none
Windows 7 activation problem RRS feed

  • Question

  • I've been using my Acer desktop since last August with no activation issues. A message stating that Windows 7 Build 7601 is not genuinehas recently appeared. Diagnostics report below. Any help much appreciated. I've installed SP1 but cannot delete it and also KB971033, but seem to have uninstalled that. Thanks David

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: N/A, hr = 0xc0000022

    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7

    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=

    Windows Product ID: 00359-OEM-8992687-00006

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010300.1.0.003

    ID: {F5ACF5D3-4A11-40E9-8364-1D2AB57F3C2B}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Home Premium

    Architecture: 0x00000009

    Build lab: 7601.win7sp1_gdr.110408-1631

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Home and Student 2007 - 100 Genuine

    Microsoft Office Enterprise 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{F5ACF5D3-4A11-40E9-8364-1D2AB57F3C2B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1769265414-2123417823-45915740</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire X5900</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-B0</Version><SMBIOSVersion major="2" minor="6"/><Date>20100120000000.000000+000</Date></BIOS><HWID>E0D43E07018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>9087BF7C93FCF73</Val><Hash>vyGQtypyjZJ0kV/h+smmOj8q/1U=</Hash><Pid>81599-953-5706926-65522</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.

    Error: 0x80070426

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x0001000000000000

    Event Time Stamp: 5:27:2011 08:15

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered Service: sppsvc

     

     

    HWID Data-->

    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GGcPISxxrDUZz55BofgrFxd

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name      OEMID Value                  OEMTableID Value

      APIC                                                           ACRSYS                                APIC0850

      FACP                                                          ACRSYS                                FACP0850

      HPET                                                          ACRSYS                                OEMHPET

      MCFG                                                        ACRSYS                                OEMMCFG

      SLIC                                                            ACRSYS                                ACRPRDCT

      OEMB                                                        ACRSYS                                OEMB0850

      GSCI                                                           ACRSYS                                GMCHSCI

      AWMI                                                       ACRSYS                                OEMB0850

      SSDT                                                          DpgPmm                           CpuPm

     

     

     

    Tuesday, May 31, 2011 3:18 PM

Answers

  • Been out all day.....

    Task Manager doesn't work in Safe Mode.:(

    I think my only option now is to reinstall Windows and see what happens then, unless you can think of something else to try. However, thanks for the advice you have given, much appreciated. 


    David B McGill
    Thursday, June 2, 2011 2:51 PM

All replies

  • Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Tampered Service: sppsvc

     

    Click the Start Orb & type services.msc into the search menu. Click it, then maximize window. Scroll down to you find: Software Protection

    Right click it & select properties, Set the Startup type to: Automatic (Delayed Start) and click the OK button. Close the window down.

     

    This time, click the Start Orb & type in cmd.exe into the search menu. Right click it & select to run as Adminstrator.

    Type the following command: sfc /scannow & hit enter - Wait for the process to finish & then reboot the system.

    Then try & Validate Online using Internet Explorer.

    Tuesday, May 31, 2011 3:25 PM
  • Thanks Darin, however, no luck.

    Startup type is already set at Automatic (Delayed Start). However, I did run a scan as administrator which stated that "Windows Resource Protection did not find any integrity violations." I tried to validate online which directed me to this page http://www.microsoft.com/genuine/validate/ValidationResult.aspx?displaylang=en&PageName=validate which states that "files needed have been modified, removed or disabled".

    In System Properties under Windows Activation it says that the status is not available, neither is the product ID. Interestingly my son has an Acer notebook running W7 without SP1 and his Windows activation details are shown in System Properties, as are the details on my notebook which does not have SP1 installed either. It makes me wonder if SP1 is to blame somehow on my PC...

    KB971033 seems to have installed itself once again despite me setting the preference to my having the choice whether or not to install updates.

    David


    David B McGill
    Wednesday, June 1, 2011 9:17 AM
  • "davidmcg" wrote in message news:e6f0a44b-90b7-4ea4-b43e-0e7b3b102065...

    Thanks Darin, however, no luck.

    Startup type is already set at Automatic (Delayed Start). However, I did run a scan as administrator which stated that "Windows Resource Protection did not find any integrity violations." I tried to validate online which directed me to this page http://www.microsoft.com/genuine/validate/ValidationResult.aspx?displaylang=en&PageName=validate which states that "files needed have been modified, removed or disabled".

    In System Properties under Windows Activation it says that the status is not available, neither is the product ID. Interestingly my son has an Acer notebook running W7 without SP1 and his Windows activation details are shown in System Properties, as are the details on my notebook which does not have SP1 installed either. It makes me wonder if SP1 is to blame somehow on my PC...

    KB971033 seems to have installed itself once again despite me setting the preference to my having the choice whether or not to install updates.

    David


    David B McGill
    Not too surprising overall.
    What happens if you attempt to Start the service from the Services Console?
    What happens if you attempt to start it from an elevated  Command Prompt windows (NET START SPPSVC)
     

     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 1, 2011 9:41 AM
    Moderator
  • Hi Noel

    I tried both your suggestions but got the answer "The system cannot find the file specified". The file is present in the c\Windows\System32 folder. Properties state that it was created on 22/3/2011. I can't remember when I installed SP1 but it could have been around then. I see that drheaston had a similar problem back in April and it would seem that you resolved it for him. Also my Task Manager is not working or is very sluggish - I'm not giving a great deal of time to load but get a message saying that it has stopped working. Perhaps these are somehow linked.

    David


    David B McGill
    Wednesday, June 1, 2011 1:00 PM
  • "davidmcg" wrote in message news:296d1dd5-3aaa-417f-8179-6ceabf3d98cc...

    Hi Noel

    I tried both your suggestions but got the answer "The system cannot find the file specified". The file is present in the c\Windows\System32 folder. Properties state that it was created on 22/3/2011. I can't remember when I installed SP1 but it could have been around then. I see that drheaston had a similar problem back in April and it would seem that you resolved it for him. Also my Task Manager is not working or is very sluggish - I'm not giving a great deal of time to load but get a message saying that it has stopped working. Perhaps these are somehow linked.

    David


    David B McGill

    This sounds like either corruption problems, a failing disk, or malware.
     
    Try
    CHKDSK C:   /F
    from an Elevated Command prompt window - you'll be asked to confirm and reboot to be able to run it, and it may reboot a second time if it finds errors.
    Have a look in the Event Viewer for the results of the scan - if there are any bad sectors, it's time to think about a new HD.
     
    Download and install Malwarebytes Anti-Malware (www.malwarebytess.org ) - update it and run a full system scan. Delete anything it finds.
     
    drheaston's problem was not the same as yours - something had uninstalled the SPPSVC service there, while yours simply appears to be non-functional.
     
    Please open a Command Prompt window and use the following commands....
     
    sc qc sppsvc
    sc qprivs sppsvc
    sc qsidtype sppsvc
    sc sdshow sppsvc
     
    copy and paste the results into your response.
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 1, 2011 1:14 PM
    Moderator
  • Hi, here is the response to the commands: -  Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>sc qc sppsvc
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: sppsvc
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\sppsvc.exe
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Software Protection
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\NetworkService

    C:\Windows\system32>sc qprivs sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
            PRIVILEGES       : SeAuditPrivilege
                             : SeChangeNotifyPrivilege
                             : SeCreateGlobalPrivilege
                             : SeImpersonatePrivilege

    C:\Windows\system32>sc qsidtype sppsvc
    [SC] QueryServiceConfig2 SUCCESS

    SERVICE_NAME: sppsvc
    SERVICE_SID_TYPE:  UNRESTRICTED

    C:\Windows\system32>sc sdshow sppsvc

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
    CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCW
    DWO;;;WD)

    C:\Windows\system32>

    The malware log is as follows:

    Malwarebytes' Anti-Malware 1.51.0.1200
    www.malwarebytes.org

    Database version: 6744

    Windows 6.1.7601 Service Pack 1
    Internet Explorer 8.0.7601.17514

    01/06/2011 15:14:43
    mbam-log-2011-06-01 (15-14-43).txt

    Scan type: Quick scan
    Objects scanned: 200621
    Time elapsed: 10 minute(s), 59 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)

    I ran CHKDSK and looked at the Event Viewer. However, I'm not sure which section of the report I should be looking at to see if there are any bad sectors.

     

     

     


    David B McGill
    Wednesday, June 1, 2011 3:43 PM
  • "davidmcg" wrote in message news:82b3d032-edf5-4209-86f7-32a44b66e870...

    Hi, here is the response to the commands: -  Microsoft Windows [Version 6.1.7601]

     

    I ran CHKDSK and looked at the Event Viewer. However, I'm not sure which section of the report I should be looking at to see if there are any bad sectors.

     

     

     


    David B McGill

    For the CHKDSK log, filter the Windows Application report on the event source Wininit
    I can't see anything wrong with the SC output data :(
    Your MBAM report is obviously OK - which means that it's unlikely to be anything normal in the way of malware, if the machine is infested.
     
    Have you perhaps been using a Registry 'Cleaner' or 'Optimiser'??
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 1, 2011 3:56 PM
    Moderator
  • nothing appears in the CHKDSK log after I've filtered it.

    I haven't been using either a cleaner or optimiser, however, I've been using Belarc Advisor which is not the same thing:)

    Task Manager seems to have given up the ghost too:(


    David B McGill
    Wednesday, June 1, 2011 4:41 PM
  • "davidmcg" wrote in message news:79ab808d-796b-47ea-9a04-8c3a64975820...

    nothing appears in the CHKDSK log after I've filtered it.

    I haven't been using either a cleaner or optimiser, however, I've been using Belarc Advisor which is not the same thing:)

    Task Manager seems to have given up the ghost too:(


    David B McGill

    Belarc is fine - I use it myself :)
     
    Does Task Manager work OK in Safe Mode?
    If so, try a Clean Boot to troubleshoot at least that part of the problem - http://support.microsoft.com/kb/929135
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, June 1, 2011 6:56 PM
    Moderator
  • Been out all day.....

    Task Manager doesn't work in Safe Mode.:(

    I think my only option now is to reinstall Windows and see what happens then, unless you can think of something else to try. However, thanks for the advice you have given, much appreciated. 


    David B McGill
    Thursday, June 2, 2011 2:51 PM
  • "davidmcg" wrote in message news:dc1819a3-382f-4076-866b-b74b2e92deb2...

    Been out all day.....

    Task Manager doesn't work in Safe Mode.:(

    I think my only option now is to reinstall Windows and see what happens then, unless you can think of something else to try. However, thanks for the advice you have given, much appreciated. 


    David B McGill
    Unfortunately, with only a System Recovery set, a repair install is not possible - you'll have to see if you can find someone with a Retail copy of Win 7 that you can borrow for the job.
     
    If you opt to use the System Recovery software, remember to back up your data to external media first! - it WILL wipe the entire contents of the C: drive (at least) while it does its job.
     
     

     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, June 2, 2011 3:22 PM
    Moderator