locked
Windows 7 bought Retail is suddenly showing as Non-genuine RRS feed

  • Question

  • I bought Windows 7 Home Premium from Microsoft Store. Suddenly, Windows is showing pop ups that "This computer is not running genuine Windows". I know it is genuine because I bought online and got the key from Microsoft store itself. I ran the MGADiag and here is the report. What can I do to fix this issue?

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-QCFF3-33HBX-TW6VY

    Windows Product Key Hash: o3l15XK+QsqmAdyfXuyhFNs2HKo=

    Windows Product ID: 00359-911-4838991-85310

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7600.2.00010300.0.0.003

    ID: {2A03FED3-8828-4D46-A88C-3A8D2A66D763}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Home Premium

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.100226-1909

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{2A03FED3-8828-4D46-A88C-3A8D2A66D763}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-TW6VY</PKey><PID>00359-911-4838991-85310</PID><PIDType>5</PIDType><SID>S-1-5-21-2706036573-1472899384-2607423456</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO., LTD</Manufacturer><Model>MS-7125</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="3"/><Date>20060522000000.000000+000</Date></BIOS><HWID>27BB3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, HomePremium edition

    Description: Windows Operating System - Windows(R) 7, RETAIL channel

    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00359-00170-911-483899-01-1033-7600.0000-3042009

    Installation ID: 016461806365614720861204598186462256018506583981328311

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: TW6VY

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 6/2/2010 7:37:01 AM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x0000000000000002

    Event Time Stamp: 5:30:2010 13:22

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\wat\watweb.dll

     

     

    HWID Data-->

    HWID Hash Current: QAAAAAMABgABAAEAAgABAAAAAwABAAEAJJSaBjIQTjSU7ODcAIc+jnTqumiQwzaDwNHeiJK6EMIwU8LS0FM0tQ==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes, but no SLIC table

    Windows marker version: N/A

    OEMID and OEMTableID Consistent: N/A

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC Nvidia AWRDACPI

      FACP Nvidia AWRDACPI

      MCFG Nvidia AWRDACPI

     

     

    Wednesday, June 2, 2010 11:47 AM

Answers

  • type program in the search box of the start menu, in the results you will see "uninstall a program", click on it, select installed updates, look for KB971033, select it and uninstall. Now, reboot and open internet explorer, go to www.microsoft.com/genuine, validate windows and it should install the update and the watweb file again.

    Can't gaurantee this will work but I think it stands a good chance of fixing the problem. MS needs to create some "Fixit" scripts to repair wat.

     

    Another option would be to run SFC /scannow from an elevated prompt (type cmd in the search box of the start menu, right click, run as administrator, type the command SFC /scannow and hit enter)

    Thursday, June 3, 2010 1:23 AM

All replies

  • "rajapl" wrote in message news:48267f0a-99cd-4b29-8e8d-5ddbcba89337...

    I bought Windows 7 Home Premium from Microsoft Store. Suddenly, Windows is showing pop ups that "This computer is not running genuine Windows". I know it is genuine because I bought online and got the key from Microsoft store itself. I ran the MGADiag and here is the report. What can I do to fix this issue?

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-QCFF3-33HBX-TW6VY

    Windows Product Key Hash: o3l15XK+QsqmAdyfXuyhFNs2HKo=

    Windows Product ID: 00359-911-4838991-85310

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7600.2.00010300.0.0.003

    File Scan Data-->

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x0000000000000002

    Event Time Stamp: 5:30:2010 13:22

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\wat\watweb.dl


    That's the interesting stuff!
     
    You have a WAT file that's been altered somehow - have you installed RemoveWAT, and then broken it?
     
    Try a System Restore back to just before 30th May - which was the time the file was last altered
    that may work.
     
     

    --
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Wednesday, June 2, 2010 11:14 PM
    Wednesday, June 2, 2010 12:44 PM
    Moderator
  • Dear Noel,

    I have never installed RemoveVAT.

    I do not have any System Restore as well. I do have disk image back of April  but not able to manually change the watweb.dll file. Anything else I can do to fix?

     

    Thanks

     

    Thursday, June 3, 2010 12:54 AM
  • type program in the search box of the start menu, in the results you will see "uninstall a program", click on it, select installed updates, look for KB971033, select it and uninstall. Now, reboot and open internet explorer, go to www.microsoft.com/genuine, validate windows and it should install the update and the watweb file again.

    Can't gaurantee this will work but I think it stands a good chance of fixing the problem. MS needs to create some "Fixit" scripts to repair wat.

     

    Another option would be to run SFC /scannow from an elevated prompt (type cmd in the search box of the start menu, right click, run as administrator, type the command SFC /scannow and hit enter)

    Thursday, June 3, 2010 1:23 AM
  • I uninstalled update KB971033 and my windows 7 is showing as genuine again. I will install this update later again today to see if it fixes the watweb file issue.

    Thanks for your help

    Thursday, June 3, 2010 10:23 PM