Windows 7 error "This copy of Windows is not genuine"

dellaseren · 02 Feb 2013

Hello! And thank you in advance to whoever is reading this!

I have a Toshiba L500-1XJ, purchased in 2009. In 2011, I somehow got a virus or something that made my screen flicker and delete loads of programs, and then wouldn't start up. I was literally JUST in my warranty, so I called Argos, where I bought it from, and they took the laptop back and it appeared that they'd fixed it. However after about a week, I started getting the same error messages telling me that my Windows might not be a geuine copy. My warranty had run out and they wouldn't fix it again for me, and the windows key on the bottom of the laptop has faded to obscurity.

I've been living with it since then, but I'm really tired of not being able to install the service packs or security updates. Not to mention the annoying pop-up every half an hour! Thanks. - Lucy.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {CBED65B4-CD83-44EA-9CB4-80C582F107DF}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.110408-1631
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CBED65B4-CD83-44EA-9CB4-80C582F107DF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-3182853127-146928663-405207266</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite L500</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>V1.90</Version><SMBIOSVersion major="2" minor="5"/><Date>20091217000000.000000+000</Date></BIOS><HWID>8B1F3E07018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>900A69EF54B6D86</Val><Hash>CAwivVv8J/4/ooiU5ft7cR3fnOw=</Hash><Pid>89388-707-8518193-65415</Pid><PidType>14</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc

HWID Data-->
HWID Hash Current: MgAAAAIAAQABAAIAAAABAAAAAwABAAEAeqhIRLBsdxbaejqFrlhawszh4iOAQqL3Rso=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP TOSCPL CRESTLNE
HPET INTEL CRESTLNE
BOOT PTLTD $SBFTBL$
MCFG INTEL CRESTLNE
SLIC TOSCPL TOSCPL00
OSFR TOSHIB A+2nd ID
SSDT BrtRef DD01BRT
SSDT BrtRef DD01BRT

ICIT2LOL · 02 Feb 2013

Hiyya Lucy and welcome yes mate Toshibas are not what they used to be - just what have you got running if anything at all cos if you have your valuable data saved it might be worth a factory default.

I have done this quite a few times with my Toshibas over the years but it does mean you will go back to square one - out of the box new machine - well the same state as a new machine.

There are other options though - just let us know what you want to do.:)

dellaseren · 03 Feb 2013

Hiya :) Thanks for your reply!

I've tried numerous factory resets, but it never solves my issue

I'm generally good with computers (for a non-professional) and I've always been able to fix things in the end with a bit of research. But I'm totally stumped here. I have pretty much no knowledge of Genuine Advantage issues... and don't understand the MGADiag results so I'm not sure what the issue could be or what I'm looking at, really. Someone else told me that my computer isn't "passing" or "failing" where it asks about my product key? I don't know if that's right lol. I don't know if it isn't self-activating... or if something is blocking the key from activating... When I got the computer I did write down the key from the bottom of the laptop, just in case it wore off like it has lol, but I had a flood in my office and that piece of paper no-longer has anything but a water-mark on it lol.

Any help would be much appreciated! :) thanks again :) - Lucy.

EDIT: I've just tried to run slui.exe and slui.exe 4 (as administrator and normally), and I get an access denied error both times. I've attached a screen grab of that below. Something has really done a number on me lol. I've used Tweaking.com Windows repair (All In One) and someone else asked me to do this:

Click on start and in the search box type REGEDIT
Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR Key

Now go to the 0000 subkey and right-click on it.
Select Permissions,
Click on Advanced button, then the Owner tab
Make sure that Administrators is the owner, and put a tick in the 'Replace owner...' box at the bottom
Click OK once
add Administrators to the Groups or Usernames list, and give them Full permissions
CLICK OK

This made no difference. I also ran the following query commands:

Microsoft Windows [Version 6.1.7601]
Copyright © 2009 Microsoft Corporation. All rights reserved.

C:\Users\Lucy>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
DisplayName REG_SZ Security Processor Loader Driver
ErrorControl REG_DWORD 0x3
Start REG_DWORD 0x3
Type REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
0 REG_SZ Root\LEGACY_SPLDR\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

C:\Users\Lucy>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
NextInstance REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
Service REG_SZ spldr
Legacy REG_DWORD 0x1
ConfigFlags REG_DWORD 0x400
Class REG_SZ LegacyDriver
ClassGUID REG_SZ {8ECC055D-047F-11D1-A537-0000F8753ED1}
DeviceDesc REG_SZ Security Processor Loader Driver
Capabilities REG_DWORD 0x0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control

C:\Users\Lucy>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC
ERROR: The system was unable to find the specified registry key or value.

C:\Users\Lucy>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC
ERROR: The system was unable to find the specified registry key or value.

C:\Users\Lucy>

Does this help at all?

NoelDP · 03 Feb 2013

You have a tampered service (SPPSVC - the Software Protection Service) and an Access Denied error (0xc0000022) elsewhere, which is often associated with disk corruption.

Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.

SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

Post a new MGADiag report with details of any error messages encountered.

dellaseren · 03 Feb 2013

Hi Noel, thanks for your help (Great name too, btw!)

I did what you said. There were no errors at any point during any of the processes. The checkdisk ran really really fast, but I already did chkdsk earlier thismorning, so could that be why? The CBS log is here https://skydrive.live.com/redir?resi...F86LBvJCUW7nDc

And the new MGADiag is here:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {CBED65B4-CD83-44EA-9CB4-80C582F107DF}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.110408-1631
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-

80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3

-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-

238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-

80070057

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe:

Disabled
Allow scripting of Internet Explorer Webbrowser control:

Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CBED65B4

-CD83-44EA-9CB4-80C582F107DF}

</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1

.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-

*****-*****-BWX77</PKey><PID>00359-OEM-8992687-

00017</PID><PIDType>2</PIDType><SID>S-1-5-21-3182853127-

146928663-

405207266</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Mo

del>Satellite

L500</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer

><Version>V1.90</Version><SMBIOSVersion major="2"

minor="5"/><Date>20091217000000.000000+000</Date></BIOS><HWID>

8B1F3E07018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>04

09</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)

</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppi

d><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID

><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></Mac

hineData><Software><Office><Result>100</Result><Products><Prod

uct GUID="{90120000-0030-0000-0000-

0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft

Office Enterprise

2007</Name><Ver>12</Ver><Val>900A69EF54B6D86</Val><Hash>CAwivV

v8J/4/ooiU5ft7cR3fnOw=</Hash><Pid>89388-707-8518193-

65415</Pid><PidType>14</PidType></Product><Product

GUID="{91120000-002F-0000-0000-

0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft

Office Home and Student

2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Produ

cts><Applications><App Id="15" Version="12" Result="100"/><App

Id="16" Version="12" Result="100"/><App Id="18" Version="12"

Result="100"/><App Id="19" Version="12" Result="100"/><App

Id="1A" Version="12" Result="100"/><App Id="1B" Version="12"

Result="100"/><App Id="44" Version="12" Result="100"/><App

Id="A1" Version="12" Result="100"/><App Id="BA" Version="12"

Result="100"/></Applications></Office></Software></GenuineResu

lts>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run

'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 2:3:2013 11:45
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc

HWID Data-->
HWID Hash Current:

MgAAAAIAAQABAAIAAAABAAAAAwABAAEAeqhIRLBsdxbaejqFrlhawszh4iOAQq

L3Rso=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP TOSCPL CRESTLNE
HPET INTEL CRESTLNE
BOOT PTLTD $SBFTBL$
MCFG INTEL CRESTLNE
SLIC TOSCPL TOSCPL00
OSFR TOSHIB A+2nd ID
SSDT BrtRef DD01BRT
SSDT BrtRef DD01BRT

NoelDP · 03 Feb 2013

It worries me when people tell me their CHKDSK ran fast - the switch I use means that it has to test every sector on the drive, so unless the drive is very small, or the disk is an SSD, it should take hours!

Please open Event Viewer and navigate to the
Windows logs. then Application
now look in the center pane for the Source, and find the Wininit event that records your CHKDSK results.
double-click on it, and then click on the Copy button - paste the data into a reply.

Your SFC scan was clear - It looks from the other content there as if you've also run the CheckSUR tool a number of times?

Please download a fresh copy of the tool from
http://support.microsoft.com/kb/947821
(you'll need to look in the details for Method 2)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and attach it to your reply.

(the name I gave myself - it arises from surgery I had a few years ago)

dellaseren · 04 Feb 2013

Hi again Noel!

Thank you for your help!! Here is the info you requested! :)

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 03/02/2013 09:38:15
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Lucy-TOSH
Description:

Checking file system on C:
The type of the file system is NTFS.
Volume label is WINDOWS.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
388352 file records processed.

File verification completed.
1082 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
489812 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
388352 file SDs/SIDs processed.

CHKDSK is compacting the security descriptor stream
Cleaning up 12405 unused security descriptors.
50731 data files processed.

CHKDSK is verifying Usn Journal...
36836032 USN bytes processed.

Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

156671999 KB total disk space.
138641828 KB in 293293 files.
156880 KB in 50734 indexes.
0 KB in bad sectors.
496295 KB in use by the system.
65536 KB occupied by the log file.
17376996 KB available on disk.

4096 bytes in each allocation unit.
39167999 total allocation units on disk.
4344249 allocation units available on disk.

Internal Info:
00 ed 05 00 e4 3f 05 00 37 e1 08 00 00 00 00 00 .....?..7.......
20 c9 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ...,...........
11 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-02-03T09:38:15.000000000Z" />
<EventRecordID>91734</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Lucy-TOSH</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is WINDOWS.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
388352 file records processed.

File verification completed.
1082 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
489812 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
388352 file SDs/SIDs processed.

CHKDSK is compacting the security descriptor stream
Cleaning up 12405 unused security descriptors.
50731 data files processed.

CHKDSK is verifying Usn Journal...
36836032 USN bytes processed.

Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

156671999 KB total disk space.
138641828 KB in 293293 files.
156880 KB in 50734 indexes.
0 KB in bad sectors.
496295 KB in use by the system.
65536 KB occupied by the log file.
17376996 KB available on disk.

4096 bytes in each allocation unit.
39167999 total allocation units on disk.
4344249 allocation units available on disk.

Internal Info:
00 ed 05 00 e4 3f 05 00 37 e1 08 00 00 00 00 00 .....?..7.......
20 c9 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ...,...........
11 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

NoelDP · 04 Feb 2013

That only did the basic tests, not the deep scan to check for bad sectors.

Please repeat my instructions for the CHKDSK C: /R

The CheckSUR report is clear, at least :)

dellaseren · 04 Feb 2013

That would explain the speed!! Thanks again :) The new MGADiag results are below and here is the link to the log https://skydrive.live.com/redir?resid=961E4489B535A776!483&authkey=!AGA3CVOGoygQs0E

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {CBED65B4-CD83-44EA-9CB4-80C582F107DF}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.110408-1631
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_B4D0AA8B-920-80070057

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CBED65B4-CD83-44EA-9CB4-80C582F107DF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-3182853127-146928663-405207266</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite L500</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>V1.90</Version><SMBIOSVersion major="2" minor="5"/><Date>20091217000000.000000+000</Date></BIOS><HWID>8B1F3E07018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>900A69EF54B6D86</Val><Hash>CAwivVv8J/4/ooiU5ft7cR3fnOw=</Hash><Pid>89388-707-8518193-65415</Pid><PidType>14</PidType></Product><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><PidType>19</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 2:4:2013 19:37
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc

HWID Data-->
HWID Hash Current: MgAAAAIAAQABAAIAAAABAAAAAwABAAEAeqhIRLBsdxbaejqFrlhawszh4iOAQqL3Rso=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP TOSCPL CRESTLNE
HPET INTEL CRESTLNE
BOOT PTLTD $SBFTBL$
MCFG INTEL CRESTLNE
SLIC TOSCPL TOSCPL00
OSFR TOSHIB A+2nd ID
SSDT BrtRef DD01BRT
SSDT BrtRef DD01BRT

NoelDP · 04 Feb 2013

With both SFC and CheckSUR running clean, we're still left with the same errors as we started with....
Cached Online Validation Code: N/A, hr = 0xc0000022
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426
Tampered Service: sppsvc

working backwards.... :)

There is a problem with your Software Protection Service - something is preventing it from starting on demand the way it should.
Please use the following in an attempt to isolate the cause.

Click on Start
in the Search box, type
SERVICES.MSC
and hit the Enter key - accept the UAC prompt if you get one.
Look in the console for the Software Protection service, right-click on it and select Properties.
make sure that the Startup Type is set to Automatic (Delayed Start), and click Apply.

Try starting the service now - do you get an error message? Does it start? does it almost immediately stop again?
Post back with your results, and a new MGADiag report.

If it doesn't start, then please do the following...
Please open an Elevated (Administrator) Command Prompt window and use the following commands....

net start sppsvc
sc qc sppsvc
sc queryex sppsvc
sc qprivs sppsvc
sc qsidtype sppsvc
sc sdshow sppsvc

Copy and paste the output to your reply

Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.