locked
Suddenly starting to receive WGA challenge prompts and can no longer use Windows update despite legitimate copy of Windows... RRS feed

  • Question

  • I have a Dell T5500 that we bought from Dell brand new more than 6 months ago.  When the computer came in (before even turning it on) we replaced the stock drive with new SSD drives (also from Dell and the same shipment) and installed Windows 7 Professional from the included OEM disk.  The Windows product key that was used is from the sticker that came on (and is still on) the computer chassis.  Everything was installed and has been running fine since... until a couple days ago.

    For no apparent reason, I now consistently get the Windows Genuine Advantage prompts telling me this is not a genuine version of Windows and offering a "resolve" button which opens IE and takes me to a "buy a copy of Windows" webpage.  I also can no longer do Windows update.  It tells me the service is not started, and when I try to manually start it, it gives an error (998).

    I downloaded the diagnostic tool.  The product key listed in the tool matches the sticker that's on the computer chassis.  here are the results from the diagnostic tool:

     

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE22

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-DRDX3-8R2R7-MRQGB

    Windows Product Key Hash: qaiogFBNsAhwDCUHra4fEzeqets=

    Windows Product ID: 00371-OEM-9306406-78768

    Windows Product ID Type: 8

    Windows License Type: COA SLP

    Windows OS version: 6.1.7600.2.00010100.0.0.048

    ID: {42CF8ADA-9F26-472C-9E5F-591823D7D37C}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.101026-1503

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{42CF8ADA-9F26-472C-9E5F-591823D7D37C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-MRQGB</PKey><PID>00371-OEM-9306406-78768</PID><PIDType>8</PIDType><SID>S-1-5-21-2649864640-3453072831-4091074455</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Precision WorkStation T5500  </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A05</Version><SMBIOSVersion major="2" minor="5"/><Date>20100412000000.000000+000</Date></BIOS><HWID>04BA3607018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Hawaiian Standard Time(GMT-10:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B10K   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel

    Activation ID: da22eadd-46dc-4056-a287-f5041c852470

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00186-064-078768-02-1033-7600.0000-0542011

    Installation ID: 003084875021192595327595298744691555063136296961878841

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: MRQGB

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 2/25/2011 1:19:26 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000000800

    Event Time Stamp: 2:19:2011 11:24

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

     

     

    HWID Data-->

    HWID Hash Current: NAAAAAMAAAABAAEAAgABAAAAAwABAAEA1gSw7040dNaIQAyaurAgfd6IwF6kpXKKvkGCKA==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC DELL   B10K   

      FACP DELL   B10K   

      HPET DELL   B10K   

      BOOT DELL   B10K   

      MCFG DELL   B10K   

      SSDT DELL st_ex

      ASF! DELL   B10K   

      TCPA DELL   B10K   

      ____ DELL   B10K   

      _RAT DELL   B10K   

      SLIC DELL   B10K   

      SSDT DELL st_ex

     

     

    I would greatly appreciate any help.  Thanks!

    Saturday, February 26, 2011 2:37 AM

Answers

  • "JKaina" wrote in message news:be8497f6-3800-479b-8f70-5b6ea1fcfc61...

    I have a Dell T5500 that we bought from Dell brand new more than 6 months ago.  When the computer came in (before even turning it on) we replaced the stock drive with new SSD drives (also from Dell and the same shipment) and installed Windows 7 Professional from the included OEM disk.  The Windows product key that was used is from the sticker that came on (and is still on) the computer chassis.  Everything was installed and has been running fine since... until a couple days ago.

    For no apparent reason, I now consistently get the Windows Genuine Advantage prompts telling me this is not a genuine version of Windows and offering a "resolve" button which opens IE and takes me to a "buy a copy of Windows" webpage.  I also can no longer do Windows update.  It tells me the service is not started, and when I try to manually start it, it gives an error (998).

    I downloaded the diagnostic tool.  The product key listed in the tool matches the sticker that's on the computer chassis.  here are the results from the diagnostic tool:

     

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE22

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-DRDX3-8R2R7-MRQGB

    Windows Product Key Hash: qaiogFBNsAhwDCUHra4fEzeqets=

    Windows Product ID: 00371-OEM-9306406-78768

    Windows Product ID Type: 8

    Windows License Type: COA SLP

    Windows OS version: 6.1.7600.2.00010100.0.0.048

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel

    Partial Product Key: MRQGB

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 2/25/2011 1:19:26 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000000800

    Event Time Stamp: 2:19:2011 11:24

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

     

     

    I would greatly appreciate any help.  Thanks!


    Your problem is caused by the File Mismatch highlighted above
    Try a System Restore back to about the 16th Feb  if you can - reboot again when complete, and see if the notification goes away. Run MGADiag and have a look to see if the mismatch has gone..
     
     
    If that doesn't work, or fails to fix the problem - or you don't want to use it, try a System File Checker - it will attempt to replace the broken file and any others it finds.
    System File Checker - Instructions
    Click on the Start button
    type in the Search  box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
     - the Elevated Command Prompt window should pop up
    At the Command prompt, type
     
    SFC   /SCANNOW
     
    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.
     
    run another MGADiag report, and post the results.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, February 26, 2011 4:16 AM
    Moderator