Answered by:
Windows 7 bought Retail is suddenly showing as Non-genuine

Question
-
I bought Windows 7 Home Premium from Microsoft Store. Suddenly, Windows is showing pop ups that "This computer is not running genuine Windows". I know it is genuine because I bought online and got the key from Microsoft store itself. I ran the MGADiag and here is the report. What can I do to fix this issue?
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-QCFF3-33HBX-TW6VY
Windows Product Key Hash: o3l15XK+QsqmAdyfXuyhFNs2HKo=
Windows Product ID: 00359-911-4838991-85310
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {2A03FED3-8828-4D46-A88C-3A8D2A66D763}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7600.win7_gdr.100226-1909
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{2A03FED3-8828-4D46-A88C-3A8D2A66D763}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-TW6VY</PKey><PID>00359-911-4838991-85310</PID><PIDType>5</PIDType><SID>S-1-5-21-2706036573-1472899384-2607423456</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO., LTD</Manufacturer><Model>MS-7125</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20060522000000.000000+000</Date></BIOS><HWID>27BB3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7600.16385
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00170-911-483899-01-1033-7600.0000-3042009
Installation ID: 016461806365614720861204598186462256018506583981328311
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: TW6VY
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 6/2/2010 7:37:01 AM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000002
Event Time Stamp: 5:30:2010 13:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watweb.dll
HWID Data-->
HWID Hash Current: QAAAAAMABgABAAEAAgABAAAAAwABAAEAJJSaBjIQTjSU7ODcAIc+jnTqumiQwzaDwNHeiJK6EMIwU8LS0FM0tQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Nvidia AWRDACPI
FACP Nvidia AWRDACPI
MCFG Nvidia AWRDACPI
Wednesday, June 2, 2010 11:47 AM
Answers
-
type program in the search box of the start menu, in the results you will see "uninstall a program", click on it, select installed updates, look for KB971033, select it and uninstall. Now, reboot and open internet explorer, go to www.microsoft.com/genuine, validate windows and it should install the update and the watweb file again.
Can't gaurantee this will work but I think it stands a good chance of fixing the problem. MS needs to create some "Fixit" scripts to repair wat.
Another option would be to run SFC /scannow from an elevated prompt (type cmd in the search box of the start menu, right click, run as administrator, type the command SFC /scannow and hit enter)
- Marked as answer by Darin Smith MS Friday, June 4, 2010 6:41 PM
Thursday, June 3, 2010 1:23 AM
All replies
-
"rajapl" wrote in message news:48267f0a-99cd-4b29-8e8d-5ddbcba89337...
I bought Windows 7 Home Premium from Microsoft Store. Suddenly, Windows is showing pop ups that "This computer is not running genuine Windows". I know it is genuine because I bought online and got the key from Microsoft store itself. I ran the MGADiag and here is the report. What can I do to fix this issue?
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-QCFF3-33HBX-TW6VY
Windows Product Key Hash: o3l15XK+QsqmAdyfXuyhFNs2HKo=
Windows Product ID: 00359-911-4838991-85310
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010300.0.0.003
File Scan Data-->
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000002
Event Time Stamp: 5:30:2010 13:22
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watweb.dl
That's the interesting stuff!You have a WAT file that's been altered somehow - have you installed RemoveWAT, and then broken it?Try a System Restore back to just before 30th May - which was the time the file was last alteredthat may work.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Wednesday, June 2, 2010 11:14 PM
Wednesday, June 2, 2010 12:44 PMModerator -
Dear Noel,
I have never installed RemoveVAT.
I do not have any System Restore as well. I do have disk image back of April but not able to manually change the watweb.dll file. Anything else I can do to fix?
Thanks
Thursday, June 3, 2010 12:54 AM -
type program in the search box of the start menu, in the results you will see "uninstall a program", click on it, select installed updates, look for KB971033, select it and uninstall. Now, reboot and open internet explorer, go to www.microsoft.com/genuine, validate windows and it should install the update and the watweb file again.
Can't gaurantee this will work but I think it stands a good chance of fixing the problem. MS needs to create some "Fixit" scripts to repair wat.
Another option would be to run SFC /scannow from an elevated prompt (type cmd in the search box of the start menu, right click, run as administrator, type the command SFC /scannow and hit enter)
- Marked as answer by Darin Smith MS Friday, June 4, 2010 6:41 PM
Thursday, June 3, 2010 1:23 AM -
I uninstalled update KB971033 and my windows 7 is showing as genuine again. I will install this update later again today to see if it fixes the watweb file issue.
Thanks for your help
Thursday, June 3, 2010 10:23 PM