locked
Windows 7, build 7600, windows not genuine RRS feed

  • Question

  • I have installed the window 7 update on my laptop and surprised to see the message in the corner of my screen "Win 7 Build 7600 This Copy of Windows is Not Genuine"

    I have run the Microsoft genuine  advantage diagnostic run tool as mention in other threads and get the following report. Please help me to resolve this issues

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-R38TQ-RV8M9-WWTCY
    Windows Product Key Hash: imKjAvpNIp2sNTp3Q64egK5kR0E=
    Windows Product ID: 00346-OEM-8992752-50258
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.002
    ID: {B4153F25-1508-4482-951D-592B98F3389F}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Basic
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_rtm.101119-1850
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\sppcext.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x80070005]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{B4153F25-1508-4482-951D-592B98F3389F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-WWTCY</PKey><PID>00346-OEM-8992752-50258</PID><PIDType>2</PIDType><SID>S-1-5-21-3286039147-894058225-81461965</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite C650</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>1.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20100408000000.000000+000</Date></BIOS><HWID>98463507018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65457</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAIABAABAAEAAAABAAAAAgABAAEAeqjcqhKJzVCs6DhdAi00iQoHWLvEVCaY5oVcXQ==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: no, invalid SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            TOSINV        TOSINV00
      FACP            TOSINV        TOSINV00
      HPET            TOSINV        TOSINV00
      BOOT            TOSINV        TOSINV00
      MCFG            TOSINV        TOSINV00
      WDAT            INTEL         Calpella
      ASF!            TOSINV        TOSINV00
      SLIC            TOSINV        TOSINV00
      SSDT            INTEL         SataPri
      SSDT            INTEL         SataPri
      ASPT            INTEL         Calpella
      SSDT            INTEL         SataPri



    Wednesday, April 13, 2011 9:00 PM

Answers

  • "vishal0216" wrote in message news:71edf6cb-ffe4-4b04-8d27-af762f790094...

    I have installed the window 7 update on my laptop and surprised to see the message in the corner of my screen "Win 7 Build 7600 This Copy of Windows is Not Genuine"

    I have run the Microsoft genuine  advantage diagnostic run tool as mention in other threads and get the following report. Please help me to resolve this issues

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-R38TQ-RV8M9-WWTCY
    Windows Product Key Hash: imKjAvpNIp2sNTp3Q64egK5kR0E=
    Windows Product ID: 00346-OEM-8992752-50258
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.002


    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002



    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\sppcext.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x80070005]


    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: no, invalid SLIC table

    You have a large number of problems with your installation -
    1) the OS is unable to properly read the BIOS SLIC table
    2) your Licensing store is probably corrupted.
    3) You have a couple of mismatched  files which would give rise to the non-genuine message (the other four are because you haven't installed the WAT Update)
    4) You have a non-genuine installation of Office Enterprise 2007, which is based on a Blocked Volume License Key.
     
    I suspect that your problems originate from a malware infection or disk corruption.
     
    First try a System Restore back to about three days before the problem showed up - once the restore is complete, reboot again, and then run another MGA Diag report and post the result. Do a full system scan with your anti-virus after updating it, while waiting for a response.
     
    If the System Restore fails, then try a CHKDSK, followed by and SFC, as follows.
     
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
    CHKDSK   C:   /F
    and hit the Enter key
    You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot.
     
    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC
     
    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search  box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
     - the Elevated Command Prompt window should pop up
    At the Command prompt, type
     
    SFC   /SCANNOW
     
    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.
     
    run another MGADiag report, and post the results.
     
     
     
     
    .
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 14, 2011 8:54 AM
    Moderator

All replies

  • "vishal0216" wrote in message news:71edf6cb-ffe4-4b04-8d27-af762f790094...

    I have installed the window 7 update on my laptop and surprised to see the message in the corner of my screen "Win 7 Build 7600 This Copy of Windows is Not Genuine"

    I have run the Microsoft genuine  advantage diagnostic run tool as mention in other threads and get the following report. Please help me to resolve this issues

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-R38TQ-RV8M9-WWTCY
    Windows Product Key Hash: imKjAvpNIp2sNTp3Q64egK5kR0E=
    Windows Product ID: 00346-OEM-8992752-50258
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.002


    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002



    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\sppcext.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x80070005]


    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".


    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: no, invalid SLIC table

    You have a large number of problems with your installation -
    1) the OS is unable to properly read the BIOS SLIC table
    2) your Licensing store is probably corrupted.
    3) You have a couple of mismatched  files which would give rise to the non-genuine message (the other four are because you haven't installed the WAT Update)
    4) You have a non-genuine installation of Office Enterprise 2007, which is based on a Blocked Volume License Key.
     
    I suspect that your problems originate from a malware infection or disk corruption.
     
    First try a System Restore back to about three days before the problem showed up - once the restore is complete, reboot again, and then run another MGA Diag report and post the result. Do a full system scan with your anti-virus after updating it, while waiting for a response.
     
    If the System Restore fails, then try a CHKDSK, followed by and SFC, as follows.
     
    Click on the Start button
    type in the Search box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
    - the Elevated Command Prompt window should pop up
    At the Command prompt, type
    CHKDSK   C:   /F
    and hit the Enter key
    You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot.
     
    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC
     
    SFC -System File Checker - Instructions
    Click on the Start button
    type in the Search  box
    CMD.EXE
    right-click on the only file that is found
    Select Run as Administrator
     - the Elevated Command Prompt window should pop up
    At the Command prompt, type
     
    SFC   /SCANNOW
     
    and hit the Enter key
    Wait for the scan to finish - make a note of any error messages - and then reboot.
     
    run another MGADiag report, and post the results.
     
     
     
     
    .
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 14, 2011 8:54 AM
    Moderator
  • You are using a Dell Home Basic OEM SLP serial on a Toshiba laptop.

    This would indicate that a possible loader (Hackers illegal activation app) has been used on your system and has incorrectly matched up your system profile. (By giving you the wrong serial code) Or yourself or someone else has installed the wrong serial code manually from command prompt or by using Windows 7 Anytime Upgrade.

     

    Also, yourself or someone else has ran RemoveWAT illegal Windows 7 hack on your system.

     




    Thursday, April 14, 2011 9:09 AM
  •  

    Also, yourself or someone else has ran RemoveWAT illegal Windows 7 hack on your system.

     





    There is no indication of this that I can see?
    The four file mismatches I didn't highlight are simply the result of not installing the WAT update, and the two I did highlight aren't ones associated with RemoveWAT.
     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 14, 2011 10:24 AM
    Moderator
  • File Mismatch: C:\Windows\system32\sppcext.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x80070005]
    Licensing Data--> Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

     

    Is the tampering from the RemoveWAT hack. 

    Yes, I am aware of the WAT file mismatches meaning as you said. The WAT update has not been installed.

    Thursday, April 14, 2011 10:49 AM
  • The files modified by RemoveWAT are NOT those you've flagged - but systemcpl.dll, and user32.dll.

    The slmgr.vbs error can be the result of corruption of the Licensing store.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, April 14, 2011 11:34 AM
    Moderator