locked
Window not genuine - please see diagnostic report RRS feed

  • Question

  • The warning that I may not have a genuine version of windows pops up several times each day.  It came pre-installed from Dell.  Any advice would be appreciated.  Thanks.

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {5C30BC0D-A83E-44B0-9E8C-927A45E722E4}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{5C30BC0D-A83E-44B0-9E8C-927A45E722E4}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-2339514753-3076973264-2344407239</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 460</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="6"/><Date>20110215000000.000000+000</Date></BIOS><HWID>5B7D3107018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-1033-7600.0000-1032011
    Installation ID: 001916202030481146369703411412719806901736035405926476
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 8/6/2012 11:18:38 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000200
    Event Time Stamp: 8:3:2012 13:01
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEAln2MOUJhmBccSh5jbGgWcS5z

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    FX09  
      FACP   DELL    FX09  
      HPET   DELL  FX09
      MCFG   DELL  FX09
      SSDT   AMICPU  PROC
      SLIC   DELL    FX09  
      OSFR   DELL    FX09  

    Monday, August 6, 2012 4:35 PM

Answers

  • The problem here is the Tampered file - we need to find out what's wrng with it and where.

    Since the file doesn't also appear in the File Scan Data section, it's likely that the file itself isn't the problem - but we need also to rule that out.

    Please open an Elevated Command Prompt window, and run the following commands:

    DIR C:\Windows\slcext.* /S

    ICACLS C:\Windows\System32\slcext.dll

    ICACLS C:\Windows\System32\en-US\slcext.dll.mui

    ICACLS C:\Windows\SysWOW64\slcext.dll

    ICACLS C:\Windows\SysWOW64\en-US\slcext.dll.mui

    Copy and past the results to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, August 9, 2012 12:42 PM
    Moderator

All replies

  • Your Windows is licensed.

    Try validating at http://www.microsoft.com/genuine/validate/


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 8GB ram.

    Monday, August 6, 2012 5:22 PM
    Answerer
  • Have done this many times.  Always goes to the page to purchase a validation key and the error continues to pop up.

    SAB

    Monday, August 6, 2012 11:55 PM
  •  Try rebuilding the licensing store:

    Recreate the Licensing Store
        1) Click Start button.
         2) Type: CMD.exe into the 'Search programs and files' field
        3) Right-Click on CMD.exe and select Run as Administrator
         4) Type: net stop sppsvc   (It may ask you if you are sure, select yes)
         Note: the Software Protection service may not be running, this is ok.
         5) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
         6) Type: rename tokens.dat tokens.bar
         7) Type: cd %windir%\system32
         8) Type: net start sppsvc
         9) Type: slui.exe
         10) After a couple of seconds Windows Activation dialog will appear. You may be asked to re-activate and/or re-enter your product key (the one on your COA sticker) or Activation may occur automatically.
         
        Run MGADiag again, and post the report
     
    Compliments of Noel.


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 8GB ram.

    Tuesday, August 7, 2012 12:20 AM
    Answerer
  • Just completed above.  Will have to post back later if/when warning pops up again.  However, in addition to the following report I get a warning that says:

    Failed to create output files, hr=0x80070002. Please contact support.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {5C30BC0D-A83E-44B0-9E8C-927A45E722E4}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{5C30BC0D-A83E-44B0-9E8C-927A45E722E4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-2339514753-3076973264-2344407239</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 460</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="6"/><Date>20110215000000.000000+000</Date></BIOS><HWID>5B7D3107018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-1033-7600.0000-1032011
    Installation ID: 001916202030481146369703411412719806901736035405926476
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 8/7/2012 6:02:04 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000000200
    Event Time Stamp: 8:6:2012 18:53
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui


    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEAln2MOUJhmBccSh5jbGgWcS5z

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    FX09  
      FACP   DELL    FX09  
      HPET   DELL  FX09
      MCFG   DELL  FX09
      SSDT   AMICPU  PROC
      SLIC   DELL    FX09  
      OSFR   DELL    FX09  


    SAB

    Tuesday, August 7, 2012 11:06 PM
  • The output files message is standard.  Ignore.  You're not creating any files anyway.  You're just putting the report on the clipboard.

    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 8GB ram.

    Tuesday, August 7, 2012 11:47 PM
    Answerer
  • Still getting the warning.

    SAB

    Thursday, August 9, 2012 11:34 AM
  • The problem here is the Tampered file - we need to find out what's wrng with it and where.

    Since the file doesn't also appear in the File Scan Data section, it's likely that the file itself isn't the problem - but we need also to rule that out.

    Please open an Elevated Command Prompt window, and run the following commands:

    DIR C:\Windows\slcext.* /S

    ICACLS C:\Windows\System32\slcext.dll

    ICACLS C:\Windows\System32\en-US\slcext.dll.mui

    ICACLS C:\Windows\SysWOW64\slcext.dll

    ICACLS C:\Windows\SysWOW64\en-US\slcext.dll.mui

    Copy and past the results to your reply

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, August 9, 2012 12:42 PM
    Moderator

  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>DIR C:\Windows\slcext.* /S
     Volume in drive C is OS
     Volume Serial Number is 26EB-7352

     Directory of C:\Windows\System32

    07/13/2009  08:41 PM            18,432 slcext.dll
                   1 File(s)         18,432 bytes

     Directory of C:\Windows\System32\en-US

    07/13/2009  09:25 PM            17,408 slcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\SysWOW64

    07/13/2009  08:16 PM            16,384 slcext.dll
                   1 File(s)         16,384 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-s..clientext.resources_3
    1bf3856ad364e35_6.1.7600.16385_en-us_c2382769078e1059

    07/13/2009  09:25 PM            17,408 slcext.dll.mui
                   1 File(s)         17,408 bytes

     Directory of C:\Windows\winsxs\amd64_microsoft-windows-security-spp-clientext_3
    1bf3856ad364e35_6.1.7600.16385_none_28bbe77bcacffbe4

    07/13/2009  08:41 PM            18,432 slcext.dll
                   1 File(s)         18,432 bytes

     Directory of C:\Windows\winsxs\x86_microsoft-windows-security-spp-clientext_31b
    f3856ad364e35_6.1.7600.16385_none_cc9d4bf812728aae

    07/13/2009  08:16 PM            16,384 slcext.dll
                   1 File(s)         16,384 bytes

         Total Files Listed:
                   6 File(s)        104,448 bytes
                   0 Dir(s)  889,661,861,888 bytes free

    C:\Windows\system32>ICACLS C:\Windows\System32\slcext.dll
    C:\Windows\System32\slcext.dll NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\System32\en-US\slcext.dll.mui
    C:\Windows\System32\en-US\slcext.dll.mui NT SERVICE\TrustedInstaller:(F)
                                             BUILTIN\Administrators:(RX)
                                             NT AUTHORITY\SYSTEM:(RX)
                                             BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\SysWOW64\slcext.dll
    C:\Windows\SysWOW64\slcext.dll NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Windows\system32>ICACLS C:\Windows\SysWOW64\en-US\slcext.dll.mui
    C:\Windows\SysWOW64\en-US\slcext.dll.mui: The system cannot find the file specif
    ied.
    Successfully processed 0 files; Failed processing 1 files

    C:\Windows\system32>
    C:\Windows\system32>



    SAB

    Monday, August 27, 2012 8:56 PM
  • Open an Elevated Command Prompt and run the following command

    SFC /SCANFILE=C:\Windows\SysWOW64\en-US\slcext.dll.mui

    note the result, and reboot, then post another MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, August 27, 2012 9:00 PM
    Moderator