Answered by:
Diagnostic Tool says genuine, webpage doesn't

Question
-
After being told by the validation webpage that my copy was invalid, I poked around, downloaded updates and plug-ins out the wazooty, and finally picked up the Diagnostic Tool.
So I ran it, and imagine my surprise when the tool said my OS /was/ valid. What gives? The log follows:
Diagnostic Report (1.7.0062.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0
Online Validation Code: 0x80070426
Cached Validation Code: N/A, hr = 0x80070426
Windows Product Key: *****-*****-27HYQ-XTKW2-WQD8Q
Windows Product Key Hash: U8YEZzymoD4DMyaMb32rPrNIS90=
Windows Product ID: 89578-OEM-7332157-00061
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.0.6000.2.00010300.0.0.003
CSVLK Server: N/A
CSVLK PID: N/A
ID: {90BABCA7-D837-4670-9382-915724A4C69B}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.7.59.1
Signed By: Microsoft
Product Name: Windows Vista (TM) Home Premium
Architecture: 0x00000000
Build lab: 6000.vista_gdr.070627-1500
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
WgaER Data-->
Grace Flag: N/A, hr = 0x80070426
Commit: N/A, hr = 0x80070426
Reboot Flag: 0x0
ThreatID(s): N/A, hr = 0x80070426
Wgaer.exe Version: N/A, hr = 0x80070002
Wgaer.exe Signed By: N/A, hr = 0x80070002
Notifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 104 Unknown PID
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: FCEE394C-2968-80070002_77F760FE-152-80070002_7E90FEE8-175-80070002_FCEE394C-438-80070005_025D1FF3-262-80070005_025D1FF3-170-80070005_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3_B4D0AA8B-818-80070057
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\Slsvc.exe
File Mismatch: C:\Windows\system32\Slc.dll
File Mismatch: C:\Windows\system32\drivers\Spsys.sys
File Mismatch: C:\Windows\system32\Slcext.dll
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{90BABCA7-D837-4670-9382-915724A4C69B}</UGUID><Version>1.7.0062.0</Version><OS>6.0.6000.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WQD8Q</PKey><PID>89578-OEM-7332157-00061</PID><PIDType>2</PIDType><SID>S-1-5-21-69020252-2034222307-786073688</SID><SYSTEM/><BIOS/><HWID>FE323507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>104</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>7E2CA6B63660874</Val><Hash>/c7fuMYhkAQLIK+zx11Redm+V4E=</Hash><Pid>70141-058-1959245-56655</Pid><PidType>1</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>104</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>0</PidType></Product></Products></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002Tuesday, October 30, 2007 5:36 PM
Answers
-
Hi DAL9000,
What I see from your Diagnostic Report is:
a) Line 3 & 4 shows Online & Cached Validation Code: 0x80070426 <- This means the Software Licensing Service is not running.
b) Line 50 thru 53 shows that files Slsvc.exe, Slc.dll, Spsys.sys and Slcext.dll are Mismatched <- This means that Vista could not read the file's digital signature which means the files were modified in some way.
The Software Licensing Service is required to be running to be able to Validate Vista.
The Slsvc.exe file runs the Software Licensing Service.
The Slsvc.exe file has been modified in some way and, most likely, to the point that the file is unable to run.
I can not tell how/why these files were modified. Possible causes are malware, virus, bad sectors on the hard drive, random file corruption and/or manual modification of the files.
I do not like to say this, but the only way I know to restore the Slsvc.exe (and other modified files) to working order (and in doing so, allow the Software Licensing Service to run, which will allow you to Validate) is to reinstall Vista.
I do see that your copy of Vista came pre-installed on your computer from HP. So I suggest that you use the Windows Restore CD/DVD (or the Window Restore partition on the hard drive) that came with your computer. The Windows Restore will bring your copy of Vista back to how it was from the factory. The documentation that came with your computer will explain the process to do this. Since the Windows Restore process is diffrent from manufacturer to manufacturer, If you need any help with your Windows Restore process, contact HP for further assistance.
Very sorry I couldn't be more help,
Darin Smith
WGA Forum Manager
Thursday, November 8, 2007 10:13 PM