locked
Windows not genuine Build 7600 RRS feed

  • Question

  • Assistance is appreciated.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {66F8FCDB-1A31-44EE-A3AF-842C62C3F864}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error: T:20111221083832049-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{66F8FCDB-1A31-44EE-A3AF-842C62C3F864}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6P6GT</PKey><PID>00371-OEM-8992671-00008</PID><PIDType>2</PIDType><SID>S-1-5-21-1423538507-3527916868-2051930834</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 505B Microtower</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>5.19   </Version><SMBIOSVersion major="2" minor="5"/><Date>20100210000000.000000+000</Date></BIOS><HWID>43B83607018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-BPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:30:2011 11:42
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEAJJTaFCxmgCCOYNCU6J44Xxh5

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        SLIC-BPC
      FACP            HPQOEM        SLIC-BPC
      HPET            HPQOEM        SLIC-BPC
      MCFG            HPQOEM        SLIC-BPC
      OEMB            HPQOEM        SLIC-BPC
      SLIC            HPQOEM        SLIC-BPC
      SSDT            HPQOEM        SLIC-BPC


    Wednesday, December 21, 2011 1:56 PM

Answers

  • I also tried re-entering the product key and re-running validation but that didn't seem to help.

    The client indicated that there was an abnormal shutdown the previous day. They noted that their Quickbooks application still thought the user was logged into a database. I suggested they log in and out to see if that would clear out the login. They shut down the machine at the end of the day. After booting up this morning the genuine advantage notification and wallpaper change went back to normal.

    I'm not quite sure how that application caused it, but it appears as though this can be considered closed. Thanks for your help!

    • Marked as answer by Darin Smith MS Tuesday, December 27, 2011 11:12 PM
    Thursday, December 22, 2011 4:17 PM

All replies

  • "OCG" wrote in message news:22fafcb0-19dc-406f-8876-a494075d7e97...

    Assistance is appreciated.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-788W3-H689G-6P6GT
    Windows Product Key Hash: yr8OHoeXhbT4dc6MxGYjdAStSPY=
    Windows Product ID: 00371-OEM-8992671-00008
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {66F8FCDB-1A31-44EE-A3AF-842C62C3F864}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error: T:20111221083832049-


    Other data-->
    SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq 505B Microtower</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>5.19   </Version><SMBIOSVersion major="2" minor="5"/><Date>20100210000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385
    Error: product key not found.


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001



    You have a rarity! – a Trusted Store Tamper :(
    Please check your system for malware of all kinds.
    Have you installed any new programs or drivers in the past few days (or say 3 days before first getting the notification)?
    If so, then try uninstalling it, and see if that helps.
    Otherwise it can be very difficult to isolate what’s actually causing such problems – you can try using a Clean Boot, and see if that helps, then slowly add back the various disabled services and startup items until you get one that fails.
    This can also be caused by malware – so make sure that your AV is up to date, and run a full system scan. Also try using Malwarebytes Anti-Malware (free version) as a scanner - do NOT enable the real-time protection trial, as it may interfere with your AV.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, December 21, 2011 2:57 PM
    Moderator
  • Thank you for the advice.

    It is a workstation for a client of ours, who purchased the machine through us, so we know it's legit.

    Nothing detected in full MBAM scan or Kaspersky TDSS Killer. The client is already running Avast Pro and nothing was detected with that.

    The client indicated no changes were made in recent memory and there is nothing in Add/Remove programs recently added.

    It will be interesting to see if HP has any recommendations since it is covered under a Care Pack.

    So if I try a clean boot on the machine, do I need to run the Windows Activation again, or would it fix itself (in theory) if there is a problematic service?

    Wednesday, December 21, 2011 6:21 PM
  • I have a feeling that you are placing too much trust in your protections.

    I would be *very* surprised if HP ackowledged any kind of liability - let alone offered a solution

     

    *Something* is messing with the system - either by design, or by malware.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, December 21, 2011 7:31 PM
    Moderator
  • I also tried re-entering the product key and re-running validation but that didn't seem to help.

    The client indicated that there was an abnormal shutdown the previous day. They noted that their Quickbooks application still thought the user was logged into a database. I suggested they log in and out to see if that would clear out the login. They shut down the machine at the end of the day. After booting up this morning the genuine advantage notification and wallpaper change went back to normal.

    I'm not quite sure how that application caused it, but it appears as though this can be considered closed. Thanks for your help!

    • Marked as answer by Darin Smith MS Tuesday, December 27, 2011 11:12 PM
    Thursday, December 22, 2011 4:17 PM
  • "OCG" wrote in message news:5beb88b6-c479-455d-8b4d-658926f1a036...

    I also tried re-entering the product key and re-running validation but that didn't seem to help.

    The client indicated that there was an abnormal shutdown the previous day. They noted that their Quickbooks application still thought the user was logged into a database. I suggested they log in and out to see if that would clear out the login. They shut down the machine at the end of the day. After booting up this morning the genuine advantage notification and wallpaper change went back to normal.

    I'm not quite sure how that application caused it, but it appears as though this can be considered closed. Thanks for your help!

     
    Glad it’s sorted – but I wouldn’t be too surprised if the notification reappeared soon.
     
    Good Luck

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, December 23, 2011 9:25 PM
    Moderator