Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows 7 that came with PC experiencing validation issues RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I purchased a HP Pavilion dv6 Notebook PC from Costco in 2012. It came with Windows 7 Home Premium. Since the purchase I have never had validation issues until now. A warning window pops up periodically saying, “You may be a victim of software counterfeiting”. How should I proceed in order to resolve the issue?

    Here is a copy of my mgdiag.exe report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE20
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
    Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
    Windows Product ID: 00359-OEM-8992687-00010
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {67B44416-D6AF-45EB-B7D1-00529E1B83C1}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Mohvir\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[Hr = 0x80092003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{67B44416-D6AF-45EB-B7D1-00529E1B83C1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2458008912-3820164676-1122347169</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.29</Version><SMBIOSVersion major="2" minor="7"/><Date>20131003000000.000000+000</Date></BIOS><HWID>B39A3407018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 

    Windows Activation Technologies-->
    HrOffline: 0x8004FE20
    HrOnline: N/A
    HealthStatus: 0x0000000000010000
    Event Time Stamp: 4:5:2014 00:22
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAIAAQACAAAAAwABAAEAln1U0bry+/K8lWQDuA7atAbdDdc4BiiQWsqWYw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC HPQOEM 181B    
      FACP HPQOEM SLIC-MPC
      DBGP HPQOEM 181B    
      HPET HPQOEM 181B    
      BOOT HPQOEM 181B    
      MCFG HPQOEM 181B    
      WDAT HPQOEM 181B    
      UEFI HPQOEM 181B    
      ASF! HPQOEM 181B    
      SLIC HPQOEM SLIC-MPC
      SSDT HPQOEM 181B    
      ASPT HPQOEM 181B    
      FPDT HPQOEM 181B    
      SSDT HPQOEM 181B    
      SSDT HPQOEM 181B    
      SSDT HPQOEM 181B    

    Saturday, April 5, 2014 7:03 PM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote

    In the four years I've lived on this forum I don't think I've ever seen such an error combination before...

    Validation Code: 0x8004FE20
    Cached Online Validation Code: N/A, hr = 0xc0000022

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 

    Tampered File: %systemroot%\system32\drivers\spsys.sys

    However, I'm not convinced that these are the real problem.

    Your computer appears to have shipped with Windows 8 installed - the BIOS is dated  October 2013, rather than 2012, and the BIOS tables are unlike any I've seen in a Windows 7 machine.

    If I'm right on this, it is not valid to 'downgrade' to Windows 7 Home Premium - and you will need to reformat and reinstall using genuine media and Key..

    If I'm wrong, and the COA sticker on the case is for Windows 7 Home Premium (rather than being the Windows 8 flag), then follow these instructions.

    There is a
    problem with your Software Protection Service - something is preventing it from
    starting on demand the way it should.

    Please use the
    following in an attempt to isolate the cause.

    Click on Start

    in the Search box, type

    SERVICES.MSC

    and hit the Enter key - accept the UAC prompt if you get one.

    Look in the console for the Software Protection service, right-click on it and select Properties.

    make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.

    Try starting the service now - do you get an error message? Does it start? does it almost
    immediately stop again?

    Post back with your results, and a new MGADiag report.

    If it doesn't start, then please do the following...

    Please open an Elevated (Administrator) Command Prompt window and use the following
    commands....

    net start sppsvc

    sc qc sppsvc

    sc queryex sppsvc

    sc qprivs sppsvc

    sc qsidtype sppsvc

    sc sdshow sppsvc

    REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR

    Copy and paste the output to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    • Edited by Noel D PatonModerator Saturday, April 5, 2014 8:10 PM formatting
    • Marked as answer by Be2T Sunday, April 6, 2014 8:53 PM
    Saturday, April 5, 2014 8:07 PM
    Moderator

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    In the four years I've lived on this forum I don't think I've ever seen such an error combination before...

    Validation Code: 0x8004FE20
    Cached Online Validation Code: N/A, hr = 0xc0000022

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 

    Tampered File: %systemroot%\system32\drivers\spsys.sys

    However, I'm not convinced that these are the real problem.

    Your computer appears to have shipped with Windows 8 installed - the BIOS is dated  October 2013, rather than 2012, and the BIOS tables are unlike any I've seen in a Windows 7 machine.

    If I'm right on this, it is not valid to 'downgrade' to Windows 7 Home Premium - and you will need to reformat and reinstall using genuine media and Key..

    If I'm wrong, and the COA sticker on the case is for Windows 7 Home Premium (rather than being the Windows 8 flag), then follow these instructions.

    There is a
    problem with your Software Protection Service - something is preventing it from
    starting on demand the way it should.

    Please use the
    following in an attempt to isolate the cause.

    Click on Start

    in the Search box, type

    SERVICES.MSC

    and hit the Enter key - accept the UAC prompt if you get one.

    Look in the console for the Software Protection service, right-click on it and select Properties.

    make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.

    Try starting the service now - do you get an error message? Does it start? does it almost
    immediately stop again?

    Post back with your results, and a new MGADiag report.

    If it doesn't start, then please do the following...

    Please open an Elevated (Administrator) Command Prompt window and use the following
    commands....

    net start sppsvc

    sc qc sppsvc

    sc queryex sppsvc

    sc qprivs sppsvc

    sc qsidtype sppsvc

    sc sdshow sppsvc

    REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR

    Copy and paste the output to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    • Edited by Noel D PatonModerator Saturday, April 5, 2014 8:10 PM formatting
    • Marked as answer by Be2T Sunday, April 6, 2014 8:53 PM
    Saturday, April 5, 2014 8:07 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Apologies for the delayed reply,

    To test the software protection service I installed five optional updates, three of which were from Windows (no important updates were available). The service started and no error message appeared. After installing the updates I restarted. Following the restart, the error message did not show up again.

    Here is a copy of my mgdiag.exe report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
    Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
    Windows Product ID: 00359-OEM-8992687-00010
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {67B44416-D6AF-45EB-B7D1-00529E1B83C1}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Mohvir\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{67B44416-D6AF-45EB-B7D1-00529E1B83C1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2458008912-3820164676-1122347169</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.29</Version><SMBIOSVersion major="2" minor="7"/><Date>20131003000000.000000+000</Date></BIOS><HWID>B39A3407018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800010-02-1033-7601.0000-1602012
    Installation ID: 016782278831603291714470947820215013161514652843001931
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 3Q6C9
    License Status: Licensed
    Remaining Windows rearm count: 0
    Trusted time: 4/5/2014 10:46:11 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:5:2014 11:31
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIAAAABAAIAAQACAAAAAwABAAEAln1U0bry+/K8lWQDuA7atAbdDdc4BiiQWsqWYw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC HPQOEM 181B    
      FACP HPQOEM SLIC-MPC
      DBGP HPQOEM 181B    
      HPET HPQOEM 181B    
      BOOT HPQOEM 181B    
      MCFG HPQOEM 181B    
      WDAT HPQOEM 181B    
      UEFI HPQOEM 181B    
      ASF! HPQOEM 181B    
      SLIC HPQOEM SLIC-MPC
      SSDT HPQOEM 181B    
      ASPT HPQOEM 181B    
      FPDT HPQOEM 181B    
      SSDT HPQOEM 181B    
      SSDT HPQOEM 181B    
      SSDT HPQOEM 181B    

    Sunday, April 6, 2014 5:51 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Simply installing optional updates is extremely unlikely to have caused the improvements in the report - did you also do anything else? Which exact updates did you install?

    Your report reads fine now.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, April 6, 2014 8:19 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Actually it seems one important update was installed yesterday, and one recommended one today.

    Here is the update history beginning from yesterday (I only included Windows updates):

    -Definition Update for Windows Defender - KB915597 (Definition 1.169.1703.0)

    Installation date: ‎4/‎5/‎2014 11:35 AM

    Installation status: Successful

    Update type: Important

    Install this update to revise the definition files used to detect spyware and other potentially unwanted software. Once you have installed this item, it cannot be removed.

    -Update for Windows 7 for x64-based Systems (KB2574819)

    Installation date: ‎4/‎5/‎2014 1:55 PM

    Installation status: Successful

    Update type: Optional

    Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

    -Update for Windows 7 for x64-based Systems (KB2592687)

    Installation date: ‎4/‎5/‎2014 1:55 PM

    Installation status: Successful

    Update type: Optional

    The Remote Desktop Protocol 8.0 update enables you to use the new Remote Desktop Services features. These features are introduced in Windows 8 and in Windows Server 2012 and are available for computers that are running Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1. After you install this item, you may have to restart your computer.

    -Update for Windows 7 for x64-based Systems (KB2830477)

    Installation date: ‎4/‎5/‎2014 2:02 PM

    Installation status: Successful

    Update type: Optional

    Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

    -Update for Windows 7 for x64-based Systems (KB2709981)

    Installation date: ‎4/‎5/‎2014 2:02 PM

    Installation status: Successful

    Update type: Optional

    Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

    -Update for Windows 7 for x64-based Systems (KB2923545)

    Installation date: ‎4/‎6/‎2014 10:43 AM

    Installation status: Successful

    Update type: Recommended

    Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.


    Sunday, April 6, 2014 5:59 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hmmm, as far as I'm aware, none of those updates would touch on the SP services - although they would require that the service run and validate the system, since none are classed as Security updates.

    Perhaps self-healing was triggered and (unusually) successful!

    At least you're running OK now :)

    Good luck!

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, April 6, 2014 7:09 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thanks for the help!
    Sunday, April 6, 2014 8:52 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I had the same. Then I made Internet explorer my default browser. Started iE. Activated all extensions. Run verification again. This might work for you too.

    Monday, April 7, 2014 3:57 PM