Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows suddenly not genuine RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi All

     

    A computer recently upgraded from XP to windows 7 after 2ish months is complaining it isn't genuine.

     

    Report from mgdiag...

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-*****-*****-YFKC6
    Windows Product Key Hash: F1YLjWE8gbr2yKh06G3rj9yp6U8=
    Windows Product ID: 55041-033-1320933-86625
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {903C29DB-F591-400F-883C-B1EEC0A70B52}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Plus 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: F:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: F:\Windows\system32\en-US\sppuinotify.dll.mui[Hr = 0x80004005]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{903C29DB-F591-400F-883C-B1EEC0A70B52}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-033-1320933-86625</PID><PIDType>6</PIDType><SID>S-1-5-21-2154641144-2428665390-201705095</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>ASUS A8N-E ACPI BIOS Revision 1006</Version><SMBIOSVersion major="2" minor="3"/><Date>20050630000000.000000+000</Date></BIOS><HWID>8AB83607018400E6</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>999B6BFED88E58A</Val><Hash>9YGRw6L+1I9DQDti/CUF5PmNCM0=</Hash><Pid>89409-709-9111896-65821</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-033-132093-03-2057-7600.0000-1952010
    Installation ID: 007573082806647044504126166491612623027602135476287570
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: YFKC6
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 14/07/2010 15:32:03

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000400
    Event Time Stamp: 7:9:2010 10:11
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui


    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAIAAAADAAAAAQABAAEAnJ+Wsm5OdOoAh96TPo5+COrUyqjOcHo2koq2DoE/VkJgqQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            Nvidia        AWRDACPI
      FACP            Nvidia        AWRDACPI
      SRAT            AMD           HAMMER 
      MCFG            Nvidia        AWRDACPI

     

     

    Can anyone see the problem?

    Thanks!

    Wednesday, July 14, 2010 2:56 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello peteg.maxnett,

    One of the Software Protection Platform's files has been detected as tampered:

    File Scan Data-->
    File Mismatch: F:\Windows\system32\en-US\sppuinotify.dll.mui[Hr = 0x80004005]

    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    The MS moderator in this forum, Darin Smith, gave the following advice to
    someone in the exact same position as you....
     
    ""
    HrOffline: 0x8004FE22
     
    The above snippet of your Diagnostic Report telling me that Windows detected
    that one or more of it's protected system file(s) have been modified
    (rewritten, replaced or become corrupt) and that when Windows tried to
    repair the files, it failed for unknown reasons. These files can no longer
    be trusted because they have been modified in some way. Or in other words,
    the files are Non-Genuine.
     
    Below are things you can try to repair the files and resolve the issue:
     
    First try doing a System Scan. The scan will look for bad system files and
    will attempt to repair them, if possible.
     
    1) Click the Start Button
    2) Type: cmd.exe
    3) Right-click the cmd.exe file and select 'Run as Administrator'
    4) In the CMD window, type: sfc /scannow
    5) Reboot and see if that resolves the issue.
     
    If that doesn't work, try repairing Windows using System Restore:
     
    1) Click the Start button
    2) In the Start Search field, type: System Restore and hit “Enter”
    3) Select "Choose Different Restore Point", Put a check in the box that says
    "Show restore points older than 5 days", select the restore point that
    corresponds to the date Before you first noticed the issue.
    4) Click the "Next" button.
    5) Reboot and see if that resolves the issue.
     ""
    And in a live response in that same thread, Darin posted:
    ""However, If neither of these sets of steps resolves the issue, my only other suggestions would be either to create a (no cost) suport request at http://support.microsoft.com/gp/contactwga or reinstall.""
    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Friday, July 16, 2010 12:55 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello peteg.maxnett,

    Since you have Volume Licensing installations of both Windows and Office, it's likely that you are part of a larger organization's network, and such organizations usually have in-house tech support staff.  In those circumstances it's usually a good idea to contact the tech support staff for assistance first.

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    • Proposed as answer by Darin Smith MS Wednesday, July 14, 2010 7:07 PM
    Wednesday, July 14, 2010 4:05 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Dan

    I am the tech support.
    The customer was supplied with a MOLP windows 7 upgrade licence a while ago, but now it's saying it's not genuine.

     

    Any suggestions would be appreciated.

     

    Thanks,
    Pete

    Friday, July 16, 2010 8:38 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello peteg.maxnett,

    One of the Software Protection Platform's files has been detected as tampered:

    File Scan Data-->
    File Mismatch: F:\Windows\system32\en-US\sppuinotify.dll.mui[Hr = 0x80004005]

    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    The MS moderator in this forum, Darin Smith, gave the following advice to
    someone in the exact same position as you....
     
    ""
    HrOffline: 0x8004FE22
     
    The above snippet of your Diagnostic Report telling me that Windows detected
    that one or more of it's protected system file(s) have been modified
    (rewritten, replaced or become corrupt) and that when Windows tried to
    repair the files, it failed for unknown reasons. These files can no longer
    be trusted because they have been modified in some way. Or in other words,
    the files are Non-Genuine.
     
    Below are things you can try to repair the files and resolve the issue:
     
    First try doing a System Scan. The scan will look for bad system files and
    will attempt to repair them, if possible.
     
    1) Click the Start Button
    2) Type: cmd.exe
    3) Right-click the cmd.exe file and select 'Run as Administrator'
    4) In the CMD window, type: sfc /scannow
    5) Reboot and see if that resolves the issue.
     
    If that doesn't work, try repairing Windows using System Restore:
     
    1) Click the Start button
    2) In the Start Search field, type: System Restore and hit “Enter”
    3) Select "Choose Different Restore Point", Put a check in the box that says
    "Show restore points older than 5 days", select the restore point that
    corresponds to the date Before you first noticed the issue.
    4) Click the "Next" button.
    5) Reboot and see if that resolves the issue.
     ""
    And in a live response in that same thread, Darin posted:
    ""However, If neither of these sets of steps resolves the issue, my only other suggestions would be either to create a (no cost) suport request at http://support.microsoft.com/gp/contactwga or reinstall.""
    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Friday, July 16, 2010 12:55 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I had the same problem you had.  This really works.  Insert your Windows 7 DVD and select the In-Place Upgrade option.  This takes a while (2 or 3 hours depending on the speed of your system).  In effect, it re-installs the operating system without removing your current programs or your data files.   Your system will reinstall the updates after you do the In-Place Upgrade.  You should be back to your original configuration before you had the problem.
    Tuesday, August 17, 2010 11:42 PM