Answered by:
Not Genuine, Really? (posted 2015)

Question
-
Hello. I've own this computer since 2009 and purchased it from Dell with all the bells and whistles. I got a FULL windows 7 activated package and everything worked fine, until... One update from Microsoft (unfortunately I don't recall which one, after all, we trust this site to give us the right tools to keep our computers up-to-date...) my computer shows that I do not have or am not running a genuine windows program. I called Dell and they said its a Microsoft glitch from one of the recent updates. That coincide with the time my "glitch" showed on my computer. Please tell me which update to delete so I won't be bothered with this message several times a day! And yes, I ran the MGA diagnostic program:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE22
Cached Online Validation Code: 0xc004c4a8
Windows Product Key: *****-*****-67JTP-MKKC3-3WXJB
Windows Product Key Hash: viZ+G4aRJP712QcWbDvqoRlMMP4=
Windows Product ID: 00359-OEM-9824847-38518
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {A730B72F-3465-4732-96B7-1D761CED9AC4}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\sppcomapi.dll[Hr = 0x80070005]
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7601.17514], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{A730B72F-3465-4732-96B7-1D761CED9AC4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3WXJB</PKey><PID>00359-OEM-9824847-38518</PID><PIDType>8</PIDType><SID>S-1-5-21-280051888-1224582609-490039970</SID><SYSTEM><Manufacturer>Dell Inc. </Manufacturer><Model>Dell System Inspiron N7110</Model></SYSTEM><BIOS><Manufacturer>Dell Inc. </Manufacturer><Version>A11</Version><SMBIOSVersion major="2" minor="6"/><Date>20120111000000.000000+000</Date></BIOS><HWID>0EA53A07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>QA09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000002800
Event Time Stamp: 1:8:2015 09:52
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAAACAAAAAwABAAEAln3aDNxcAF/gfZRijGzwO0bKEHneLi5zOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL QA09
FACP DELL QA09
HPET DELL QA09
BOOT
MCFG DELL QA09
SLIC DELL QA09
SSDT DELL PtidDevc
ASF! DELL QA09
SSDT DELL PtidDevc
SSDT DELL PtidDevc
UEFI DELL QA09
UEFI DELL QA09
UEFI DELL QA09Thursday, January 8, 2015 3:15 PM
Answers
-
The installation is counterfeit.
You have an Activation exploit (RemoveWAT) installed to bypass activation and validation requirements.
Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....
Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extract the .exe file, and run it, then reboot.
Post back with another MGADiag report, and we'll then see what we can do.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Kamin of Ressik Monday, January 12, 2015 3:38 PM
- Marked as answer by Noel D PatonModerator Sunday, January 25, 2015 8:24 AM
Sunday, January 11, 2015 2:02 PMModerator
All replies
-
Thursday, January 8, 2015 10:19 PMModerator
-
The installation is counterfeit.
You have an Activation exploit (RemoveWAT) installed to bypass activation and validation requirements.
Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....
Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extract the .exe file, and run it, then reboot.
Post back with another MGADiag report, and we'll then see what we can do.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Kamin of Ressik Monday, January 12, 2015 3:38 PM
- Marked as answer by Noel D PatonModerator Sunday, January 25, 2015 8:24 AM
Sunday, January 11, 2015 2:02 PMModerator