none
Not Genuine, Really? (posted 2015) RRS feed

  • Question

  • Hello. I've own this computer since 2009 and purchased it from Dell with all the bells and whistles. I got a FULL windows 7 activated package and everything worked fine, until... One update from Microsoft (unfortunately I don't recall which one, after all, we trust this site to give us the right tools to keep our computers up-to-date...) my computer shows that I do not have or am not running a genuine windows program. I called Dell and they said its a Microsoft glitch from one of the recent updates. That coincide with the time my "glitch" showed on my computer. Please tell me which update to delete so I won't be bothered with this message several times a day! And yes, I ran the MGA diagnostic program:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-67JTP-MKKC3-3WXJB
    Windows Product Key Hash: viZ+G4aRJP712QcWbDvqoRlMMP4=
    Windows Product ID: 00359-OEM-9824847-38518
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {A730B72F-3465-4732-96B7-1D761CED9AC4}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcomapi.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A730B72F-3465-4732-96B7-1D761CED9AC4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3WXJB</PKey><PID>00359-OEM-9824847-38518</PID><PIDType>8</PIDType><SID>S-1-5-21-280051888-1224582609-490039970</SID><SYSTEM><Manufacturer>Dell Inc.         </Manufacturer><Model>Dell System Inspiron N7110</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.         </Manufacturer><Version>A11</Version><SMBIOSVersion major="2" minor="6"/><Date>20120111000000.000000+000</Date></BIOS><HWID>0EA53A07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000002800
    Event Time Stamp: 1:8:2015 09:52
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui


    HWID Data-->
    HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAln3aDNxcAF/gfZRijGzwO0bKEHneLi5z

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    QA09  
      FACP   DELL    QA09  
      HPET   DELL    QA09  
      BOOT     
      MCFG   DELL    QA09  
      SLIC   DELL    QA09  
      SSDT   DELL    PtidDevc
      ASF!   DELL    QA09  
      SSDT   DELL    PtidDevc
      SSDT   DELL    PtidDevc
      UEFI   DELL    QA09  
      UEFI   DELL    QA09  
      UEFI   DELL    QA09  

    Thursday, January 8, 2015 3:15 PM

Answers

  • The installation is counterfeit.

    You have an Activation exploit (RemoveWAT) installed to bypass activation and validation requirements.

     Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....

    Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extract the .exe file, and run it, then reboot.

     Post back with another MGADiag report, and we'll then see what we can do.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, January 11, 2015 2:02 PM
    Moderator

All replies

  • Please see this knowledge base article. Restart your PC afterward two times.

    Carey Frisch

    Thursday, January 8, 2015 10:19 PM
    Moderator
  • The installation is counterfeit.

    You have an Activation exploit (RemoveWAT) installed to bypass activation and validation requirements.

     Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....

    Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extract the .exe file, and run it, then reboot.

     Post back with another MGADiag report, and we'll then see what we can do.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, January 11, 2015 2:02 PM
    Moderator