locked
Recieving not genuine notifications on Win 7 Home Premium RRS feed

  • Question

  • After i installed Win 7 Home Premium, it indicated that the copy is not genuine.

    I installed and ran the diagnostic tool listed in the other threads.

    Any help would be greatly appreciated. Thanks

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-B3RV7-HPFK3-43CMF
    Windows Product Key Hash: Fwh6NyAKO3/VkIy8EnZMWU8eg2A=
    Windows Product ID: 00359-113-0740782-85728
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {6E649F43-0382-4C69-ABDA-56E95EBD4E72}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error: T:20100519203336062-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{6E649F43-0382-4C69-ABDA-56E95EBD4E72}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-43CMF</PKey><PID>00359-113-0740782-85728</PID><PIDType>5</PIDType><SID>S-1-5-21-2690156071-705860697-1789831569</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-SZ340P</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R0091N0</Version><SMBIOSVersion major="2" minor="31"/><Date>20060710000000.000000+000</Date></BIOS><HWID>D8B93607018400DA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: U1BMRwEAAAAAAQAABAAAAJIGAAAAAAAAWmICAEj9K4rCk9M6zffKAWbXGpOihAOpMHzDmWxsjurtk61YMB0m2Rkt0zhcJ9Ky5DsvJabJOb/DEuNw0uCa/TOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAx4dZsxs/sxaQSZh6DCEuBHOPWOWcdbAoM8wkJwW3yfQY5O7ZozBK1yd+zpXqhe8OszkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00170-113-074078-00-1033-7600.0000-1392010
    Installation ID: 016814965465401133190421392724120341897100122722788430
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 43CMF
    License Status: Notification
    Notification Reason: 0xC004FE00.
    Remaining Windows rearm count: 4
    Trusted time: 6/12/2010 9:14:18 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAABAAAAAwABAAEAJrKeuP7qzhrqTkjkXAkGDkBs4rj1vfxUgNMqhQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Sony  N0
      FACP   Sony  N0
      BOOT   Sony  N0
      MCFG   Sony  N0
      TCPA   Sony  N0
      APIC   Sony  N0
      SSDT   Sony  N0
      SSDT   Sony  N0
      SSDT   Sony  N0

     

    Sunday, June 13, 2010 4:16 AM

Answers

  • Hello MHayes62,

    "TTS Error: T:20100519203336062-"

     Your Diagnostic Report is telling me that your Windows is suffering from a Trusted Store Tamper.  (This type of issue seems to be rare in Windows 7 as this is the first one I have seen so far).   In Windows, There are files that have, what is known as, a Digital Signature. A Digital Signature is an industry standard that ensures that a file is, in fact, from the specified source. If a file is modified, in any way, the Diagital Signature is broken. 

    Example: lets say you get a Printer Driver that is Digitally Signed from HP. Since the Digital Signature was created by a Trusted Source (HP) a Certificate is created within Window's Trusted Store. The Digital Signature is dependent on the file's Hash (think fingerprint) so if the file is changed in any way, it's Digital Signature is broken and becomes invalid.  So lets say that the HP Driver got modified by some sort of Malware. The File's Hash would no longer match the hash listed in the Digitally Signature (or the Signature may not even be readable at that point). The Digital Signature become invalid because windows now don't know what has been done to that file, so the file can no longer be trusted. This in turn invalidates the corresponding Certificate within the Trusted Store.

      What I have described in the above example is basically what is happening with your Windows 7.  Some Digitally Signed file has been modified in some way (replaced, rewritten or just become corrupt) and the Certificate within Windows's Trusted Store has become invalid (i.e. no longer trusted) and that is what has triggered the Non-Genuine messaging.

      Unfortunatly, none of my tools are able to pinpoint which file/signature/certificate is causing the problem. However there are a few thing you can try that may correct the issue.


      1) First off not all Digitally Signed files are Drivers, but from experience we have found that this issue seems to occure the most with Drivers.  So my first suggestion is to confirm that all your hardware drivers are up to date. Note: Figuring out id a Driver is up to date and/or replacing a driver with a more current one can sometimes take semi-advanced computer knowledge and me explaining the process is outside the scope of this forum. If you do not know how to work with Drivers seak assistance or skip down to #2 or #3 below

      2) Restore Windows back to a past System Restore Point.

    1) Boot into Windows
    2) Click the ‘Start’ button
    3) In the Start Search field, type: System Restore and hit “Enter” keyboard key
    4) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to a date Before you first noticed the issue.
    5) Click the "Next" button.
    6) Reboot

      3) Repair Windows using the 'sfc /scannow' command

    The Scan Now will look for any bad Windows files and attempt to repair them, if possible (it isn't always able to)

    1) Login to Windows
    2) Launch an Internet Browser
    3) Type: cmd.exe in the search field
    4) Right-click the cmd.exe file and select Run as Administrator
    5) In the CMD window, type: sfc /scannow
    6) Reboot and see if that resolves the issue.

    If none of my suggestions resolves the issue, then the only other thing I can suggest is to either create a (no cost) support request at http://support.microsoft.com/gp/contactwga or reinstall Windows.

    Thank you,


    Darin MS
    Monday, June 14, 2010 5:55 PM

All replies

  • "MHayes62" wrote in message news:70d6ad59-62e0-461e-9ef5-e2b3c3fd13d2...

    After i installed Win 7 Home Premium, it indicated that the copy is not genuine.

    I installed and ran the diagnostic tool listed in the other threads.

    Any help would be greatly appreciated. Thanks

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-B3RV7-HPFK3-43CMF
    Windows Product Key Hash: Fwh6NyAKO3/VkIy8EnZMWU8eg2A=
    Windows Product ID: 00359-113-0740782-85728
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003

    What you have there is Win 7 Home Premium Retail .

    The content of the Spsys.log is unintelligible to me - but the fact that it's not the usual 1-line affair flags something :)

    The 0xC004FE00 notification error is a rare one AFAICT - and the one reference I can find is regarding a hack to rearm windows  (HINT?)

     

    Try this...

    go to http://microsoft.com/genuine and click the Validate Windows button and follow the directions.

     -If the Validation result is Non-Genuine, would you tell us the exact message the Validation page shows.

     -If the Validation result is Genuine, do you now still see the Non-Genuine message?

    If it doesn't Validate - try rebuilding the License store

     Click Start

    In the Search box, type:

    CMD.EXE

     and then right-click on the only result - select Run as Administrator.
    At the Command Prompt, type (and hit the Enter Key at the end)

    NET   STOP   SPPSVC

    (confirm if asked)

    Note: the Software Protection service may not be running, this is ok.
    Then type the following in one line - hit the Enter Key at the end 

    cd    %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform

    (it may wrap - don't worry!)

    Then type (hittinh the Enter Key after each line - you may get responses from each))

    rename  tokens.dat   tokens.bak
    cd %windir%\system32
    net start sppsvc
    slui.exe


    The Windows Activation dialog should appear. You will probably be asked to re-activate and/or re-enter your product key  - or Activation may occur automatically (unlikely).

    Reboot, and see if that holds :)

    Good Luck!
    --
     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, June 13, 2010 12:08 PM
    Moderator
  • Hello MHayes62,

    "TTS Error: T:20100519203336062-"

     Your Diagnostic Report is telling me that your Windows is suffering from a Trusted Store Tamper.  (This type of issue seems to be rare in Windows 7 as this is the first one I have seen so far).   In Windows, There are files that have, what is known as, a Digital Signature. A Digital Signature is an industry standard that ensures that a file is, in fact, from the specified source. If a file is modified, in any way, the Diagital Signature is broken. 

    Example: lets say you get a Printer Driver that is Digitally Signed from HP. Since the Digital Signature was created by a Trusted Source (HP) a Certificate is created within Window's Trusted Store. The Digital Signature is dependent on the file's Hash (think fingerprint) so if the file is changed in any way, it's Digital Signature is broken and becomes invalid.  So lets say that the HP Driver got modified by some sort of Malware. The File's Hash would no longer match the hash listed in the Digitally Signature (or the Signature may not even be readable at that point). The Digital Signature become invalid because windows now don't know what has been done to that file, so the file can no longer be trusted. This in turn invalidates the corresponding Certificate within the Trusted Store.

      What I have described in the above example is basically what is happening with your Windows 7.  Some Digitally Signed file has been modified in some way (replaced, rewritten or just become corrupt) and the Certificate within Windows's Trusted Store has become invalid (i.e. no longer trusted) and that is what has triggered the Non-Genuine messaging.

      Unfortunatly, none of my tools are able to pinpoint which file/signature/certificate is causing the problem. However there are a few thing you can try that may correct the issue.


      1) First off not all Digitally Signed files are Drivers, but from experience we have found that this issue seems to occure the most with Drivers.  So my first suggestion is to confirm that all your hardware drivers are up to date. Note: Figuring out id a Driver is up to date and/or replacing a driver with a more current one can sometimes take semi-advanced computer knowledge and me explaining the process is outside the scope of this forum. If you do not know how to work with Drivers seak assistance or skip down to #2 or #3 below

      2) Restore Windows back to a past System Restore Point.

    1) Boot into Windows
    2) Click the ‘Start’ button
    3) In the Start Search field, type: System Restore and hit “Enter” keyboard key
    4) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to a date Before you first noticed the issue.
    5) Click the "Next" button.
    6) Reboot

      3) Repair Windows using the 'sfc /scannow' command

    The Scan Now will look for any bad Windows files and attempt to repair them, if possible (it isn't always able to)

    1) Login to Windows
    2) Launch an Internet Browser
    3) Type: cmd.exe in the search field
    4) Right-click the cmd.exe file and select Run as Administrator
    5) In the CMD window, type: sfc /scannow
    6) Reboot and see if that resolves the issue.

    If none of my suggestions resolves the issue, then the only other thing I can suggest is to either create a (no cost) support request at http://support.microsoft.com/gp/contactwga or reinstall Windows.

    Thank you,


    Darin MS
    Monday, June 14, 2010 5:55 PM
  • Thank you for your help. I will try these steps and see if it solves the issue. If it doesn't, since it is a corrupted file as opposed to something wrong with my source, a rebuild of the os should do it
    Tuesday, June 15, 2010 1:15 AM