Answered by:
Security Essentials claims my windows 7 is not genuine.

Question
-
Purchased an HP envy laptop w/ windows 7 home premium. Now security essentials claims it's not genuine.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-74XYM-BH4JX-XM76F
Windows Product Key Hash: KeYfcvXg/a1Q01x73+f8IL/JC4Y=
Windows Product ID: 00359-112-0000007-85970
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {CDEFA9A5-113D-4369-B6F9-9F5B33931CE7}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7600.win7_gdr.101026-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CDEFA9A5-113D-4369-B6F9-9F5B33931CE7}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XM76F</PKey><PID>00359-112-0000007-85970</PID><PIDType>5</PIDType><SID>S-1-5-21-4162251583-797701976-4202799691</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP ENVY 14 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.02</Version><SMBIOSVersion major="2" minor="6"/><Date>20100422000000.000000+000</Date></BIOS><HWID>B3B83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".
Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000000800
Event Time Stamp: 2:13:2011 07:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAIAAQADAAAAAQABAAEAeqg8ek40zjiQb4Z9ClKmXt6IYj3GY/qMiFtcXQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HPQOEM SLIC-MPC
FACP HP SLIC-MPC
HPET HPQOEM SLIC-MPC
BOOT HPQOEM SLIC-MPC
MCFG HPQOEM SLIC-MPC
ASF! HPQOEM SLIC-MPC
SLIC HPQOEM SLIC-MPC
SSDT TrmRef PtidDevc
SSDT TrmRef PtidDevc
SSDT TrmRef PtidDevc
SSDT TrmRef PtidDevc
ASPT HPQOEM SLIC-MPC
SSDT TrmRef PtidDevc
SSDT TrmRef PtidDevc
Sunday, February 13, 2011 2:03 PM
Answers
-
"Noel D Paton" wrote in message news:366edfe5-553b-45fc-94b9-3e7b7b91941b..."tb19" wrote in message news:4def07ce-446c-4739-ae1a-9e8ec1c0e1f3...
You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.
The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.
There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
OK - I finally got around to testing RemoveWAT - and it would appear that your diagnosis is probably correct in this instance.The simplest solution is probably to use the RestoreWAT option in the program, and then delete the program, and reinstall the WAT update manually or through Windows Updates.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Thursday, February 17, 2011 12:12 AM
- Marked as answer by Darin Smith MS Friday, February 18, 2011 10:50 PM
Monday, February 14, 2011 10:11 AMModerator
All replies
-
"jgreen85" wrote in message news:4f72050f-c086-4a64-89ed-3412f4aeaf10...
Purchased an HP envy laptop w/ windows 7 home premium. Now security essentials claims it's not genuine.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-74XYM-BH4JX-XM76F
Windows Product Key Hash: KeYfcvXg/a1Q01x73+f8IL/JC4Y=
Windows Product ID: 00359-112-0000007-85970
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010300.0.0.003
File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".
Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000000800
Event Time Stamp: 2:13:2011 07:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Your problem seems to be a File Mismatch - highlighted above
Try a System Restore back to about the 10th Feb if you can - reboot again when complete, and see if the notification goes away. Run MGADiag and have a look to see if the mismatch has gone. This may also clear the other errors.
If that doesn't work, or fails to fix the problem - or you don't want to use it, try a System File Checker - it will attempt to replace the broken file and any others it finds.
System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
run another MGADiag report, and post the results.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, February 13, 2011 2:31 PMModerator -
You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.
The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.
Sunday, February 13, 2011 11:46 PM -
"tb19" wrote in message news:4def07ce-446c-4739-ae1a-9e8ec1c0e1f3...
You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.
The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.
There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, February 14, 2011 12:01 AMModerator -
Your MGA Report indicates a "retail" installation of Windows 7 Home Premium [Windows License Type: Retail]. HP only sells "OEM" versions of Windows 7. Please see: Order Recovery Discs for Windows 7
You'll need to use the proper HP Windows 7 recovery disc designed for your model HP Envy 14 computer and reinstall Windows 7.
Carey FrischMonday, February 14, 2011 12:01 AMModerator -
"Carey Frisch" wrote in message news:97eea687-0d72-4f58-aa8e-bb7189c9a058...
Your MGA Report indicates a "retail" installation of Windows 7 Home Premium [Windows License Type: Retail]. HP only sells "OEM" versions of Windows 7. Please see: Order Recovery Discs for Windows 7
You'll need to use the proper HP Windows 7 recovery disc designed for your model HP Envy 14 computer and reinstall Windows 7.
Carey Frisch
Carey - it's the Default Key!!@jgreenPlease ignore this - it's irrelevant to your situation at the moment.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothMonday, February 14, 2011 12:26 AMModerator -
"Noel D Paton" wrote in message news:366edfe5-553b-45fc-94b9-3e7b7b91941b..."tb19" wrote in message news:4def07ce-446c-4739-ae1a-9e8ec1c0e1f3...
You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.
The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.
There is NO evidence here that I can see that RemoveWAT has been used - please explain, and/or give references.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
OK - I finally got around to testing RemoveWAT - and it would appear that your diagnosis is probably correct in this instance.The simplest solution is probably to use the RestoreWAT option in the program, and then delete the program, and reinstall the WAT update manually or through Windows Updates.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Thursday, February 17, 2011 12:12 AM
- Marked as answer by Darin Smith MS Friday, February 18, 2011 10:50 PM
Monday, February 14, 2011 10:11 AMModerator -
You are using the default trial key for Windows 7 Home Premium. Meaning you did not enter a product key when installing the OS.
The file mismatches/tampered file & input error are all to common, I've seen these before. You have used an illegal crack/hack called RemoveWAT by Hazar to try and activate your system illegally. M$ WAT update can detect this crack/hack and has flagged your system as non-genuine when trying to validate before continuing on with the install of MSE.
TB19, I want to stress that we do no accuse in this forum.
And while you may be correct in what caused this issue, we have no idea Who may have been in control of the PC when it occurred.
In the future, when posting what you believe the reason for an issue, please Also include a description on how the user can resolve the issue. Since that is the main purpose of this forum: Resolving Issues.
Darin MSThursday, February 17, 2011 12:14 AM