Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
"You may be a victim of software couterfeiting" RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    My laptop which is running windows vista keeps giving me a "You may be a victim of software couterfeiting" message and it also says "Windows can't check for updates". When i start my laptop i get a message saying "This copy of windows is not genuine", although i'm sure that it is genuine as windows was pre-installed when i bought my laptop. About a couple of minutes after my laptop loads all the processes i get a message saying "Windows Modules Installer stopped working and was closed" Please can someone help me fix these problems.

    Thank you in advance,

    Piragash

    Monday, July 22, 2013 11:39 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    You have a Trusted Store Tamper - often caused by malware.

    please try the following.....

     

    Recreate the Licensing Store with the correct data.

     

    1) Open an Internet Browser window.

    2) Type: %windir%\system32 into the browser address bar.

    3) Find the file CMD.exe

    4) Right-Click on CMD.exe and select 'Run as Administrator'

    5) Type: net stop slsvc (it may ask you if you are sure, select yes)

    6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing

    7) Type: rename tokens.dat tokens.bar

    8) Type: cd %windir%\system32

    9) Type: net start slsvc

    10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)

    11) Restart your computer twice. 

     

    You may be asked to enter your COA Key and/or Activate. – if asked for the Key, use the one on your COA sticker on the machine’s case (you may need to activate by telephone).  

     

    Once complete, run another MGADiag report and post back with the results.     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 24, 2013 3:46 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    You need to read this thread and follow the directions.  Post your diagnostic here when you are done:

    http://social.microsoft.com/Forums/en-US/d2b8031b-a089-4ea5-b134-d231c7dee671/please-read-before-posting

    Monday, July 22, 2013 3:34 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you for replying so soon,

    The results of the diagnostic test are:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-YF8QB-HQB4Q-HGMPC
    Windows Product Key Hash: Gm/wS6/+jaXZZW7MKc/lCNFeWN0=
    Windows Product ID: 89578-OEM-7218485-25505
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {E1E2E159-5E5F-444A-9693-36F527B8D2BF}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20130106093953469-
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E1E2E159-5E5F-444A-9693-36F527B8D2BF}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HGMPC</PKey><PID>89578-OEM-7218485-25505</PID><PIDType>8</PIDType><SID>S-1-5-21-3236908170-2053368170-1251796637</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 6920</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.07   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080519000000.000000+000</Date></BIOS><HWID>7B333507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65949</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAH4JAAAAAAAAYWECANOQ1ZmNd/jG8evNAdKUkVDxCoM358lePs/mGn3DPWj2J+RsG8nDJ3VP/1y2ksN1kG56gXG7Jnx/Xrt+7zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAyuPJYEjuzrM7pi8z8IgTuMUc3xFt2C+fsUIAZzgDG+qk8JMI8kY6vmWluh0ufiTfIzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAEAAQACAAAAAwABAAEAeqgOMg7zunW8p0aDBgw61pjb8vQa7DAJFPt06KxWKoU=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC INTEL CRESTLNE
      FACP INTEL CRESTLNE
      HPET INTEL CRESTLNE
      BOOT PTLTD $SBFTBL$
      MCFG INTEL CRESTLNE
      TCPA Intel CRESTLN
      TMOR PTLTD        
      APIC INTEL CRESTLNE
      SLIC ACRSYS ACRPRDCT
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci

    Tuesday, July 23, 2013 8:06 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    You have a Trusted Store Tamper - often caused by malware.

    please try the following.....

     

    Recreate the Licensing Store with the correct data.

     

    1) Open an Internet Browser window.

    2) Type: %windir%\system32 into the browser address bar.

    3) Find the file CMD.exe

    4) Right-Click on CMD.exe and select 'Run as Administrator'

    5) Type: net stop slsvc (it may ask you if you are sure, select yes)

    6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing

    7) Type: rename tokens.dat tokens.bar

    8) Type: cd %windir%\system32

    9) Type: net start slsvc

    10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)

    11) Restart your computer twice. 

     

    You may be asked to enter your COA Key and/or Activate. – if asked for the Key, use the one on your COA sticker on the machine’s case (you may need to activate by telephone).  

     

    Once complete, run another MGADiag report and post back with the results.     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 24, 2013 3:46 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you for all that you have done to help me,

    Here are the results of the diagnostics test:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Genuine
    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-YF8QB-HQB4Q-HGMPC
    Windows Product Key Hash: Gm/wS6/+jaXZZW7MKc/lCNFeWN0=
    Windows Product ID: 89578-OEM-7218485-25505
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.0.6002.2.00010300.2.0.003
    ID: {E1E2E159-5E5F-444A-9693-36F527B8D2BF}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Home Premium
    Architecture: 0x00000000
    Build lab: 6002.vistasp2_gdr.101014-0432
    TTS Error: T:20130106093953469-
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E1E2E159-5E5F-444A-9693-36F527B8D2BF}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HGMPC</PKey><PID>89578-OEM-7218485-25505</PID><PIDType>8</PIDType><SID>S-1-5-21-3236908170-2053368170-1251796637</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 6920</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.07   </Version><SMBIOSVersion major="2" minor="4"/><Date>20080519000000.000000+000</Date></BIOS><HWID>7B333507018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65949</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAH4JAAAAAAAAYWECANOQ1ZmNd/jG8evNAdKUkVDxCoM358lePs/mGn3DPWj2J+RsG8nDJ3VP/1y2ksN1kG56gXG7Jnx/Xrt+7zOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAyuPJYEjuzrM7pi8z8IgTuMUc3xFt2C+fsUIAZzgDG+qk8JMI8kY6vmWluh0ufiTfIzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, HomePremium edition
    Description: Windows Operating System - Vista, OEM_COA_SLP channel
    Activation ID: a4eec485-e375-48b4-8f51-80d13a4086b6
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89578-00144-184-825505-02-2057-6002.0000-2062013
    Installation ID: 014710874716944471168551849982019683260471169665396615
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
    Partial Product Key: HGMPC
    License Status: Licensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAEAAQACAAAAAwABAAEAeqgOMg7zunW8p0aDBgw61pjb8vQa7DAJFPt06KxWKoU=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC INTEL CRESTLNE
      FACP INTEL CRESTLNE
      HPET INTEL CRESTLNE
      BOOT PTLTD $SBFTBL$
      MCFG INTEL CRESTLNE
      TCPA Intel CRESTLN
      TMOR PTLTD        
      APIC INTEL CRESTLNE
      SLIC ACRSYS ACRPRDCT
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci
      SSDT SataRe SataAhci

    Thursday, July 25, 2013 4:05 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you for the help, it says my microsoft is now genuine, but other problems still remain.

    Once my computer loaded after the 2 restarts, it said my malware protection was turned off. So i clicked update now and as soon as i clicked it, a popup saying "Windows Modules Installer stopped working and was closed" popped up.

    I would be really happy if you helped me with this problem too,

    Thank you so much.

    Thursday, July 25, 2013 4:09 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I just did another restart and it reminded me that when i start my laptop before the login screen, it says "installing service pack part 3/3" every single time i start my laptop.

    I hope this helps in some way.

    Thursday, July 25, 2013 4:26 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Your latest report looks fine - you should address your problems with Service Pack 1 to the mor appropriate forums at

    http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, July 27, 2013 9:30 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you for the reply, but the link you sent me was for windows 7 and i have vista.

    Saturday, July 27, 2013 5:25 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Sorry - force of habit!

    http://answers.microsoft.com/en-us/windows/forum/windows_vista-windows_update

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, July 27, 2013 6:04 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you for the link.
    Monday, July 29, 2013 10:27 PM