locked
Windows 7 all of a sudden claiming not to be genuine! RRS feed

  • Question

  • Hi,

    As requested here is the MGA diagnostics report, any help would be much appreciated, thanks in advance:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-788W3-H689G-6P6GT

    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=

    Windows Product ID: 00371-OEM-8992671-00008

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {0414D289-68CF-43E2-955B-701EA0AE9244}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.111118-2330

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{0414D289-68CF-43E2-955B-701EA0AE9244}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-2056163934-1485648494-2435290601</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP 620</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68PVI Ver. F.02</Version><SMBIOSVersion major="2" minor="4"/><Date>20100617000000.000000+000</Date></BIOS><HWID>89913407018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00178-926-700008-02-2057-7600.0000-2862010

    Installation ID: 012490647310328381424374610942404483131723360344011784

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: 6P6GT

    License Status: Licensed

    Remaining Windows rearm count: 2

    Trusted time: 25/07/2012 10:08:53

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x0000000000008E10

    Event Time Stamp: 7:23:2012 11:28

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppobjs.dll

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    HWID Data-->

    HWID Hash Current: MAAAAAEAAQABAAIAAAABAAAAAwABAAEAJJTQHKaocB60OsqjFDxqhKj1UNJoJUbK

    OEM Activation 1.0 Data-->

    N/A

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    HPQOEM                             1526   

      FACP                                   HPQOEM                             1526   

      HPET                                    HPQOEM                             1526   

      MCFG                                  HPQOEM                             1526   

      ASF!                                     HPQOEM                             1526   

      SSDT                                    HPQOEM                             SataAhci

      SLIC                                      HPQOEM                             SLIC-MPC

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci


    Wednesday, July 25, 2012 9:23 AM

Answers

  • You appear to have some fairly major file corruption.


    Please run a full CHKDSK and SFC scan....
     type in the Search box

     CMD.EXE

     right-click on the only file that is found
     Select Run as Administrator
     - the Elevated Command Prompt window should pop up
     At the Command prompt, type

     CHKDSK C: /R

     and hit the Enter key.

     You will be told that the drive is locked,
     and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     The chkdsk will take a few hours depending on the size
     of the drive, so be patient!
     
     After the CHKDSK has run, Windows should boot normally
     (possibly after a second auto-reboot) - then run the SFC

     SFC -System File Checker - Instructions
     Click on the Start button
     type in the Search box

     CMD.EXE

     right-click on the only file that is found
      Select Run as Administrator - the Elevated Command Prompt window should pop up
     At the Command prompt, type
     
     SFC /SCANNOW
     
     and hit the Enter key
     
     Wait for the scan to finish - make a note of any error messages - and then reboot.
      Post an MGADiag report with details of any error messages encountered.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, July 25, 2012 10:42 AM
    Moderator