Windows showing not genuine but i have genuine windows 7

All replies

• 

  

  0

  Sign in to vote

  The SPPSVC appears to have been uninstalled here - let's check...

  Please open an
  Elevated (Administrator) Command Prompt window and use the following
  commands....

  net start sppsvc

  sc qc sppsvc

  sc queryex sppsvc

  sc qprivs sppsvc

  sc qsidtype sppsvc

  sc sdshow sppsvc

   

  Copy and paste the output to your reply

  
  

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, October 22, 2014 7:09 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi Noel

  You were right, these services are not installed.

  Microsoft Windows [Version 6.1.7601]

  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

  C:\Users\Gaurav>net start sppsvc

  The service name is invalid.

  More help is available by typing NET HELPMSG 2185.

  C:\Users\Gaurav>

  C:\Users\Gaurav>sc qc sppsvc

  [SC] OpenService FAILED 1060:

  The specified service does not exist as an installed service.

  C:\Users\Gaurav>

  C:\Users\Gaurav>sc queryex sppsvc

  [SC] EnumQueryServicesStatus:OpenService FAILED 1060:

  The specified service does not exist as an installed service.

  C:\Users\Gaurav>

  C:\Users\Gaurav>sc qprivs sppsvc

  [SC] OpenService FAILED 1060:

  The specified service does not exist as an installed service.

  C:\Users\Gaurav>

  C:\Users\Gaurav>sc qsidtype sppsvc

  [SC] OpenService FAILED 1060:

  The specified service does not exist as an installed service.

  C:\Users\Gaurav>

  C:\Users\Gaurav>sc sdshow sppsvc

  [SC] OpenService FAILED 1060:

  The specified service does not exist as an installed service.

  Thanks

  Gaurav  

  ---

  Thanks Gaurav

  Wednesday, October 22, 2014 8:14 AM
• 

  

  0

  Sign in to vote

  I've uploaded a file - sppsvcx64.zip - to my OneDrive at  Noel's OneDrive

  Please download and save it to your desktop.

  Right-click on the saved file and select Extract all...

  Save it to the default location

  This should create a file sppsvcx64.reg

   right-click on the file, and select Merge

  Accept the warnings, - you should then get a 'Success' message.

  Close all windows, and reboot.

  Run another MGADiag report, and post the results.

  (yes, I am aware that your install is 32-bit - but there is no difference between the registry entries for 32 and 64 bit versions of this service ;) )

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  
  

  • Edited by Noel D PatonModerator Wednesday, October 22, 2014 11:07 AM add last para

  Wednesday, October 22, 2014 11:05 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi

  Pls find below MGAdiag report after the steps

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0x8004FE21
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
  Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
  Windows Product ID: 00371-OEM-8992671-00524
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {289F13B8-D29E-4600-8B50-3BC9393C6E23}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000000
  Build lab: 7601.win7sp1_gdr.140303-2144
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Standard 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-b063_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{289F13B8-D29E-4600-8B50-3BC9393C6E23}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2758487558-1109676209-2171724816</SID><SYSTEM><Manufacturer>Dell Inc.         </Manufacturer><Model>Dell System Vostro 3450</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.         </Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="6"/><Date>20111117000000.000000+000</Date></BIOS><HWID>7EE03B07018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>68EF255E690AD86</Val><Hash>t0itt1m2rEk6572cq/KOLMYMvmc=</Hash><Pid>89396-707-0081345-65238</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  Name: Windows(R) 7, Professional edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00371-00178-926-700524-02-1033-7601.0000-0322012
  Installation ID: 020581249560999472566276108991929851518060970954913194
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: 733WD
  License Status: Licensed
  Remaining Windows rearm count: 1
  Trusted time: 25/10/2014 19:01:05
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: N/A
  HealthStatus: 0x0000000000008800
  Event Time Stamp: 10:22:2014 07:49
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:
  Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
  Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
  
  
  HWID Data-->
  HWID Hash Current: MAAAAAEAAQABAAEAAAABAAAABAABAAEAeqgqd8iqQkLEjmYrjD2KGE5bymIUSS5z
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC DELL   QA09   
    FACP DELL   QA09   
    HPET DELL   QA09   
    BOOT
    MCFG DELL   QA09   
    SLIC DELL   QA09   
    SSDT DELL   PtidDevc
    ASF! DELL   QA09   
    SSDT DELL   PtidDevc
    SSDT DELL   PtidDevc
    UEFI DELL   QA09   
    UEFI DELL   QA09   
    UEFI DELL   QA09   
  
  

  Many thanks

  ---

  Thanks Gaurav

  Saturday, October 25, 2014 6:03 PM
• 

  

  0

  Sign in to vote

  Good - that's cleared that problem, so at least we can see the wood for the trees ;)

  File Scan Data-->
  File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x800b0100
  File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100

  Please run a full CHKDSK and SFC scan....

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

  At the Command prompt, type

   CHKDSK C: /R

  and hit the Enter key.

  You will be told that the drive is locked, and the CHKDSK will run at the next boot - hit the Y key, and then reboot.

  The CHKDSK will take a few hours depending on the size  of the drive, so be patient!

   After the CHKDSK has run, Windows should boot normally  (possibly after a second auto-reboot) - then run the SFC.

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

  At the Command prompt, type

  SFC /SCANNOW

  and hit the Enter key

  Wait for the scan to finish - make a note of any error messages - and then reboot.

  Upload the CBS.log file (compressed, please!) to your OneDrive or DropBox Public folder, and post a link - also post a new MGADiag report.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Sunday, October 26, 2014 8:50 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi

  I have run the CHKDSK but after that when i run SFC it shows following errors:

  Microsoft Windows [Version 6.1.7601]
  

  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Users\Gaurav>SFC/SCANNOW
  
  Windows Resource Protection could not start the repair service.
  
  C:\Users\Gaurav>SFC/SCANNOW
  
  Windows Resource Protection could not start the repair service.
  
  C:\Users\Gaurav>

  Pls let me know how to proceed.

  Thanks

  ---

  Thanks Gaurav

  Thursday, October 30, 2014 2:15 AM
• 

  

  0

  Sign in to vote

  Please download the Farbar Service Scanner from

  http://www.bleepingcomputer.com/download/farbar-service-scanner/

   

  Right-click on the saved file and select 'Run as Administrator', and tick all the options, then click on the Scan button - copy and paste the report to your response.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, October 30, 2014 6:33 AM

  Moderator
• 

  

  0

  Sign in to vote

  Hi

  Pls find below report details:

  Farbar Service Scanner Version: 21-07-2014
  Ran by Gaurav (administrator) on 30-10-2014 at 12:42:51
  Running from "C:\Users\Gaurav\Downloads"
  Microsoft Windows 7 Professional  Service Pack 1 (X86)
  Boot Mode: Normal
  ****************************************************************
  
  Internet Services:
  ============
  
  Connection Status:
  ==============
  Localhost is accessible.
  LAN connected.
  Google IP is accessible.
  Google.com is accessible.
  Yahoo.com is accessible.
  

  Windows Firewall:
  

  =============
  
  Firewall Disabled Policy: 
  ==================
  
  
  System Restore:
  ============
  VSS Service is not running. Checking service configuration:
  Checking Start type: ATTENTION!=====> Unable to retrieve start type of VSS. The value does not exist.
  Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of VSS. The value does not exist.
  
  
  System Restore Disabled Policy: 
  ========================
  
  
  Action Center:
  ============
  
  
  Windows Update:
  ============
  
  Windows Autoupdate Disabled Policy: 
  ============================
  
  
  Windows Defender:
  ==============
  
  Other Services:
  ==============
  
  
  File Check:
  ========
  C:\Windows\system32\nsisvc.dll => File is digitally signed
  C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed
  C:\Windows\system32\dhcpcore.dll => File is digitally signed
  C:\Windows\system32\Drivers\afd.sys => File is digitally signed
  C:\Windows\system32\Drivers\tdx.sys => File is digitally signed
  C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed
  C:\Windows\system32\dnsrslvr.dll => File is digitally signed
  C:\Windows\system32\mpssvc.dll => File is digitally signed
  C:\Windows\system32\bfe.dll => File is digitally signed
  C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed
  C:\Windows\system32\SDRSVC.dll => File is digitally signed
  C:\Windows\system32\vssvc.exe
  [2010-11-20 21:29] - [2010-11-20 21:29] - 1034752 ____A (Microsoft Corporation) 7E76CFBB2BA32F017648857057EA03BE
  
  C:\Windows\system32\wscsvc.dll => File is digitally signed
  C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed
  C:\Windows\system32\wuaueng.dll => File is digitally signed
  C:\Windows\system32\qmgr.dll => File is digitally signed
  C:\Windows\system32\es.dll => File is digitally signed
  C:\Windows\system32\cryptsvc.dll => File is digitally signed
  C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
  C:\Windows\system32\ipnathlp.dll => File is digitally signed
  C:\Windows\system32\iphlpsvc.dll => File is digitally signed
  C:\Windows\system32\svchost.exe => File is digitally signed
  C:\Windows\system32\rpcss.dll => File is digitally signed
  
  
  **** End of log ****

  ---

  Thanks Gaurav

  Thursday, October 30, 2014 12:45 PM
• 

  

  0

  Sign in to vote

  Interesting - I've never seen these errors in the Farbar report before...

  Checking Start type: ATTENTION!=====> Unable to retrieve start type of VSS. The value does not exist.
   Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of VSS. The value does not exist.
  
  

  I'll post a more detailed query soon once I work out what it may imply.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, October 30, 2014 8:45 PM

  Moderator
• 

  

  0

  Sign in to vote

  Please open an Elevated Command Prompt, and run the following commands...

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\VSS
  REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\TrustedInstaller
   .

  Post the results.

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Thursday, October 30, 2014 9:47 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi

  Results:

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Users\Gaurav>REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\VSS
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
  
  C:\Users\Gaurav>REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\TrustedInstalle
  r
  ERROR: The system was unable to find the specified registry key or value.
  
  C:\Users\Gaurav>

  ---

  Thanks Gaurav

  Friday, October 31, 2014 6:21 AM
• 

  

  0

  Sign in to vote

  From the looks of it, you have some major problems with the system - I suspect that your best option is a repair install.

  Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

  - and they should help you get through it (it's not as difficult as it looks!)

  Always ask questions first if you're unsure - preferably in sevenforums.

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Tuesday, November 4, 2014 10:14 PM
  • Marked as answer by grv_g Wednesday, November 5, 2014 7:10 AM

  Friday, October 31, 2014 6:42 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks Noel

  ---

  Thanks Gaurav

  Wednesday, November 5, 2014 7:14 AM
• 

  

  0

  Sign in to vote

  You're welcome - good luck.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, November 5, 2014 9:50 AM

  Moderator