Windows 7 Home Premium 64 Bit Build 7601 not genuine

All replies

• 

  

  0

  Sign in to vote

  (Have you EVER used Norton software on this machine?)

  Please run the following commands, and post the results.

  REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

   They may show something

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, May 15, 2014 12:35 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hello Noel,

                    I was hoping you would weigh in on this as I have been seeing your name here and on another forum where you have helped others such as myself. I have in fact used Norton software on this machine; the Norton Security Suite was installed quite some time ago when I went to Comcast for my internet service. I have followed your instructions and the results are as follows:

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
      DisplayName    REG_SZ    Security Processor Loader Driver
      ErrorControl    REG_DWORD    0x3
      Start    REG_DWORD    0x0
      Type    REG_DWORD    0x1
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
      0    REG_SZ    Root\LEGACY_SPLDR\0000
      Count    REG_DWORD    0x1
      NextInstance    REG_DWORD    0x1
  
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
  DR /S
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
      NextInstance    REG_DWORD    0x1
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
      Service    REG_SZ    spldr
      Legacy    REG_DWORD    0x1
      ConfigFlags    REG_DWORD    0x401
      Class    REG_SZ    LegacyDriver
      ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
      DeviceDesc    REG_SZ    Security Processor Loader Driver
      Capabilities    REG_DWORD    0x0
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
  
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
  VC
  ERROR: The system was unable to find the specified registry key or value.
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
  SVC
  ERROR: The system was unable to find the specified registry key or value.
  
  C:\Windows\system32>

  And there you have it. What "it" in fact is I have no idea but perhaps soon I will. 

  Thanks for your help.

  mb

  
  

  
  

  Thursday, May 15, 2014 10:58 PM
• 

  

  0

  Sign in to vote

  Let's try cleaning the system a little...

  Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

  Close all other programs, then run the tool. When it's complete, reboot the machine  whether it asks for it or not.

  After the reboot, open an Elevated Command Prompt, and run the following command

  NETSH WINSOCK RESET

  You'll be advised to reboot - do so.

  then post another MGADiag report.

  Assuming there's no change, then we need to adjust one of the parameters shown in your data above - we'll try the simpler way first...

  Open Device Manager

  Click on View in the menu bar

  Click on Show hidden devices

  Navigate to 'Non-Plug and Play Drivers'

  Find the 'Security Processor Loader Driver' and
  right-click on it.

  Select Properties.

  In the Driver tab...

  Select Boot from the Type dropdown bar

  Click Start

  Click OK, and reboot

  Post another MGADiag
  report.

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Friday, May 16, 2014 6:49 AM

  Moderator
• 

  

  0

  Sign in to vote

  I ran the Norton Removal Tool and after reboot ran the NETSH WINSOCK RESET the MGADiag report is below

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0x8004FE21
  Cached Online Validation Code: N/A, hr = 0xc0000022
  Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
  Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
  Windows Product ID: 00359-OEM-8992687-00006
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {F1CCA4AF-0020-41C5-AA00-12707418C81A}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.130318-1533
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{F1CCA4AF-0020-41C5-AA00-12707418C81A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-810225653-2255882564-587957895</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>FX6860</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20110419000000.000000+000</Date></BIOS><HWID>B7C33B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
  Error: 0x80070426 
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0001000000000000
  Event Time Stamp: 5:14:2014 09:26
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered Service: sppsvc

  HWID Data-->
  HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEAln3iFeYqNv+SqKwlYj1SFHLztBUucw==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ACRSYS ACRPRDCT
    FACP ACRSYS ACRPRDCT
    HPET ACRSYS ACRPRDCT
    MCFG ACRSYS ACRPRDCT
    SSDT ACRSYS ACRPRDCT
    SLIC ACRSYS ACRPRDCT

  If nothing changes I will go to the next step

  Thank You

  mb

  Friday, May 16, 2014 8:53 PM
• 

  

  0

  Sign in to vote

  I was unable to run the boot of the security processor loader driver. When I tried to start I got a popup saying the system encountered the following error while attempting to start the service. The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. When I went to the General Tab and tried to enable the driver Windows was not able to enable this device. 

  Friday, May 16, 2014 9:57 PM
• 

  

  0

  Sign in to vote

  That's as expected - the registry has been locked t prevent tampering.

  Open Regedit and navigate to the

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR

  Key

  Export it to a reg file for safety!

  Right-click on the key name, and Select Permissions,

  Click on Advanced, then the Owner tab

  Make sure that Administrators is the owner, and put a tick in the 'Replace owner...' box at the bottom

  Click OK once

  add Administrators to the 'Groups or Usernames' list, and give them Full permissions

  CLICK OK

  Now move to the 0000 subkey

  Double-click on the ConfigFlags entry

  Change the data value to 400 (make sure that the radio-button is in 'Hexadecimal') and click OK

  Exit Regedit, and reboot.

  Post a new MGADiag report

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Marked as answer by Mark Bolding Saturday, May 17, 2014 12:06 PM

  Saturday, May 17, 2014 7:27 AM

  Moderator
• 

  

  0

  Sign in to vote

  Good Morning Noel, 

                                I have followed your instructions and found that the ConfigFlags value was 400 in Hexadecimal mode. Report is as follows

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
  Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
  Windows Product ID: 00359-OEM-8992687-00006
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {F1CCA4AF-0020-41C5-AA00-12707418C81A}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.130318-1533
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{F1CCA4AF-0020-41C5-AA00-12707418C81A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-810225653-2255882564-587957895</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>FX6860</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20110419000000.000000+000</Date></BIOS><HWID>B7C33B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00178-926-800006-02-1033-7601.0000-1052011
  Installation ID: 003933463855755895116024588643594021492350618692977484
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 7QJB7
  License Status: Licensed
  Remaining Windows rearm count: 2
  Trusted time: 5/17/2014 7:21:53 AM
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 5:14:2014 09:26
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  
  
  HWID Data-->
  HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEAln3iFeYqNv+SqKwlYj1SFHLztBUucw==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ACRSYS ACRPRDCT
    FACP ACRSYS ACRPRDCT
    HPET ACRSYS ACRPRDCT
    MCFG ACRSYS ACRPRDCT
    SSDT ACRSYS ACRPRDCT
    SLIC ACRSYS ACRPRDCT
  
  

  Saturday, May 17, 2014 11:29 AM
• 

  

  0

  Sign in to vote

  Hey There Noel,

                           I do believe victory is yours! Windows now shows as activated and my Product ID is displayed. 107 Windows updates are available which I have started installing - I hope that is not jumping the gun? Is it also o.k. to re-install my Norton Security Suite? I appreciate your help and am amazed how quickly you got to the root of the problem.

  Thank You

  Mark Bolding

  Saturday, May 17, 2014 12:05 PM
• 

  

  0

  Sign in to vote

  The report looks clear, now :)

  I have to say that if it was my machine, I'd not let Norton anywhere near it. It's way too intrusive for my taste, and requires too much user input to be a 'fail-safe' option in my opinion.

  Having said that, if you're used to the hassles involved, then reinstalling is an option. this error does appear to be significantly related to Norton.

  Good luck with it, however you choose to go.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Saturday, May 17, 2014 4:32 PM

  Moderator