locked
Windows 7 is reporting nongenuine after recent update but my copy is genuine RRS feed

  • Question

  • Windows 7 is reporting nongenuine after recent update but my copy is genuine

    here is Diag Output for reference. Please Help

    ___________________________________________________________________________

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-8WXB4-JDQ9W-Q9XXG
    Windows Product Key Hash: O6puD+LNRDKj+LC5BdXER/x6zw8=
    Windows Product ID: 00376-002-1710291-06492
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.049
    ID: {D95ED9CD-0929-48E8-8521-E2683CC80148}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional N
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D95ED9CD-0929-48E8-8521-E2683CC80148}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.049</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-Q9XXG</PKey><PID>00376-002-1710291-06492</PID><PIDType>5</PIDType><SID>S-1-5-21-4232887021-3479564352-803920248</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7592</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V4.1</Version><SMBIOSVersion major="2" minor="5"/><Date>20090713000000.000000+000</Date></BIOS><HWID>37B73407018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, ProfessionalN edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 92f06ba8-08e1-4156-b8b5-d38328f5b5d5
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00376-00212-002-171029-00-1033-7601.0000-1152014
    Installation ID: 014411656231370051787943728636031813633840758063795943
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: Q9XXG
    License Status: Unlicensed
    Remaining Windows rearm count: 3
    Trusted time: 4/25/2014 1:45:30 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:25:2014 00:34
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAIAAAACAAAAAQABAAEAJJT+Ul6Lqnb8U0jkEIvA/jKeWq5auAAexiJGyg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            7592MS        A7592400
      FACP            7592MS        A7592400
      HPET            7592MS        OEMHPET
      MCFG            7592MS        OEMMCFG
      OEMB            7592MS        A7592400
      GSCI            7592MS        GMCHSCI
      SSDT            DpgPmm        CpuPm
    ___________________________________________________________________________

    ___________________________________________________________________________

    Thursday, April 24, 2014 5:50 PM

Answers

  • I have to admit that I can't make head or tail of the logs! :(

    I'm tending towards a repair install now - I think it'll be quicker and more certain than attempting manual repairs.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, May 21, 2014 9:05 PM
    Moderator

All replies

  • It is showing as not activated.  From your desktop, right click Computer and then select Properties.  Use the activation link at the bottom of the popup to activate.



    If that doesn't work, try activating by phone:

    Click on the Start button and in the Search box, type SLUI 4 and press Enter.  Follow the instructions, but when asked which service you require by the automated system, do NOT reply - this should get a live person to respond.

    Please do not read this sentence. Please ignore the previous sentence.

    Thursday, April 24, 2014 5:59 PM
  • Please first try recreating Licensing Store.

    Recreate the Licensing Store

    Go to Start > All Programs > Accessories

    Right-Click on Command Prompt and select Run as Administrator - accept the UAC prompt

    Run the following commands in the Command Prompt window, using the Enter key at the end of each

    net stop sppsvc

    (wait until the service has stopped before entering the following lines)

    CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

    REN tokens.dat tokens.bar

    net start sppsvc

    slui.exe

    After a couple of seconds the Windows Activation dialog will appear.

    You may be asked to re-activate and/or re-enter your product key, or Activation may occur automatically.

    If you are asked for your Key, use the one on the COA sticker on the machine's case

    Reboot and Post back with a new MGADiag report.

    (Note: the Line 'CD %win......\SoftwareProtectionPlatform' is all on one line - it may be broken in the Forum listing)

    Please first try recreating Licensing Store.

    Recreate the Licensing Store

    Go to Start > All Programs > Accessories

    Right-Click on Command Prompt and select Run as Administrator - accept the UAC prompt

    Run the following commands in the Command Prompt window, using the Enter key at the end of each

    net stop sppsvc

    (wait until the service has stopped before entering the following lines)

    CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

    REN tokens.dat tokens.bar

    net start sppsvc

    slui.exe

    After a couple of seconds the Windows Activation dialog will appear.

    You may be asked to re-activate and/or re-enter your product key, or Activation may occur automatically.

    If you are asked for your Key, use the one on your Proof of License label

    Reboot and Post back with a new MGADiag report.

    (Note: the Line 'CD %win......\SoftwareProtectionPlatform' is all on one line - it may be broken in the Forum listing)


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, April 24, 2014 7:31 PM
    Moderator
  • Thanks Noel,

    I have done this , i mean recreating the licensing store few times.

    Activation window is coming and then its asking to download 'legitcheck' , on running this file its saying '... check is interrupted...' even if am not doing anything during validation.


    • Edited by pawan_SG Friday, April 25, 2014 5:26 PM
    Friday, April 25, 2014 5:22 PM
  • this is not helping, am getting screen .. asking to go online to resolve the problem. then it will ask for legitcheck file to run
    Friday, April 25, 2014 5:25 PM
  • Please run the following commands...

    DIR C:\Windows\System32\7b*.*
    DIR %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform 
    ICACLS C:\Windows\System32\7b*.*
    ICACLS %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform 

    post the results.

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, April 26, 2014 9:41 AM
    Moderator
  • Thanks Noel,

    I have executed the commands per steps given by you.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\System32\7b*.*
     Volume in drive C has no label.
     Volume Serial Number is A891-C3DC

     Directory of C:\Windows\System32

    File Not Found

    C:\Windows\system32>DIR %windir%\ServiceProfiles\NetworkService\AppData\Roaming\
    Microsoft\SoftwareProtectionPlatform
     Volume in drive C has no label.
     Volume Serial Number is A891-C3DC

     Directory of C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsof
    t\SoftwareProtectionPlatform

    04/26/2014  01:59 AM    <DIR>          .
    04/26/2014  01:59 AM    <DIR>          ..
    07/14/2009  12:51 PM    <DIR>          Cache
    04/25/2014  12:53 AM         7,254,396 tokens.bar
    04/26/2014  01:59 AM         4,567,281 tokens.dat
    04/25/2014  01:34 AM         4,567,281 tokens.old
                   3 File(s)     16,388,958 bytes
                   3 Dir(s)  56,727,994,368 bytes free

    C:\Windows\system32>ICACLS C:\Windows\System32\7b*.*
    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)

                       BUILTIN\Administrators:(I)(F)

                       BUILTIN\Users:(I)(RX)

    C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:(I)(F)

                       BUILTIN\Administrators:(I)(F)

                       BUILTIN\Users:(I)(RX)

    Successfully processed 2 files; Failed processing 0 files

    C:\Windows\system32>ICACLS %windir%\ServiceProfiles\NetworkService\AppData\Roami
    ng\Microsoft\SoftwareProtectionPlatform
    C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProt
    ectionPlatform NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)

                   BUILTIN\Administrators:(I)(OI)(CI)(F)

                   NT AUTHORITY\NETWORK SERVICE:(I)(OI)(CI)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>

    Saturday, April 26, 2014 1:50 PM
  • That all looks normal -

    let's see if there's any file problems...

    Please run a full
    CHKDSK and SFC scan....

    Click on Start > All Programs > Accessories Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     At the Command prompt, type

     CHKDSK C: /R

     and hit the Enter key.

     You will be told that the drive is locked, and the CHKDSK will run at he next boot -
    hit the Y key, and then reboot.

     The chkdsk will take a few hours depending on the size  of the drive, so be patient!

     After the CHKDSK has run, Windows should boot normally  (possibly after a second
    auto-reboot) - then run the SFC.

     SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt
    - the Elevated Command Prompt window should pop up.

     At the Command prompt, type

     SFC /SCANNOW

     and hit the Enter key

     Wait for the scan to finish - make a note of any error messages - and then reboot.

    Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post
    a link



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, April 26, 2014 6:36 PM
    Moderator
  • https://onedrive.live.com/redir?resid=2F2CD8971DB84266%21107
    • Edited by pawan_SG Sunday, April 27, 2014 3:58 PM log file
    Sunday, April 27, 2014 3:58 PM
  • You have a number of problems  with the filesystem....

    2014-04-27 23:28:15, Info                  CSI    0000025c [SR] Beginning Verify and Repair transaction
    2014-04-27 23:28:15, Error                 CSI    0000025d (F) STATUS_OBJECT_NAME_NOT_FOUND #4516914# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0}, da = (SYNCHRONIZE|FILE_READ_ATTRIBUTES), oa = @0xd6c770->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[105]"\??\C:\Windows\WinSxS\msil_microsoft.visualc.stlclr_b03f5f7f11d50a3a_6.1.7600.16385_none_d1f1a4588757895a"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xd6c750, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_SYNCHRONOUS_IO_NONALERT|0x00004000), eab = NULL, eal = 0, disp = Invalid)
    [gle=0xd0000034]
    2014-04-27 23:28:15, Error                 CSI    0000025e@2014/4/27:15:28:15.918 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
    [gle=0x80004005]
    2014-04-27 23:28:18, Error                 CSI    0000025f (F) STATUS_OBJECT_NAME_NOT_FOUND #4516913# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingDirectory(...)[gle=0xd0000034]
    2014-04-27 23:28:18, Error                 CSI    00000260 (F) STATUS_OBJECT_NAME_NOT_FOUND #4516912# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingDirectory(flags = 0, da = (SYNCHRONIZE), oa = @0xd6d068->SIL_OBJECT_ATTRIBUTES {s:40; on:"msil_microsoft.visualc.stlclr_b03f5f7f11d50a3a_6.1.7600.16385_none_d1f1a4588757895a"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)
    [gle=0xd0000034]
    

    as well as having problems with files themselves....

    	Line 20124: 2014-04-27 23:28:03, Info                  CSI    00000234 [SR] Verify complete
    	Line 20125: 2014-04-27 23:28:03, Info                  CSI    00000235 [SR] Verifying 100 (0x0000000000000064) components
    	Line 20126: 2014-04-27 23:28:03, Info                  CSI    00000236 [SR] Beginning Verify and Repair transaction
    	Line 20127: 2014-04-27 23:28:03, Info                  CSI    00000237 [SR] Cannot repair member file [l:22{11}]"CNC980W.DAT" of wiaca00b.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 20128: 2014-04-27 23:28:03, Info                  CSI    00000238 [SR] Cannot repair member file [l:22{11}]"CNC980N.DAT" of wiaca00b.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 20129: 2014-04-27 23:28:04, Info                  CSI    00000239 [SR] Cannot repair member file [l:20{10}]"CNFRAI.ICC" of wiaca00b.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, file is missing
    	Line 20130: 2014-04-27 23:28:04, Info                  CSI    0000023a [SR] Cannot repair member file [l:20{10}]"CNFRAJ.ICC" of wiaca00b.inf, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, file is missing
    

    This looks to me like it may be a failing hard drive.

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and attach to your reply or upload to your favourite fileshare site
    (preferably Dropbox or OneDrive/SkyDrive) and post a link in your reply



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, April 27, 2014 5:56 PM
    Moderator
  • here is the link for event logs. Thanks.

    https://onedrive.live.com/redir?resid=2F2CD8971DB84266!108&authkey=!AJkeyFNxKvhY46I&ithint=file%2c.zip

    Monday, April 28, 2014 12:03 PM
  • many thanks for helping me out
    Monday, April 28, 2014 12:03 PM
  • The CHKDSK report from the 21st April shows some minor problems - but I can see nothing to indicate that a full CHKDSK /R has been run since.

    Please follow these instructions.

    Click on Start > All Programs > Accessories Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     At the Command prompt, type

     CHKDSK C: /R

     and hit the Enter key.

     You will be told that the drive is locked, and the CHKDSK will run at he next boot -
    hit the Y key, and then reboot.

     The chkdsk will take a few hours depending on the size  of the drive, so be patient!

     After the CHKDSK has run, Windows should boot normally  (possibly after a second
    auto-reboot)

    After it's booted, please post the new Applications event log...

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps2.evtx

    Compress the resulting file, and  upload to your favourite fileshare site
    (preferably Dropbox or OneDrive/SkyDrive) and post a link in your reply


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, April 29, 2014 2:53 PM
    Moderator
  • Hello Noel,

    Below are event logs after rerunning CHKDSK.

    https://onedrive.live.com/redir?resid=2F2CD8971DB84266!109&authkey=!AH6lZNNjbzqBGsU&ithint=file%2c.zip

    Many Thanks

    Thursday, May 1, 2014 9:52 AM
  • CHKDSK seems to have worked this time, and found/fixed a few problems...

    CHKDSK is verifying security descriptors (stage 3 of 5)...
      146432 file SDs/SIDs processed.                                         Cleaning up 102 unused index entries from index $SII of file 0x9.
    Cleaning up 102 unused index entries from index $SDH of file 0x9.
    Cleaning up 102 unused security descriptors.
    

    I doubt very much that this would have made any difference to the SFC results - but it may affect the MGADiag results

    Please post a new MGADiag report, and we'll see what it looks like now.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, May 1, 2014 12:02 PM
    Moderator
  • Hi Noel,

    Before running Diag, i tried these steps today but this also didn't helped at all.

    ++++++++++++++++++++++++++++++++++++

    The validation service may be unavailable. Try validation again later. If the problem persists, you may need to uninstall the Update to Windows Activation Technologies (KB971033):

    1.Click Start.
    2.Select Control Panel.
    3.Click the Programs icon.
    4.Click on View Installed Updates under Programs and Features.
    5.Select the update you wish to uninstall.
    6.Click Uninstall.

    ++++++++++++++++++++++++++++++++++++

    Here is Diag Report --

    ++++++++++++++++++++++++++++++++++++++++++++++++++++++

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-8WXB4-JDQ9W-Q9XXG
    Windows Product Key Hash: O6puD+LNRDKj+LC5BdXER/x6zw8=
    Windows Product ID: 00376-002-1710291-06492
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.049
    ID: {D95ED9CD-0929-48E8-8521-E2683CC80148}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional N
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D95ED9CD-0929-48E8-8521-E2683CC80148}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.049</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-Q9XXG</PKey><PID>00376-002-1710291-06492</PID><PIDType>5</PIDType><SID>S-1-5-21-4232887021-3479564352-803920248</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7592</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V4.1</Version><SMBIOSVersion major="2" minor="5"/><Date>20090713000000.000000+000</Date></BIOS><HWID>37B73407018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, ProfessionalN edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 92f06ba8-08e1-4156-b8b5-d38328f5b5d5
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00376-00212-002-171029-00-1033-7601.0000-1222014
    Installation ID: 012934448032093354291092207655946254610840708610649702
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: Q9XXG
    License Status: Unlicensed
    Remaining Windows rearm count: 2
    Trusted time: 5/2/2014 10:46:34 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 5:2:2014 22:42
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAIAAAACAAAAAQABAAEAJJT+Ul6Lqnb8U0jkEIvA/lquMp5auAAexiJGyg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            7592MS        A7592400
      FACP            7592MS        A7592400
      HPET            7592MS        OEMHPET
      MCFG            7592MS        OEMMCFG
      OEMB            7592MS        A7592400
      GSCI            7592MS        GMCHSCI
      SSDT            DpgPmm        CpuPm

    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

    Friday, May 2, 2014 2:53 PM
  • The error message you got may indicate a firewall getting in the way

    What Security software are you using? What AV's have EVER been installed on this machine?

    please go to www.microsoft.com/genuine/diag - what does it have to say about your settings?


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, May 6, 2014 2:48 PM
    Moderator
  • Hello Noel,

    am not having any third party firewall, just windows own security is there nothing else as of now.

    Pawan

    Monday, May 12, 2014 10:51 AM
  • ++++++++++++++++++

    Genuine Microsoft Software – Diagnostic Site

    What is the purpose of this site?

    These diagnostic pages will help you ensure that your Mozilla Firefox Web browser (1.0.5 or later) settings are configured properly to see images and run scripts.

    Genuine Microsoft Software Diagnostic Results

    Passed Active scripting allowed
    Passed Display images enabled
    Passed Computer time and date correct
    Passed Cookies enabled

    +++++++++++++++++

    Missed to post this before - . Thanks.

    Wednesday, May 14, 2014 3:19 PM
  • You say you're only using Windows' own security - do you mean just WIndows Defender, or are you referring to Microsoft Security Essentials?

    If you mean just WIndows Defender - is there any real Anti-Virus installed? If not, then this could be the source of your problem.

    Either way,

    Please download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, May 14, 2014 4:56 PM
    Moderator
  • not sure its Windows Defender, or Microsoft Security Essentials - please advise how can i check what is running.

    I mentioned, if anything is running for 'security' then its Windows own Software, - currently i have not yet installed any 3rd party tool.

    Today i have installed Malwarebytes Anti Malware (free version) and currenlty its scanning. Please advise what would be the next step after scan.

    Thanks.

    Thursday, May 15, 2014 3:42 PM
  • After Scanning i did restart as was prompting by Malwarebytes -

    / tried online activation - getting same error -  Error Code 0XC004F008

    / tried phone activation as well - its keep on saying 'confirmation code is not valid'

    Thursday, May 15, 2014 4:07 PM
  • Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and attach to your reply or upload to your favourite fileshare site
    (preferably Dropbox or OneDrive/SkyDrive) and post a link in your reply



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, May 15, 2014 7:04 PM
    Moderator
  • hi Noel,

    Last night some autoupgrades happened and now Event Viewer is not running. Giving MMC error.

    I have tried checking/installing .Net version (got reference from this forum) but it didn't worked. Shall I run Windows REPAIR from Installation ISO CD ?

    Friday, May 16, 2014 4:59 PM
  • No need to get that heavy yet :)

    Please find and copy the following files to your desktop,

    C:\Windows\System32\winevt\logs\Application.evtx

    C:\Windows\System32\winevt\logs\System.evtx

    Compress the copies, and upload them to your favoured fileshare site (preferably OneDrive or Dropbox), and post a link in your reply.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, May 17, 2014 7:32 AM
    Moderator
  • Thanks again Noel,

    Here is the link for Application.Zip file having both Application and System event logs.

    http://1drv.ms/1gEdPjq

    Not sure if this will be helpful, i have these softwares installed on my PC.

    - CITRIX End Point Security
    - Trusteer Endpoint Protection
    Sunday, May 18, 2014 4:40 PM
  • YOu appear to be having persistent problems with the following items in the System logs.

    Intel graphics - check your manufacturer's website for updated drivers.

    SmartCard Service - this could be either the device itself, a card, or the drivers. start by checking for driver updates.

    the lmhosts service.

    In the Application logs, you have problems with...

    .NET 2.0 (and possibly 4.0)

    Brother Control Center

    There are a lot of crashing applications - a number of which relate to the problems with .NET 2

    First, let's check that you're not still infested....

    Please download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   

    Once complete, download the .NET Repair tool from here, and run it -

    http://www.microsoft.com/en-gb/download/details.aspx?id=30135

    See what it has to say, and then reboot and run another MGADiag report and post it.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, May 18, 2014 6:22 PM
    Moderator
  • Intel graphics  - I know its getting some error , and windows doing recovery out of those errors. Tried updating driver before as well but that didn't went well and showing display in streached mode (did RnD here), anyways, i have updated driver now.

    SmartCard Service : using smart card logon for my office work. its not giving any error while using , will check further on that. But that should not be show stopper here.

    .NET  : Yeah, this is now problem. tried using .NET repair tool but its not able to fix the issue and generating some 10s log file. Malwarebytes i have had ran few times before.

    I will upload .NET logs before that i will try to fix that issue.

    Do you know any good Registry Cleaner ? i think .NET issue is somewhat related with registry , no evidence for that yet.

    any many Thanks to you.

    Tuesday, May 20, 2014 5:31 PM
  • There is NO SUCH THING as a good registry cleaner! They are ALL - without exception - dangerous to the health of your PC.

    Yes, the problem is possibly (maybe even probably) in the registry - but using a registry cleaner will NOT fix it, and will almost certainly make the problem worse.

    If you can upload the .NET repair tool's log, I'll see if I can make any sense out of it (definitely no promises, though!)


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, May 20, 2014 8:28 PM
    Moderator
  • here are .NET repair tool's log

    http://1drv.ms/1jDE89E

    this link is for control panel page - showing windows features on/off.... for me this is coming as blank. Not sure why.

    http://1drv.ms/1jDEhtQ

    I would like to share this as well ----- am using Intel G41 chipset board, its not the latest board. At startup display driver was keep on crashing and then i did upgrade with latest version downloaded from MSI (mother board) site.  On using that driver, LCD screen was going in POWER SAVING mode as soon as computer restarting. After much efforts i was able to fix that up even now am using same G41 chipset driver with different version i think.  ------ not sure if that issue hit me here !!

    Wednesday, May 21, 2014 5:06 PM
  • I have to admit that I can't make head or tail of the logs! :(

    I'm tending towards a repair install now - I think it'll be quicker and more certain than attempting manual repairs.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, May 21, 2014 9:05 PM
    Moderator
  • hello Noel,

    I have reinstalled windows, but still afraid what will happen if same problem comes again :(.

    Many Many thanks for your help in last few days,

    Request you to have a look at event viewer logs after the new installation to check if any system issues are there. Let me know if Diag logs would be required.

    http://1drv.ms/1nlSQVg

    Thanks Again.


    SG

    Saturday, May 24, 2014 4:49 PM
  • By the looks of it, you need to update your graphics drivers - it's almost certainly those that caused the BSOD you had.

    Apart from that, the System log is fairly clean.

    The application log is a little more troubled - but updates should cure most of the errors I saw.

    Good luck with it!


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, May 24, 2014 10:48 PM
    Moderator