Windows 7 Build 7601: This copy Windows is not genuine

All replies

• 

  

  0

  Sign in to vote

  "p6512" wrote in message news:252a40d2-bed7-43ec-a533-0c79ebc3ed77...

  Had laptop since September (-ish) 2011, Win 7 home Premium 32-bit pre- installed. No problem until tonight at circa 8 pm

  I did run Windows Update at abiut 6pm (?) seemed to go fine.

  Also laptop has Ati 2450 integ. graphics and higher powered Ati 5470. There's an ATi utility to switch between the two, which I used a lot tonight. Could this have convinced windows that this is 2 different machines and therefore illegitimate?

  Am still learning Win7 (and never posted here...hope it goes to right place) diagnostic output attached:

  Diagnostic Report (1.9.0027.0):

  
  

  -----------------------------------------

  
  

  Windows Validation Data-->

  
  

  Validation Code: 0

  Cached Online Validation Code: N/A, hr = 0xc004f012

  Windows Product Key: *****-*****-FTV6P-PC7CX-8TFF7

  Windows Product Key Hash: QfoshR+unxXfMlX5NFo0AMlrVUo=

  Windows Product ID: 00359-OEM-8992687-00093

  Windows Product ID Type: 2

  Windows License Type: OEM SLP

  Windows OS version: 6.1.7601.2.00010300.1.0.003

  
  
  

  OGA Data-->

  Office Status: 100 Genuine

  Microsoft Office XP Professional with FrontPage - 100 Genuine

  
  

  Other data-->

  <SYSTEM><Manufacturer>MEDION</Manufacturer><Model>P651x series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>A16GKAM7.108</Version><SMBIOSVersion major="2" minor="6"/><Date>20100831000000.000000+000</Date></BIOS

  
   

  Licensing Data-->

  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, HomePremium edition

  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

  Partial Product Key: 8TFF7

  License Status: Licensed

  
  

  OEM Activation 2.0 Data-->

  BIOS valid for OA 2.0: yes

  Windows marker version: 0x20001

    SLIC MEDION MEDIONAG
  
  

  　I can't control the pasted font size....sorry

  There doesn’t appear to be any problem with your report – was the notification showing when you ran the report?

   

  Simply swapping Video cards doesn’t normally cause a non-genuine notification, unless other things have also been changed.

   

  You should download and install the WAT update (KB971033)  - it may help identify what the problem is, if you run  MGADiag with it installed (assuming that there is any problem!)

  http://support.microsoft.com/kb/971033

   

  However, you should be aware that your installation of Office XP is almost certainly a counterfeit one – it’s a Volume License Only version, and if you didn’t get it through your employer or college, it’s a racing certainty to be based on a stolen license, despite what MGADiag says about it.

   

   

   

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Proposed as answer by Darin Smith MS Tuesday, March 20, 2012 10:09 PM

  Friday, March 16, 2012 11:47 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel(?) Thanks for the reply. No, the error message was not physically showing as I typed, it isn't permanent. Will get a diagnostic (it took me a while to figure what to do last night) when it shows again. The Office XP is in fact Genuine, from my employing college. I'm now semi-retd. and work with a (declining) number of re-sit/re-take home students. The campus folks are ribbon-office but my 'external' students are (largely) not. I took the trial Office 2010 Starter off the laptop (too much learning curve) and didn't bother to agitate the IT people for it either. I know...one day....but for now the stone-axe will do. Take your point re 'racing cert.' but I try to do things the straight way...( ok, some 'copied' ZX80 stuff in 19......oh dear) Will check Win updates etc as advised and get back, prob Monday. Again, my thanks :)

  • Edited by p6512 Saturday, March 17, 2012 4:34 PM trying to get format back:(

  Saturday, March 17, 2012 4:30 PM
• 

  

  0

  Sign in to vote

  "p6512" wrote in message news:e0eb5d40-b4ba-4ce5-a5bb-40511522da99...

  Hi Noel(?) Thanks for the reply. No, the error message was not physically showing as I typed, it isn't permanent. Will get a diagnostic (it took me a while to figure what to do last night) when it shows again. The Office XP is in fact Genuine, from my employing college. I'm now semi-retd. and work with a (declining) number of re-sit/re-take home students. The campus folks are ribbon-office but my 'external' students are (largely) not. I took the trial Office 2010 Starter off the laptop (too much learning curve) and didn't bother to agitate the IT people for it either. I know...one day....but for now the stone-axe will do. Take your point re 'racing cert.' but I try to do things the straight way...( ok, some 'copied' ZX80 stuff in 19......oh dear) Will check Win updates etc as advised and get back, prob Monday. Again, my thanks :)

   

  Hey – I can remember the Z80 and Beeb Micro too :)

   

  If the notification comes and goes, it is usually the result of a race condition, where two processes compete for resources – if one of those is the WGA services, then it may throw up the notification in the belief that the system is under attack. Usually this will disappear at the next boot, but may recur.

  Often the cause is an anti-virus program – which one are you using?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Marked as answer by Darin Smith MS Monday, March 26, 2012 6:14 PM
  • Unmarked as answer by Darin Smith MS Thursday, April 5, 2012 5:49 PM

  Saturday, March 17, 2012 4:55 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  Apologies for delay, Monday was one of those days!

  Have applied KB971033 as you suggested. Problem has not appeared since I posted (magic eh?) Your process-race point feels right and I'll try to replicate the conditions later this week. Antivirus duties currently MS Security Essentials with various back-up manual scanners eg Malwarebytes.

  Ahh the Beeb and its BASIC .......and even better, a built-in 6502 Assembler. I wrote a bubble-sort and assembled into the (by then redundant) cassete buffer in 19......zzzzzz. Did student-grade admin. faster than anything else in the college.

  Regards

  Geek of the Week

  Tuesday, March 20, 2012 9:18 PM
• 

  

  0

  Sign in to vote

  "p6512" wrote in message news:c5c1ec89-65d3-4829-932b-5d51a7d44f19...

  Hi Noel,

  Apologies for delay, Monday was one of those days!

  Have applied KB971033 as you suggested. Problem has not appeared since I posted (magic eh?) Your process-race point feels right and I'll try to replicate the conditions later this week. Antivirus duties currently MS Security Essentials with various back-up manual scanners eg Malwarebytes.

  Ahh the Beeb and its BASIC .......and even better, a built-in 6502 Assembler. I wrote a bubble-sort and assembled into the (by then redundant) cassete buffer in 19......zzzzzz. Did student-grade admin. faster than anything else in the college.

  Regards

  Geek of the Week

   

  <chuckle>

  First one I actually owned was a Dragon 64 with twin floppies - although I'd played with other peoples' ZX80/Beeb/C64/Ataris. Learned a little programming as school in the early 70's, and more at work in the late 70's on VMS teletype/tape terminals. Finally got a 'proper' PC when Win95 came out... the rest, as they say, is history :)

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Wednesday, March 21, 2012 12:41 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  Lack of reply because nothing to report, the last night....message was back! I missed running the diag. 'cos its was late (for a pint) and I was having a 'Eureka!" moment.

  The trigger for the message is Bioshock ( the original version, retail disc and official patch downloaded from manuf. site)

  Plays fine but on quittiing to Windows the message is there. Easy to spot if you are looking for it, easy to miss if not (haven't played for weeks). Happened last night, playing with Security Essentials real-time monitoring 'off'.

  Wonder if it's the game (or the execrable Securom-thank you Sony!- which the game apparently uses) versus the increasingly 'paranoid' MGA software ?

  Chap in pub laughed, saying 'Pirates don't have this problem because the copy protection is removed. Only the 'honest' mug punters suffer'.....hmmm. :(

  Will go for a diag. readout next time. Or should I give up playing for fear of 'illegitimising' myself (ooerr!)

  Regards

  JB

  Thursday, April 5, 2012 3:38 PM
• 

  

  0

  Sign in to vote

  Interesting!

  I wonder what it does? There have been no singificant changes to the WGA system since the release of the WAT Update two or so  years ago - so I don't see what would have caused this now, unless this is a new program to you.

  Are you running it in any of the Compatibility modes?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, April 5, 2012 3:59 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  Presuption premature, it did take a while to generate a reproduceable fail: (quick is easy @ Darin: no reply-presume etc..no offence intended but the tricky issues are erem...tricky).

  Anyway it IS Bioshock (but maybe other...Sony 'protected' software too) but is time -ish dependent. Caught and posted below.

  If I do (yes, with wine post a long day-week) a 2+ hour session ( with breaks but pausing game as opposed to re-start): MS-Sec.- Ess.-off, wireless-off, modem-off then the warning re 'not genuine' manifests.

  Shorter sessions...no problem. I will, eventually...try long-play with MSSE and/or internet-on...no not tonight....

  It is as though there is a background (dis-)service (genuinely!!) trying to do ..'something' and failing and so flagging..'not genuine'.

  DRM is becoming a burden..(buy Windows....and have it dis-own you....your problem) but only for genuine users. I guess that one aim is to terminate PC game playing: consoles are so much easier to monetise.

  I can remember when it was all enthusiasts (er....fields round here ?)......

  Regards

  JB

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0x8004FE21
  Cached Online Validation Code: N/A, hr = 0xc004f012
  Windows Product Key: *****-*****-FTV6P-PC7CX-8TFF7
  Windows Product Key Hash: QfoshR+unxXfMlX5NFo0AMlrVUo=
  Windows Product ID: 00359-OEM-8992687-00093
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010300.1.0.003
  ID: {4B33668A-B9C1-40D6-A027-6767875E83D3}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Home Premium
  Architecture: 0x00000000
  Build lab: 7601.win7sp1_gdr.111025-1505
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office XP Professional with FrontPage - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-8009_E2AD56EA-766-2ee7_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: N/A, hr=0x80070002
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{4B33668A-B9C1-40D6-A027-6767875E83D3}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-8TFF7</PKey><PID>00359-OEM-8992687-00093</PID><PIDType>2</PIDType><SID>S-1-5-21-3478717435-2599229212-3087638131</SID><SYSTEM><Manufacturer>MEDION</Manufacturer><Model>P651x series</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>A16GKAM7.108</Version><SMBIOSVersion major="2" minor="6"/><Date>20100831000000.000000+000</Date></BIOS><HWID>C0DB3007018400F4</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MEDION</OEMID><OEMTableID>MEDIONAG</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90280409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional with FrontPage</Name><Ver>10</Ver><Val>C8496CC5FFF08</Val><Hash>mCm9kAh3mtVHxZadmRdCTSWx9pk=</Hash><Pid>54185-640-6798122-17891</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="17" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, HomePremium edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00359-00178-926-800093-02-1033-7600.0000-2452010
  Installation ID: 001665214975380465637501112181212546677674802255686503
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 8TFF7
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 19/04/2012 23:47:25

  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0001000000000000
  Event Time Stamp: N/A
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered Service: sppsvc

  
  HWID Data-->
  HWID Hash Current: NAAAAAEAAwABAAIAAAACAAAAAgABAAEAeqgu9w0/EDMm2drw5KSW4Nyz6kVsG6ZFwq4YeQ==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   MEDION  APIC1526
    FACP   MEDION  FACP1526
    HPET   MEDION  OEMHPET
    MCFG   MEDION  OEMMCFG
    SLIC   MEDION  MEDIONAG
    OEMB   MEDION  OEMB1526
    SSDT   A M I   POWERNOW

  
  
  

  • Edited by p6512 Friday, April 20, 2012 5:26 PM

  Friday, April 20, 2012 5:22 PM
• 

  

  0

  Sign in to vote

  Nope

  JB

  Friday, April 20, 2012 5:23 PM
• 

  

  0

  Sign in to vote

  I suspect that I know what's hppening.

  There are some gaming 'tweaks' that involve switching off 'unnecessary' services. - one of the ones that these tweaks like to switch off is the Software Protection Service. (SPPSVC) This is totally unnecessary, as the service uses almost no resources except at boot time, and once every few days (random intervals of up to 90 days). Your report is showing the service as 'tampered'

  If you're using such a tool, or BioShock contains such an option, then please disable it and retest.

  One such tool is Game Booster 3 - which caused similar problems for another poster in these forums.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Proposed as answer by Darin Smith MS Monday, April 23, 2012 9:24 PM
  • Marked as answer by Darin Smith MS Monday, April 30, 2012 10:38 PM

  Friday, April 20, 2012 5:39 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel,

  I don't use an'optimiser': did dally with an AMD Fusion utility but it made no sig.diff. so isn't used anymore. Can't find a similar option in Bioshock either.

  Just had the usual message and checked local services; SPPSVC is set to manual and shows as 'started'  (listed as Network service) (should it be set to Auto?), SPPNSvc (if it be relevant) is 'Manual' but not started.

  Re: Your report is showing the service as 'tampered'....which bit of the diag. rept. is that ?

  Will go check the my early 'Fusion' play hasn't left a lingering legacy in my reg.

  I'm still suspicious of SecuRom......call me paranoid..(you're probably thinking it anyway....everybody is...even my toaster is against me.....) :)

  Regards

  JohnB

  Sunday, April 22, 2012 9:25 PM
• 

  

  0

  Sign in to vote

  "p6512" wrote in message news:b72fa4eb-bb50-4628-83d6-8dd7f66c855b...

  Hi Noel,

  I don't use an'optimiser': did dally with an AMD Fusion utility but it made no sig.diff. so isn't used anymore. Can't find a similar option in Bioshock either.

  Just had the usual message and checked local services; SPPSVC is set to manual and shows as 'started'  (listed as Network service) (should it be set to Auto?), SPPNSvc (if it be relevant) is 'Manual' but not started.

  Re: Your report is showing the service as 'tampered'....which bit of the diag. rept. is that ?

  Will go check the my early 'Fusion' play hasn't left a lingering legacy in my reg.

  I'm still suspicious of SecuRom......call me paranoid..(you're probably thinking it anyway....everybody is...even my toaster is against me.....) :)

  Regards

  JohnB

   

   

  SPPSVC must be set to Automatic (Delayed start) - or you will have problems.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Sunday, April 22, 2012 9:35 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi (again) Noel,

  I think that you were spot-on!

  On searching I found an 'orphan' AMD-Fusion Service, it relates to a gaming profile I created when experimenting with the prog. (6months ago?). The profile seemed broken but partly functional. Reinstalled AMD Fusion, turned everything poss. to machine/windows default (the orphan wouldn't poperly respond): uninstalled the whole thing with Revo Uninstaller and checked for left-overs....everything (this time) appears to be gone.

  Egad Holmes.......

  Looks good...will post back after next long session of Bioshock........another pint I owe you!  :)

  Regards

  JohnB

  Sunday, April 22, 2012 10:25 PM
• 

  

  0

  Sign in to vote

  Hey John,

  I would normal mark this thread as Answered but want to give you some extra time to confirm the issue is fully resolved. Will wait till after the weekend.

  Thanks,

  ---

  Darin MS

  
  

  • Edited by Darin Smith MS Thursday, April 26, 2012 11:57 PM

  Thursday, April 26, 2012 11:56 PM
• 

  

  0

  Sign in to vote

  Assumed the issue is resolved.

  ---

  Darin MS

  Monday, April 30, 2012 10:38 PM