Answered by:
Windows 7 Validates but then reprompts later for validation

Question
-
Hello,
I have a Windows 7 computer built from an image that we use in our office. All other PCs are fine, but this one will prompt every now and then saying it's not genuine. I can run the activate windows from the start menu and it activates just fine. But if I visit the online activation site (http://www.microsoft.com/genuine/validate/) it says files are missing or have been changed. I ran the diagnostic tool with the following results. I plan on running the sfc /scannow tool to see if it corrects it, but any other suggestions or ideas on how this happened?
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-QG3H9
Windows Product Key Hash: n/Q/x17fcOby4TtLq/pkodDK5Hs=
Windows Product ID: 55041-001-4557223-86235
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {9DA50D0E-ED84-4C96-B579-EC532169BA27}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000000
Build lab: 7600.win7_gdr.101026-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Edition 2003 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{9DA50D0E-ED84-4C96-B579-EC532169BA27}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-001-4557223-86235</PID><PIDType>6</PIDType><SID>S-1-5-21-1616609596-1091069125-15216759</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 380 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="5"/><Date>20101206000000.000000+000</Date></BIOS><HWID>C0BA3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>B10K </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>5412E3ABA728502</Val><Hash>LoQrh1aB33aVP+AQhXJIFcLNaQM=</Hash><Pid>73931-641-9316187-57397</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7600.16385Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-001-455722-03-1033-7600.0000-2362011
Installation ID: 017921015434783560902566493726813641989550963981349214
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: QG3H9
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 8/24/2011 1:36:42 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: LgAAAAEAAwABAAEAAAABAAAAAQABAAEAeqjM+UJhqnbK5z52JixK37K0mmNGyg==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL B10K
FACP DELL B10K
HPET DELL B10K
BOOT DELL B10K
MCFG DELL B10K
SSDT DELL st_ex
TCPA DELL B10K
____ DELL B10K
SLIC DELL B10K
SSDT DELL st_ex
SSDT DELL st_ex
SSDT DELL st_exWednesday, August 24, 2011 7:08 PM
Answers
-
"ChildInt" wrote in message news:159ff924-63f6-4d1c-ba09-5d33a71b2ddf...I downloaded that and it installed a patch. Was there something else that tool is supposed to do?CheckSUR? – if you read the article I linked to, it produces a report in the CBS folder – feel free to email it to me at ngsATcrashfixpcDOTcoDOTuk (make the obvious changes) or put it up on your SkyDrive and post the link.Basically, it checks a lot of settings and files in the OS, and fixes those things it knows how to fix – unfortunately it’s not all-knowing, but it does get updated every so often (at least as I understand it), so it gets better over time.Please post another MGADiag report – it may show some difference.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Wednesday, August 31, 2011 8:21 PM
Thursday, August 25, 2011 10:05 PMModerator
All replies
-
It appears you have installed a "Volume License" version of Windows 7 Professional. The only product key that will work with this version is a Volume License product key. So the question is, are you typing in a genuine Volume License product key or are you attempting to type in a Retail or OEM Windows 7 product key?
Carey FrischWednesday, August 24, 2011 10:02 PMModerator -
"ChildInt" wrote in message news:f6c470d2-ec53-4441-bf77-bd011a95303d...
Hello,
I have a Windows 7 computer built from an image that we use in our office. All other PCs are fine, but this one will prompt every now and then saying it's not genuine. I can run the activate windows from the start menu and it activates just fine. But if I visit the online activation site (http://www.microsoft.com/genuine/validate/) it says files are missing or have been changed. I ran the diagnostic tool with the following results. I plan on running the sfc /scannow tool to see if it corrects it, but any other suggestions or ideas on how this happened?
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-QG3H9
Windows Product Key Hash: n/Q/x17fcOby4TtLq/pkodDK5Hs=
Windows Product ID: 55041-001-4557223-86235
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7600.2.00010100.0.0.048
File Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100Windows Activation Technologies-->
HrOffline: 0x8004FE21
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sysSince you are using an MAK license, I suggest that you contact your System Administrator for assistance – there’s likely to be very little that we can do in the forums.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, August 24, 2011 10:20 PMModerator -
Since you are using an MAK license, I suggest that you contact your System Administrator for assistance – there’s likely to be very little that we can do in the forums.
I am the system admin, that's why I'm here. :-)As for the Volume license key, it should be part of the image. But just to make sure, I went through the process of changing the key and inputed my volume license key. No change.
The SFC program also did not fix the issue. I could retry running the diagnostics again though see if changed anything.
Thursday, August 25, 2011 12:21 PM -
"ChildInt" wrote in message news:98614b8a-93ef-4e77-8f80-9a90d535ac0a...Since you are using an MAK license, I suggest that you contact your System Administrator for assistance – there’s likely to be very little that we can do in the forums.
I am the system admin, that's why I'm here. :-)As for the Volume license key, it should be part of the image. But just to make sure, I went through the process of changing the key and inputed my volume license key. No change.
The SFC program also did not fix the issue. I could retry running the diagnostics again though see if changed anything.
The set of errors in this case are a familiar one – which we haven’t been able to sort in the forums. I suggest that you see if you can use your volume licensing contacts to assist, or use WGA Support.(just for interest, what AV is in use?)WGA Support can be found here-North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
Outside North America:
http://support.microsoft.com/contactus/?ws=support#tab0
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, August 25, 2011 12:35 PMModerator -
As one can tell by your MGA Report, you have significant system file corruption that would require a reinstallation of the Windows 7 operating sytem:
File Scan Data-->
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Carey FrischThursday, August 25, 2011 12:44 PMModerator -
There isn't a simple fix other than reinstalling? I find it hard to believe there are all these "corrupt" files on a machine only a couple months old that runs great other than this problem.
Is it possible there is a simpler program, like WGA looking for the wrong file versions, like Pre SP1 vs SP1?
Just for giggles, I looked at some files in question on a Win 7 machine that validates just fine and compared them to the computer in question. They are clearly older versions. Do I maybe need to reinstall SP1?
?
Thursday, August 25, 2011 6:01 PM -
"ChildInt" wrote in message news:5c7aac42-c192-429b-89c1-8f53bbc27d9c...
There isn't a simple fix other than reinstalling? I find it hard to believe there are all these "corrupt" files on a machine only a couple months old that runs great other than this problem.
Is it possible there is a simpler program, like WGA looking for the wrong file versions, like Pre SP1 vs SP1?
Just for giggles, I looked at some files in question on a Win 7 machine that validates just fine and compared them to the computer in question. They are clearly older versions. Do I maybe need to reinstall SP1?
According to the report, SP1 isn’t installed at all – certainly it’s worth a shot installing it, but don’t hold your breath.One other thing that may be worth a try first is the CheckSUR tool - http://support.microsoft.com/kb/947821
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, August 25, 2011 6:18 PMModerator -
I just noticed that as well. I'm installing SP1 tonight.Thursday, August 25, 2011 7:03 PM
-
I downloaded that and it installed a patch. Was there something else that tool is supposed to do?Thursday, August 25, 2011 9:54 PM
-
"ChildInt" wrote in message news:159ff924-63f6-4d1c-ba09-5d33a71b2ddf...I downloaded that and it installed a patch. Was there something else that tool is supposed to do?CheckSUR? – if you read the article I linked to, it produces a report in the CBS folder – feel free to email it to me at ngsATcrashfixpcDOTcoDOTuk (make the obvious changes) or put it up on your SkyDrive and post the link.Basically, it checks a lot of settings and files in the OS, and fixes those things it knows how to fix – unfortunately it’s not all-knowing, but it does get updated every so often (at least as I understand it), so it gets better over time.Please post another MGADiag report – it may show some difference.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Wednesday, August 31, 2011 8:21 PM
Thursday, August 25, 2011 10:05 PMModerator -
No reply from the Original Poster.
Issue is assumed to be resolved.
Darin MSWednesday, August 31, 2011 8:21 PM