Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Security Essentials claims my windows 7 is not genuine. RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Purchased an HP envy laptop w/ windows 7 home premium. Now security essentials claims it's not genuine.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-74XYM-BH4JX-XM76F
    Windows Product Key Hash: KeYfcvXg/a1Q01x73+f8IL/JC4Y=
    Windows Product ID: 00359-112-0000007-85970
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {CDEFA9A5-113D-4369-B6F9-9F5B33931CE7}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CDEFA9A5-113D-4369-B6F9-9F5B33931CE7}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XM76F</PKey><PID>00359-112-0000007-85970</PID><PIDType>5</PIDType><SID>S-1-5-21-4162251583-797701976-4202799691</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP ENVY 14 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.02</Version><SMBIOSVersion major="2" minor="6"/><Date>20100422000000.000000+000</Date></BIOS><HWID>B3B83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 2:13:2011 07:50
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAQADAAAAAQABAAEAeqg8ek40zjiQb4Z9ClKmXt6IYj3GY/qMiFtcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        SLIC-MPC
      FACP            HP            SLIC-MPC
      HPET            HPQOEM        SLIC-MPC
      BOOT            HPQOEM        SLIC-MPC
      MCFG            HPQOEM        SLIC-MPC
      ASF!            HPQOEM        SLIC-MPC
      SLIC            HPQOEM        SLIC-MPC
      SSDT            TrmRef        PtidDevc
      SSDT            TrmRef        PtidDevc
      SSDT            TrmRef        PtidDevc
      SSDT            TrmRef        PtidDevc
      ASPT            HPQOEM        SLIC-MPC
      SSDT            TrmRef        PtidDevc
      SSDT            TrmRef        PtidDevc


    Sunday, February 13, 2011 2:03 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote
    "Noel D Paton" wrote in message news:366edfe5-553b-45fc-94b9-3e7b7b91941b...

    You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.

    The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.

     

     


    There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    OK - I finally got around to testing RemoveWAT - and it would appear that your diagnosis is probably correct in this instance.
    The simplest solution is probably to use the RestoreWAT option in the program, and then delete the program, and reinstall the  WAT update manually or through Windows Updates
    .
     
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Thursday, February 17, 2011 12:12 AM
    • Marked as answer by Darin Smith MS Friday, February 18, 2011 10:50 PM
    Monday, February 14, 2011 10:11 AM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    "jgreen85" wrote in message news:4f72050f-c086-4a64-89ed-3412f4aeaf10...

    Purchased an HP envy laptop w/ windows 7 home premium. Now security essentials claims it's not genuine.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-74XYM-BH4JX-XM76F
    Windows Product Key Hash: KeYfcvXg/a1Q01x73+f8IL/JC4Y=
    Windows Product ID: 00359-112-0000007-85970
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003


    File Scan Data-->
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100


    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000000800
    Event Time Stamp: 2:13:2011 07:50
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


    Your problem seems to be a File Mismatch  - highlighted above
    Try a System Restore back to about the 10th Feb  if you can - reboot again when complete, and see if the notification goes away. Run MGADiag and have a look to see if the mismatch has gone. This may also clear the other errors.
     
     
    If that doesn't work, or fails to fix the problem - or you don't want to use it, try a System File Checker - it will attempt to replace the broken file and any others it finds.
    System File Checker - Instructions
    Click on the Start button
    type in the Search  box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
     - the Elevated Command Prompt window should pop up
    At the Command prompt, type
     
    SFC   /SCANNOW
     
    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.
     
    run another MGADiag report, and post the results.
     
     

     
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 13, 2011 2:31 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.

    The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.

     

     

    Sunday, February 13, 2011 11:46 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.

    The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.

     

     


    There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 14, 2011 12:01 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Your MGA Report indicates a "retail" installation of Windows 7 Home Premium [Windows License Type: Retail]. HP only sells "OEM" versions of Windows 7.  Please see: Order Recovery Discs for Windows 7

    You'll need to use the proper HP Windows 7 recovery disc designed for your model HP Envy 14 computer and reinstall Windows 7.

    Carey Frisch
    Monday, February 14, 2011 12:01 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Carey Frisch" wrote in message news:97eea687-0d72-4f58-aa8e-bb7189c9a058...

    Your MGA Report indicates a "retail" installation of Windows 7 Home Premium [Windows License Type: Retail]. HP only sells "OEM" versions of Windows 7.  Please see: Order Recovery Discs for Windows 7

    You'll need to use the proper HP Windows 7 recovery disc designed for your model HP Envy 14 computer and reinstall Windows 7.

    Carey Frisch

    Carey - it's the Default Key!!
     
    @jgreen
    Please ignore this - it's irrelevant to your situation at the moment.
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 14, 2011 12:26 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Noel D Paton" wrote in message news:366edfe5-553b-45fc-94b9-3e7b7b91941b...

    You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.

    The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.

     

     


    There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    OK - I finally got around to testing RemoveWAT - and it would appear that your diagnosis is probably correct in this instance.
    The simplest solution is probably to use the RestoreWAT option in the program, and then delete the program, and reinstall the  WAT update manually or through Windows Updates
    .
     
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Thursday, February 17, 2011 12:12 AM
    • Marked as answer by Darin Smith MS Friday, February 18, 2011 10:50 PM
    Monday, February 14, 2011 10:11 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.

    The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.

     

     

     

    TB19, I want to stress that we do no accuse in this forum.

    And while you may be correct in what caused this issue, we have no idea Who may have been in control of the PC when it occurred.

    In the future, when posting what you believe the reason for an issue, please Also include a description on how the user can resolve the issue.  Since that is the main purpose of this forum: Resolving Issues.

    Darin MS
    Thursday, February 17, 2011 12:14 AM