locked
Windows 7 not genuine even if Diag tool say it is. RRS feed

  • Question

  • Since a couple of days a non genuine message pops up on my Windows 7 even though is a real copy. I've visited the test website and it say not genuine (both IE and Firefox) for some reason. The Diag tool say its genuine. It's a PC bought with Windows preinstalled many months ago, no hardware change has been made. How do I correct this issue. Diag output below, it shows some missmatched files.

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-8Y28B-TM66F-CK7D3
    Windows Product Key Hash: nTi1aJxJw0luoyfH3Tme59inP2c=
    Windows Product ID: 00426-OEM-9154277-54002
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {E556CAD1-A33E-4E7E-B823-3598B658F627}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110408-1633
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    Microsoft Office Visio Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\en-us\user32.dll.mui[6.1.7600.16385]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E556CAD1-A33E-4E7E-B823-3598B658F627}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-CK7D3</PKey><PID>00426-OEM-9154277-54002</PID><PIDType>3</PIDType><SID>S-1-5-21-3854741253-3971047297-1912829338</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1807   </Version><SMBIOSVersion major="2" minor="4"/><Date>20090415000000.000000+000</Date></BIOS><HWID>AFBA3607018400FA</HWID><UserLCID>041D</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>53FC64482BE8EAC</Val><Hash>50xF+PbVeGEJmQLWwZio6RNLeoY=</Hash><Pid>81599-854-0283465-65586</Pid><PidType>1</PidType></Product><Product GUID="{91120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007</Name><Ver>12</Ver><Val>70D2EAAEE9356AC</Val><Hash>LPoOJhl7AJWAeg9TD6jqs3f/wXo=</Hash><Pid>84890-854-0843544-63884</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="53" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: cfb3e52c-d707-4861-af51-11b27ee6169c
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00182-542-754002-02-1053-7600.0000-0302010
    Installation ID: 015985718485202843654845107093848933297546111096531111
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: CK7D3
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 2011-07-17 02:00:05

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: 0x00000000
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 7:17:2011 01:21
    WAT Activex: Registered
    WAT Admin Service: Registered

    HWID Data-->
    HWID Hash Current: NAAAAAIABAABAAEAAQABAAAAAQABAAEAeqiq8DlUbRoSmAiFpgwQWJbanPON7xJb+n0qhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            MSTEST        OEMAPIC
      FACP            MSTEST        OEMFACP
      HPET            MSTEST        OEMHPET
      MCFG            MSTEST        OEMMCFG
      OEMB            MSTEST        AMI_OEM

    ------

    I've run the following based on another post (that had missmatch files in the log). No change:

    C:\SFC /SCANNOW

    Beginning system scan.  This process will take some time.

    Beginning verification phase of system scan.
    Verification 100% complete.

    Windows Resource Protection did not find any integrity violations.

    --------

    Iv'e tried updating to Windows 7 SP1 to correct the "missmatch files" in the Diag log but the SP1 (same for IE9) fails to download correctly with Windows update error "WindowsUpdate_8E5E03FA".

    It seem impossible to get hold of Microsoft support at this our on phone or chat with a reference to 08:00 - 16:00 GMT opening hours (Swedish) and the Microsoft support email form does not work with error "Our system is not responding right now. We apologize for the inconvenience. Our technical team has been alerted and is working on resolving the problem."

    Any tips on how to correct this problem / missmatched files?

    Regards,
    Magnus

    Sunday, July 17, 2011 12:17 AM

Answers

  • Ok this is now solved but it was a long road to travel. The catroot2 tip got me in the right direction but didn't solve it fully.

    Short story:
    Install Windows SP1 to fix the missmatch files and to get the validation via the web site to work again. Web site:
    http://www.microsoft.com/genuine/validate

    Long story:
    It's not easy to install Windows 7 SP1 once Windows Update starts to fail on the SP1 install. Error code WindowsUpdate_8E5E03FA

    For completness here is what I did:
    1.
    I followed your catroot2 rename advice above. This got me further but not all the way. I had 4 security updates pending + Windows 7 SP1 + IE9 in my Windows update list. With the catroot2 rename I could install the 4 small updates and got less missmatch files from my original post. This remained:

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385]

    The validation site still say not genuine.

    2.
    Windows 7 SP1 or IE9 didn't want to download and install this way via Windows update. I tried multiple catroot2 renames, reboots etc.

    3.
    I went to download SP1 from Microsoft Download Center. To be able to download you need to validate. Luckily, this validation is done with an exe file "GenuineCheck.exe". This files gives you a code and this was validated correctly so I could download the service pack (1GB). I guess it works similair to MGADiag.exe which also says genuine.

    4.
    I start to install SP1 but it fails after about 15 minites with "An unknown error occured. Installation was not successful". Error 0x8e5e03fa

    5.
    The troubleshooting guide points you to: System Update Readiness Tool. Found at:
    http://windows.microsoft.com/en-us/windows7/troubleshoot-problems-installing-service-pack

    6.
    The above tool didn't help.

    7.
    Found a Microsoft tip about not only renaming catroot2 but also deleting files in "c:\windows\software distribution" folder. Dont remember the link but the instructions where:

    Start your computer in safe mode
    http://windows.microsoft.com/en-US/windows7/Start-your-computer-in-safe-mode

    Login using the Administrators account in safe mode and follow the steps as mentioned below:
    1)     Click on Start, type cmd.exe,
    2)     Under programs right click on Cmd.exe and click on Run as Administrator
    3)     In DOS type:-  net stop cryptsvc (Press enter and wait for the computer to say its stop this service)
    4)     Close Command prompt windows and remain in Windows Safe Mode.
    5)     Click on start, Click on Computer and navigate to c:\windows\software distribution folder and remove the contents, but not the folder it’s self
    6)     Then navigate to c:\windows\system32\catroot2 folder and remove the content of that folder
    Right click on the catroot2 folder and rename it to catroot2.old
    7)     Restart windows and login as normal.
    8)     Once logged into windows run Windows Update from the Start menu. Download and install updates as normal.

    Temporarily disable or uninstall your security software

    8.
    To disable antivirus etc I followed the guide for a "Clean boot":
    http://support.microsoft.com/kb/929135

    9.
    After this I could now install Windows 7 SP1 without problem and MGADiag.exe tool no longer shows any missmatch files. Validation site works as well.

    I guess the root cause of missmatch files might have been some half finished windows update patches.

    Regards,
    Magnus


    • Marked as answer by Magnus_ Sunday, July 17, 2011 12:57 PM
    Sunday, July 17, 2011 12:53 PM

All replies

  • "Magnus_" wrote in message news:42d00e0b-7a8d-4116-9137-6a0d7d3a5a1e...

    Since a couple of days a non genuine message pops up on my Windows 7 even though is a real copy. I've visited the test website and it say not genuine (both IE and Firefox) for some reason. The Diag tool say its genuine. It's a PC bought with Windows preinstalled many months ago, no hardware change has been made. How do I correct this issue. Diag output below, it shows some missmatched files.

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: 0x0
    Windows Product Key: *****-*****-8Y28B-TM66F-CK7D3
    Windows Product Key Hash: nTi1aJxJw0luoyfH3Tme59inP2c=
    Windows Product ID: 00426-OEM-9154277-54002
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7600.2.00010100.0.0.001


    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\en-us\user32.dll.mui[6.1.7600.16385]

    Iv'e tried updating to Windows 7 SP1 to correct the "missmatch files" in the Diag log but the SP1 (same for IE9) fails to download correctly with Windows update error "WindowsUpdate_8E5E03FA".

    It seem impossible to get hold of Microsoft support at this our on phone or chat with a reference to 08:00 - 16:00 GMT opening hours (Swedish) and the Microsoft support email form does not work with error "Our system is not responding right now. We apologize for the inconvenience. Our technical team has been alerted and is working on resolving the problem."

    Any tips on how to correct this problem / missmatched files?

    Regards,
    Magnus


    Your problem is caused by the file mismatches highlighted above.
    In respect of the Windows update error, try this...

    In accessories go to command prompt, right click, click run as administrator.
    type in: net stop cryptsvc

    press enter.

    type in: cd\

    press enter.

    type in: cd windows\system32

    press enter

    type in: ren catroot2 catroot3

    press enter

    type in: net start cryptsvc

    reboot

    See if that solves the installation problem (or at least changes the error code - post back with details if anything above fails).
     
    If it does, please return with a new MGADiag report after the installation either completes or fails.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, July 17, 2011 8:00 AM
    Moderator
  • Ok this is now solved but it was a long road to travel. The catroot2 tip got me in the right direction but didn't solve it fully.

    Short story:
    Install Windows SP1 to fix the missmatch files and to get the validation via the web site to work again. Web site:
    http://www.microsoft.com/genuine/validate

    Long story:
    It's not easy to install Windows 7 SP1 once Windows Update starts to fail on the SP1 install. Error code WindowsUpdate_8E5E03FA

    For completness here is what I did:
    1.
    I followed your catroot2 rename advice above. This got me further but not all the way. I had 4 security updates pending + Windows 7 SP1 + IE9 in my Windows update list. With the catroot2 rename I could install the 4 small updates and got less missmatch files from my original post. This remained:

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385]
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385]

    The validation site still say not genuine.

    2.
    Windows 7 SP1 or IE9 didn't want to download and install this way via Windows update. I tried multiple catroot2 renames, reboots etc.

    3.
    I went to download SP1 from Microsoft Download Center. To be able to download you need to validate. Luckily, this validation is done with an exe file "GenuineCheck.exe". This files gives you a code and this was validated correctly so I could download the service pack (1GB). I guess it works similair to MGADiag.exe which also says genuine.

    4.
    I start to install SP1 but it fails after about 15 minites with "An unknown error occured. Installation was not successful". Error 0x8e5e03fa

    5.
    The troubleshooting guide points you to: System Update Readiness Tool. Found at:
    http://windows.microsoft.com/en-us/windows7/troubleshoot-problems-installing-service-pack

    6.
    The above tool didn't help.

    7.
    Found a Microsoft tip about not only renaming catroot2 but also deleting files in "c:\windows\software distribution" folder. Dont remember the link but the instructions where:

    Start your computer in safe mode
    http://windows.microsoft.com/en-US/windows7/Start-your-computer-in-safe-mode

    Login using the Administrators account in safe mode and follow the steps as mentioned below:
    1)     Click on Start, type cmd.exe,
    2)     Under programs right click on Cmd.exe and click on Run as Administrator
    3)     In DOS type:-  net stop cryptsvc (Press enter and wait for the computer to say its stop this service)
    4)     Close Command prompt windows and remain in Windows Safe Mode.
    5)     Click on start, Click on Computer and navigate to c:\windows\software distribution folder and remove the contents, but not the folder it’s self
    6)     Then navigate to c:\windows\system32\catroot2 folder and remove the content of that folder
    Right click on the catroot2 folder and rename it to catroot2.old
    7)     Restart windows and login as normal.
    8)     Once logged into windows run Windows Update from the Start menu. Download and install updates as normal.

    Temporarily disable or uninstall your security software

    8.
    To disable antivirus etc I followed the guide for a "Clean boot":
    http://support.microsoft.com/kb/929135

    9.
    After this I could now install Windows 7 SP1 without problem and MGADiag.exe tool no longer shows any missmatch files. Validation site works as well.

    I guess the root cause of missmatch files might have been some half finished windows update patches.

    Regards,
    Magnus


    • Marked as answer by Magnus_ Sunday, July 17, 2011 12:57 PM
    Sunday, July 17, 2011 12:53 PM
  • It is just as likely to be caused by overzealous maintenence, such as running registry cleaners.  Don't.
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Sunday, July 17, 2011 2:59 PM
    Answerer
  • In my case I don't run any registry cleaners etc.

    Regards,
    Magnus

    Sunday, July 17, 2011 4:21 PM
  • "Magnus_" wrote in message news:847e1b87-0630-40e7-b9e2-325aa4a9e5b6...

    Ok this is now solved but it was a long road to travel. The catroot2 tip got me in the right direction but didn't solve it fully.

    Short story:
    Install Windows SP1 to fix the missmatch files and to get the validation via the web site to work again. Web site:
    http://www.microsoft.com/genuine/validate

    Regards,
    Magnus



    Thanks for the detailed response - it may well help others.
     
    I'll see what I can track down about things related. Can you tell me the KB numbers for the 4 updates you needed to install?

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, July 18, 2011 9:16 AM
    Moderator
  • I can't seem to find an install history that have hours/minutes and not only the date. There are a lot of hotfixes on same day now, 17th, maybe from SP1. If I sort in update history with date only I see these at the bottom:

    KB983590
    KB982799
    KB982665
    KB982664

    But I'm not 100% its right.

    Monday, July 18, 2011 10:22 AM
  • "Magnus_" wrote in message news:a8d484dd-38b9-4016-b492-d9ffa6eced63...

    I can't seem to find an install history that have hours/minutes and not only the date. There are a lot of hotfixes on same day now, 17th, maybe from SP1. If I sort in update history with date only I see these at the bottom:

    KB983590
    KB982799
    KB982665
    KB982664

    But I'm not 100% its right.


    That may give me something to work with anyhow - thanks.
    KB 983590 is for .NET so shouldn't be involved...
    KB982799 appears to be a late fix for RTM (19th June 2010) so may not be in the SP, but none of the affected files are referenced in the update
    KB982665 is a Codec update, so shouldn't be involved....
    KB982664 Is a Compatibility list update for IE 8 - so shouldn't be involved.
     
    Nope - looks like I'll have to keep looking :(
    Thanks for trying.

     
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, July 18, 2011 11:14 AM
    Moderator