locked
Win7 has been repeatedly validated as genuine since Nov 2009, now suddenly it's not genuine? RRS feed

  • Question

  • I know this is a legitimate windows installation, but suddenly today I keep getting messages that say it is not genuine.  I have verified that it is genuine many times during the 10 months or so that it has been installed when I have needed various downloads from the microsoft website.  I have the COA right here in front of me and it is completely genuine.

    I tried using the Microsoft Genuine Advantage Diagnostic Tool, but when I go to copy the information so that I can post it here, it gives me the following error: "Failed to create output files, hr = 0x800706b5.  Please contact support."

    I need to get this resolved quickly.  I run a small tech support company, and if one of my clients should happen to see this message pop up on my screen, it could ruin me.

    edit:  I should add that I have tried re-entering the key, and it still activates just fine.  It just won't validate as genuine anymore.

    • Edited by Norm1320 Saturday, August 28, 2010 10:06 PM added info
    Saturday, August 28, 2010 9:40 PM

Answers

  • Hello Norm1320,

    A couple of posters with your same predicament have told us that copying the file of interest from another computer with the same edition of W7 has fixed this type of problem when the System File Checker found the mismatch but could not correct it.

    Did not work for everyone but IMO worth a try.  If you have another W7HP installation patched to the same level, give that a try.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    • Marked as answer by Norm1320 Sunday, August 29, 2010 11:19 PM
    Sunday, August 29, 2010 12:03 PM

All replies

  • "Norm1320" wrote in message news:96e3daf0-66b7-4dad-91f5-79a3db6eb18c...

    I know this is a legitimate windows installation, but suddenly today I keep getting messages that say it is not genuine.  I have verified that it is genuine many times during the 10 months or so that it has been installed when I have needed various downloads from the microsoft website.  I have the COA right here in front of me and it is completely genuine.

    I tried using the Microsoft Genuine Advantage Diagnostic Tool, but when I go to copy the information so that I can post it here, it gives me the following error: "Failed to create output files, hr = 0x800706b5.  Please contact support."

    I need to get this resolved quickly.  I run a small tech support company, and if one of my clients should happen to see this message pop up on my screen, it could ruin me.

    edit:  I should add that I have tried re-entering the key, and it still activates just fine.  It just won't validate as genuine anymore.


    When using the MGADiag tool, ignore the error messages - it should still paste happily into your post.
    There's not a lot we can do her without the report.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, August 28, 2010 10:46 PM
    Moderator
  • Well, that's good to know.  I guess I should have just tried it.  Here it is:

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VBBK7-84QHV-FRHXM
    Windows Product Key Hash: 4BO1b6WZ954/FUMOlvPxTA3DiV0=
    Windows Product ID: 00359-OEM-8882225-08465
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {6FA043DF-E950-4AD2-970E-DF29418F6C36}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dana\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6FA043DF-E950-4AD2-970E-DF29418F6C36}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FRHXM</PKey><PID>00359-OEM-8882225-08465</PID><PIDType>3</PIDType><SID>S-1-5-21-270273581-149905274-646667748</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>GA-MA790FX-DS5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F6</Version><SMBIOSVersion major="2" minor="4"/><Date>20080521000000.000000+000</Date></BIOS><HWID>B8B93607018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000080
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppwinob.dll


    HWID Data-->
    HWID Hash Current: NgAAAAEABgABAAEAAAACAAAAAQABAAEAln10KIs+CIU8qcKPJJWQpriRosRS2xrs8q5KUdbH

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   GBT     GBTUACPI
      FACP   GBT     GBTUACPI
      HPET   GBT     GBTUACPI
      MCFG   GBT     GBTUACPI
      SSDT   PTLTD   POWERNOW

     

    Saturday, August 28, 2010 11:11 PM
  • "Norm1320" wrote in message news:9c829c89-75a4-45da-b729-5b2b978dce82...

    Well, that's good to know.  I guess I should have just tried it.  Here it is:

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VBBK7-84QHV-FRHXM
    Windows Product Key Hash: 4BO1b6WZ954/FUMOlvPxTA3DiV0=
    Windows Product ID: 00359-OEM-8882225-08465
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000080
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppwinob.dll

     

    I've highlighted the relevant bits of the report, above.

    The solution is to correct the file mismatch reported - that should bring everything else back into line. Windows has spotted that the file doesn't appear to be the same as the file that it has records for, and has interpreted that as an attack on the licensing system.
     
    Two obvious possibilities for repair -
    1) System Restore - note that the system can take up to three days to discover file tampers/mismatches, so a restore to around the
    25th would be a good idea, if you have one. You will have to reinstall any programs and/or updates installed since that date.
     
    2) System File Checker - Try running  SFC  /SCANNOW from an elevated Command Prompt window - it will scan the system for file errors, and attempt repair of any it finds.
     
     
    If neither of those work to remove the problem, then post back with another MGADiag report, and we'll look at more radical surgery.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, August 28, 2010 11:32 PM
    Moderator
  • No Restore points available.  SFC /SCANNOW failed to fix the problem.  New report:

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VBBK7-84QHV-FRHXM
    Windows Product Key Hash: 4BO1b6WZ954/FUMOlvPxTA3DiV0=
    Windows Product ID: 00359-OEM-8882225-08465
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {6FA043DF-E950-4AD2-970E-DF29418F6C36}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Dana\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6FA043DF-E950-4AD2-970E-DF29418F6C36}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FRHXM</PKey><PID>00359-OEM-8882225-08465</PID><PIDType>3</PIDType><SID>S-1-5-21-270273581-149905274-646667748</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>GA-MA790FX-DS5</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F6</Version><SMBIOSVersion major="2" minor="4"/><Date>20080521000000.000000+000</Date></BIOS><HWID>B8B93607018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000080
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppwinob.dll


    HWID Data-->
    HWID Hash Current: NgAAAAEABgABAAEAAAACAAAAAQABAAEAln10KIs+CIU8qcKPJJWQpriRosRS2xrs8q5KUdbH

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   GBT     GBTUACPI
      FACP   GBT     GBTUACPI
      HPET   GBT     GBTUACPI
      MCFG   GBT     GBTUACPI
      SSDT   PTLTD   POWERNOW

     

    CBS logfile is too long to post, but this portion seems relevent:

     

    2010-08-28 19:12:12, Info                  CSI    000002dc [SR] Beginning Verify and Repair transaction
    2010-08-28 19:12:12, Info                  CSI    000002dd Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..-spp-plugin-windows_31bf3856ad364e35_6.1.7600.16385_none_6daf1bf0165f608f\sppwinob.dll do not match actual file [l:24{12}]"sppwinob.dll" :
      Found: {l:32 b:/dqkHlKs8oTw/ZfUpdhsAzqFNvJ3yq+1t5tGESYwU5U=} Expected: {l:32 b:tdc45Mg95LAuogRea3TLnbodXOBywjXIg+IWtRtOcY8=}
    2010-08-28 19:12:12, Info                  CSI    000002de [SR] Cannot repair member file [l:24{12}]"sppwinob.dll" of Microsoft-Windows-Security-SPP-Plugin-Windows, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2010-08-28 19:12:12, Info                  CSI    000002df Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..-spp-plugin-windows_31bf3856ad364e35_6.1.7600.16385_none_6daf1bf0165f608f\sppwinob.dll do not match actual file [l:24{12}]"sppwinob.dll" :
      Found: {l:32 b:/dqkHlKs8oTw/ZfUpdhsAzqFNvJ3yq+1t5tGESYwU5U=} Expected: {l:32 b:tdc45Mg95LAuogRea3TLnbodXOBywjXIg+IWtRtOcY8=}
    2010-08-28 19:12:12, Info                  CSI    000002e0 [SR] Cannot repair member file [l:24{12}]"sppwinob.dll" of Microsoft-Windows-Security-SPP-Plugin-Windows, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2010-08-28 19:12:12, Info                  CSI    000002e1 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.WindowsFoundationDelivery"
    2010-08-28 19:12:12, Info                  CSI    000002e2 Hashes for file member \??\C:\Windows\System32\sppwinob.dll do not match actual file [l:24{12}]"sppwinob.dll" :
      Found: {l:32 b:/dqkHlKs8oTw/ZfUpdhsAzqFNvJ3yq+1t5tGESYwU5U=} Expected: {l:32 b:tdc45Mg95LAuogRea3TLnbodXOBywjXIg+IWtRtOcY8=}
    2010-08-28 19:12:12, Info                  CSI    000002e3 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-s..-spp-plugin-windows_31bf3856ad364e35_6.1.7600.16385_none_6daf1bf0165f608f\sppwinob.dll do not match actual file [l:24{12}]"sppwinob.dll" :
      Found: {l:32 b:/dqkHlKs8oTw/ZfUpdhsAzqFNvJ3yq+1t5tGESYwU5U=} Expected: {l:32 b:tdc45Mg95LAuogRea3TLnbodXOBywjXIg+IWtRtOcY8=}
    2010-08-28 19:12:12, Info                  CSI    000002e4 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"sppwinob.dll"; source file in store is also corrupted

     

    I'm ready for the "more radical surgury".  Could be a fun learning experience.  Thanks for the help thus far.

    Sunday, August 29, 2010 12:24 AM
  • Hello Norm1320,

    A couple of posters with your same predicament have told us that copying the file of interest from another computer with the same edition of W7 has fixed this type of problem when the System File Checker found the mismatch but could not correct it.

    Did not work for everyone but IMO worth a try.  If you have another W7HP installation patched to the same level, give that a try.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    • Marked as answer by Norm1320 Sunday, August 29, 2010 11:19 PM
    Sunday, August 29, 2010 12:03 PM
  • Unfortunately, my only other win7 PC is running ultimate, so that won't be an option.  But thanks.
    Sunday, August 29, 2010 5:41 PM
  • "Norm1320" wrote in message news:f21bb534-10bf-4609-a233-1d591fb82074...
    Unfortunately, my only other win7 PC is running ultimate, so that won't be an option.  But thanks.

    It may still be worth a try - I believe that the files are actually the same, assuming that all updates are installed on both systems.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, August 29, 2010 6:18 PM
    Moderator
  • That did the trick (after re-activating).  It's coming up as genuine again now, so copying the corrupted file from another system does sometimes work even if it is not the same edition.

     

    Thanks for all the help.

    Sunday, August 29, 2010 11:18 PM
  • "Norm1320" wrote in message news:a9594a95-19cc-4b98-b80b-5fbe254a9df0...

    That did the trick (after re-activating).  It's coming up as genuine again now, so copying the corrupted file from another system does sometimes work even if it is not the same edition.

     

    Thanks for all the help.


    Great - well done!
     
    Thanks for the feedback, and Good Luck!

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, August 30, 2010 12:46 AM
    Moderator