19, 2011 1:05 AM -
I Think I see what the problem is.
You have almost certainly got a hacker's Loader program installed - your computer BIOS is dated April 2009, but claims to have a Win7-compliant BIOS.
This is simply not possible, as the BIOS changes were not released until the RTM of Windows 7 in July.
You need to find the program and remove it, -hopefully it will then allow your system to activate normally.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, March 19, 2011 7:04 AMModerator -
Aw, man! I wonder if it's part of the satan-spawn that smacked my laptop last Friday that called itself mrj.exe and was rooted pretty deep into the registry.... If so, it's been giving me grief for over a week now. It disabled/destroyed MalwareBytes, SpyWare Doctor, Avast, and Windows Defender. MalwareBytes and Avast are finally working again now and they haven't turned up anything suspicious. All of their scans come up clean. MalwareBytes also had me run the ESET online scanner, which came up clean.
Any suggestions on how to find the program? I'm not spotting anything unusual in the Task Manager, but if it's like the last one it could be disguising itself as a legitimate program.
Saturday, March 19, 2011 6:43 PM -
This sounds very much as if you've got a rootkit infection - and they can be almost impossible to get rid of without a second operating system within which to work on the hard drive in question.
I recommend a complete reformat/reinstall from Recovery Disks, or from the MS DVD.
If you're not prepared for that , then try getting assistance from one of the anti-malware forums - a couple of the best are bleepingcomputer.com, and aumha.net - make sure that you first read their submission instructions, and follow them to the letter, or they are unlikely to respond kindly <g>)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Monday, March 21, 2011 6:39 PM
Sunday, March 20, 2011 9:22 AMModerator -
All right. A reinstall does sound like the best bet. Figures this is during Finals week for school....
I'll check out bleepingcomputer.com, though, just in case a reinstall can be avoided. Thanks for all of your help!
Sunday, March 20, 2011 4:56 PM