Answered by:
Need Assistance Resolving Pop-up Message: "This computer is not running genuine Windows"

Question
-
After having my computer for about 2 years now I suddenly started frequently getting a pop up window saying:
"This computer is not running genuine Windows" and goes on to say "To use Windows without interruption, this computer needs to be running genuine Windows. With genuine Windows you have access to all Windows updates and can be confident that your Windows software has the latest security and reliability enhancements from Microsoft." It then gives me a link to "Resolve online now."
First of all, as far as I know, I am in fact running genuine Windows so I was fairly certain this was a scam or a virus. Upon further research I saw that others were having this problem and it appeared to be a legitimate message so I decided to try to resolve the issue since it has become a nuisance to have to periodically close the window.
When I click "Resolve online now" it takes me to a page that says:
"Download Required Windows Validation Components"
"The software that you are about to download works with most browsers and enables Windows validation. Once installed, it will detect whether Windows is genuine and properly licensed. If needed, it will also attempt to repair Windows 7 licensing components that may have been damaged, moved, or deleted. From time to time, this software will also perform a validation check to make sure that Windows 7 running on your PC is genuine and stays that way. View the privacy statement."
So I downloaded the WindowsActivationUpdate.exe program and clicked it. It says "Downloading update package..." Then when it tries to install I get an error:
"Update installation failed. Error information - 0x800B0001"
When I googled the error I found this page:
http://support.microsoft.com/kb/958045
I tried the "Fix it for me" section. When I clicked the button it downloaded "MicrosoftFixit50691.msi" When I click that and run it, it will open and start but then I get the message:
"This Microsoft Fix it does not apply to your operating system or application version."
So I did the 'let me fix it myself' procedures although I didn't see til after I did it that it ultimately wasn't for my version of windows either. It seems to have run so hopefully it didn't screw up my computer.
I still haven't resolved the issue to the point where I can get the original tool to work and don't know what I'm supposed to do about it.
I ran the diagnostic since that was what others were told to do and this is what it said:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-VJ3BC-WQF6B-MPTD3
Windows Product Key Hash: nyvpdQbKqtx1+XLNA3CWP/7tb8U=
Windows Product ID: 00371-OEM-9045012-29420
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {527111AB-17B6-4832-A1A9-89F79A2C23DA}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Jennifer\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{527111AB-17B6-4832-A1A9-89F79A2C23DA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-MPTD3</PKey><PID>00371-OEM-9045012-29420</PID><PIDType>3</PIDType><SID>S-1-5-21-4001848393-3082217007-4238911561</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>2001 </Version><SMBIOSVersion major="2" minor="6"/><Date>20110308000000.000000+000</Date></BIOS><HWID>A0BF3207018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-450-129420-02-1033-7601.0000-3212011
Installation ID: 018820712362039756153412765255149351756232249603553715
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: MPTD3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 9/17/2013 2:53:39 PM
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000003EFFF
Event Time Stamp: 9:10:2013 18:36
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watadminsvc.exe
Tampered File: %systemroot%\system32\wat\watweb.dll
Tampered File: %systemroot%\system32\wat\npwatweb.dll
Tampered File: %systemroot%\system32\wat\watux.exe
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
Tampered File: %systemroot%\system32\drivers\spldr.sys
HWID Data-->
HWID Hash Current: MgAAAAEABAABAAEAAQABAAAAAQABAAEAHKJ0rBqFtvIk5lTyEDOMxz5VQsje/bCSji4=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 030811 APIC1017
FACP 030811 FACP1017
SRAT AMD FAM_F_10
HPET 030811 OEMHPET
MCFG 030811 OEMMCFG
OEMB 030811 OEMB1017
SSDT A M I POWERNOW
I have been unable to check for updates/update windows since I got this message so please let me know what I can do to resolve this issue.
JenniferTuesday, September 17, 2013 7:07 PM
Answers
-
That may actually be the clue we needed :)
Open an Elevated Command Prompt, and run the following command...
REGSVR32 WINTRUST.DLL
You should get a popup window saying succeeded - reboot, and tun another MGADiag report.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, September 22, 2013 8:32 AM
- Marked as answer by Noel D PatonModerator Thursday, October 3, 2013 4:41 PM
Saturday, September 21, 2013 3:34 PMModerator
All replies
-
Please run a full CHKDSK and SFC scan....
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.
The CHKDSK will take a few hours depending on the size of the drive, so be patient!
After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -
then run the SFC.
SFC -System File Checker - Instructions
Click on Start > All Programs > Accessories
Right-click on the Command Prompt entry
Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.
At the Command prompt, type
SFC /SCANNOW
and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.
Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)
Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file
Then zip the CheckSUR.log and CBS.log and upload load them to your SkyDrive Public folder so I can take a look - post a link in your reply.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Wednesday, September 18, 2013 7:27 AMModerator -
I was able to complete the first 2 steps. The CHKDSK and SFC scans ran without difficulty.
The SFC Scan resulted in this message:
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.logThen I tried to complete the third step. I downloaded the file listed for "All supported x64-based versions of Windows 7" and received "Windows6.1-KB947821-v28-x64.msu" when the download finished.
When I tried to run that program I get an error message:
"Installer encountered an error: 0x800b001
Unknown trust provider."
I am not sure if I was supposed to run it in a special way or if I did something wrong.
I have uploaded the CBS.log file even though I wasn't able to complete the last step. I have never used my Skydrive before so even though I'm pretty sure I uploaded it correctly I don't know if this link will work.
https://skydrive.live.com/redir?resid=5CBC872B086DFE12!141&authkey=!APQCnB6VROIFABg
Please let me know what else I can do.
Thank you for your assistance with these issues.
Saturday, September 21, 2013 2:35 AM -
Interesting results there.
2013-09-10 18:36:35, Error CSI 00000031 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005] 2013-09-10 18:36:35, Error CSI 00000032@2013/9/10:22:36:35.118 (F) d:\win7sp1_gdr\base\wcp\servicingapi\cmirepair.cpp(312): Error HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) originated in function Windows::ServicingAPI::CCSIRepairTransaction::LockComponent expression: HRESULT_FROM_WIN32(14081L) [gle=0x80004005] 2013-09-10 18:36:35, Error CSI 00000033 (F) [SR] Component not found: Microsoft-Windows-Security-SPP-Client, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005] 2013-09-10 18:36:35, Error CSI 00000034@2013/9/10:22:36:35.957 (F) d:\win7sp1_gdr\base\wcp\servicingapi\cmirepair.cpp(312): Error HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) originated in function Windows::ServicingAPI::CCSIRepairTransaction::LockComponent expression: HRESULT_FROM_WIN32(14081L) [gle=0x80004005] 2013-09-03 18:35:43, Error CSI 0000006b (F) [SR] Component not found: Microsoft-Windows-Security-SPP-UX, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005] 2013-09-03 18:35:43, Error CSI 0000006c@2013/9/3:22:35:43.870 (F) d:\win7sp1_gdr\base\wcp\servicingapi\cmirepair.cpp(312): Error HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) originated in function Windows::ServicingAPI::CCSIRepairTransaction::LockComponent expression: HRESULT_FROM_WIN32(14081L) [gle=0x80004005] 2013-09-03 18:35:43, Error CSI 0000006d (F) [SR] Component not found: Microsoft-Windows-Security-SPP-UX, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral[gle=0x80004005] 2013-09-03 18:35:43, Error CSI 0000006e@2013/9/3:22:35:43.906 (F) d:\win7sp1_gdr\base\wcp\servicingapi\cmirepair.cpp(312): Error HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) originated in function Windows::ServicingAPI::CCSIRepairTransaction::LockComponent expression: HRESULT_FROM_WIN32(14081L) [gle=0x80004005]
- but the general SFC found no problems.
Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)
Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file
Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Saturday, September 21, 2013 12:19 PMModerator -
As I said in my reply above, the CheckSUR tool will not run. I get an error.
"I downloaded the file listed for "All supported x64-based versions of Windows 7" and received "Windows6.1-KB947821-v28-x64.msu" when the download finished.
When I tried to run that program I get an error message:
"Installer encountered an error: 0x800b001
Unknown trust provider."
I am not sure if I was supposed to run it in a special way or if I did something wrong."
Is there a special way in which I need to execute the program? Did I download the wrong version? I tried the file again this morning just to check and I still get the same error message.
Saturday, September 21, 2013 2:09 PM -
That may actually be the clue we needed :)
Open an Elevated Command Prompt, and run the following command...
REGSVR32 WINTRUST.DLL
You should get a popup window saying succeeded - reboot, and tun another MGADiag report.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, September 22, 2013 8:32 AM
- Marked as answer by Noel D PatonModerator Thursday, October 3, 2013 4:41 PM
Saturday, September 21, 2013 3:34 PMModerator -
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-VJ3BC-WQF6B-MPTD3
Windows Product Key Hash: nyvpdQbKqtx1+XLNA3CWP/7tb8U=
Windows Product ID: 00371-OEM-9045012-29420
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {527111AB-17B6-4832-A1A9-89F79A2C23DA}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Jennifer\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{527111AB-17B6-4832-A1A9-89F79A2C23DA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-MPTD3</PKey><PID>00371-OEM-9045012-29420</PID><PIDType>3</PIDType><SID>S-1-5-21-4001848393-3082217007-4238911561</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>2001 </Version><SMBIOSVersion major="2" minor="6"/><Date>20110308000000.000000+000</Date></BIOS><HWID>A0BF3207018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-450-129420-02-1033-7601.0000-3212011
Installation ID: 018820712362039756153412765255149351756232249603553715
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: MPTD3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 9/21/2013 9:04:44 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 9:17:2013 20:53
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEABAABAAEAAQABAAAAAQABAAEAHKJ0rBqFtvIk5lTyEDOMxz5VQsje/bCSji4=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 030811 APIC1017
FACP 030811 FACP1017
SRAT AMD FAM_F_10
HPET 030811 OEMHPET
MCFG 030811 OEMMCFG
OEMB 030811 OEMB1017
SSDT A M I POWERNOW
Sunday, September 22, 2013 1:05 AM -
Yay! - it worked :)
You should no longer be seeing the notifications.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Sunday, September 22, 2013 8:32 AMModerator -
Everything seems to be in working order.
Thank you very much for all your help :)
Monday, September 23, 2013 3:48 PM -
You're welcome - good luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Wednesday, September 25, 2013 8:18 PMModerator