Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows Genuine Advantage pop-up continues to appear after activation... RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello all,

    I have a user running Windows 7 Professional edition 64-bit on a domain network and despite multiple seemingly-successful activation attempts, the Windows Genuine Advantage pop-up continues to appear.  Under the system menu, Windows Activation does say ‘activated’ but after running the MGADiag tool I can see that Windows believes there is  a ‘tampered file’ at %systemroot%\System32\slcext.dll | slcext.dll.mui.  Also, under Windows Activation Technologies the value of HrOffline is 0x8004fe21 and HrOnline is N/A.  Running sfc /scannow only reports that there are ‘corrupted system files, but windows cannot fix them’.  I believe the trouble may be stemming from non-default-system language packs the user has installed (hence the .mui extension).  I’ve heard that in Windows 7 Professional language packs can cause WGA and sfc to believe certain system files are compromised in some way when in fact they are simply just in an unexpected language format.  I’ve also heard that MS has a proprietary fix for this which will allow WGA to authenticate fully, but no one at Microsoft Tech Support/Customer Support/WGA department seems to know anything at all about this issue.  Can anybody offer advice?  I’ve already been cut off by MS support twice!  The diagnostics report is as follows:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-J8D7P-XQJJ2-GPDD4

    Windows Product Key Hash: xgsndMkYdJsYmUng0qIJ/thx+HI=

    Windows Product ID: 00371-868-0000007-85279

    Windows Product ID Type: 1

    Windows License Type: KMS Client

    Windows OS version: 6.1.7600.2.00010100.0.0.048

    ID: {0055D73C-7B1C-4A30-973E-FF3E4F11ED7B}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.100618-1621

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{0055D73C-7B1C-4A30-973E-FF3E4F11ED7B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-GPDD4</PKey><PID>00371-868-0000007-85279</PID><PIDType>1</PIDType><SID>S-1-5-21-4258130026-898627856-1927301690</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP EliteBook 8540p</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68CVD Ver. F.0A</Version><SMBIOSVersion major="2" minor="6"/><Date>20100622000000.000000+000</Date></BIOS><HWID>7CB83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel

    Activation ID: b92e9980-b9d5-4821-9c94-140f632f6312

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00170-868-000000-03-1033-7600.0000-0812011

    Installation ID: 016366928894357251275883924576040275932131858374162173

    Partial Product Key: GPDD4

    License Status: Licensed

    Volume activation expiration: 257640 minute(s) (178 day(s))

    Remaining Windows rearm count: 1

    Trusted time: 3/23/2011 5:42:46 PM

     

    Key Management Service client information

        Client Machine ID (CMID): 02dc6a2f-b6dc-40a8-a843-d3cab84a06bc

        KMS machine name from DNS: sauspatch.labs.att.com:1688

        KMS machine extended PID: 55041-00168-313-224255-03-1033-7600.0000-3142009

        Activation interval: 120 minutes

        Renewal interval: 10080 minutes

        KMS host caching is enabled

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x0000000000000200

    Event Time Stamp: 3:18:2011 08:00

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

     

     

    HWID Data-->

    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEA6GFAcc4Pmr348CL8RG26Q7yGyizUAU7nwg1cXQ==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    HPQOEM                             1521   

      FACP                                   HPQOEM                             1521   

      HPET                                    HPQOEM                             1521   

      MCFG                                 HPQOEM                             1521   

      TCPA                                   HPQOEM                             1521   

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci

      SLIC                                      HPQOEM                             SLIC-MPC

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci

      SSDT                                    HPQOEM                             SataAhci

      ASF!                                     HPQOEM                             1521   

     

     

     

    Thursday, March 24, 2011 4:22 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    (BTW, you're posting in the Vista forum, rather than the appropriate Win7 forum - hopefully one of the moderators will be able to move the thread to the right one soon<g>)

    As you susect, your problem is indeed caused by the 'tampered file'

    This is NOT however related to any Language packs that may or may not have been installed - a specific set of files is affected by that, and appear in the File Mismatches section of the report - you have nothing there.

    I'm not sure exactly what the problem is likely to be - simply replacing the file (copying it from a known-good system for instance) is unlikely to work, as the fact that the file doesn't appear in teh File Misimatches would tend to indicate that the file itself is intact. I suspect that the problem is more likely to lie with permissions or registry entries somewhere.

    Your best bet is to contact WGA support (it should be free - make sure that you choose options for Activation/Validation/WGA in the dropdowns)
     
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
     
    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Thursday, March 24, 2011 10:39 PM
    Thursday, March 24, 2011 4:38 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    (BTW, you're posting in the Vista forum, rather than the appropriate Win7 forum - hopefully one of the moderators will be able to move the thread to the right one soon<g>)

    As you susect, your problem is indeed caused by the 'tampered file'

    This is NOT however related to any Language packs that may or may not have been installed - a specific set of files is affected by that, and appear in the File Mismatches section of the report - you have nothing there.

    I'm not sure exactly what the problem is likely to be - simply replacing the file (copying it from a known-good system for instance) is unlikely to work, as the fact that the file doesn't appear in teh File Misimatches would tend to indicate that the file itself is intact. I suspect that the problem is more likely to lie with permissions or registry entries somewhere.

    Your best bet is to contact WGA support (it should be free - make sure that you choose options for Activation/Validation/WGA in the dropdowns)
     
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
     
    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Thursday, March 24, 2011 10:39 PM
    Thursday, March 24, 2011 4:38 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    I've talked to MS reps from various departments for hours now-- they're hopeless.  Each rep seems to know exactly one thing and nothing else, and each is incapable of synchronizing modular results to come up with a complete answer.  Are you absolutely certain this couldn't be related to language packs my user has installed?  I know the file scan data doesn't quite fit, but everything else jives perfectly with what I've read about this problem.  He definitely has files in Asian language characters and I believe Windows 7 Professional edition doesn't support foreign languages well-- is that not correct?  From what I understand you need to upgrade to Windows 7 Ultimate to use non-system-default languages...  

     

    Whatever the case, I had hoped an in-place upgrade might sand-blast this problem, but unfortunately the upgrade hangs at 'setup is copying temporary files' until it times out and exits.  I expect this is due to the updated version of Windows on this machine being newer than the install DVD version, but when I check under installed updates I don't see any service packs; it's just (84) individual updates.  Do you have any advice for how I might get the in-place upgrade process to work (perhaps some trick to uninstall ALL updates), and would that even be likely to solve the problem? 

    Thursday, March 24, 2011 6:19 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    The ony time that the language problem occurs is when MUI Language packs are installed using a program called Vistalizator (see this thread...  http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/6f6b1cb8-e84e-4c1f-a2ac-181a77d2f772 ) - and the incidence of those has dropped dramatically since this time last year.

    Win7 will quite happily work with foreign laguages as data, and with foreign Keyboards, etc. What it cannot do unless the language packs are installed is actually appear throughout the system as more than the language in which it was initially installed. - i.e thngs like the Control Panel, and Windows menus, appearing in Spanish rather than Eng;lish.

    It may be worth trying to install SP1 - it has been known to fix some problems, but is definitely NOT  recommended route

    I really do recomend trying WGA support - once uyou get through see if you can get into 2nd-level support ASAP, as they tend to know what thry're talking about, rather than running off a script.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, March 24, 2011 7:12 PM
    Moderator