Answered by:
"Windows is not genuine", Error Code: 0x8004fe21

Question
-
Hi everyone, for the past week or so my laptop, which is a few years old, is saying that my version of Windows 7 Professional isn't genuine. Does anyone know what the problem is? Here's a diagnostic report. Thanks in advance.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
Windows Product ID: 00371-OEM-8992671-00014
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C038B644-FEA0-4F96-97FC-601F951C9AE2}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C038B644-FEA0-4F96-97FC-601F951C9AE2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-514639760-1216770952-760821426</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCSB1V9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R2085H4</Version><SMBIOSVersion major="2" minor="6"/><Date>20111116000000.000000+000</Date></BIOS><HWID>BE733F07018400FE</HWID><UserLCID>0406</UserLCID><SystemLCID>0406</SystemLCID><TimeZone>Rom, normaltid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Version af softwarelicenstjeneste: 6.1.7601.17514
Navn: Windows(R) 7, Professional edition
Beskrivelse: Windows Operating System - Windows(R) 7, OEM_SLP channel
Aktiverings-id: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Program-id: 55c92734-d682-4d71-983e-d6ec3f16059f
Udvidet PID: 00371-00178-926-700014-02-2057-7600.0000-0892011
Installations-id: 011485670316696932140360420424494075916324274710439016
URL-adresse på processorcertifikat: http://go.microsoft.com/fwlink/?LinkID=88338
URL-adresse på maskincertifikat: http://go.microsoft.com/fwlink/?LinkID=88339
Brug licens-URL-adresse: http://go.microsoft.com/fwlink/?LinkID=88341
URL-adresse på produktnøglecertifikat: http://go.microsoft.com/fwlink/?LinkID=88340
Delvis produktnøgle: 24X8J
Licensstatus: Med licens
Antal resterende aktiveringsnulstillinger af Windows: 3
Tidspunkt, der er tillid til: 22-12-2014 09:06:38
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:21:2014 19:04
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAIAAAABAAAABAABAAEA6GH0zrLsjM22ktylkseYQ7QUMrISGtp0LnM=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
WDAT Sony VAIO
TCPA Sony VAIO
ASF! Sony VAIO
SLIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
ASPT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
Monday, December 22, 2014 8:11 AM
Answers
-
back to first principles, then....
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Noel D PatonModerator Saturday, December 27, 2014 9:53 AM
- Marked as answer by Noel D PatonModerator Sunday, January 11, 2015 2:15 PM
Friday, December 26, 2014 3:25 PMModerator
All replies
-
Anyone?Tuesday, December 23, 2014 2:08 PM
-
This may simply be caused by a bad set of Intel Rapid Storage Technology drivers -
Installing the Intel Rapid Storage Drivers
try downloading and installing them from here - https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=22194
(you want the iata_enu.exe download)
Once complete, please reboot twice, then post another MGADiag report.
Please do not read this sentence. Please ignore the previous sentence.
Tuesday, December 23, 2014 2:41 PM -
I just did as you said. Here's my new report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
Windows Product ID: 00371-OEM-8992671-00014
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C038B644-FEA0-4F96-97FC-601F951C9AE2}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C038B644-FEA0-4F96-97FC-601F951C9AE2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-514639760-1216770952-760821426</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCSB1V9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R2085H4</Version><SMBIOSVersion major="2" minor="6"/><Date>20111116000000.000000+000</Date></BIOS><HWID>BE733F07018400FE</HWID><UserLCID>0406</UserLCID><SystemLCID>0406</SystemLCID><TimeZone>Rom, normaltid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Version af softwarelicenstjeneste: 6.1.7601.17514
Navn: Windows(R) 7, Professional edition
Beskrivelse: Windows Operating System - Windows(R) 7, OEM_SLP channel
Aktiverings-id: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Program-id: 55c92734-d682-4d71-983e-d6ec3f16059f
Udvidet PID: 00371-00178-926-700014-02-2057-7600.0000-0892011
Installations-id: 011485670316696932140360420424494075916324274710439016
URL-adresse på processorcertifikat: http://go.microsoft.com/fwlink/?LinkID=88338
URL-adresse på maskincertifikat: http://go.microsoft.com/fwlink/?LinkID=88339
Brug licens-URL-adresse: http://go.microsoft.com/fwlink/?LinkID=88341
URL-adresse på produktnøglecertifikat: http://go.microsoft.com/fwlink/?LinkID=88340
Delvis produktnøgle: 24X8J
Licensstatus: Med licens
Antal resterende aktiveringsnulstillinger af Windows: 3
Tidspunkt, der er tillid til: 23-12-2014 21:16:02
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:21:2014 19:04
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAIAAAABAAAABAABAAEA6GH0zrLsjM22ktylkseYQ7QUMrISGtp0LnM=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
WDAT Sony VAIO
TCPA Sony VAIO
ASF! Sony VAIO
SLIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
ASPT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
Edit: Just tried updating the computer and I still can't do it. I'm getting this error: 800706F7
- Edited by F-ZeroGX Tuesday, December 23, 2014 8:33 PM
Tuesday, December 23, 2014 8:17 PM -
Is KB3004394 installed?
If so, either uninstall it, or install KB3024777.
Then reboot TWICE, and post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Tuesday, December 23, 2014 10:10 PMModerator -
Is KB3004394 installed?
If so, either uninstall it, or install KB3024777.
Then reboot TWICE, and post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi
KB3004394 is not installed on the computer.Tuesday, December 23, 2014 11:01 PM -
Try this...
Open an Elevated Command prompt, and run the following command...
REGSVR32 wintrust.dll
You should get a 'success' popup.
reboot, and post another MGADiag report.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Wednesday, December 24, 2014 7:24 AMModerator -
Try this...
Open an Elevated Command prompt, and run the following command...
REGSVR32 wintrust.dll
You should get a 'success' popup.
reboot, and post another MGADiag report.
Just tried this and I didn't get the 'success' popup. I got an error code instead: 0x8007005.
I also tried scanning the entire system to see if it's a virus, but I didn't find anything.
Wednesday, December 24, 2014 2:58 PM -
Interesting...
Please open an Elevated Command Prompt, and run the following command.
ICACLS C:\Windows\System32\wintrust.dll
post the results.
(Happy Xmas, BTW!)
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Thursday, December 25, 2014 12:15 AMModerator -
Interesting...
Please open an Elevated Command Prompt, and run the following command.
ICACLS C:\Windows\System32\wintrust.dll
post the results.
(Happy Xmas, BTW!)
That didn't seem to fix it either. :/ I feel like I've tried everything, but the problem is still here.
Oh, and merry Christmas to you too! Here's my new report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
Windows Product ID: 00371-OEM-8992671-00014
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C038B644-FEA0-4F96-97FC-601F951C9AE2}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C038B644-FEA0-4F96-97FC-601F951C9AE2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-514639760-1216770952-760821426</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCSB1V9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R2085H4</Version><SMBIOSVersion major="2" minor="6"/><Date>20111116000000.000000+000</Date></BIOS><HWID>BE733F07018400FE</HWID><UserLCID>0406</UserLCID><SystemLCID>0406</SystemLCID><TimeZone>Rom, normaltid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Version af softwarelicenstjeneste: 6.1.7601.17514
Navn: Windows(R) 7, Professional edition
Beskrivelse: Windows Operating System - Windows(R) 7, OEM_SLP channel
Aktiverings-id: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Program-id: 55c92734-d682-4d71-983e-d6ec3f16059f
Udvidet PID: 00371-00178-926-700014-02-2057-7600.0000-0892011
Installations-id: 011485670316696932140360420424494075916324274710439016
URL-adresse på processorcertifikat: http://go.microsoft.com/fwlink/?LinkID=88338
URL-adresse på maskincertifikat: http://go.microsoft.com/fwlink/?LinkID=88339
Brug licens-URL-adresse: http://go.microsoft.com/fwlink/?LinkID=88341
URL-adresse på produktnøglecertifikat: http://go.microsoft.com/fwlink/?LinkID=88340
Delvis produktnøgle: 24X8J
Licensstatus: Med licens
Antal resterende aktiveringsnulstillinger af Windows: 3
Tidspunkt, der er tillid til: 25-12-2014 15:36:04
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:24:2014 21:17
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAIAAAABAAAABAABAAEA6GH0zrLsjM22ktylkseYQ7QUMrISGtp0LnM=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
WDAT Sony VAIO
TCPA Sony VAIO
ASF! Sony VAIO
SLIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
ASPT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIOThursday, December 25, 2014 2:39 PM -
back to first principles, then....
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Noel D PatonModerator Saturday, December 27, 2014 9:53 AM
- Marked as answer by Noel D PatonModerator Sunday, January 11, 2015 2:15 PM
Friday, December 26, 2014 3:25 PMModerator -
back to first principles, then....
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.
Alright, I uploaded my CBS.log file. My account hasn't been verified yet, so here's the link (delete the space before and after the period):
1drv . ms/1JUUNR9
And here's my new report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-XXFCY-7BR4V-24X8J
Windows Product Key Hash: TcZBJdOL2yQeuYoO2PWX5NAV8x4=
Windows Product ID: 00371-OEM-8992671-00014
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C038B644-FEA0-4F96-97FC-601F951C9AE2}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C038B644-FEA0-4F96-97FC-601F951C9AE2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-24X8J</PKey><PID>00371-OEM-8992671-00014</PID><PIDType>2</PIDType><SID>S-1-5-21-514639760-1216770952-760821426</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCSB1V9E</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>R2085H4</Version><SMBIOSVersion major="2" minor="6"/><Date>20111116000000.000000+000</Date></BIOS><HWID>BE733F07018400FE</HWID><UserLCID>0406</UserLCID><SystemLCID>0406</SystemLCID><TimeZone>Rom, normaltid(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Version af softwarelicenstjeneste: 6.1.7601.17514
Navn: Windows(R) 7, Professional edition
Beskrivelse: Windows Operating System - Windows(R) 7, OEM_SLP channel
Aktiverings-id: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Program-id: 55c92734-d682-4d71-983e-d6ec3f16059f
Udvidet PID: 00371-00178-926-700014-02-2057-7600.0000-0892011
Installations-id: 011485670316696932140360420424494075916324274710439016
URL-adresse på processorcertifikat: http://go.microsoft.com/fwlink/?LinkID=88338
URL-adresse på maskincertifikat: http://go.microsoft.com/fwlink/?LinkID=88339
Brug licens-URL-adresse: http://go.microsoft.com/fwlink/?LinkID=88341
URL-adresse på produktnøglecertifikat: http://go.microsoft.com/fwlink/?LinkID=88340
Delvis produktnøgle: 24X8J
Licensstatus: Med licens
Antal resterende aktiveringsnulstillinger af Windows: 3
Tidspunkt, der er tillid til: 27-12-2014 09:34:50
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:26:2014 21:36
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAIAAAABAAAABAABAAEA6GH0zrLsjM22ktylkseYQ7QUMrISGtp0LnM=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
WDAT Sony VAIO
TCPA Sony VAIO
ASF! Sony VAIO
SLIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
ASPT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
- Edited by F-ZeroGX Saturday, December 27, 2014 8:43 AM
Saturday, December 27, 2014 8:42 AM -
That seems to have done the trick!
You actually had a number of problems...
Line 319614: 2014-12-27 09:01:22, Info CSI 000004b6 [SR] Repairing 13 (0x000000000000000d) components Line 319615: 2014-12-27 09:01:22, Info CSI 000004b7 [SR] Beginning Verify and Repair transaction Line 319618: 2014-12-27 09:01:22, Info CSI 000004b9 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"pcasvc.dll" from store Line 319621: 2014-12-27 09:01:22, Info CSI 000004bb [SR] Repairing corrupted file [ml:520{260},l:56{28}]"\??\C:\Windows\System32\Dism"\[l:30{15}]"DmiProvider.dll" from store Line 319624: 2014-12-27 09:01:22, Info CSI 000004bd [SR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\da-DK"\[l:30{15}]"crypt32.dll.mui" from store Line 319627: 2014-12-27 09:01:23, Info CSI 000004bf [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"cryptsp.dll" from store Line 319630: 2014-12-27 09:01:23, Info CSI 000004c1 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"cryptsp.dll" from store Line 319633: 2014-12-27 09:01:23, Info CSI 000004c3 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"wintrust.dll" from store Line 319636: 2014-12-27 09:01:23, Info CSI 000004c5 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:22{11}]"crypt32.dll" from store Line 319639: 2014-12-27 09:01:24, Info CSI 000004c7 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"audiosrv.dll" from store Line 319642: 2014-12-27 09:01:24, Info CSI 000004c9 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"AudioSes.dll" from store Line 319645: 2014-12-27 09:01:24, Info CSI 000004cb [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"crypt32.dll" from store Line 319648: 2014-12-27 09:01:24, Info CSI 000004cd [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"cryptui.dll" from store Line 319651: 2014-12-27 09:01:25, Info CSI 000004cf [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:12{6}]"mf.dll" from store Line 319654: 2014-12-27 09:01:25, Info CSI 000004d1 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"srcore.dll" from store Line 319657: 2014-12-27 09:01:25, Info CSI 000004d3 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"wintrust.dll" from store
SFC managed to fix all of them, so with luck you're good to go.
Having said that, the pattern of errors is such that it's suggestive of malware, so I think you'd better check that your AV is up to date, and also run a full system scan using MBAM...
Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM Premium' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.
Quarantine everything it finds
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Saturday, December 27, 2014 9:04 AMModerator -
Thank you very much! I just tried updating Windows and it works now. I truly appreciate the help. Will run a full system scan with Malwarebytes.
Saturday, December 27, 2014 9:32 AM -
Good luck!
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Saturday, December 27, 2014 9:53 AMModerator