Diagnostic Tool says genuine, webpage doesn't RRS feed

  • Question

  • After being told by the validation webpage that my copy was invalid, I poked around, downloaded updates and plug-ins out the wazooty, and finally picked up the Diagnostic Tool.

    So I ran it, and imagine my surprise when the tool said my OS /was/ valid. What gives? The log follows:

    Diagnostic Report (1.7.0062.0):
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
    Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
    Windows Product ID: 89578-OEM-7332157-00061
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.003
    CSVLK Server: N/A
    ID: {90BABCA7-D837-4670-9382-915724A4C69B}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: Registered,
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.070627-1500
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    Grace Flag: N/A, hr = 0x80070426
    Commit: N/A, hr = 0x80070426
    Reboot Flag: 0x0
    ThreatID(s): N/A, hr = 0x80070426
    Wgaer.exe Version: N/A, hr = 0x80070002
    Wgaer.exe Signed By: N/A, hr = 0x80070002

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 104 Unknown PID
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2968-80070002_77F760FE-152-80070002_7E90FEE8-175-80070002_FCEE394C-438-80070005_025D1FF3-262-80070005_025D1FF3-170-80070005_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3_B4D0AA8B-818-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\Slsvc.exe
    File Mismatch: C:\Windows\system32\Slc.dll
    File Mismatch: C:\Windows\system32\drivers\Spsys.sys
    File Mismatch: C:\Windows\system32\Slcext.dll

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{90BABCA7-D837-4670-9382-915724A4C69B}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-69020252-2034222307-786073688</SID><SYSTEM/><BIOS/><HWID>FE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>104</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>7E2CA6B63660874</Val><Hash>/c7fuMYhkAQLIK+zx11Redm+V4E=</Hash><Pid>70141-058-1959245-56655</Pid><PidType>1</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>104</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>0</PidType></Product></Products></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002
    Tuesday, October 30, 2007 5:36 PM


  • Hi DAL9000,



      What I see from your Diagnostic Report is:


    a) Line 3 & 4 shows Online & Cached Validation Code: 0x80070426  <- This means the Software Licensing Service is not running.

    b) Line 50 thru 53 shows that files Slsvc.exe, Slc.dll, Spsys.sys and Slcext.dll are Mismatched <- This means that Vista could not read the file's digital signature which means the files were modified in some way.

    The Software Licensing Service is required to be running to be able to Validate Vista.

    The Slsvc.exe file runs the Software Licensing Service.

    The Slsvc.exe file has been modified in some way and, most likely, to the point that the file is unable to run.


    I can not tell how/why these files were modified. Possible causes are malware, virus, bad sectors on the hard drive, random file corruption and/or manual modification of the files. 


    I do not like to say this, but the only way I know to restore the Slsvc.exe (and other modified files) to working order (and in doing so, allow the Software Licensing Service to run, which will allow you to Validate) is to reinstall Vista.


    I do see that your copy of Vista came pre-installed on your computer from HP. So I suggest that you use the Windows Restore CD/DVD (or the Window Restore partition on the hard drive) that came with your computer. The Windows Restore will bring your copy of Vista back to how it was from the factory. The documentation that came with your computer will explain the process to do this. Since the Windows Restore process is diffrent from manufacturer to manufacturer, If you need any help with your Windows Restore process, contact HP for further assistance.  


    Very sorry I couldn't be more help,

    Darin Smith

    WGA Forum Manager


    Thursday, November 8, 2007 10:13 PM