Remove From My Forums

Dell Alienware R2 Windows 7 shows as non-genuine

Question
0

Sign in to vote
Below is what I get buy running Microsoft Genuine Advantage Tool, I have just spend 1 hour and 30 minutes and there were not able to fix it.

Diagnostic Report (1.9.0027.0):

-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-KKG8K-KMXCG-BRF7F
Windows Product Key Hash: dRhmKkrqAK+K2ZTwrap87OI1Gmw=
Windows Product ID: 00359-OEM-9827574-83097
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {D6924AA6-D51D-4E3B-A008-5D34C5BE92FF}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D6924AA6-D51D-4E3B-A008-5D34C5BE92FF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BRF7F</PKey><PID>00359-OEM-9827574-83097</PID><PIDType>8</PIDType><SID>S-1-5-21-3951294611-1308397813-831429961</SID><SYSTEM><Manufacturer>Alienware</Manufacturer><Model>M14xR2</Model></SYSTEM><BIOS><Manufacturer>Alienware</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="7"/><Date>20130517000000.000000+000</Date></BIOS><HWID>B7663F07018400FE</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ALWARE</OEMID><OEMTableID>ALIENWRE</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-275-783097-02-4105-7601.0000-3122014
Installation ID: 009163485293355880655150133682700124572915727901651911
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: BRF7F
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 08/11/2014 12:45:05 PM

Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000002000
Event Time Stamp: 11:8:2014 12:02
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

HWID Data-->
HWID Hash Current: OAAAAAIAAAABAAIAAQABAAAABgABAAEACrbub3cW7pvQXXDkLjPSmtqwYg5G6nKKvkEPPr4YlmM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALWARE ALIENWRE
FACP ALWARE ALIENWRE
DBGP ALWARE ALIENWRE
HPET ALWARE ALIENWRE
BOOT ALWARE ALIENWRE
MCFG ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
UEFI ALWARE ALIENWRE
ASF! ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
FPDT ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
WDTT ALWARE ALIENWRE
ASPT ALWARE ALIENWRE
- Edited by Ilya42 Saturday, November 8, 2014 5:47 PM
Saturday, November 8, 2014 5:46 PM

Answers

1

Sign in to vote
I've uploaded a file - i42aa.zip - to my OneDrive at Noel's OneDrive

Please download and save it.

Right-click on the saved file and select Extract all...

Change the target to C:\ and click on Extract

Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'

Pick that

You'll have to log in with your username and password.

Pick the option to use a Command Prompt

At the prompt type

DIR C:\i42aa

hit the enter key - if you get a 'Not Found' error try

DIR D:\i42aa

or

DIR E:\i42aa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\i42aa <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time) and when the prompt returns, type

EXIT

and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt

then reboot and upload the new CBS.log file to your reply, and run another MGADiag report and post that.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.
- Marked as answer by Ilya42 Sunday, November 9, 2014 3:05 PM
Sunday, November 9, 2014 11:06 AM

Moderator
0

Sign in to vote
In that case, I think you're good to go ;)

Good luck

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.
- Marked as answer by Ilya42 Monday, November 10, 2014 3:33 PM
Monday, November 10, 2014 10:24 AM

Moderator

All replies

0

Sign in to vote

Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

To confirm that the problem is what I think it is, please run the following commands in an Elevated Command Prompt window and post the results.

REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

Here are some instructions to make life easier :)

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.

Saturday, November 8, 2014 8:43 PM

Moderator
0

Sign in to vote

Thank you Noel so much for helping me, here is the output

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0
(Default) REG_SZ SPPUI 1.0 Type Library

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win32
(Default) REG_EXPAND_SZ %SystemRoot%\System32\slui.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\FLAGS
(Default) REG_SZ 0

C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0
(Default) REG_SZ SPPUI 1.0 Type Library

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win32
(Default) REG_EXPAND_SZ %SystemRoot%\System32\slui.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\FLAGS
(Default) REG_SZ 0

C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0
(Default) REG_SZ SPPUI 1.0 Type Library

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win32
(Default) REG_EXPAND_SZ %SystemRoot%\System32\slui.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\FLAGS
(Default) REG_SZ 0

Saturday, November 8, 2014 9:46 PM
0

Sign in to vote

That looks normal - so the problem is different...

Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.

You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC.

SFC -System File Checker - Instructions

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.

Saturday, November 8, 2014 10:14 PM

Moderator
0

Sign in to vote

I have done all the steps. I run the chksdsk c: /r (I also run it earlier today).

The results of sfc /scannow are available at https://www.dropbox.com/s/m4sldafkl59albz/CBS.zip?dl=0

Latest MGADiag report is below, it looks like the same as an earlier one to me (shows only two files as being tampared). Earlier today I have also installed Windows6.1-KB947821-v34-x64 based on sevenforums instructions to try to resolve this.

Thank you again so much for trying to help me, I have spend 90 minutes with dell and 20 minutes with Microsoft to no avail.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-KKG8K-KMXCG-BRF7F
Windows Product Key Hash: dRhmKkrqAK+K2ZTwrap87OI1Gmw=
Windows Product ID: 00359-OEM-9827574-83097
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {3038A441-142D-4FE4-A0F8-BC0C4A84803E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{3038A441-142D-4FE4-A0F8-BC0C4A84803E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BRF7F</PKey><PID>00359-OEM-9827574-83097</PID><PIDType>8</PIDType><SID>S-1-5-21-3951294611-1308397813-831429961</SID><SYSTEM><Manufacturer>Alienware</Manufacturer><Model>M14xR2</Model></SYSTEM><BIOS><Manufacturer>Alienware</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="7"/><Date>20130517000000.000000+000</Date></BIOS><HWID>B7663F07018400FE</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ALWARE</OEMID><OEMTableID>ALIENWRE</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-275-783097-02-4105-7601.0000-3122014
Installation ID: 005636215804820111194323581953211294294496231783506912
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: BRF7F
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 08/11/2014 10:15:17 PM

Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000002000
Event Time Stamp: 11:8:2014 16:24
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

HWID Data-->
HWID Hash Current: OAAAAAIAAAABAAIAAQABAAAABgABAAEACrbub3CHdxYMX3DkLjPSmtqwYg5G6nKKvkEPPr4YlmM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALWARE ALIENWRE
FACP ALWARE ALIENWRE
DBGP ALWARE ALIENWRE
HPET ALWARE ALIENWRE
BOOT ALWARE ALIENWRE
MCFG ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
UEFI ALWARE ALIENWRE
ASF! ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
FPDT ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
WDTT ALWARE ALIENWRE
ASPT ALWARE ALIENWRE

Sunday, November 9, 2014 3:20 AM

Here's the error set from the SFC summary...

	Line 6764: 2014-11-08 21:50:08, Info                  CSI    00000336 [SR] Repairing 1 components
	Line 6765: 2014-11-08 21:50:08, Info                  CSI    00000337 [SR] Beginning Verify and Repair transaction
	Line 6768: 2014-11-08 21:50:08, Info                  CSI    00000339 [SR] Cannot repair member file [l:26{13}]"sppcomapi.dll" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
	Line 6771: 2014-11-08 21:50:08, Info                  CSI    0000033b [SR] Cannot repair member file [l:26{13}]"sppcomapi.dll" of Microsoft-Windows-Security-SPP-UX, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
	Line 6772: 2014-11-08 21:50:08, Info                  CSI    0000033c [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
	Line 6777: 2014-11-08 21:50:08, Info                  CSI    0000033f [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:26{13}]"sppcomapi.dll"; source file in store is also corrupted
	Line 6782: 2014-11-08 21:50:08, Info                  CSI    00000341 [SR] Repair complete

I'll post a fix protocol a little later.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.

Sunday, November 9, 2014 9:39 AM

Moderator

1

Sign in to vote
I've uploaded a file - i42aa.zip - to my OneDrive at Noel's OneDrive

Please download and save it.

Right-click on the saved file and select Extract all...

Change the target to C:\ and click on Extract

Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'

Pick that

You'll have to log in with your username and password.

Pick the option to use a Command Prompt

At the prompt type

DIR C:\i42aa

hit the enter key - if you get a 'Not Found' error try

DIR D:\i42aa

or

DIR E:\i42aa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\i42aa <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time) and when the prompt returns, type

EXIT

and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt

then reboot and upload the new CBS.log file to your reply, and run another MGADiag report and post that.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.
- Marked as answer by Ilya42 Sunday, November 9, 2014 3:05 PM
Sunday, November 9, 2014 11:06 AM

Moderator
0

Sign in to vote

Thank you so much Noel, after following the steps MGADiag no longer shows any tampered files and Microsoft Validation shows my Windows 7 as Genuine. Thank you!!!

For completeness, I have included MGADiag report below

sfc still shows some files could not be recovered, I have included the link to CBS.log file here ->

https://www.dropbox.com/s/ptxnowi6bkwvbij/CBS%20latest.zip?dl=0
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Administrator>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

C:\Users\Administrator>
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-KKG8K-KMXCG-BRF7F
Windows Product Key Hash: dRhmKkrqAK+K2ZTwrap87OI1Gmw=
Windows Product ID: 00359-OEM-9827574-83097
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {3038A441-142D-4FE4-A0F8-BC0C4A84803E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{3038A441-142D-4FE4-A0F8-BC0C4A84803E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BRF7F</PKey><PID>00359-OEM-9827574-83097</PID><PIDType>8</PIDType><SID>S-1-5-21-3951294611-1308397813-831429961</SID><SYSTEM><Manufacturer>Alienware</Manufacturer><Model>M14xR2</Model></SYSTEM><BIOS><Manufacturer>Alienware</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="7"/><Date>20130517000000.000000+000</Date></BIOS><HWID>B7663F07018400FE</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ALWARE</OEMID><OEMTableID>ALIENWRE</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-275-783097-02-4105-7601.0000-3122014
Installation ID: 005636215804820111194323581953211294294496231783506912
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: BRF7F
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 09/11/2014 10:01:21 AM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:9:2014 09:35
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: OAAAAAIAAAABAAIAAQABAAAABgABAAEACrbub3CHdxYMX3DkLjPSmtqwYg5G6nKKvkEPPr4YlmM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALWARE ALIENWRE
FACP ALWARE ALIENWRE
DBGP ALWARE ALIENWRE
HPET ALWARE ALIENWRE
BOOT ALWARE ALIENWRE
MCFG ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
UEFI ALWARE ALIENWRE
ASF! ALWARE ALIENWRE
SLIC ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
FPDT ALWARE ALIENWRE
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
SSDT INSYDE H2O BIOS
WDTT ALWARE ALIENWRE
ASPT ALWARE ALIENWRE

Sunday, November 9, 2014 3:04 PM
0

Sign in to vote

Great!...

I can see no reason why SFC should be complaining about anything - the CBS.log you posted is effectively error-free.

However, for completeness, let's have the CheckSUR detail as well...

Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821

(you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and upload it to your OneDrive Public folder so I can take a look - post a link in your reply.

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.

Sunday, November 9, 2014 7:11 PM

Moderator
0

Sign in to vote

Actually I already ran this tool i.e. before I started following you solution that ultimately fix my "non genuine Windows" issue. The log file is very short hence I have included it below (no errors, even though this was before I restored the two files you have send me)

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2014-11-08 14:41

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 482
No errors detected

Sunday, November 9, 2014 10:39 PM
0

Sign in to vote
In that case, I think you're good to go ;)

Good luck

Noel Paton | Nil Carborundum Illegitemi

CrashFixPC | The Three-toed Sloth

No - I do not work for Microsoft, or any of its contractors.
- Marked as answer by Ilya42 Monday, November 10, 2014 3:33 PM
Monday, November 10, 2014 10:24 AM

Moderator

Answered by:

Dell Alienware R2 Windows 7 shows as non-genuine

Question

Answers

All replies