locked
windows 7 home premium 64bit validation problem RRS feed

  • Question

  • I have the same problem as many other people - windows 7 as not genuine. my MGADiag is as follows

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GV86G-37BYJ-3W7R9
    Windows Product Key Hash: EaWNKkM4JRaCIHTPcHwlhUQIuEE=
    Windows Product ID: 00359-OEM-8882592-10405
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {9CF77265-AD53-4899-8FCB-994BAA8C272C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Opera\opera.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9CF77265-AD53-4899-8FCB-994BAA8C272C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3W7R9</PKey><PID>00359-OEM-8882592-10405</PID><PIDType>3</PIDType><SID>S-1-5-21-1175574356-2090246045-243649570</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio XPS 435MT</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.1.0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090422000000.000000+000</Date></BIOS><HWID>8CB93607018400FE</HWID><UserLCID>0415</UserLCID><SystemLCID>0415</SystemLCID><TimeZone>Środkowoeuropejski czas stand.(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>937DFE4C5EB8718</Val><Hash>TEcs9L3pbDa/58rmIl7+Sep4TCo=</Hash><Pid>81602-908-1083504-68518</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Wersja usługi licencjonowania oprogramowania: 6.1.7600.16385

    Nazwa: Windows(R) 7, HomePremium edition
    Opis: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Identyfikator aktywacji: 9f83d90f-a151-4665-ae69-30b3f63ec659
    Identyfikator aplikacji: 55c92734-d682-4d71-983e-d6ec3f16059f
    Rozszerzony identyfikator PID: 00359-00176-825-910405-02-1045-7600.0000-0852010
    Identyfikator instalacji: 013480068936878713086691785642181490106642948763174994
    Adres URL certyfikatu procesora: http://go.microsoft.com/fwlink/?LinkID=88338
    Adres URL certyfikatu komputera: http://go.microsoft.com/fwlink/?LinkID=88339
    Adres URL licencji użytkowania: http://go.microsoft.com/fwlink/?LinkID=88341
    Adres URL certyfikatu klucza produktu: http://go.microsoft.com/fwlink/?LinkID=88340
    Częściowy klucz produktu: 3W7R9
    Stan licencji: licencjonowano
    Licznik pozostałych operacji przywrócenia pierwotnego stanu licencjonowania systemu Windows: 3
    Godzina zaufana: 2010-06-02 16:43:54

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 5:28:2010 15:07
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: NgAAAAIABAABAAEAAQACAAAAAQABAAEAonbEc040pAXoZUa8hDQ2+FYc6h7eiJqI6reUHuqC

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          FX09  
      FACP            DELL          FX09  
      HPET            DELL          OEMHPET
      MCFG            DELL          OEMMCFG
      SLIC            DELL          FX09  
      OSFR            DELL          FX09  
      OEMB            DELL          FX09  
      SSDT            DpgPmm        CpuPm


     

    Wednesday, June 2, 2010 2:49 PM

Answers

  • Vistalizator may be the culprit.

    It looks like you may have a program called Vistalizator installed, Vistalizator and any programs like it allow the use of language packs on non-ultimate installs of windows 7. If you are using a language pack and/or using vistalizator then revert to the original language and remove/uninstall Vistalizator.

    Sometimes shops will install Vistalizator for multilingual customers, the customer does not even know it is on the computer until they get a non-genuine notification, if this sounds like it may fit your situation but you do not know what to do then talk to the shop who sold/installed windows or the computer to you.

    The following mismatches are all related to language pack files, I am not really up on the details of how this works but the original SKU of windows should have certain hash values for every single file, changing the language pack does not change the original language version of the SKU, it only changes the display language, in non-ultimate versions of windows, when you change the language using Vistalizator or manually you change the files but WAT expects to see the original language hash values. SFC /scannow will not fix this because there is nothing wrong with the files, they are just not intended for the installed SKU.

    Darin, if I am blowing hot air on this let me know.

    Thanks

    Carl

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Thursday, June 3, 2010 12:13 PM
  • Hi Carl,

      No, you are correct.  This does appear, to me, to be Language Pack related.

    kriskat: If you changed the language of your Windows using Vistalizator (or some similare program) please use the same program to remove the installed Language Packs.  This will resolve the Non-Genuine issue.

    If you did not change the language of your Windows, it is possible that the seller of the PC changed the language that caused this problem. In this case, I recommend creating a (no cost) suppport request at http://support.microsoft.com/gp/contactwga for further assistance. I suggest metioning that the issue may be Vistalizator related.  They should know what to do from there.

    Thank you,


    Darin MS
    Friday, June 4, 2010 6:39 PM

All replies

  • "kriskat" wrote in message news:5e460c11-146d-4132-8d8d-1c710cba37c7...

    I have the same problem as many other people - windows 7 as not genuine. my MGADiag is as follows

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GV86G-37BYJ-3W7R9
    Windows Product Key Hash: EaWNKkM4JRaCIHTPcHwlhUQIuEE=
    Windows Product ID: 00359-OEM-8882592-10405
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 5:28:2010 15:07
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    It's pretty obvious what the problem is here!
    The last of those 'tampers occurred on 28th May at 15:07 your time - what were you (or the kids?) doing then? - look in Event Viewer and see if that gives any clues.
     
    Try a System File Check first -
    At an Elevated Command Prompt, type
    SFC   /SCANNOW
    When it's complete, and you've read the usual 'can't fix everything' response, reboot, go to the Validation site, and try and validate again - what's the result?
    Run MGADiag again - and post the report back here.
     
     
    HTH - and good luck

    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 2, 2010 2:57 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GV86G-37BYJ-3W7R9
    Windows Product Key Hash: EaWNKkM4JRaCIHTPcHwlhUQIuEE=
    Windows Product ID: 00359-OEM-8882592-10405
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {9CF77265-AD53-4899-8FCB-994BAA8C272C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Opera\opera.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9CF77265-AD53-4899-8FCB-994BAA8C272C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3W7R9</PKey><PID>00359-OEM-8882592-10405</PID><PIDType>3</PIDType><SID>S-1-5-21-1175574356-2090246045-243649570</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio XPS 435MT</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.1.0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090422000000.000000+000</Date></BIOS><HWID>8CB93607018400FE</HWID><UserLCID>0415</UserLCID><SystemLCID>0415</SystemLCID><TimeZone>Środkowoeuropejski czas stand.(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>937DFE4C5EB8718</Val><Hash>TEcs9L3pbDa/58rmIl7+Sep4TCo=</Hash><Pid>81602-908-1083504-68518</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Wersja usługi licencjonowania oprogramowania: 6.1.7600.16385

    Nazwa: Windows(R) 7, HomePremium edition
    Opis: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Identyfikator aktywacji: 9f83d90f-a151-4665-ae69-30b3f63ec659
    Identyfikator aplikacji: 55c92734-d682-4d71-983e-d6ec3f16059f
    Rozszerzony identyfikator PID: 00359-00176-825-910405-02-1045-7600.0000-0852010
    Identyfikator instalacji: 013480068936878713086691785642181490106642948763174994
    Adres URL certyfikatu procesora: http://go.microsoft.com/fwlink/?LinkID=88338
    Adres URL certyfikatu komputera: http://go.microsoft.com/fwlink/?LinkID=88339
    Adres URL licencji użytkowania: http://go.microsoft.com/fwlink/?LinkID=88341
    Adres URL certyfikatu klucza produktu: http://go.microsoft.com/fwlink/?LinkID=88340
    Częściowy klucz produktu: 3W7R9
    Stan licencji: licencjonowano
    Licznik pozostałych operacji przywrócenia pierwotnego stanu licencjonowania systemu Windows: 3
    Godzina zaufana: 2010-06-03 08:27:21

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 5:28:2010 15:07
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: NgAAAAIABAABAAEAAQACAAAAAQABAAEAonbEc040pAXoZUa8hDQ2+FYc6h7eiJqI6reUHuqC

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          FX09  
      FACP            DELL          FX09  
      HPET            DELL          OEMHPET
      MCFG            DELL          OEMMCFG
      SLIC            DELL          FX09  
      OSFR            DELL          FX09  
      OEMB            DELL          FX09  
      SSDT            DpgPmm        CpuPm


    Thursday, June 3, 2010 6:29 AM
  • "kriskat" wrote in message news:b4c6984f-3bca-4305-a65c-ebd90df74453...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GV86G-37BYJ-3W7R9
    Windows Product Key Hash: EaWNKkM4JRaCIHTPcHwlhUQIuEE=
    Windows Product ID: 00359-OEM-8882592-10405
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100


    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 5:28:2010 15:07
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Hmm -very little change there - except that the USER32.DLL file seems to have been recovered.
     
    ALL the above files are related to the  Software licensing and software protection features of Win7 - which makes me wonder whether the system is virus-free (although the Tamper date hasn't changed from 28th, things may be preventing SFC from replacing those files)
     
    The next thing to try is a System Restore - back to before the 28th of May.
    Before doing that , please confirm your system is virus-free by running a FULL system scan with an anti-virus, and also running a full system scan with Malwarebytes Anti-malware (www.malwarebytes.org) -  if anything significant is found, please report back before proceeding with the System Restore.
     
    HTH
     

    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, June 3, 2010 7:09 AM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-GV86G-37BYJ-3W7R9
    Windows Product Key Hash: EaWNKkM4JRaCIHTPcHwlhUQIuEE=
    Windows Product ID: 00359-OEM-8882592-10405
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {9CF77265-AD53-4899-8FCB-994BAA8C272C}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Opera\opera.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9CF77265-AD53-4899-8FCB-994BAA8C272C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3W7R9</PKey><PID>00359-OEM-8882592-10405</PID><PIDType>3</PIDType><SID>S-1-5-21-1175574356-2090246045-243649570</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Studio XPS 435MT</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.1.0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090422000000.000000+000</Date></BIOS><HWID>8CB93607018400FE</HWID><UserLCID>0415</UserLCID><SystemLCID>0415</SystemLCID><TimeZone>Środkowoeuropejski czas stand.(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>937DFE4C5EB8718</Val><Hash>TEcs9L3pbDa/58rmIl7+Sep4TCo=</Hash><Pid>81602-908-1083504-68518</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Wersja usługi licencjonowania oprogramowania: 6.1.7600.16385

    Nazwa: Windows(R) 7, HomePremium edition
    Opis: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Identyfikator aktywacji: 9f83d90f-a151-4665-ae69-30b3f63ec659
    Identyfikator aplikacji: 55c92734-d682-4d71-983e-d6ec3f16059f
    Rozszerzony identyfikator PID: 00359-00176-825-910405-02-1045-7600.0000-0852010
    Identyfikator instalacji: 008034055381797661235134165351240660084706789143858753
    Adres URL certyfikatu procesora: http://go.microsoft.com/fwlink/?LinkID=88338
    Adres URL certyfikatu komputera: http://go.microsoft.com/fwlink/?LinkID=88339
    Adres URL licencji użytkowania: http://go.microsoft.com/fwlink/?LinkID=88341
    Adres URL certyfikatu klucza produktu: http://go.microsoft.com/fwlink/?LinkID=88340
    Częściowy klucz produktu: 3W7R9
    Stan licencji: licencjonowano
    Licznik pozostałych operacji przywrócenia pierwotnego stanu licencjonowania systemu Windows: 3
    Godzina zaufana: 2010-06-03 10:36:11

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000000EF60
    Event Time Stamp: 6:3:2010 09:43
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui


    HWID Data-->
    HWID Hash Current: NgAAAAIABAABAAEAAQACAAAAAQABAAEAonbEc6QFTjSENDb46GVGvFYc6h7eiJqI6reUHuqC

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          FX09   
      FACP            DELL          FX09   
      HPET            DELL          OEMHPET
      MCFG            DELL          OEMMCFG
      SLIC            DELL          FX09   
      OSFR            DELL          FX09   
      OEMB            DELL          FX09   
      SSDT            DpgPmm        CpuPm


    Thursday, June 3, 2010 8:40 AM
  • Vistalizator may be the culprit.

    It looks like you may have a program called Vistalizator installed, Vistalizator and any programs like it allow the use of language packs on non-ultimate installs of windows 7. If you are using a language pack and/or using vistalizator then revert to the original language and remove/uninstall Vistalizator.

    Sometimes shops will install Vistalizator for multilingual customers, the customer does not even know it is on the computer until they get a non-genuine notification, if this sounds like it may fit your situation but you do not know what to do then talk to the shop who sold/installed windows or the computer to you.

    The following mismatches are all related to language pack files, I am not really up on the details of how this works but the original SKU of windows should have certain hash values for every single file, changing the language pack does not change the original language version of the SKU, it only changes the display language, in non-ultimate versions of windows, when you change the language using Vistalizator or manually you change the files but WAT expects to see the original language hash values. SFC /scannow will not fix this because there is nothing wrong with the files, they are just not intended for the installed SKU.

    Darin, if I am blowing hot air on this let me know.

    Thanks

    Carl

    File Scan Data-->
    File Mismatch: C:\Windows\system32\pl-PL\sppc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slc.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\slcext.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppuinotify.dll.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\slui.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\sppcomapi.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppcommdlg.dll.mui[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\pl-PL\sppsvc.exe.mui[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\pl-PL\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Thursday, June 3, 2010 12:13 PM
  • Hi Carl,

      No, you are correct.  This does appear, to me, to be Language Pack related.

    kriskat: If you changed the language of your Windows using Vistalizator (or some similare program) please use the same program to remove the installed Language Packs.  This will resolve the Non-Genuine issue.

    If you did not change the language of your Windows, it is possible that the seller of the PC changed the language that caused this problem. In this case, I recommend creating a (no cost) suppport request at http://support.microsoft.com/gp/contactwga for further assistance. I suggest metioning that the issue may be Vistalizator related.  They should know what to do from there.

    Thank you,


    Darin MS
    Friday, June 4, 2010 6:39 PM