locked
Suddenly I am getting a spurious "This copy of Windows is not genuine" message RRS feed

  • Question

  • Dated: October 21, 2011

    I have a Sony VAIO laptop purchased in January 2010 that came with a copy of Windows 7 Home Premium.  At the time of purchase from Fry's Electronics in Campbell, CA, I also purchased an upgrade to Windows 7 Professional which came in an official retail Microsoft box, containing a key for the upgrade to Windows Professional.  The upgrade went without a problem and I have been using the computer since then without any notice that my copy of Windows may not be genuine until very recently, say around the beginning of October, 2011.

    The following message now appears in the lower right portion of the desktop from time to time:

    Windows 7
    Build 7601
    This copy of Windows is not genuine

    If, when this message is visible, I go into the 'Control Panel | System and Security | System' screen where my Windows Product key is displayed (among other data about the computer), the three line message disappears after about one second, not to return until some later date.  This has happened to me about five or six times since it started some time within the last two to three weeks.

    I downloaded and ran the MGADiag.exe utility as recommended by Microsoft and here is the result:

    --> START

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->s

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-TT8KR-7JPRB-GXDMC
    Windows Product Key Hash: wrrGMdd7xpwJFfyDERZxubqKNec=
    Windows Product ID: 00371-618-1075305-85390
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {4CA882EB-62A8-4D04-81BC-9345A21AB0F8}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-

    80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{4CA882EB-62A8-4D04-81BC-9345A21AB0F8}

    </UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-

    *****-*****-GXDMC</PKey><PID>00371-618-1075305-85390</PID><PIDType>5</PIDType><SID>S-1-5-21-2022908566-1909558254-

    883131247</SID><SYSTEM><Manufacturer>Sony

    Corporation</Manufacturer><Model>VPCF111FX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends

    Inc.</Manufacturer><Version>R0280Y6</Version><SMBIOSVersion major="2"

    minor="6"/><Date>20100514000000.000000+000</Date></BIOS><HWID>9D433507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409

    </SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)

    </TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OE

    MTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/

    ></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00170-618-107530-01-1033-7600.0000-0972010
    Installation ID: 011693371570754113996053905124406233943470129000974390
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: GXDMC
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 10/21/2011 6:15:23 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: NAAAAAEAAwABAAEAAAACAAAAAwABAAEAln0Ww7QEzHHOrqxy1mh4h0yqFM68f76STNF2Vg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            Sony        VAIO
      FACP            Sony        VAIO
      HPET            Sony        VAIO
      MCFG            Sony        VAIO
      SLIC            Sony        VAIO
      SSDT            Sony        VAIO
      SSDT            Sony        VAIO

    --> END: MGADiag.exe

    Could you please help me get rid of this spurious windows validity message?

     

    Thank you! 


    Charles S. Cotton
    • Edited by Charles Cotton Friday, October 21, 2011 1:38 PM Eliminate duplicate name
    Friday, October 21, 2011 1:33 PM

Answers

  • From your MGADiag Report.

    Tampered Service: sppsvc

    Click the Start Orb and type services.msc into the search menu and click it.

    Maximize the active windows & scroll down to you see Software Protection. Right click it & click properties.

    Make sure the Start up type is set to: Automatic (Delayed Start) and click the OK button.

    Restart your system & try and validate online using Internet Explorer.

    • Proposed as answer by Darin Smith MS Friday, October 21, 2011 10:20 PM
    • Unproposed as answer by Charles Cotton Friday, October 21, 2011 11:28 PM
    • Marked as answer by Charles Cotton Friday, October 21, 2011 11:28 PM
    Friday, October 21, 2011 1:53 PM

All replies

  • From your MGADiag Report.

    Tampered Service: sppsvc

    Click the Start Orb and type services.msc into the search menu and click it.

    Maximize the active windows & scroll down to you see Software Protection. Right click it & click properties.

    Make sure the Start up type is set to: Automatic (Delayed Start) and click the OK button.

    Restart your system & try and validate online using Internet Explorer.

    • Proposed as answer by Darin Smith MS Friday, October 21, 2011 10:20 PM
    • Unproposed as answer by Charles Cotton Friday, October 21, 2011 11:28 PM
    • Marked as answer by Charles Cotton Friday, October 21, 2011 11:28 PM
    Friday, October 21, 2011 1:53 PM
  • Thank you, tb19, for your quick response!

    I changed the startup type of the 'Software Protection' service from Manual to Automatic (Delayed Start) as you recommended and then rebooted.

    I then clicked your 'validate online' link which took me to a microsoft web page.  Unfortunately the download link is broken.  When I click it, nothing happens.

    Furthermore, one of the comments on web page is rather scary: "From time to time, this software will also perform a validation check to make sure that Windows 7 running on your PC is genuine and stays that way."

    I really don't need or want another background process/program doing stuff 'From time to time'  I want my computer to run only the programs that I choose to use and when I choose to use them.

    Update: I tried this again by right clicking the 'validate online' link and choosing the 'Open Link in External Window' option.  This caused the page to open in Windows Explorer.  Unfortunately, when I clicked the Download button on the page, I received the following error message: "Update installation failed. Error Information - 0x80072EFD (0).

    I'll just wait and see if the spurious windows is not valid message is now gone as a result of changing the startup type of the 'Software Protection' service.

    Again, thank you for your help. 

     


    Charles S. Cotton

    Friday, October 21, 2011 2:21 PM
  • "Charles Cotton" wrote in message news:9652a7e0-2b34-4dc9-888f-dd3e97f39aad...

    Thank you, tb19, for your quick response!

    I changed the startup type of the 'Software Protection' service from Manual to Automatic (Delayed Start) as you recommended and then rebooted.

    I then clicked your 'validate online' link which took me to a microsoft web page.  Unfortunately the download link is broken.  When I click it, nothing happens.

    Furthermore, one of the comments on web page is rather scary: "From time to time, this software will also perform a validation check to make sure that Windows 7 running on your PC is genuine and stays that way."

    I really don't need or want another background process/program doing stuff 'From time to time'  I want my computer to run only the programs that I choose to use and when I choose to use them.

    Update: I tried this again by right clicking the 'validate online' link and choosing the 'Open Link in External Window' option.  This caused the page to open in Windows Explorer.  Unfortunately, when I clicked the Download button on the page, I received the following error message: "Update installation failed. Error Information - 0x80072EFD (0).

    I'll just wait and see if the spurious windows is not valid message is now gone as a result of changing the startup type of the 'Software Protection' service.

    Again, thank you for your help.

     


    Charles S. Cotton

     
     
    The SPPSVC service runs about once every 90 days under normal circumstances (other than at boot) – and is a REQUIRED part of Windows.
    If you do not want this service to run at all, then do not use Windows.
     
    It runs for approximately the first two or three minutes at boot, and then sleeps until the next trigger event – which is either a change in hardware, or 90 days.
    There is NOTHING in the data that it collects, and that it returns to MS, that can identify either you, or your computer, except possibly the IP address of your internet connection – and that is probably shared with at least another 40 people.
     
    If you are that concerned with your privacy, then you should not be using the internet at all.
     
    The error message you quote is a typical one for a firewall problem.
    What firewall are you using?
    How tightly is it monitored?
     
    For 99% of people, the Windows firewall in default mode is quite sufficient – and for 99% of the remainder, simply using the Windows Firewall with altered permissions is enough to secure their installation. If you have other requirements, then you have to be prepared for problems.
     
    The Tampered Service response is most frequently given because the user has inadvisedly adjusted the startup mode of the service from ‘Automatic (Delayed Start)’ to either ‘Disabled’ or ‘Manual’
    Almost always, resetting it to the default will cure the problem, assuming all other things are still as normal.
     
    DO NOT attempt to set/leave the service as ‘Disabled’ – that will certainly cause continuing problems.
    If you are prepared for a certain amount of hassle, then you may think about setting it as Manual – but it’s not a supported configuration, and will lead to repeated non-genuine messages, depending on your system configuration and usage.
     
    As for the Validation link – there is nothing wrong with the link that tb19 posted, except your browser configuration.
    If you reset IE to the default Security settings, you should find that it works well, and (assuming your firewall settings are OK0 your system validates properly
     
     
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, October 21, 2011 10:43 PM
    Moderator
  • Thanks Noel, for your comments.

    Like I said, I'll wait and see if the problem is resolved now that I have changed the startup type of the 'Software Protection' (sppsvc) service from Manual to Automatic (Delayed Start).

     

     


    Charles S. Cotton
    Friday, October 21, 2011 11:28 PM
  • prior to clicking the ok button, I clicked the start service..because it was off....then clicked ok...before I was able to read the next step here, the error message on desktop disappeared, running safety scanner now before booting...curious to find what turned it off.
    Friday, November 4, 2011 8:35 AM
  • "ak_wilderness" wrote in message news:ca9098a4-80be-42b8-84de-5bcd4b8063f5...
    prior to clicking the ok button, I clicked the start service..because it was off....then clicked ok...before I was able to read the next step here, the error message on desktop disappeared, running safety scanner now before booting...curious to find what turned it off.
     
     
    Frequently the service ‘turns itself off’ and goes into a standby mode.
    It’s only when it can’t start, either because it’s been disabled, or because of other reasons, that you get the Tampered File message in the MGADiag report that we see here.
    Please post your own report in your own thread – then we can see what we’re talking about.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, November 4, 2011 9:51 AM
    Moderator