Solved Windows 7 Activation Error

Hi All,
I have been reading the forums and tried several of the suggestions, but need your help. I am working my dads computer and it (like many I read in here) is an original OEM instal of 7. However, it (after some point in time) now says it is no longer genuine and gets the access denied error . He has lived with it - but obviously there are downsides to no windows updates. I went ahead and did the MGADiag tool. Also of note - i notice when I right click System32 file it is continually "blobbed" reguardless of resets.

Any help would be greatly appreciated!
Charles

The errors showing indicate either file corruption or permissions problems.

Please follow the Windows Update Posting Instructions and post the requested data

Thank you for your response!

I ran the SURT
ran an SFC scan
The error code when I run windows update is C0000022
I have attached the zip file with the CBS logs

Thanks again for your help!
-Charles

would another sfc scan be helpful?

bump

I think perhaps we should be looking deeper - please run a full CHKDSK...

Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

Then post a new MGADiag report

Ok it ran and here is the new mgdiag

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {332E3C40-3206-496C-B018-F8941092D50F}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7600.win7_gdr.111118-2330
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{332E3C40-3206-496C-B018-F8941092D50F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1154957100-1808752702-3222471432</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>DX4840</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P01-A3 </Version><SMBIOSVersion major="2" minor="6"/><Date>20100517000000.000000+000</Date></BIOS><HWID>C3B93607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 6:16:2013 14:35
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc


HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAIAAAABAAAAAQABAAEAln2uyHpcioX+x8BrKFvaNN6XXF0=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS APIC1139
FACP ACRSYS FACP1139
HPET ACRSYS OEMHPET
MCFG ACRSYS OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB ACRSYS OEMB1139
ASF! LEGEND I865PASF
AWMI ACRSYS OEMB1139
SSDT DpgPmm CpuPm

c4wilson

Do you Mcafee or Norton as your antivirus ?

AVG I believe is all

Did you ever have those ?

Open up an Elevated Command Prompt. Click on rb: in type CMD . Right click on CMD under Programs (1) choose . On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Copy and Paste these commands below one at a time and press [ENTER]

• reg query HKLM\SYSTEM\CurrentControlSet\services\spldr /S
• reg query HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S
• reg query HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC
• reg query HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

I have used mcaffe stinger to get a virus. But I do not think the programs have been installed.
Here is the output from the commands

Thanks again for all the help.

It was purchased from best buy, so one may have been initially installed now that I think about it.

I have asked NoelDP he knows more about this stuff.

Interesting -
The SPLDR service is apparently properly installed, but doesn't appear to be running
(I see VK pinched my script)
Let's check that....

Open an Elevated Command Prompt, and run the following commands....

NET START SPLDR
SC QUERYEX SPLDR
SC SDSHOW SPLDR


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

NoelDP

Shouldn't the configflags be 400 . Checked against my PC and that had 400 instead of 401

Aarrgghh!!
You're right (my excuse is that it was Pool Match night! )


Open Regedit and navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR Key

Export it to a reg file for safety!
Right-click on the key name, and Select Permissions,
Click on Advanced, then the Owner tab
Make sure that Administrators is the owner, and put a tick in the 'Replace owner...' box at the bottom
Click OK once
add Administrators to the 'Groups or Usernames' list, and give them Full permissions
CLICK OK
Now move to the 0000 subkey
Double-click on the ConfigFlags entry
Change the data value to 400 (make sure that the radio-button is in 'Hexadecimal') and click OK
Exit Regedit, and reboot.
Post a new MGADiag report

Thank you for sticking with this, sorry it is bothersome.

I was able to add administrators however when I try to give full access I get an access denied error. After this, it also will not let me change 401 to 400.

That probably means that you haven't taken Ownership as 'Adminstrators'

Try it again - this time, once you've got Adminstrators (Note the 's'!!) as the Owner, make sure that you tick the box to Replace permissions on child objects.

OK out to regedit, then go back in and then try changing the permissions again.

Ok I had not added the "S" - good call. However I still get an error while editing. Added a picture of the error and permissions

Thanks you for your help!

Please post a snip of the Advanced permissions for that key.