locked
Win 7 Ultimate SLP on Dell Workstation not genuine? RRS feed

  • Question

  •  

    What am I missing here?  Windows 7 original Dell on Dell Workstation.

    Getting Not Genuine errors messages.

    I noticed the "tampered" thing below and did find a 2nd copy of file at

    C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7600.16385_none_b7b69062b883381f

     

    Could the file in System32 be corrupted? Should I try to replace file from winsxs to System32?

    Tried running SFC /scannow. Found no files needing replacement from original media. Hmmm...

     

    Report follows:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE22

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2

    Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=

    Windows Product ID: 00426-OEM-8992662-00006

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010100.0.0.001

    ID: {2C11645C-1366-4C2B-AC48-95B9298F3482}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Ultimate

    Architecture: 0x00000009

    Build lab: 7600.win7_gdr.100618-1621

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Home and Student 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\lasalle\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{2C11645C-1366-4C2B-AC48-95B9298F3482}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-803714440-2096580142-690966433</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>Precision WorkStation 470    </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="3"/><Date>20060315000000.000000+000</Date></BIOS><HWID>7CB83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>A04104EBC467F22</Val><Hash>EjWexPyrHbkQKS8PTKSfhLTyCmk=</Hash><Pid>81602-913-1485881-68279</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7600.16385

     

    Name: Windows(R) 7, Ultimate edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00426-00178-926-600006-02-1033-7600.0000-2702010

    Installation ID: 012336548536838953021330509926511793998000750051816932

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: HYRR2

    License Status: Licensed

    Remaining Windows rearm count: 2

    Trusted time: 12/20/2010 1:12:33 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000000800

    Event Time Stamp: 12:18:2010 21:22

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

     

     

    HWID Data-->

    HWID Hash Current: NgAAAAMABAABAAEAAQABAAAAAQABAAEA6GHKsKxCYqRONNIq4sf052RSHroGP96IFl+KEOw7

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC DELL   WS 470 

      FACP DELL   WS 470 

      HPET DELL   WS 470 

      BOOT DELL   WS 470 

      SSDT DELL st_ex

      ASF! DELL   WS 470 

      MCFG DELL   WS 470 

      SLIC DELL   QA09   

     

     

     

    Monday, December 20, 2010 6:39 PM

Answers

  • Hello Leftover Tech,

    In this context, "tampered file" could mean just good old fashioned file corruption due to a bad install, bad HDD, or bad RAM, or it could mean the presence of malware.

    It couldn't hurt to transplant a copy of the tampered file from another equivalent installation on another computer, but if that fixes the problem that would be a rarity.  The winsxs folder has many copies of what seem like the same file but from what I read they are not so IMO best to not copy from that folder.

    Tuesday, December 21, 2010 4:19 PM

All replies

  • "Leftover Tech" wrote in message news:67fc1557-f58c-4106-bf38-e743d18994e2...

     

    What am I missing here?  Windows 7 original Dell on Dell Workstation.

    Getting Not Genuine errors messages.

    I noticed the "tampered" thing below and did find a 2nd copy of file at

    C:\Windows\winsxs\amd64_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7600.16385_none_b7b69062b883381f

     

    Could the file in System32 be corrupted? Should I try to replace file from winsxs to System32?

    Tried running SFC /scannow. Found no files needing replacement from original media. Hmmm...

     

    Report follows:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE22

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2

    Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=

    Windows Product ID: 00426-OEM-8992662-00006

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7600.2.00010100.0.0.001

     


    For which version and edition of Windows is your computer licensed, according to the COA sticker on the case (do NOT post the key!)?
    Dell W7 Ultimate installs are rarer than hen's teeth, so it's worth checking that first.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, December 20, 2010 9:06 PM
    Moderator
  • Noel's post: For which version and edition of Windows is your computer licensed, according to the COA sticker on the case (do NOT post the key!)?
    Dell W7 Ultimate installs are rarer than hen's teeth, so it's worth checking that first.

    Good point. This unit was originally rack-mounted and the COA was pretty much trashed in the rough removal.
    The parts that remain look to be from a legitimate Dell W7x64U.
    I got the machine when an expensive component failed right after warranty expiration.
    The management asked me to replace the machine (around $1500), rather than replacing a failed $600 Quadro card and adding some RAM.

    I took the (not very) old machine as partial payment for the labor and put a much cheaper video card in it ( I don't do any AutoCAD or gaming).
    Looked like it would make a good workstation for my home. I did the install from the media in the Dell box that I received from customer.

    I guess it is possible that the original COA was W7Pro or similar. I may have made a bad assumption based on the media provided.



    Tuesday, December 21, 2010 3:38 PM
  • Hello Leftover  Tech,

    Might be able to sleuth the original OS by running the Service Tag at support.dell.com and looking for the original configuration under the warranty links on the left side of the page.

    Tuesday, December 21, 2010 4:06 PM
  • You're absolutely right. I should have thought about that before getting so excited about a perceived false positive from WGA.

    I may have made the newbie error of believing what the original user said without confirmation.

    After doing this for thirty years, I should know better. The damaged COA could certainly be W7Pro, rather than Ultimate.

    I am not sure if I should be seeing this error, though. Seems like it would pass WGA anyway with original Dell media.

    Will check and report later in the day if I can make the time.

    Thanks for the ideas, guys.

    Tuesday, December 21, 2010 4:13 PM
  • Hello Leftover Tech,

    In this context, "tampered file" could mean just good old fashioned file corruption due to a bad install, bad HDD, or bad RAM, or it could mean the presence of malware.

    It couldn't hurt to transplant a copy of the tampered file from another equivalent installation on another computer, but if that fixes the problem that would be a rarity.  The winsxs folder has many copies of what seem like the same file but from what I read they are not so IMO best to not copy from that folder.

    Tuesday, December 21, 2010 4:19 PM
  • "Dan at IT Associates" wrote in message news:1f2a3cc6-c9ad-4ecf-abeb-15fdfee73998...

    Hello Leftover Tech,

    In this context, "tampered file" could mean just good old fashioned file corruption due to a bad install, bad HDD, or bad RAM, or it could mean the presence of malware.

    It couldn't hurt to transplant a copy of the tampered file from another equivalent installation on another computer, but if that fixes the problem that would be a rarity.  The winsxs folder has many copies of what seem like the same file but from what I read they are not so IMO best to not copy from that folder.


    The trick with the WinSxS folder is to investigate the version numbers before copying anything - it can hold an almost infinite number of versions of ANY system file, in the hope that an application could call that particular version. (that's why it's called Side-by-Side or SxS). As I understand it, if an application is looking for a particular version of a system file (because it's not compatible with another, more usual version), then the system checks the WinSxS folder to see if there's a compatible version there. If there is, then that one is instantiated for that thread.
     
    (but then again, I may be talking out of orifices best left unmentioned?)
     
    If you're confused about this, you're not alone :)
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, December 21, 2010 8:07 PM
    Moderator