Microsoft Security Essentials claims my Windows 7 is not genuine

All replies

• 

  

  0

  Sign in to vote

  cf. http://answers.microsoft.com/en-us/protect/forum/protect_scanning/full-scan-aborts-and-says-win-7-is-not-genuine/0a2c5e9a-1d30-4cc6-a14d-fe7121cd75de

  ---

  ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

  Thursday, February 23, 2012 2:17 AM
• 

  

  0

  Sign in to vote

  Visit Genuine Microsoft Software – Diagnostic Site and click on Start Diagnostics.  Then visit Microsoft Security Essentials - Download.
  

  ---

  Carey Frisch

  Thursday, February 23, 2012 2:58 AM

  Moderator
• 

  

  0

  Sign in to vote

  Please answer each of the following diagnostic questions in a correspondingly-numbered list in your very next reply (no need to quote this post):

  1. When (exact date, preferably) did you do the last clean install of Win7 64-bit?

  2a. After you did the last clean install of Win7, when (exact date, preferably) did you first install Microsoft Security Essentials (MSE)?

  2b. In Windows Explorer [WinKey+N], navigate to & right-click on

      • C:\Program Files\Microsoft Security Client <=this folder

  Select Properties: What is the Created date displayed on the resulting General tab?

  3. Are ALL of the following updates listed in View installed updates (not Update History)? [1]

      (a) KB2660465, KB2647516, KB2654428, KB2645640 & KB2633873;

      (b) KB2656356, KB2631813, KB2644615, KB2584146, KB2585542 & KB2556532;

      (c) KB2544521 or Windows Internet Explorer 9 [<=TELL ME WHICH ONE]

  4. Can you successfully run a manual check for updates per http://windows.microsoft.com/en-us/windows7/How-can-I-tell-if-my-computer-is-up-to-date ?

  5. Are you in the habit of using "Registry cleaners" (e.g., Registry Mechanic; System Mechanic; RegCure; RegClean Pro; Advanced SystemCare; AVG PC TuneUp; Norton Registry Cleaner; PCTools Optimiser; SpeedUpMyPC; CCleaner)?

  ==============================================
  [1] Start | Control Panel | Programs and Features | View installed updates (in left-hand menu)

  ---

  ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

  Thursday, February 23, 2012 3:23 AM
• 

  

  0

  Sign in to vote

  1. I upgraded from Win XP ->Win 7 without doing a clean install because I didn't want to do a clean install. That's always the answer right? Let's see..the date was probably 3/12/11

  2a. I used MSE before installing Win 7.

  2b. That folder is not there.

  3. I'm betting they are because I run Secunia PSI. Are you serious? There is no way to sort on KB or allow dumping this list to a text file. So I have to go through every update and compare it to your list. That's not tedious.

  3a. All yes.

  3b. All yes except  KB2556532

  3c. IE9

  4. Ran it and 2 optional updates exist.

  5. Not usually. When I ran XP I ran the one in Spybot Search & Destroy a few times. But I ran it selectively, not deleting everything.

  ---

  Mark Zellner

  Thursday, February 23, 2012 8:06 AM
• 

  

  1

  Sign in to vote

  "zarknoid" wrote in message news:51232611-758d-4dc7-b579-128870f7e6ad...

  1. I upgraded from Win XP ->Win 7 without doing a clean install because I didn't want to do a clean install. That's always the answer right? Let's see..the date was probably 3/12/11

   

  ---

  Mark Zellner

  It is not possible to do an upgrade install from XP to Win 7 – they all have to be Custom installs.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, February 23, 2012 10:57 AM

  Moderator
• 

  

  0

  Sign in to vote

  "zarknoid" wrote in message news:6abdda26-ea26-4dbe-813a-d3dd12d66398...

  I was sent here from the MSE forums..

  1. I moved my HD to a new system.

  2. I enntered my codes over the phone to the automated system to re-genuinize my system.

  3. MSE told me i was a pirate.

  4. I have since removed MSE and tried to reinstall it and it claims to still be installed.

  5. I just installed a brand new drive because sectors were flaking out on the drive I moved to my new system. Windows 7 didn't complain about this.... yet.

  6. MSE forums suggested I run the the genuinize tool and post it's output here.

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-WBTTW-RT7KJ-CQQRT
  Windows Product Key Hash: MwIRyR4UB72kMCQGeKBsxKkub8o=
  Windows Product ID: 00371-153-8061042-85177
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  
  
  

  ---

  Mark Zellner

  -
  

   

   

  There is no apparent problem with activation on your machine – but the last attempted validation was on 7th December (successful).

  Please attempt validation at www.microsoft.com/genuine/validate – what is the outcome?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, February 23, 2012 11:01 AM

  Moderator
• 

  

  0

  Sign in to vote

  "zarknoid" wrote in message news:51232611-758d-4dc7-b579-128870f7e6ad...

  1. I upgraded from Win XP ->Win 7 without doing a clean install because I didn't want to do a clean install. That's always the answer right? Let's see..the date was probably 3/12/11

   

  ---

  Mark Zellner

  It is not possible to do an upgrade install from XP to Win 7 – they all have to be Custom installs.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Maybe I'm missing something here, but would you call a 'clean install' a flat out format and install. I think it was actually called an in place install. I didn't have to reformat the drive.

  ---

  Mark Zellner

  Thursday, February 23, 2012 2:17 PM
• 

  

  0

  Sign in to vote

  "zarknoid" wrote in message news:00dd3cf0-30fd-4b58-a30c-69bc09b37092...

  Maybe I'm missing something here, but would you call a 'clean install' a flat out format and install. I think it was actually called an in place install. I didn't have to reformat the drive.

  ---

  Mark Zellner

  You would have had to reinstall all your applications and recover your data, since the only way to do an over-the-top install of Win7 on XP is to use the Custom install method, which shunts the whole of the old operating system into the Windows.old folder, and installs Win7 clean from that point.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, February 23, 2012 2:26 PM

  Moderator
• 

  

  0

  Sign in to vote

  Doing the web based validation says it was interrupted and asks if i would like to buy it for $149. This was a student discount for $79 from Dreamspark, I also bought Office 2010 through Dreamspark because I am currently attending college.

  ---

  Mark Zellner

  Thursday, February 23, 2012 2:27 PM
• 

  

  0

  Sign in to vote

  "zarknoid" wrote in message news:9726181e-e663-4742-ac02-e03b4269f6b3...

  Doing the web based validation says it was interrupted and asks if i would like to buy it for $149. This was a student discount for $79 from Dreamspark, I also bought Office 2010 through Dreamspark because I am currently attending college.

  ---

  Mark Zellner

  Interesting – please post a new MGADiag report, as it will have a new error message that may be informative.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, February 23, 2012 2:44 PM

  Moderator
• 

  

  1

  Sign in to vote

  To upgrade your PC from Windows XP to Windows 7, you'll need to select the Custom option during Windows 7 installation. A custom installation doesn't preserve your programs, files, or settings. It's sometimes called a "clean" installation for that reason.

  Ref: Upgrading from Windows XP to Windows 7

  ---

  Carey Frisch

  Thursday, February 23, 2012 3:30 PM

  Moderator
• 

  

  0

  Sign in to vote

  Per my colleagues' replies, you actually did a clean [AKA Custom (advanced)] install of Win7 64-bit on 12 March 2011.

  ~~~~~~~~~~~~~~~~~~~

  Please answer each of the following diagnostic questions in a correspondingly-numbered list in your very next reply (no need to quote this post):

  1. Please confirm that Security Update for Windows 7 for x64-based Systems (KB2556532) is not listed in Installed Updates. [1]

  2. Is Microsoft Security Essentials currently listed in Start | Control Panel | Programs | Programs and Features?

  3. Open the Action Center and expand (double-click on) the Security section & tell us the reported status (e.g., anti-virus; anti-malware).

  4. Can you open Windows Defender & run a scan?

  5. What are the two (2) KB numbers of the Optional (Software?) updates offered when you run the manual check for updates?

  6. Per my colleague Noel's reply, also post a new MGA Diagnostic log in your next reply.

  ============================================================
  [1] If KB2556532 is not installed, you may be seeing the effects of a rootkit infection.

  ---

  ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

  Thursday, February 23, 2012 5:29 PM
• 

  

  0

  Sign in to vote

  1. Sorry. It is installed (KB2556532). I missed it last time.

  2. Yes it is although I removed MSE and attempted a reinstall and at that point it said it was already installed.

  3. Spyware and unwanted software protection (Important) [ TurnonnowW] Windows Defender is turned off.

  Turn off messages about spyware and related protection Get a different antispyware program online
  Virus protection (Important) [Find a program online]
  Windows did not find antivirus software on this computer.
  Turn off messages about virus protection
  

  4. I had to turn it on and it asks for updates... Checking for updares.. it updated.. running a scan. Quick Scan says everything is fine.

  5. 

  Windows 7 (1)
  Realtek - Network- Realtek PCIe GBE Family Controller 272 KB
  SQL Server 2008 R2 (1)
  Microsoft SQL Server 2008 R2 Service Pack 1 (KB2528583) 309.0 MB

  Both of these do apply, but I didn't want to add more issues to the mix. Should I apply them?

  6. Heres the new MGA dump:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-WBTTW-RT7KJ-CQQRT
  Windows Product Key Hash: MwIRyR4UB72kMCQGeKBsxKkub8o=
  Windows Product ID: 00371-153-8061042-85177
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {1C982D36-3637-43E5-B1D8-E79CDDF00776}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.110622-1506
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\Orin\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  
  File Scan Data-->
  
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{1C982D36-3637-43E5-B1D8-E79CDDF00776}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-CQQRT</PKey><PID>00371-153-8061042-85177</PID><PIDType>5</PIDType><SID>S-1-5-21-2311896870-934044909-3082820343</SID><SYSTEM><Manufacturer>ECS</Manufacturer><Model>IC780M-A2</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>080015 </Version><SMBIOSVersion major="2" minor="6"/><Date>20100809000000.000000+000</Date></BIOS><HWID>09843207018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  
  Spsys.log Content: 0x80070002
  
  
  Licensing Data-->
  Software licensing service version: 6.1.7601.17514
  
  
  Name: Windows(R) 7, Professional edition
  Description: Windows Operating System - Windows(R) 7, RETAIL channel
  Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00371-00170-153-806104-01-1033-7601.0000-0712011
  Installation ID: 009115520050646674713625344300104662928926577005968253
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
  Partial Product Key: CQQRT
  License Status: Licensed
  Remaining Windows rearm count: 3
  Trusted time: 2/23/2012 2:32:18 PM
  
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 2:23:2012 09:22
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Not Registered - 0x80040154
  HealthStatus Bitmask Output:
  
  
  
  
  HWID Data-->
  HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAln2uNJgSVPKsx3bzEDP4j74vYj1Gr44RAtA=
  
  
  OEM Activation 1.0 Data-->
  N/A
  
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes, but no SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC 080910 APIC1036
    FACP 080910 FACP1036
    SRAT AMD   FAM_F_10
    HPET 080910 OEMHPET 
    MCFG 080910 OEMMCFG 
    OEMB 080910 OEMB1036
    SSDT A M I POWERNOW
  
  
  
  

  ---

  Mark Zellner

  Thursday, February 23, 2012 7:59 PM
• 

  

  0

  Sign in to vote

  "zarknoid" wrote in message news:d0e0b9ab-5aff-47c4-93c8-165d1fb11058...

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  
  
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-WBTTW-RT7KJ-CQQRT
  Windows Product Key Hash: MwIRyR4UB72kMCQGeKBsxKkub8o=
  Windows Product ID: 00371-153-8061042-85177
  Windows Product ID Type: 5
  Windows License Type: Retail
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  
  
  
  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: 0x00000000
  HealthStatus: 0x0000000000000000
  Event Time Stamp: 2:23:2012 09:22
  
  
  
  
  

  ---

  Mark Zellner

  According to your new report, you ran the Validation with success, at 09:22 today – 5 hours before running the MGADiag.

  i.e. It passed.

   

  The problem appears not to be WGA-related in any way.

  Darin may check the Key with his tools and discover a problem with it, but otherwise this problem appears to be outside the remit of this forum.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Thursday, February 23, 2012 8:17 PM

  Moderator
• 

  

  0

  Sign in to vote

  @Mark (zarknoid):

  Your answer for #3 in my previous reply tells us that MSE is not installed as does the fact that you could enable, update & scan with Windows Defender [1] - as well as the fact that a Program folder MSE folder does not exist.

  Per Noel's last reply, see if you can install MSE now: http://windows.microsoft.com/en-US/windows/products/security-essentials/download 

  If you still cannot install MSE, you may contact customer support per #6 here => http://windows.microsoft.com/en-US/windows/i-cant-install-microsoft-security-essentials

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  IN RE the two Optional updates: [2]

  1. KB2528583 is not a security-related update. Feel free to hide it.

  2. Chances are you don't need the Realtek PCIe GBE Family Controller driver update. Even if you did, it's always best to download driver updates you really need from the device (i.e., Realtek) or computer manufacturer's download page, not via Windows Update.

  If you have any questions about Windows Update, please begin your own, new thread in this forum => http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update

  =============================================
  [1] Installing MSE automatically disables Windows Defender. See http://blogs.msdn.com/b/securitytipstalk/archive/2010/08/26/microsoft-security-essentials-vs-windows-defender.aspx

  [2] The fact that Windows Update did not offer MSE as an Optional update (cf. http://support.microsoft.com/kb/2267621) suggests that you may have a very serious problem on your hands. It might be best to format the HDD & then do another clean install of Windows.

  ---

  ~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

  
  

  • Edited by Robear Dyer (PA Bear), MS-MVP since October 2002MVP Thursday, February 23, 2012 11:25 PM

  Thursday, February 23, 2012 11:24 PM
• 

  

  0

  Sign in to vote

  Possibly validation was having problems due to issues with my old hard drive. I don't think it was updating properly. 

  ---

  Mark Zellner

  Thursday, February 23, 2012 11:26 PM
• 

  

  1

  Sign in to vote

  I have checked the Product Key and it is Valid and Genuine. So it's not the key that is causing the problem.

  Combine that with the fact that your Diagnostic Report shows no Non-Genuine issue, the problem seems to be with MSE itself.

  If you haven't done so already, I would suggest uninstalling MSE, then reboot and reinstall.

  If that doesn't work, I recommend continuing this support in the Microsoft Security Essentials Answers Forum: http://answers.microsoft.com/en-us/protect/forum/protect_start

  Thank you,

  ---

  Darin MS

  
  
  

  • Marked as answer by Darin Smith MS Thursday, February 23, 2012 11:39 PM
  • Edited by Darin Smith MS Thursday, February 23, 2012 11:40 PM
  • Unmarked as answer by Darin Smith MS Thursday, February 23, 2012 11:40 PM
  • Proposed as answer by Darin Smith MS Thursday, February 23, 2012 11:40 PM
  • Marked as answer by Darin Smith MS Monday, February 27, 2012 11:35 PM

  Thursday, February 23, 2012 11:39 PM