locked
Windows not Valid RRS feed

  • Question

  • Hi,

    First, thank you in advance for your help!!

    Issue:

    Getting windows not valid erro; An unauthorized change was made to windows error; unable to check for updates;

    Also went into "Services" but can't remember what services I enabled or disabled (i.e. this may be my problem).

    Just in case, I did run the MGADiagnostics and the results are below:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-JY4TM-M9CG7-QMQRR
    Windows Product Key Hash: mo55AZoK/0f779F9NN9TDIWvxXE=
    Windows Product ID: 00371-OEM-9046691-81943
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {2C38300A-B6AE-4BCB-82D7-BA435BC18BA0}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_ldr.170913-0600
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2C38300A-B6AE-4BCB-82D7-BA435BC18BA0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QMQRR</PKey><PID>00371-OEM-9046691-81943</PID><PIDType>3</PIDType><SID>S-1-5-21-3438618737-1662897445-662162877</SID><SYSTEM><Manufacturer>PowerSpec</Manufacturer><Model>B648</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0808</Version><SMBIOSVersion major="2" minor="7"/><Date>20130808000000.000000+000</Date></BIOS><HWID>66B83607011A00F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MEI</OEMID><OEMTableID>MEI_PSWb</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>4638D699DAA9F36</Val><Hash>jH56l5Ej4Fm/B6zGMJ+4ufc+TAE=</Hash><Pid>81602-923-8756862-68515</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000022' to display the error text.
    Error: 0xC0000022

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 9:5:2018 08:23
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: MAAAAAEAAQABAAEAAQABAAAAAwABAAEAln3EcHqHylW2JxBrxJZAyDoOPsRUIsj2

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC             MEI        MEI_PSWb
      FACP            MEI        MEI_PSWb
      HPET            MEI        MEI_PSWb
      MCFG            MEI        MEI_PSWb
      FPDT            MEI        MEI_PSWb
      ASF!            INTEL          HCG
      MSDM            MEI        MEI_PSWb
      SLIC            MEI        MEI_PSWb
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      DMAR            INTEL         HSW


    Saturday, May 26, 2018 12:05 AM

Answers

  • Your second MGADiag report shows the following errors:

    Windows Activation Technologies-->
     HrOffline: 0x8004FE22
     HrOnline: N/A
     HealthStatus: 0x0002000000000000
     Event Time Stamp: 5:26:2018 00:03
     ActiveX: Registered, Version: 7.1.7600.16395
     Admin Service: Registered, Version: 7.1.7600.16395
     HealthStatus Bitmask Output:
     Tampered Service: sppuinotify

    The first one shows these errors...

    Licensing Data-->
     On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000022' to display the error text.
     Error: 0xC0000022 
    
     Windows Activation Technologies-->
     HrOffline: 0x8004FE21
     HrOnline: N/A
     HealthStatus: 0x0001000000000000
     Event Time Stamp: 9:5:2018 08:23
     ActiveX: Registered, Version: 7.1.7600.16395
     Admin Service: Registered, Version: 7.1.7600.16395
     HealthStatus Bitmask Output:
     Tampered Service: sppsvc

    We probably now have a fair amount of work to do to fix this :(

    The original error may have resulted from a number of things - among them the most common being mis-set read-only attributes in the System32 folder.

    The later error shows a different tampered service - probably due to your fiddling with the service involved.

    We'll need to take a look at that service in detail to be able to see what to do...

    Please open an Elevated (Administrator) Command Prompt window and use the following commands....

     

    net start sppuiniotify

    sc qc sppuiniotify

    sc queryex sppuiniotify

    sc qprivs sppuiniotify

    sc qsidtype sppuiniotify

    sc sdshow sppuiniotify

    Copy and paste the output to your reply


      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, May 28, 2018 10:04 AM
    Moderator

All replies

  • Hi,

    I decided to go back into "services" and looked at the "Dependencies" and reset some services and no longer have the error message "Windows Not Genuine". I'm not sure which service eliminated the error but it no longer shows up. Below I have posted New MGA Diagnostics results:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-JY4TM-M9CG7-QMQRR
    Windows Product Key Hash: mo55AZoK/0f779F9NN9TDIWvxXE=
    Windows Product ID: 00371-OEM-9046691-81943
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {2C38300A-B6AE-4BCB-82D7-BA435BC18BA0}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_ldr_escrow.180422-1430
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{2C38300A-B6AE-4BCB-82D7-BA435BC18BA0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QMQRR</PKey><PID>00371-OEM-9046691-81943</PID><PIDType>3</PIDType><SID>S-1-5-21-3438618737-1662897445-662162877</SID><SYSTEM><Manufacturer>PowerSpec</Manufacturer><Model>B648</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0808</Version><SMBIOSVersion major="2" minor="7"/><Date>20130808000000.000000+000</Date></BIOS><HWID>66B83607011A00F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MEI</OEMID><OEMTableID>MEI_PSWb</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>4638D699DAA9F36</Val><Hash>jH56l5Ej4Fm/B6zGMJ+4ufc+TAE=</Hash><Pid>81602-923-8756862-68515</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00180-466-981943-02-1033-7601.0000-1352018
    Installation ID: 000215403883943481777540906552247580654006052363606235
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: QMQRR
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 5/27/2018 10:16:17 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0002000000000000
    Event Time Stamp: 5:26:2018 00:03
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppuinotify


    HWID Data-->
    HWID Hash Current: LgAAAAEAAQABAAEAAQABAAAAAgABAAEAln3EcHqHylW2JxBrxJZAyD7EVCLI9g==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            MEI        MEI_PSWb
      FACP            MEI        MEI_PSWb
      HPET            MEI        MEI_PSWb
      MCFG            MEI        MEI_PSWb
      FPDT            MEI        MEI_PSWb
      ASF!            INTEL          HCG
      MSDM            MEI        MEI_PSWb
      SLIC            MEI        MEI_PSWb
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      SSDT            PmRef        Cpu0Ist
      DMAR            INTEL         HSW


    Sunday, May 27, 2018 3:31 PM
  • Your second MGADiag report shows the following errors:

    Windows Activation Technologies-->
     HrOffline: 0x8004FE22
     HrOnline: N/A
     HealthStatus: 0x0002000000000000
     Event Time Stamp: 5:26:2018 00:03
     ActiveX: Registered, Version: 7.1.7600.16395
     Admin Service: Registered, Version: 7.1.7600.16395
     HealthStatus Bitmask Output:
     Tampered Service: sppuinotify

    The first one shows these errors...

    Licensing Data-->
     On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC0000022' to display the error text.
     Error: 0xC0000022 
    
     Windows Activation Technologies-->
     HrOffline: 0x8004FE21
     HrOnline: N/A
     HealthStatus: 0x0001000000000000
     Event Time Stamp: 9:5:2018 08:23
     ActiveX: Registered, Version: 7.1.7600.16395
     Admin Service: Registered, Version: 7.1.7600.16395
     HealthStatus Bitmask Output:
     Tampered Service: sppsvc

    We probably now have a fair amount of work to do to fix this :(

    The original error may have resulted from a number of things - among them the most common being mis-set read-only attributes in the System32 folder.

    The later error shows a different tampered service - probably due to your fiddling with the service involved.

    We'll need to take a look at that service in detail to be able to see what to do...

    Please open an Elevated (Administrator) Command Prompt window and use the following commands....

     

    net start sppuiniotify

    sc qc sppuiniotify

    sc queryex sppuiniotify

    sc qprivs sppuiniotify

    sc qsidtype sppuiniotify

    sc sdshow sppuiniotify

    Copy and paste the output to your reply


      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, May 28, 2018 10:04 AM
    Moderator