Problem with Windows 7 and WGA Validation

All replies

• 

  

  0

  Sign in to vote

  Open an Elevated Command Prompt, and run the following commands

  NET STOP CRYPTSVC

  esentutl /p %systemroot%\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb

  NET START CRYPTSVC

  - post the results

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, March 5, 2014 7:30 AM

  Moderator
• 

  

  0

  Sign in to vote

  Noel,

  Here are the results:

  Microsoft Windows [Version 6.1.7601]

  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Windows\system32>NET STOP CRYPTSVC

  The Cryptographic Services service is stopping..

  The Cryptographic Services service was stopped successfully.

  C:\Windows\system32>

  C:\Windows\system32>esentutl /p %systemroot%\System32\catroot2\{F750E6C3-38EE-11

  D1-85E5-00C04FC295EE}\catdb

  Extensible Storage Engine Utilities for Microsoft(R) Windows(R)

  Version 6.1

  Copyright (C) Microsoft Corporation. All Rights Reserved.

  Initiating REPAIR mode...

          Database: C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC2

  95EE}\catdb

    Temp. Database: TEMPREPAIR7392.EDB

  Checking database integrity.

                       Scanning Status (% complete)

            0    10   20   30   40   50   60   70   80   90  100

            |----|----|----|----|----|----|----|----|----|----|

            ...................................................

  Integrity check successful.

  Note:

    It is recommended that you immediately perform a full backup

    of this database. If you restore a backup made before the

    repair, the database will be rolled back to the state

    it was in at the time of that backup.

  Operation completed successfully in 14.40 seconds.

  C:\Windows\system32>

  C:\Windows\system32>NET START CRYPTSVC

  The Cryptographic Services service is starting.

  The Cryptographic Services service was started successfully.

  C:\Windows\system32>

  C:\Windows\system32>

  Wednesday, March 5, 2014 1:23 PM
• 

  

  0

  Sign in to vote

  That seems to have worked - please post a new MGADiag report, and we'll see if anything has changed.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, March 6, 2014 9:03 AM

  Moderator
• 

  

  0

  Sign in to vote

  Noel,

  Here's the new report
  

  Diagnostic Report (1.9.0027.0):

  -----------------------------------------

  Windows Validation Data-->

  Validation Code: 0x8004FE21

  Cached Online Validation Code: 0x0

  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

  Windows Product ID: 00371-OEM-8992671-00524

  Windows Product ID Type: 2

  Windows License Type: OEM SLP

  Windows OS version: 6.1.7601.2.00010100.1.0.048

  ID: {1E7DDE2F-D583-4EFA-AC58-6849275045A1}(3)

  Is Admin: Yes

  TestCab: 0x0

  LegitcheckControl ActiveX: N/A, hr = 0x80070002

  Signed By: N/A, hr = 0x80070002

  Product Name: Windows 7 Professional

  Architecture: 0x00000000

  Build lab: 7601.win7sp1_gdr.130828-1532

  TTS Error:

  Validation Diagnostic:

  Resolution Status: N/A

  <st1:place w:st="on">Vista</st1:place> WgaER Data-->

  ThreatID(s): N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  File Exists: No

  Version: N/A, hr = 0x80070002

  WgaTray.exe Signed By: N/A, hr = 0x80070002

  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  OGAExec.exe Signed By: N/A, hr = 0x80070002

  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->

  Office Status: 100 Genuine

  Microsoft Office Standard Edition 2003 - 100 Genuine

  OGA Version: N/A, 0x80070002

  Signed By: N/A, hr = 0x80070002

  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

  Browser Data-->

  Proxy settings: N/A

  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

  Download signed ActiveX controls: Prompt

  Download unsigned ActiveX controls: Disabled

  Run ActiveX controls and plug-ins: Allowed

  Initialize and script ActiveX controls not marked as safe: Disabled

  Allow scripting of Internet Explorer Webbrowser control: Disabled

  Active scripting: Allowed

  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->

  Office Details: <GenuineResults><MachineData><UGUID>{1E7DDE2F-D583-4EFA-AC58-6849275045A1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-49950637-3535632689-1899272453</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Precision T1500</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>2.3.0</Version><SMBIOSVersion major="2" minor="6"/><Date>20101111000000.000000+000</Date></BIOS><HWID>9F7A3507018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>MI09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>71FB0A0C4711DF3</Val><Hash>FCr6KuWSqC8TPwYkIKBT87HhkH0=</Hash><Pid>70141-761-6846585-56515</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, Professional edition

  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

  Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

  Extended PID: 00371-00178-926-700524-02-1033-7600.0000-0522012

  Installation ID: 005742092032344541636570290685660901502380798545843385

  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

  Partial Product Key: 733WD

  License Status: Licensed

  Remaining Windows rearm count: 4

  Trusted time: 3/6/2014 8:21:02 AM

  Windows Activation Technologies-->

  HrOffline: 0x8004FE21

  HrOnline: N/A

  HealthStatus: 0x000000000003EFFF

  Event Time Stamp: 3:5:2014 05:04

  ActiveX: Registered, Version: 7.1.7600.16395

  Admin Service: Registered, Version: 7.1.7600.16395

  HealthStatus Bitmask Output:

  Tampered File: %systemroot%\system32\wat\watadminsvc.exe

  Tampered File: %systemroot%\system32\wat\watweb.dll

  Tampered File: %systemroot%\system32\wat\npwatweb.dll

  Tampered File: %systemroot%\system32\wat\watux.exe

  Tampered File: %systemroot%\system32\sppobjs.dll

  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

  Tampered File: %systemroot%\system32\sppwinob.dll

  Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

  Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

  Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

  Tampered File: %systemroot%\system32\drivers\spsys.sys

  Tampered File: %systemroot%\system32\drivers\spldr.sys

  HWID Data-->

  HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAeqiWA/Dp5naoNJRjXqca3QQnXF0=

  OEM Activation 1.0 Data-->

  N/A

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

  OEMID and OEMTableID Consistent: yes

  BIOS Information:

    ACPI Table Name        OEMID Value    OEMTableID Value

    APIC                           DELL                MI09    

    FACP                         DELL                MI09   

    HPET                          DELL                MI09   

    MCFG                         DELL                MI09   

    SLIC                           DELL                MI09  

    OEMB                                    DELL                MI09   

    SSDT                         DpgPmm                      CpuPm

  Thursday, March 6, 2014 1:23 PM
• 

  

  0

  Sign in to vote

  Still the same problem - I think there's an unregistered dll file at fault here...

  try this.

  Open an Elevated Command Prompt

  run the following command...

  REGSVR32 WINTRUST.DLL

  You should get a 'success' popup

  reboot TWICE, then run another MGADiag report

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, March 6, 2014 1:45 PM

  Moderator
• 

  

  0

  Sign in to vote

  Done

  Diagnostic Report (1.9.0027.0):

  -----------------------------------------

  Windows Validation Data-->

  Validation Code: 0x8004FE21

  Cached Online Validation Code: 0x0

  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

  Windows Product ID: 00371-OEM-8992671-00524

  Windows Product ID Type: 2

  Windows License Type: OEM SLP

  Windows OS version: 6.1.7601.2.00010100.1.0.048

  ID: {1E7DDE2F-D583-4EFA-AC58-6849275045A1}(3)

  Is Admin: Yes

  TestCab: 0x0

  LegitcheckControl ActiveX: N/A, hr = 0x80070002

  Signed By: N/A, hr = 0x80070002

  Product Name: Windows 7 Professional

  Architecture: 0x00000000

  Build lab: 7601.win7sp1_gdr.130828-1532

  TTS Error:

  Validation Diagnostic:

  Resolution Status: N/A

  <st1:place w:st="on">Vista</st1:place> WgaER Data-->

  ThreatID(s): N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  File Exists: No

  Version: N/A, hr = 0x80070002

  WgaTray.exe Signed By: N/A, hr = 0x80070002

  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->

  Cached Result: N/A, hr = 0x80070002

  Version: N/A, hr = 0x80070002

  OGAExec.exe Signed By: N/A, hr = 0x80070002

  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->

  Office Status: 100 Genuine

  Microsoft Office Standard Edition 2003 - 100 Genuine

  OGA Version: N/A, 0x80070002

  Signed By: N/A, hr = 0x80070002

  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

  Browser Data-->

  Proxy settings: N/A

  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

  Download signed ActiveX controls: Prompt

  Download unsigned ActiveX controls: Disabled

  Run ActiveX controls and plug-ins: Allowed

  Initialize and script ActiveX controls not marked as safe: Disabled

  Allow scripting of Internet Explorer Webbrowser control: Disabled

  Active scripting: Allowed

  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->

  Office Details: <GenuineResults><MachineData><UGUID>{1E7DDE2F-D583-4EFA-AC58-6849275045A1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-49950637-3535632689-1899272453</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Precision T1500</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>2.3.0</Version><SMBIOSVersion major="2" minor="6"/><Date>20101111000000.000000+000</Date></BIOS><HWID>9F063607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>MI09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>71FB0A0C4711DF3</Val><Hash>FCr6KuWSqC8TPwYkIKBT87HhkH0=</Hash><Pid>70141-761-6846585-56515</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, Professional edition

  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

  Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

  Extended PID: 00371-00178-926-700524-02-1033-7600.0000-0522012

  Installation ID: 005742092032344541636570290685660901502380798545843385

  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

  Partial Product Key: 733WD

  License Status: Licensed

  Remaining Windows rearm count: 4

  Trusted time: 3/6/2014 9:31:11 AM

  Windows Activation Technologies-->

  HrOffline: 0x8004FE21

  HrOnline: N/A

  HealthStatus: 0x000000000003EFFF

  Event Time Stamp: 3:5:2014 05:04

  ActiveX: Registered, Version: 7.1.7600.16395

  Admin Service: Registered, Version: 7.1.7600.16395

  HealthStatus Bitmask Output:

  Tampered File: %systemroot%\system32\wat\watadminsvc.exe

  Tampered File: %systemroot%\system32\wat\watweb.dll

  Tampered File: %systemroot%\system32\wat\npwatweb.dll

  Tampered File: %systemroot%\system32\wat\watux.exe

  Tampered File: %systemroot%\system32\sppobjs.dll

  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

  Tampered File: %systemroot%\system32\sppwinob.dll

  Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

  Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

  Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

  Tampered File: %systemroot%\system32\drivers\spsys.sys

  Tampered File: %systemroot%\system32\drivers\spldr.sys

  HWID Data-->

  HWID Hash Current: LAAAAAEAAgABAAEAAAABAAAAAQABAAEAeqiWA/Dp5naoNJRjXqca3QQnXF0=

  OEM Activation 1.0 Data-->

  N/A

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

  OEMID and OEMTableID Consistent: yes

  BIOS Information:

    ACPI Table Name        OEMID Value    OEMTableID Value

    APIC                           DELL                MI09   

    FACP                         DELL                MI09   

    HPET                          DELL                MI09   

    MCFG                         DELL                MI09   

    SLIC                           DELL                MI09  

    OEMB                                    DELL                MI09   

    SSDT                         DpgPmm                      CpuPm

  
  

  Thursday, March 6, 2014 2:34 PM
• 

  

  1

  Sign in to vote

  Nothing's easy, this week! :(

  The prognosis is not good - I think you're going to need to do a repair install.

  Download the SP1 Refresh for your language and edition from the links on these pages...

  Heidoc -
  Microsoft DR Download links

  The links are for downloads from the Digital River servers run for MS, so are about as safe as
  you can get :)

  Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk
  Image Burner, or (better still) your favourite burning application at the slowest speed possible.

  Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image'
  option from your app - or you'll end up with a useless coaster :)

  Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start
  the repair from there - you must start the repair from within a normal Windows boot.

  Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

  - and they should help you get through it (it's not as difficult as it looks!)

  Always ask questions first if you're unsure - either here, or (preferably) in sevenforums.

  Good luck with it!

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Sunday, March 9, 2014 12:14 PM
  • Marked as answer by Noel D PatonModerator Thursday, March 20, 2014 5:03 PM

  Thursday, March 6, 2014 3:17 PM

  Moderator
• 

  

  0

  Sign in to vote

  That's a bummer Noel! I went ahead and followed the instructions. We've got it up and running again after a repair install. Thanks for your help.

  Monday, March 10, 2014 5:31 PM
• 

  

  0

  Sign in to vote

  At least they're up and running again! :)

  You're welcome.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Monday, March 10, 2014 10:56 PM

  Moderator