Windows 7 No Longer Genuine

All replies

• 

  

  1

  Sign in to vote

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034 

  Historically, we've not been able to solve this error short of a repair (or more often and clean) install.

  Having said that - we've learned a few tricks since the last time it appeared, so...

  Please run a full CHKDSK and SFC scan....

   

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  CHKDSK C: /R

   

  and hit the Enter key.

  You will be told that the drive is locked,

  and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

   

  The CHKDSK will take a few hours depending on the size of the drive, so be patient!

   

  After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

  then run the SFC.

   

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  SFC /SCANNOW

   

  and hit the Enter key

   

  Wait for the scan to finish - make a note of any error messages - and then reboot.

   

   

  Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

   

  Post a new MGADiag report with details of any error messages encountered.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, April 3, 2013 10:51 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for the help, I hope we can sort this out...

  Here is the CHKDSK Log: http://sdrv.ms/16uPeCo
  Here is the SFC error: http://sdrv.ms/14S7ZDx
  Here is the new MGADiag Report:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-VQVQ2-PBBQR-XBYDY
  Windows Product Key Hash: kL25Nac5Mz92Ab3DJVKF8x0X4Os=
  Windows Product ID: 00426-293-1233757-85376
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.001
  ID: {C6911370-873A-4388-9F76-5B5D627BC8CB}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Ultimate
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.130104-1431
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\Josh\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{C6911370-873A-4388-9F76-5B5D627BC8CB}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-XBYDY</PKey><PID>00426-293-1233757-85376</PID><PIDType>5</PIDType><SID>S-1-5-21-1686329845-1310838231-3785518279</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7673</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.11</Version><SMBIOSVersion major="2" minor="7"/><Date>20110414000000.000000+000</Date></BIOS><HWID>29DC3607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034 
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 12:14:2012 03:49
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  
  
  HWID Data-->
  HWID Hash Current: QgAAAAMABAABAAIAAgAEAAAAAgABAAEAln06aDJkTjR3Fkrd4lhiNL5WAsDOcAgPlIneiE6RzDQG6TBHOCbcVi5z
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ALASKA A M I
    FACP ALASKA A M I
    HPET ALASKA A M I
    MCFG ALASKA A M I
    SSDT AMICPU PROC
    ASF! INTEL HCG
  
  

  Friday, April 5, 2013 4:39 AM
• 

  

  1

  Sign in to vote

  I don't recall seeing this error in an SFC report before....

  2013-04-04 18:18:32, Info                  CSI    00000346 [SR] Committing transaction
  2013-04-04 18:18:32, Info                  CSI    00000347 Creating NT transaction (seq 2), objectname [6]"(null)"
  2013-04-04 18:18:32, Info                  CSI    00000348 Created NT transaction (seq 2) result 0x00000000, handle @0xce8
  2013-04-04 18:18:32, Error                 CSI    00000349 (F) STATUS_CANNOT_DELETE #7062596# from RtlRunPrimitiveOperationsFromCallbacksAgainstSil(...)[gle=0xd0000121]
  2013-04-04 18:18:32, Info                  CSI    0000034a [SR] Unable to complete Verify and Repair transaction because some of the files that need to be repaired are in use. A reboot is required to complete this operation.
  

  I think your best bet is probably to reboot, and run another SFC /SCANNOW and we'll see if that manages to complete fully.

  Post the new CBS.log file, and the new link.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Friday, April 5, 2013 8:17 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hope that's not a bad sign, also I really appreciate the help.

  Here are the results from the SFC /SCANNOW, and the link to the updated CBS.log file:

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Users\Josh>sfc /scannow
  
  Beginning system scan.  This process will take some time.
  
  Beginning verification phase of system scan.
  Verification 100% complete.
  
  Windows Resource Protection did not find any integrity violations.
  
  C:\Users\Josh>

  CBS.log file: http://sdrv.ms/Z2qjpt

  Monday, April 8, 2013 1:17 AM
• 

  

  0

  Sign in to vote

  At some point, it seems to have sorted out its problems, there are no signs of any lingering problems in the SFC report now

  The question is - has that also affected the MGADiag report? Please post a new one, and we'll see.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Monday, April 8, 2013 6:07 AM

  Moderator
• 

  

  0

  Sign in to vote

  Sounds good, see below for the new MGADiag report (looks like the same licensing error as before...)

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 50
  Cached Online Validation Code: N/A, hr = 0xc0000034
  Windows Product Key: *****-*****-VQVQ2-PBBQR-XBYDY
  Windows Product Key Hash: kL25Nac5Mz92Ab3DJVKF8x0X4Os=
  Windows Product ID: 00426-293-1233757-85376
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.001
  ID: {C6911370-873A-4388-9F76-5B5D627BC8CB}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Ultimate
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.130104-1431
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\Josh\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{C6911370-873A-4388-9F76-5B5D627BC8CB}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-XBYDY</PKey><PID>00426-293-1233757-85376</PID><PIDType>5</PIDType><SID>S-1-5-21-1686329845-1310838231-3785518279</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7673</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.11</Version><SMBIOSVersion major="2" minor="7"/><Date>20110414000000.000000+000</Date></BIOS><HWID>29DC3607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000034' to display the error text.
  Error: 0xC0000034 
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 12:14:2012 03:49
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  
  
  HWID Data-->
  HWID Hash Current: QgAAAAMABAABAAIAAgAEAAAAAgABAAEAln06aDJkTjR3Fkrd4lhiNL5WAsDOcAgPlIneiE6RzDQG6TBHOCbcVi5z
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC ALASKA A M I
    FACP ALASKA A M I
    HPET ALASKA A M I
    MCFG ALASKA A M I
    SSDT AMICPU PROC
    ASF! INTEL HCG
  
  

  Monday, April 8, 2013 6:59 PM
• 

  

  0

  Sign in to vote

  Unfortunately, the prognosis is not good.

  In the past, these 0xC0000034 errors have defeated me, and MS support (who don't seem to know that the error is an 'Access Denied' one).

  A repair install usually fails, and the only cure appears to be a clean install.

  If you want to keep on working  on it here, I'm happy to do so - but you are likely to still end up with a reinstall.

  You can always try MS WGA Support....

  WGA Support can be found here
  
  North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
  
   Outside North America: http://support.microsoft.com/contactus/?ws=support#tab0
  
   
  
  Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!    

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Sunday, April 14, 2013 5:35 PM
  • Marked as answer by george1009Editor Saturday, April 20, 2013 11:00 PM

  Tuesday, April 9, 2013 6:39 PM

  Moderator
• 

  

  0

  Sign in to vote

  Do you have any idea what may be causing this error, and how that may have been prompted? I'm not very excited to do a clean install, as the computer also functions as a HTPC, which I spent a significant amount of time configuring to work properly. I'd also like to avoid this situation in the future, if there is a chance something that I did caused the error...
  
  If you don't mind continuing to troubleshoot, that would be appreciated. If we can't resolve it here, I'll plan on escalating to WGA support.
  
  Thanks for the help.

  
  

  Tuesday, April 9, 2013 9:14 PM
• 

  

  0

  Sign in to vote

  AS I say, as far as I am aware, this is an Access Denied error - but that brings the question of 'access to what'?

  I suspect it's a registry problem - but since that's a rather large database it's difficult to pin down.

  Since you seem to want to carry on, please upload your

  C:\Windows\System32\winevt\logs\Application.evtx and System.evtx files to your SkyDrive , and I'll see if I can find any pointers in that to give us a clue.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, April 9, 2013 9:23 PM

  Moderator
• 

  

  0

  Sign in to vote

  Here are the evtx files: http://sdrv.ms/10Rf5RG

  Tuesday, April 9, 2013 9:43 PM
• 

  

  0

  Sign in to vote

  You have some fairly major problems with drivers and services.

  Display driver nvlddmkm stopped responding - many times!
  The nvUpdatusService service was unable to log on as .\UpdatusUser
  The Desktop Window Manager has exited with code (0x40010004)- The Desktop Window Manager was unable to start because a composited theme is not in use
  The NVIDIA Update Service Daemon service failed to start
  The SBSD Security Center Service service failed to start
  The Remote Potato Service service failed to start
  The ShowAnalyzerMaster service failed to start due to the following error: The system cannot find the file specified.
  License policy-cache has expired because it was not updated within expected duration.

  The last is I think the one that's causing your WGA problem.

  Having said that, your system is showing a very high number of sudden shutdowns - often a sign of hardware problems (most often overheating or power supply problems).

  You at the least need to uninstall the NVidia graphics drivers, and install a new set from the manufacturer (NOT Windows update!)

  I can find nothing on the web about the policy-cache problem, so I'm going to have to have a play tomorrow and see if I can replicate some of the other errors, and that one.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, April 9, 2013 11:00 PM

  Moderator
• 

  

  0

  Sign in to vote

  To provide some more context around the issues I've been having with my display driver and video card, about a week or two ago there was a serious issue where the video card kept overheating and the driver crashing (with almost no provocation - even just using chrome or outlook would crash it every few minutes). I tried rolling back, uninstalling, and updating the driver (multiple times, from the nvidia site - windows update has not even been working since the WGA errors). I then realized that my windows antivirus was not enabled (I think due to the WGA problem), so tried re-installing that. 

  I got the AV installed, but then my computer kept freezing and crashing constantly, so I did a system restore in safe mode (i was not able to boot in regular mode without crashing). After that, the video driver issues and crashing appear to have stopped.

  I wanted to try restoring my pc to a point before I was having the WGA issues, but unfortunately the restore points did not go far enough back.

  Please let me know if the file indicated video driver crashes in the past week, and I will re-install that driver (I can do it anyway if you think it makes sense). Let me know if you want me to describe what some of the other problems may be (I don't know anything about the license policy-cache, but can talk to the Remote Potato, Windows Theme, SHowAnalyzerMaster).

  
  

  • Edited by JDW317 Tuesday, April 9, 2013 11:20 PM

  Tuesday, April 9, 2013 11:20 PM
• 

  

  0

  Sign in to vote

  All the errors I highlighted are since 31/3/2013 - although I see that the last nvlddmkm  error was on 2nd April, so that would fit with your reinstall/repair, the Updatus User problem was still present on the 6th.

  Your first notification appears to have been on 31/3 (which is why I started reading the logs then)... looking in the Application log, I see the first 0xc0000034 error was actually on 5 march :(

  Hmmm - this coincides with another error, which seems to be related to Alcohol 120% - which is known to be incompatible with Win7.

  Also there's this error, shortly before...

  The Software Protection service terminated with the following error: The media is write protected.

  ...which appears only one time.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, April 10, 2013 12:10 AM

  Moderator
• 

  

  0

  Sign in to vote

  I finally solved this problem after several years and work-arounds.

  In my case, on Windows 7 Home Premium SP1, my memory was finally jogged that this problem started appearing around the same time that I activated Tibetan keyboard layout as an optional keyboard service, as implemented in c:\windows\system32\KBDTIPRC.DLL, version 6.1.7600.16385.

  When I removed the optional keyboard layout (Control Panel/Region and Language/Keyboards and Languages/Change keyboards...), the problem disappeared! The "not genuine" screen display notification had been appearing like clockwork 2 hours after every boot. It was not appearing on a black desktop but rather on normal wallpaper display and could be cleared with slmgr -rearm.

  I don't know if the problem was specific to Tibetan dll or if the keyboard service loader (input.dll) sets a flag to check windows license when more than one keyboard layout is available. I have not tested with other language keyboard layouts. I was getting "License policy-cache has expired because it was not updated within expected duration." in event log.

  Tuesday, October 1, 2019 9:27 PM
• 

  

  0

  Sign in to vote

  Updating to Windows 7 Service Pack 1 would have installed a newer version of that.

  ---

  Carey Frisch

  • Proposed as answer by Carey FrischMVP, Moderator Saturday, October 5, 2019 7:49 AM
  • Marked as answer by Carey FrischMVP, Moderator Friday, October 11, 2019 4:45 AM

  Wednesday, October 2, 2019 6:50 AM

  Moderator
• 

  

  0

  Sign in to vote

  Don't know why I had that version with SP1. Maybe at some point sfc /scannow reverted to original. Or maybe Tibetan keyboard wasn't included in original distro and I had to download it. Don't recall.

  Last 3 days no "Windows not Genuine" message. I kind of miss it. Thanks to AVG. Their latest update blocked execution of VBS files so I could no longer run slmgr.vbs to clear the display. That broke my workaround.

  For anyone who may be interested, I was calling the following bat file from an event log trigger on the "License policy-cache has expired because it was not updated within expected duration" event. In my bat script, first the registry's rearm count key is reset to zero. Then slmgr.vbs is called to re-inform Windows that my copy is genuine and please quit bothering me. Finally, the Windows Script Host popup message window is automatically closed.
  

  - Rich Dorfman

  reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform" /v SkipRearm /t REG_DWORD /d 00000001 /f
  start slmgr -rearm
  REM Wait for 10 seconds, press CTRL+C to quit ...
  TIMEOUT /T 10 /NOBREAK
  for /f "tokens=2 delims=," %%a in ('
      tasklist /fi "imagename eq WScript.exe" /v /fo:csv /nh 
      ^| findstr /r /c:"Windows Script Host"
  ') do taskkill /pid %%a

  
  

  
  

  • Edited by webhead99 Friday, October 4, 2019 5:49 PM

  Friday, October 4, 2019 4:02 PM