Windows 7 Update Not Installing & Not Genuine, Error 800706F7

[computerman1]

I was having an issue with Windows reporting as not genuine, and found some advice online to uninstall and reinstall KB971033. I uninstalled it fine, but when trying to reinstall it, it is failing with error code 800706F7. This is a volume license Windows 7 install, installed with a valid MAK.

I'm sure the two issues are related.

From some research online I have tried to run the Windows Update Readiness Tool to no success.

I have uploaded the CheckSUR.persist.log file to this post, and here is my MGA Diag Report:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-*****-*****-3DFGG
Windows Product Key Hash: LCtwmsXWy/p9MAljEu0aceczYmI=
Windows Product ID: 55041-034-4198283-86733
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {A5944240-7435-4CA7-AFE0-6A7DDF35E012}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watweb.dll[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{A5944240-7435-4CA7-AFE0-6A7DDF35E012}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-034-4198283-86733</PID><PIDType>6</PIDType><SID>S-1-5-21-3782223880-71473382-1460866358</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P2.90</Version><SMBIOSVersion major="2" minor="7"/><Date>20130711000000.000000+000</Date></BIOS><HWID>46143107018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-034-419828-03-1033-7601.0000-3632014
Installation ID: 016242303696525000231002737295267915136951093631491794
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 3DFGG
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 2/4/2015 2:57:06 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 1:5:2015 16:27
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAEAAwABAAIAAAABAAAAAQABAAEA6GEmUeLy6O10xMK/6nNIVs5wSjpyx5Zj

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ALASKA		A M I
  FACP			ALASKA		A M I
  HPET			ALASKA		A M I
  MCFG			ALASKA		A M I
  FPDT			ALASKA		A M I
  SSDT			Intel_		AoacTabl
  AAFT			ALASKA		OEMAAFT 
  SSDT			Intel_		AoacTabl
  SSDT			Intel_		AoacTabl
  SSDT			Intel_		AoacTabl
  BGRT			ALASKA		A M I

Any help would be appreciated!

 

[NoelDP]

Checking Component Store
(f) CSI Missing Winning Component Key 0x00000000 amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18648_none_b97943ccf4882112  
(f) CSI Missing Winning Component Key 0x00000000 x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18648_none_5d5aa8493c2aafdc

I need to have a look at your COMPONENTS registry hive

Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or OneDrive) and post a link.

 

[computerman1]

I've uploaded the requested file to my Dropbox account: https://www.dropbox.com/s/0557h7cw4y49xmq/COMPONENTS.zip?dl=0

 

[NoelDP]

I've uploaded a file - cm1aa.zip - to my OneDrive at Noel's OneDrive
Please download and save it to your desktop.
Right-click on the file and select Extract All, and save to the default destination (which should be a folder on the desktop)

Create a new System Restore point

Open an Elevated Command Prompt, and run the following commands.

[/FONT][/COLOR]
[COLOR=black][FONT="Segoe UI"]IF EXIST C:\Windows\System32\config\COMPONENTS.OLD1 DEL C:\Windows\System32\config\COMPONENTS.OLD1[/FONT][/COLOR]
[COLOR=black][FONT="Segoe UI"]REN C:\Windows\System32\config\COMPONENTS COMPONENTS.OLD1[/FONT][/COLOR]
[COLOR=black][FONT="Segoe UI"]COPY "%userprofile%\desktop\cm1aa\COMPONENTS" C:\Windows\System32\config[/FONT][/COLOR]
[COLOR=black][FONT="Segoe UI"] [/FONT][/COLOR]
[COLOR=black][FONT="Segoe UI"].

If you get an error with any command, STOP THERE - do not reboot! - post for instructions.

Assuming the commands go OK, reboot, and run another CheckSUR scan - post the new CheckSUR.log file.

 

[computerman1]

Thanks - I did that, but now a new error is coming up in the CheckSUR.log file.

Checking Component Store
(f)	CSI C Mark Deployment Missing	0x00000000	c!25282c5e95c..7d4b4e1d0bd_31bf3856ad364e35_6.1.7601.18648_aab533f6ae6b876e	amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18648_none_b97943ccf4882112	
(f)	CSI C Mark Deployment Missing	0x00000000	c!7a56e9bfac1..39e7739019a_31bf3856ad364e35_6.1.7601.18648_315a794ce8a33c24	x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18648_none_5d5aa8493c2aafdc

I have also uploaded the full log file to this post.

 

[NoelDP]

That's all right - the domino effect is expected in these cases.

Having said that - I now know to which update these problems belong - KB3004394 - which is one that MS messed up in December.
Please check and see if it's in the Installed Updates listing.
If it is, attempt to uninstall it - what happens?

 

[computerman1]

I looked through the installed updates (Control Panel -> Programs -> Programs and Features -> Installed Updates) and didn't see that one in the list (also tried searching for "3004394" and there were no results). We did start to notice these problems in December, though.

 

[NoelDP]

Have a look in the Update History, and see if KB3004394 and KB3024777 are present there - if both are, then Windows thinks that 4394 is uninstalled, and we'll have to go about things in a different way (I just don't have a clue how, yet!)

 

[computerman1]

Neither is listed in update history, but it has several updates repeated multiple times (1 failure for every day it's tried to install updates, some go back to 1/6/2015). I'm guessing that it's pushed older updates out of the list?

 

[NoelDP]

Let's attack it from another direction -
Please upload your C:\Windows\windowsupdate.log file
Please also
Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

 

[computerman1]

Requested files are attached. I also included the locale info with the event viewer logs (not sure if you need that or not).

 

[NoelDP]

KB3004394 was installed on 10 Dec - and failed. It appears to have at least started installing again on the 11th.
Something odd appears to have happened between 11th December and 29th - the updates don't seem to have completed installing in the meantime.
The first indication of WGA problems was on 27 Dec

I do notice a few controller errors on the hard drive - it would be worth running CHKDSK /F at least (or /R for a more thorough check) to make sure that problems aren't the result of disk corruption.


Let's see if this works to uninstall KB3004394 (if it is just invisible..)



Close all open windows.
Open an Elevated Command Prompt window, and type the following command

wusa /uninstall /kb:3004394

What result do you get?

 

[computerman1]

I ran the command you gave, it said "KB3004394 is not installed on this computer."

I'll try a chkdsk /R overnight on the computer tonight (it's installed in a restaurant and used as a "server" for the cash registers, so can't take it down for an extended period during the day). It's been a while since I've ran a chkdsk, but it will run without user intervention, right? I'm at a remote location from this computer connecting via LogMeIn, but can drive out to the location or have someone there if needed.

 

[NoelDP]

Once started it should complete and reboot automatically ready for the password..

 

[computerman1]

Well, I tried running a chkdsk /f (didn't try /r as I read it can take 12+ hours on a 1TB drive and the only additional check is unused space). Here are the results:

The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  227072 file records processed.                                          File verification completed.
  480 large file records processed.                                      0 bad file records processed.                                        2 EA records processed.                                              60 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 3)...
  274590 index entries processed.                                         Index verification completed.
  0 unindexed files scanned.                                           0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 3)...
  227072 file SDs/SIDs processed.                                         Cleaning up 316 unused index entries from index $SII of file 0x9.
Cleaning up 316 unused index entries from index $SDH of file 0x9.
Cleaning up 316 unused security descriptors.
Security descriptor verification completed.
  23760 data files processed.                                            CHKDSK is verifying Usn Journal...
  36091072 USN bytes processed.                                             Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

 976657407 KB total disk space.
  47652464 KB in 192693 files.
     92372 KB in 23761 indexes.
         0 KB in bad sectors.
    359219 KB in use by the system.
     65536 KB occupied by the log file.
 928553352 KB available on disk.

      4096 bytes in each allocation unit.
 244164351 total allocation units on disk.
 232138338 allocation units available on disk.

Internal Info:
00 77 03 00 91 4d 03 00 c8 8c 05 00 00 00 00 00  .w...M..........
ed 02 00 00 3c 00 00 00 00 00 00 00 00 00 00 00  ....<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Doesn't look like it did much, but I'm no expert at chkdsk logs. Any other suggestions I can try?

 

[NoelDP]

The good news is that the errors were minor, and that the drive looks healthy.

The bad news is that I suspect that a repair install of Windows is going to be necessary

I'd be happy to continue to work on it - but I think it may take some time, and we may still end up in the same place.

 

[computerman1]

Darn, I was afraid of that.

If you don't mind I'd be willing to try some other ideas you may have, even if we wind up having to do a repair install in the end - though if you think it's futile just let me know and I'll head down to that site and do a repair install in the near future.

 

[NoelDP]

OK - we can chase the dominos a few times and see what happens
I want to put out a call for assistance first, as I'm far from being an expert at this type of error, so we might both learn something!

 

[computerman1]

Awesome, thank you!

 

[tom982]

Hi computerman1,

Noel asked me to take a look at this and I just wanted to let you know that I'm looking into this. I can't guarantee we'll get it up and running again but I'll give it a go

Tom