locked
Windows intermittently reports not genuine (factory install) RRS feed

  • Question

  • Hi,

    I have a Toshiba laptop running Win.7, 64 bit. Intermittently I get a message in the bottom right corner of the desktop saying it may not be genuine. Sometimes I also get a pop-up saying I may be a victim of software counterfeiting. When I then go to control panel -> system & security -> system, after a few seconds the genuine software logo appears at the bottom of the window and it tells me Windows is activated. It's fine for a day or two and then goes back to saying it's not genuine. It's the original factory installation that came on the laptop when bought new. I called Microsoft and they got me to run a tool that prompted me for the code on the Windows sticker on the laptop. I entered this and it verified the product but I still get the intermittent not genuine problem. Two other laptops are also doing this, a Dell and a ThinkPad, all Win.7, 64 bit. We also have Truecrypt installed with whole disk encryption for the Windows partition. Here is the  MGAD report from my Toshiba:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-BT9JD-XH82T-YQTM2
    Windows Product Key Hash: lUkjh0ExFdoFrxqw7QDVteHcQ0I=
    Windows Product ID: 00371-OEM-9304723-00816
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {8BA5E15C-0A66-46FA-ACBC-842B9661542A}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120330-1504
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Visio Standard 2002 [English] - 100 Genuine
    Microsoft Project Standard 2002 - 100 Genuine
    Microsoft Office FrontPage 2003 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8BA5E15C-0A66-46FA-ACBC-842B9661542A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YQTM2</PKey><PID>00371-OEM-9304723-00816</PID><PIDType>8</PIDType><SID>S-1-5-21-3671297256-2431817510-1345121468</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite Pro L670</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>2.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20110120000000.000000+000</Date></BIOS><HWID>49363307018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90530409-6D54-11D4-BEE3-00C04F990354}"><LegitResult>100</LegitResult><Name>Microsoft Visio Standard 2002 [English]</Name><Ver>10</Ver><Val>223DECE5A030E2C</Val><Hash>BFSE5JfijOTZYsBYerlRaLR7ebQ=</Hash><Pid>54076-755-0748385-16333</Pid><PidType>1</PidType></Product><Product GUID="{913A0409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Project Standard 2002</Name><Ver>10</Ver><Val>3224A4A5B055470</Val><Hash>XwP1agayZo0kF6W7oW74e8IQxJU=</Hash><Pid>56130-763-5379765-16371</Pid><PidType>1</PidType></Product><Product GUID="{91170409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office FrontPage 2003</Name><Ver>11</Ver><Val>4791D903DBC55F3</Val><Hash>slUOFpvpLdXxtvPY9XUvW8u9b3A=</Hash><Pid>72079-761-4082412-55347</Pid><PidType>1</PidType></Product></Products><Applications><App Id="3A" Version="10" Result="100"/><App Id="53" Version="10" Result="100"/><App Id="17" Version="11" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: da22eadd-46dc-4056-a287-f5041c852470
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00186-047-200816-02-2057-7601.0000-1422012
    Installation ID: 004785115734335376192514683956119385848693520943063264
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: YQTM2
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 22/05/2012 09:25:03

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:16:2012 15:33
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEAAQABAAEAAAADAAAABQABAAEA6GFUDBKJohfWCzTPYj2UmXWmGEBS+7w+coq+QVxd

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   TOSCPL  TOSCPL00
      FACP   TOSCPL  TOSCPL00
      HPET   TOSCPL  TOSCPL00
      MCFG   TOSCPL  TOSCPL00
      ASF!   TOSCPL  TOSCPL00
      SLIC   TOSCPL  TOSCPL00
      SSDT   PmRef  CpuPm
      UEFI   PTL     PTLBUFA
      UEFI   PTL     PTLBUFA
      UEFI   PTL     PTLBUFA

    Tuesday, May 22, 2012 9:02 AM

Answers

All replies

  • "-----------------------------------------" wrote in message news:466e9236-33cc-4b1f-94e5-cff6041cb03c...

    Hi,

    I have a Toshiba laptop running Win.7, 64 bit. Intermittently I get a message in the bottom right corner of the desktop saying it may not be genuine. Sometimes I also get a pop-up saying I may be a victim of software counterfeiting. When I then go to control panel -> system & security -> system, after a few seconds the genuine software logo appears at the bottom of the window and it tells me Windows is activated. It's fine for a day or two and then goes back to saying it's not genuine. It's the original factory installation that came on the laptop when bought new. I called Microsoft and they got me to run a tool that prompted me for the code on the Windows sticker on the laptop. I entered this and it verified the product but I still get the intermittent not genuine problem. Two other laptops are also doing this, a Dell and a ThinkPad, all Win.7, 64 bit. We also have Truecrypt installed with whole disk encryption for the Windows partition. Here is the  MGAD report from my Toshiba:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-BT9JD-XH82T-YQTM2
    Windows Product Key Hash: lUkjh0ExFdoFrxqw7QDVteHcQ0I=
    Windows Product ID: 00371-OEM-9304723-00816
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Visio Standard 2002 [English] - 100 Genuine
    Microsoft Project Standard 2002 - 100 Genuine
    Microsoft Office FrontPage 2003 - 100 Genuine

    Other data-->
    SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite Pro L670</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>2.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20110120000000.000000+000</Date></BIOS4

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: YQTM2
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 22/05/2012 09:25:03

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:16:2012 15:33

     
     
    This type of intermittent problem is probably caused by a race condition - and these are notoriously difficult to isolate, as the mere act of looking for them can prevent them from happening.
     
    There don't appear to be any problems on your system currently - and I suspect that if you run MGADiag when the system is showing a notification, it will fix it anyhow, simply by forcing the re-evaluation.
     
    The most likely candidate for the cause is your anti-virus - which AV are you running? (what other AV's have EVER been installed on this machine - including any preinstalled by the manufacturer, but not actually used?)
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, May 22, 2012 10:10 AM
    Moderator
  • Hi,

    Many thanks for your help, I have Panda antivirus, and Symantec was pre-installed when I bought the laptop (although I never activated it, I uninstalled it prior to installing Panda).

    Tuesday, May 22, 2012 12:02 PM
  • "-----------------------------------------" wrote in message news:8002fec8-ee92-4d69-87a6-35f68d4dfde0...

    Hi,

    Many thanks for your help, I have Panda antivirus, and Symantec was pre-installed when I bought the laptop (although I never activated it, I uninstalled it prior to installing Panda).

    Try running the Norton Removal Tool - there are almost certainly dregs left behind of the old install.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, May 22, 2012 12:13 PM
    Moderator
  • Download and install Microsoft Security Essentials.

    Carey Frisch

    Wednesday, May 23, 2012 4:29 AM
    Moderator
  • Why? - Panda is a a perfectly good AV.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, May 23, 2012 7:56 AM
    Moderator
  • No further reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS

    Tuesday, May 29, 2012 7:50 PM