Answered by:
Windows 7 that came with PC experiencing validation issues

Question
-
I purchased a HP Pavilion dv6 Notebook PC from Costco in 2012. It came with Windows 7 Home Premium. Since the purchase I have never had validation issues until now. A warning window pops up periodically saying, “You may be a victim of software counterfeiting”. How should I proceed in order to resolve the issue?
Here is a copy of my mgdiag.exe report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE20
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
Windows Product ID: 00359-OEM-8992687-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {67B44416-D6AF-45EB-B7D1-00529E1B83C1}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130828-1532
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Mohvir\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\drivers\spsys.sys[Hr = 0x80092003]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{67B44416-D6AF-45EB-B7D1-00529E1B83C1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2458008912-3820164676-1122347169</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.29</Version><SMBIOSVersion major="2" minor="7"/><Date>20131003000000.000000+000</Date></BIOS><HWID>B39A3407018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Windows Activation Technologies-->
HrOffline: 0x8004FE20
HrOnline: N/A
HealthStatus: 0x0000000000010000
Event Time Stamp: 4:5:2014 00:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: NAAAAAIAAAABAAIAAQACAAAAAwABAAEAln1U0bry+/K8lWQDuA7atAbdDdc4BiiQWsqWYw==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HPQOEM 181B
FACP HPQOEM SLIC-MPC
DBGP HPQOEM 181B
HPET HPQOEM 181B
BOOT HPQOEM 181B
MCFG HPQOEM 181B
WDAT HPQOEM 181B
UEFI HPQOEM 181B
ASF! HPQOEM 181B
SLIC HPQOEM SLIC-MPC
SSDT HPQOEM 181B
ASPT HPQOEM 181B
FPDT HPQOEM 181B
SSDT HPQOEM 181B
SSDT HPQOEM 181B
SSDT HPQOEM 181B
Saturday, April 5, 2014 7:03 PM
Answers
-
In the four years I've lived on this forum I don't think I've ever seen such an error combination before...
Validation Code: 0x8004FE20
Cached Online Validation Code: N/A, hr = 0xc0000022Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426Tampered File: %systemroot%\system32\drivers\spsys.sys
However, I'm not convinced that these are the real problem.
Your computer appears to have shipped with Windows 8 installed - the BIOS is dated October 2013, rather than 2012, and the BIOS tables are unlike any I've seen in a Windows 7 machine.
If I'm right on this, it is not valid to 'downgrade' to Windows 7 Home Premium - and you will need to reformat and reinstall using genuine media and Key..
If I'm wrong, and the COA sticker on the case is for Windows 7 Home Premium (rather than being the Windows 8 flag), then follow these instructions.
There is a
problem with your Software Protection Service - something is preventing it from
starting on demand the way it should.Please use the
following in an attempt to isolate the cause.Click on Start
in the Search box, type
SERVICES.MSC
and hit the Enter key - accept the UAC prompt if you get one.
Look in the console for the Software Protection service, right-click on it and select Properties.
make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.
Try starting the service now - do you get an error message? Does it start? does it almost
immediately stop again?Post back with your results, and a new MGADiag report.
If it doesn't start, then please do the following...
Please open an Elevated (Administrator) Command Prompt window and use the following
commands....net start sppsvc
sc qc sppsvc
sc queryex sppsvc
sc qprivs sppsvc
sc qsidtype sppsvc
sc sdshow sppsvc
REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
Copy and paste the output to your reply
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Edited by Noel D PatonModerator Saturday, April 5, 2014 8:10 PM formatting
- Marked as answer by Be2T Sunday, April 6, 2014 8:53 PM
Saturday, April 5, 2014 8:07 PMModerator
All replies
-
In the four years I've lived on this forum I don't think I've ever seen such an error combination before...
Validation Code: 0x8004FE20
Cached Online Validation Code: N/A, hr = 0xc0000022Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426Tampered File: %systemroot%\system32\drivers\spsys.sys
However, I'm not convinced that these are the real problem.
Your computer appears to have shipped with Windows 8 installed - the BIOS is dated October 2013, rather than 2012, and the BIOS tables are unlike any I've seen in a Windows 7 machine.
If I'm right on this, it is not valid to 'downgrade' to Windows 7 Home Premium - and you will need to reformat and reinstall using genuine media and Key..
If I'm wrong, and the COA sticker on the case is for Windows 7 Home Premium (rather than being the Windows 8 flag), then follow these instructions.
There is a
problem with your Software Protection Service - something is preventing it from
starting on demand the way it should.Please use the
following in an attempt to isolate the cause.Click on Start
in the Search box, type
SERVICES.MSC
and hit the Enter key - accept the UAC prompt if you get one.
Look in the console for the Software Protection service, right-click on it and select Properties.
make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.
Try starting the service now - do you get an error message? Does it start? does it almost
immediately stop again?Post back with your results, and a new MGADiag report.
If it doesn't start, then please do the following...
Please open an Elevated (Administrator) Command Prompt window and use the following
commands....net start sppsvc
sc qc sppsvc
sc queryex sppsvc
sc qprivs sppsvc
sc qsidtype sppsvc
sc sdshow sppsvc
REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
Copy and paste the output to your reply
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Edited by Noel D PatonModerator Saturday, April 5, 2014 8:10 PM formatting
- Marked as answer by Be2T Sunday, April 6, 2014 8:53 PM
Saturday, April 5, 2014 8:07 PMModerator -
Apologies for the delayed reply,
To test the software protection service I installed five optional updates, three of which were from Windows (no important updates were available). The service started and no error message appeared. After installing the updates I restarted. Following the restart, the error message did not show up again.
Here is a copy of my mgdiag.exe report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
Windows Product ID: 00359-OEM-8992687-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {67B44416-D6AF-45EB-B7D1-00529E1B83C1}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130828-1532
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Mohvir\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{67B44416-D6AF-45EB-B7D1-00529E1B83C1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2458008912-3820164676-1122347169</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.29</Version><SMBIOSVersion major="2" minor="7"/><Date>20131003000000.000000+000</Date></BIOS><HWID>B39A3407018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800010-02-1033-7601.0000-1602012
Installation ID: 016782278831603291714470947820215013161514652843001931
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 3Q6C9
License Status: Licensed
Remaining Windows rearm count: 0
Trusted time: 4/5/2014 10:46:11 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:5:2014 11:31
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAAABAAIAAQACAAAAAwABAAEAln1U0bry+/K8lWQDuA7atAbdDdc4BiiQWsqWYw==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HPQOEM 181B
FACP HPQOEM SLIC-MPC
DBGP HPQOEM 181B
HPET HPQOEM 181B
BOOT HPQOEM 181B
MCFG HPQOEM 181B
WDAT HPQOEM 181B
UEFI HPQOEM 181B
ASF! HPQOEM 181B
SLIC HPQOEM SLIC-MPC
SSDT HPQOEM 181B
ASPT HPQOEM 181B
FPDT HPQOEM 181B
SSDT HPQOEM 181B
SSDT HPQOEM 181B
SSDT HPQOEM 181B
Sunday, April 6, 2014 5:51 AM -
Simply installing optional updates is extremely unlikely to have caused the improvements in the report - did you also do anything else? Which exact updates did you install?
Your report reads fine now.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Sunday, April 6, 2014 8:19 AMModerator -
Actually it seems one important update was installed yesterday, and one recommended one today.
Here is the update history beginning from yesterday (I only included Windows updates):
-Definition Update for Windows Defender - KB915597 (Definition 1.169.1703.0)
Installation date: 4/5/2014 11:35 AM
Installation status: Successful
Update type: Important
Install this update to revise the definition files used to detect spyware and other potentially unwanted software. Once you have installed this item, it cannot be removed.
-Update for Windows 7 for x64-based Systems (KB2574819)
Installation date: 4/5/2014 1:55 PM
Installation status: Successful
Update type: Optional
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
-Update for Windows 7 for x64-based Systems (KB2592687)
Installation date: 4/5/2014 1:55 PM
Installation status: Successful
Update type: Optional
The Remote Desktop Protocol 8.0 update enables you to use the new Remote Desktop Services features. These features are introduced in Windows 8 and in Windows Server 2012 and are available for computers that are running Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1. After you install this item, you may have to restart your computer.
-Update for Windows 7 for x64-based Systems (KB2830477)
Installation date: 4/5/2014 2:02 PM
Installation status: Successful
Update type: Optional
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
-Update for Windows 7 for x64-based Systems (KB2709981)
Installation date: 4/5/2014 2:02 PM
Installation status: Successful
Update type: Optional
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
-Update for Windows 7 for x64-based Systems (KB2923545)
Installation date: 4/6/2014 10:43 AM
Installation status: Successful
Update type: Recommended
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Sunday, April 6, 2014 5:59 PM -
Hmmm, as far as I'm aware, none of those updates would touch on the SP services - although they would require that the service run and validate the system, since none are classed as Security updates.
Perhaps self-healing was triggered and (unusually) successful!
At least you're running OK now :)
Good luck!
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Sunday, April 6, 2014 7:09 PMModerator -
Thanks for the help!Sunday, April 6, 2014 8:52 PM
-
Hi,
I had the same. Then I made Internet explorer my default browser. Started iE. Activated all extensions. Run verification again. This might work for you too.
Monday, April 7, 2014 3:57 PM