Windows 7 MSDN License is now flagged as 'Not Genuine'?

All replies

• 

  

  0

  Sign in to vote

  "ParallaxIT" wrote in message news:040813e5-3409-4c84-b062-ae6788284e33...

  I am running a copy of Windows 7 Enterprise and it is licensed under my MSDN batch of serials. I have always formatted, wiped, re-installed etc as this is testing and that is why I use MSDN of course. Today I was notified by my Microsoft Security Essentials program that my license was not genuine and it is now not actively working. Below is the copied results from your MGA diagnostic tool. Please let me know how to stop this from happening as i run a dozen computers testing our software and such against MS products and this exposes us to uneeded risk etc.

  Cheers

   

  Rob

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-*****-*****-VXHVY
  Windows Product Key Hash: QETmohtjSqS3fkqcvqoX+ScvnDU=
  Windows Product ID: 55041-049-9703797-86530
  Windows Product ID Type: 6
  Windows License Type: Volume MAK
  Windows OS version: 6.1.7600.2.00010100.0.0.027
  
  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Professional Plus 2007 - 100 Genuine
  Microsoft Office Project Professional 2007 - 100 Genuine
  Microsoft Office Visio Professional 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
  

  
  Licensing Data-->
  Software licensing service version: 6.1.7600.16385
  
  Name: Windows(R) 7, EnterpriseN edition
  Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
  Partial Product Key: VXHVY
  License Status: Licensed
  Remaining Windows rearm count: 3
  Trusted time: 1/20/2011 9:17:42 AM
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x000000000003EFFF
  Event Time Stamp: 1:7:2011 17:10
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\wat\watadminsvc.exe
  Tampered File: %systemroot%\system32\wat\watweb.dll
  Tampered File: %systemroot%\system32\wat\npwatweb.dll
  Tampered File: %systemroot%\system32\wat\watux.exe
  Tampered File: %systemroot%\system32\sppobjs.dll
  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
  Tampered File: %systemroot%\system32\sppwinob.dll
  Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
  Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
  Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
  Tampered File: %systemroot%\system32\drivers\spsys.sys
  Tampered File: %systemroot%\system32\drivers\spldr.sys
  
  
  
  

  
  

  This is not a normal MSDN license Key  - its an MAK license. (although I know there was some discussion about MAK's when I was an MSDN member, I thought it had been abandoned - I may be wrong!)

   

  Having said that, your problem is the number of tampered files present - which is surprising, in that one would normally expect to see the same files (more or less) listed as Mismatches.

  I therefore suspect that you have a malware infestation - do you have any suspicion of the same?

  I suggest installing Malwarebytes Anti-Malware (www.malwarebytes.org ) - update it and run a full system scan (which will also force your AV to look at every file, so update that as well) see if it finds anything.

   

  Once complete reboot, and run a new MGADiag report - this time please do not remove any data - what's in the report is of no use to anyone except MS (who can then check that your license is actually valid, and should therefore activate and validate OK - but they still cannot tie it down to a given machine)

   

  
  --
  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, January 20, 2011 11:21 PM

  Moderator
• 

  

  0

  Sign in to vote

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x000000000003EFFF
  Event Time Stamp: 1:7:2011 17:10
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\wat\watadminsvc.exe
  Tampered File: %systemroot%\system32\wat\watweb.dll
  Tampered File: %systemroot%\system32\wat\npwatweb.dll
  Tampered File: %systemroot%\system32\wat\watux.exe
  Tampered File: %systemroot%\system32\sppobjs.dll
  Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
  Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
  Tampered File: %systemroot%\system32\sppwinob.dll
  Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
  Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
  Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
  Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
  Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
  Tampered File: %systemroot%\system32\drivers\spsys.sys
  Tampered File: %systemroot%\system32\drivers\spldr.sys

  Hello

  The above portion of the Diagnostic Report tells me that there are a number of files who's Hash does not match with what is listed in Windows 7's System Catalog. This means these files have been modified in some way.

   

  The first things I suggest are to repair or restore the files.

  a. System Scan. The scan will look for bad Windows files and will attempt to repair them, if possible.

  (Note: the error "HrOffline: 0x8004FE21" means Windows has already tried a "Selfheal" but was unsuccessful so when doing the below sfc /scannow, it is likely that the result will be that it found corrupt files but was unable to repair).
  
  1) Click the Start Button
  2) Type: cmd.exe
  3) Right-click the cmd.exe file and select 'Run as Administrator'
  4) In the CMD window, type: sfc /scannow
  5) Reboot and see if that resolves the issue.

  
  
  b. Restore files using System Restore:
  
  1) Click the Start button
  2) In the Start Search field, type: System Restore and hit “Enter”
  3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
  4) Click the "Next" button.
  5) Reboot and see if that resolves the issue.

   

  If neither of those resolved the issue, I have a few (more dramatic) options that you can try:

  c. Replace the effected files with copies from a known good installation of Windows. (I am told that it is also possible to extract copies of the files from the Windows installation disk or image, but I don't have any directions on how to do this).

   

  d. Contact Microsoft Assisted Support for further assistance with the issue.

  North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
  
  Outside North America:
  http://support.microsoft.com/contactus/?ws=support#tab0

   

  e. Reinstall Windows.

   

  I hope this was helpful,

   

  ---

  Darin MS

  • Proposed as answer by Darin Smith MS Thursday, January 20, 2011 11:30 PM
  • Marked as answer by Darin Smith MS Friday, January 21, 2011 8:56 PM

  Thursday, January 20, 2011 11:30 PM
• 

  

  0

  Sign in to vote

  Same today with Windows 7 Home Premium

  Sunday, January 27, 2013 2:07 AM
• 

  

  0

  Sign in to vote

  Please start a NEW thread of your own, and include an MGADiag report.

  To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
  (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
   Once saved, run the tool.
  Click on the Continue button, which will produce the report.
   To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
    - **in your own thread**, please
   
  Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
  http://www.microsoft.com/en-us/howtotell/Hardware.aspx

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, January 27, 2013 9:53 AM

  Moderator