locked
Windows 7 Build 7601 This copy of Windows is not genuine RRS feed

  • Question

  • I've been getting this error message on the lower right of my screen. I bought my computer (a Samsung Series 7 if it makes a difference) 2 months ago from Bestbuy, preinstalled with Windows 7 Home Premium. I have had no problems in the past.

     

    Just today, this message popped up, and really the only thing I want to know is whether this is a legitimate problem, or could it have been triggered by a virus? Or could it be a different error with perhaps rearranging some folders... 

     

    So, could it be a virus? Or should I call Microsoft... Because I honestly have no problem just wiping my computer and reinstalling windows, but only if it will help. 

     

    I ran a MGAdiag scan... I'll post my results in a reply if anyone wants to know. Any suggestions?

    Edit: I also tried Windows Verification using my product key and it declared that it was not genuine. 
    Sunday, December 18, 2011 5:46 PM

Answers

  • "Berwick Chasehome" wrote in message news:7371681b-c004-4167-92d4-44448939b19a...

    I've been getting this error message on the lower right of my screen. I bought my computer (a Samsung Series 7 if it makes a difference) 2 months ago from Bestbuy, preinstalled with Windows 7 Home Premium. I have had no problems in the past.

     

    Just today, this message popped up, and really the only thing I want to know is whether this is a legitimate problem, or could it have been triggered by a virus? Or could it be a different error with perhaps rearranging some folders...

    .
     
     
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 6:03 PM
    Moderator
  • "Berwick Chasehome" wrote in message news:2212328e-384c-4aa5-8e7d-b38dd84187f7...
    Yes I've installed a few programs... do I just need to uninstall from the control panel, or is there a more complete method I need to do? Thank you for your help... at least I now know that I was the source of the problem.
     
    Uninstalling from the control panel, or using the program’s own uninstaller should do the trick.
    The only exception would be an Anti-Virus – you should first uninstall using the CP, then download and run the manufacturer’s removal tool.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 7:42 PM
    Moderator

All replies

  • "Berwick Chasehome" wrote in message news:7371681b-c004-4167-92d4-44448939b19a...

    I've been getting this error message on the lower right of my screen. I bought my computer (a Samsung Series 7 if it makes a difference) 2 months ago from Bestbuy, preinstalled with Windows 7 Home Premium. I have had no problems in the past.

     

    Just today, this message popped up, and really the only thing I want to know is whether this is a legitimate problem, or could it have been triggered by a virus? Or could it be a different error with perhaps rearranging some folders...

    .
     
     
    To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
    Once saved, run the tool.
    Click on the Continue button, which will produce the report.
    To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 6:03 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-8V4TV-RHTJD-K8JVB
    Windows Product Key Hash: eyilj6YchQ2N1Om4y7uqbKqVbjQ=
    Windows Product ID: 00359-OEM-9819177-44287
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {26810404-13E9-4ABF-B52C-593697920B9E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error: T:20111218110410492-
    Validation Diagnostic: 
    Resolution Status: N/A
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Ryan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    File Scan Data-->
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{26810404-13E9-4ABF-B52C-593697920B9E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-K8JVB</PKey><PID>00359-OEM-9819177-44287</PID><PIDType>8</PIDType><SID>S-1-5-21-2067460848-1491120777-1853505066</SID><SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>700Z3A/700Z4A/700Z5A/700Z5B</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies Ltd.</Manufacturer><Version>02FD</Version><SMBIOSVersion major="2" minor="6"/><Date>20110903000000.000000+000</Date></BIOS><HWID>5B593B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>SECCSD</OEMID><OEMTableID>LH43STAR</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    Spsys.log Content: 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
    Licensing Data-->
    Software licensing service version: 6.1.7601.17514
    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00196-191-744287-02-1033-7601.0000-3522011
    Installation ID: 018415416614511413800253612003058362946232201485555962
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: K8JVB
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 5
    Trusted time: 12/18/2011 11:46:55 AM
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:18:2011 11:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAAABAAAABAABAAEAonYc1XcWRL2APkjk/DhSVTKbGo6MO+31hmYucw==
    OEM Activation 1.0 Data-->
    N/A
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC SECCSD LH43STAR
      FACP SECCSD LH43STAR
      HPET SECCSD LH43STAR
      MCFG SECCSD LH43STAR
      SLIC SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      ASF! SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      SSDT SECCSD PtidDevc
      UEFI SECCSD LH43STAR
      UEFI SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      SSDT SECCSD PtidDevc
      UEFI SECCSD LH43STAR
    The sticker is Windows 7 Home Premium OA. 
    Sunday, December 18, 2011 6:07 PM
  • "Berwick Chasehome" wrote in message news:4a59a4ca-7efb-4b28-a5a8-234afbc8c0d4...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-8V4TV-RHTJD-K8JVB
    Windows Product Key Hash: eyilj6YchQ2N1Om4y7uqbKqVbjQ=
    Windows Product ID: 00359-OEM-9819177-44287
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {26810404-13E9-4ABF-B52C-593697920B9E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error: T:20111218110410492-
     
     
    Other data-->
    SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>700Z3A/700Z4A/700Z5A/700Z5B</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies Ltd.</Manufacturer><Version>02FD</Version><SMBIOSVersion major="2" minor="6"/><Date>20110903000000.000000+000</Date></BIOS
     
    Licensing Data-->
    Software licensing service version: 6.1.7601.17514
    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: K8JVB
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 5
    Trusted time: 12/18/2011 11:46:55 AM
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A8
     
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      SLIC SECCSD LH43STAR
     
    The sticker is Windows 7 Home Premium OA.
     
    You have a Trusted Store Tamper.
    Have you installed any new programs or drivers in the past few days (or say 3 days before first getting the notification)?
     
    If so, then try uninstalling it, and see if that helps.
    Otherwise it can be very difficult to isolate what’s actually causing such problems – you can try using a Clean Boot, and see if that helps, then slowly add back the various disabled services and startup items until you get one that fails.
     
    This can also be caused by malware – so make sure that your AV is up to date, and run a full system scan. Also try using Malwarebytes Anti-Malware (free version) as a scanner -  do NOT enable the real-time protection trial, as it may interfere with your AV.
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 6:31 PM
    Moderator
  • Yes I've installed a few programs... do I just need to uninstall from the control panel, or is there a more complete method I need to do? Thank you for your help... at least I now know that I was the source of the problem.
    Sunday, December 18, 2011 6:47 PM
  • "Berwick Chasehome" wrote in message news:2212328e-384c-4aa5-8e7d-b38dd84187f7...
    Yes I've installed a few programs... do I just need to uninstall from the control panel, or is there a more complete method I need to do? Thank you for your help... at least I now know that I was the source of the problem.
     
    Uninstalling from the control panel, or using the program’s own uninstaller should do the trick.
    The only exception would be an Anti-Virus – you should first uninstall using the CP, then download and run the manufacturer’s removal tool.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 7:42 PM
    Moderator
  • You can use system restore to recover to a time before the installations.
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Sunday, December 18, 2011 8:11 PM
    Answerer
  • "Cbarnhorst" wrote in message news:191eac09-b06f-4223-a896-ed06af4c695a...
    You can use system restore to recover to a time before the installations.
    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
     
    Not the best thing – but it may help, if there are residuals left behind.
    The *best* is always to use the uninstaller first.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 8:20 PM
    Moderator
  • Just to note, I have Trend Micro Titanium AV, and I ran TWO full scans and it picked up on nothing. I'm also currently running the Malwarebytes scan, but it hasn't recognized anything and it's mostly done. 

     

    Unfortunately I had no system restore or anything (never turned on...) but I have one more question in case my attempts to fix my computer fail:


    Will I be able to use the Windows Recovery CD's I made to restore to factory defaults? Would that fix my problem? If so, how should I go about that... Will restoring wipe the hard drive and the virus? Thanks for all your help... I guess I got in over my head with the Trusted Store Tamper http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/windows-7-became-un-activated-after-spyware/6cfc7174-e97e-e011-9b4b-68b599b31bf5?tab=MoreHelp

     

    So, I'm prepared to lose all my data, but only if I Windows will act normally after reinstallation. Do you think that will be the case?

     

    Thank you.

    Sunday, December 18, 2011 9:51 PM
  • A System Recovery using hte manufacturer's media should certainly fix the problem - but I don't believe it should be necessary.

     

    What other Anti-Viruses have EVER been installed on this machine (including any pre-installed by the OEM but never activated)?

    WHen you uninstalled them, did you also run the AV manufacturer's removal tool (even for a version upgrade of the same AV)?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 9:59 PM
    Moderator
  • Okay, at least I have a last resort.

     

    I believe a Norton trial was preinstalled, but I immediately uninstalled using control panel, and later (probably a month ago) found those files and used it's removal tool to remove it. 

     

    Also, how extensive is this Trusted Store Tamper go? Would it be a bad idea to back up my (known to be safe) files? -not that I necessarily need them-

     

    Edit: The Malwarebytes scan has finished... No errors. Here is the log:

     

    Malwarebytes' Anti-Malware 1.51.2.1300

    www.malwarebytes.org

     

    Database version: 7622

     

    Windows 6.1.7601 Service Pack 1

    Internet Explorer 9.0.8112.16421

     

    12/18/2011 4:26:52 PM

    mbam-log-2011-12-18 (16-26-52).txt

     

    Scan type: Full scan (C:\|D:\|)

    Objects scanned: 300592

    Time elapsed: 44 minute(s), 7 second(s)

     

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

     

    Memory Processes Infected:

    (No malicious items detected)

     

    Memory Modules Infected:

    (No malicious items detected)

     

    Registry Keys Infected:

    (No malicious items detected)

     

    Registry Values Infected:

    (No malicious items detected)

     

    Registry Data Items Infected:

    (No malicious items detected)

     

    Folders Infected:

    (No malicious items detected)

     

    Files Infected:

    (No malicious items detected)


    Sunday, December 18, 2011 10:10 PM
  • "Berwick Chasehome" wrote in message news:c4b7331a-134a-4559-a76e-795f05132249...

    Okay, at least I have a last resort.

     

    I believe a Norton trial was preinstalled, but I immediately uninstalled using control panel, and later (probably a month ago) found those files and used it's removal tool to remove it.

     

    Also, how extensive is this Trusted Store Tamper go? Would it be a bad idea to back up my (known to be safe) files? -not that I necessarily need them-

    So long as you ran the SymNRT tool it should be OK then – Norton in renowned for having nasty effects on subsequent AV’s if not.
     
    Quite often the problem is simply a badly-written driver or program that overwrites something it shouldn’t, or blocks system access to something – MS don’t publicize exactly what constitutes a Trusted store Tamper, for obvious reasons.
    There is very little chance of any widespread effects – but backups are always a good idea, even if the system is running perfectly.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 10:29 PM
    Moderator
  • Grr, nothing can stop this thing. I followed your instructions for this guy :  http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/windows-7-became-un-activated-after-spyware/6cfc7174-e97e-e011-9b4b-68b599b31bf5?tab=AllReplies#tabs

     

    and so I ran the scan, but command prompt tells me: "Windows Resource Protection did not find any integrity violations."

     

    The Malware Scan reported nothing, neither did Trend! Do you have any further instructions, or is it necessary to completely wipe windows? :(

    Sunday, December 18, 2011 10:57 PM
  • "Berwick Chasehome" wrote in message news:a83dc638-2b52-415b-9199-e033f9481f0f...

    Grr, nothing can stop this thing. I followed your instructions for this guy :  http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/windows-7-became-un-activated-after-spyware/6cfc7174-e97e-e011-9b4b-68b599b31bf5?tab=AllReplies#tabs

     

    and so I ran the scan, but command prompt tells me: "Windows Resource Protection did not find any integrity violations."

     

    The Malware Scan reported nothing, neither did Trend! Do you have any further instructions, or is it necessary to completely wipe windows? :(

    Have you tried working back through your installs for the past few days, uninstalling as you go?
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, December 18, 2011 11:37 PM
    Moderator
  • Yes, unfortunately. The most recent install (except Malwarebytes) is from December 6, which is Calibre (ereader software.) 

     

    And I even deleted any files I had downloaded recently, because I no longer needed them. Honestly, I'm at a loss as to what to do anymore. Could the problem not be installed at all, but rather be hiding in some file somewhere?

    Sunday, December 18, 2011 11:52 PM
  • "Berwick Chasehome" wrote in message news:7e5372e9-49ee-4d53-87fc-0054a2eada31...

    Yes, unfortunately. The most recent install (except Malwarebytes) is from December 6, which is Calibre (ereader software.)

     

    And I even deleted any files I had downloaded recently, because I no longer needed them. Honestly, I'm at a loss as to what to do anymore. Could the problem not be installed at all, but rather be hiding in some file somewhere?

    I don’t *think* so – but if you can do a System Restore back to the 6th, it would reduce chances of it being something hiding in the registry.
     
    After that (if it fails to resolve the problem), then possibly either a Repair install, or a System Recovery would be a good idea – back up your data to external storage in either case.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, December 19, 2011 12:02 AM
    Moderator
  • For some reason my system restore was turned off, so I cannot use that feature :(

     

    I have resigned myself to restoring my entire system. At least I'll be more careful in the future. 

     

    Thank you for all your help. Even if it didn't come to fruition, at least I understand that people are willing to help. 

     

    Edit: What exactly should have happened as I unistalled the possible file with the Trusted Store Tamper? Should the "This copy of Windows is not genuine" have gone away, or should I have tried to validate it, or what?

     

    Edit #2: Holy moly, I tried activating on the windows website, and now the thing in the corner has gone away. Moreover, I ran the "Activate Windows" app, and It says my copy is validated! So that solves that problem! But should there be anything else I need to do, I have noticed my computer has sped up. Thanks so much for you help, you're a genius!

    Monday, December 19, 2011 12:05 AM
  • "Berwick Chasehome" wrote in message news:0e51c0b6-6fed-4209-b9ea-0d9050425d68...

    For some reason my system restore was turned off, so I cannot use that feature :(

     

    I have resigned myself to restoring my entire system. At least I'll be more careful in the future.

     

    Thank you for all your help. Even if it didn't come to fruition, at least I understand that people are willing to help.

     

    Edit: What exactly should have happened as I unistalled the possible file with the Trusted Store Tamper? Should the "This copy of Windows is not genuine" have gone away, or should I have tried to validate it, or what?

     

    Edit #2: Holy moly, I tried activating on the windows website, and now the thing in the corner has gone away. Moreover, I ran the "Activate Windows" app, and It says my copy is validated! So that solves that problem! But should there be anything else I need to do, I have noticed my computer has sped up. Thanks so much for you help, you're a genius!

    Heh! – don’t celebrate yet.
    Please post a new MGADiag report so that we can check the details (it may even tell us what actually fixed it)
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, December 19, 2011 12:54 AM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8V4TV-RHTJD-K8JVB
    Windows Product Key Hash: eyilj6YchQ2N1Om4y7uqbKqVbjQ=
    Windows Product ID: 00359-OEM-9819177-44287
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {26810404-13E9-4ABF-B52C-593697920B9E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error: T:20111218110410492-
    Validation Diagnostic: 
    Resolution Status: N/A
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Ryan\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    File Scan Data-->
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{26810404-13E9-4ABF-B52C-593697920B9E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-K8JVB</PKey><PID>00359-OEM-9819177-44287</PID><PIDType>8</PIDType><SID>S-1-5-21-2067460848-1491120777-1853505066</SID><SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>700Z3A/700Z4A/700Z5A/700Z5B</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies Ltd.</Manufacturer><Version>02FD</Version><SMBIOSVersion major="2" minor="6"/><Date>20110903000000.000000+000</Date></BIOS><HWID>5B593B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>SECCSD</OEMID><OEMTableID>LH43STAR</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    Spsys.log Content: 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
    Licensing Data-->
    Software licensing service version: 6.1.7601.17514
    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00196-191-744287-02-1033-7601.0000-3522011
    Installation ID: 018415416614511413800253612003058362946232201485555962
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: K8JVB
    License Status: Licensed
    Remaining Windows rearm count: 5
    Trusted time: 12/18/2011 7:26:40 PM
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:18:2011 18:35
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    HWID Data-->
    HWID Hash Current: NAAAAAIAAQABAAIAAAABAAAABAABAAEAonYc1XcWRL2APkjk/DhSVTKbGo6MO+31hmYucw==
    OEM Activation 1.0 Data-->
    N/A
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC SECCSD LH43STAR
      FACP SECCSD LH43STAR
      HPET SECCSD LH43STAR
      MCFG SECCSD LH43STAR
      SLIC SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      ASF! SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      SSDT SECCSD PtidDevc
      UEFI SECCSD LH43STAR
      UEFI SECCSD LH43STAR
      SSDT SECCSD PtidDevc
      SSDT SECCSD PtidDevc
      UEFI SECCSD LH43STAR
    Please be fixed :D
    Monday, December 19, 2011 1:26 AM
  • "Berwick Chasehome" wrote in message news:94d69088-6c52-454e-81cb-83e00cdce955...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8V4TV-RHTJD-K8JVB
    Windows Product Key Hash: eyilj6YchQ2N1Om4y7uqbKqVbjQ=
    Windows Product ID: 00359-OEM-9819177-44287
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {26810404-13E9-4ABF-B52C-593697920B9E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error: T:20111218110410492-
     
    Other data-->
    SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>700Z3A/700Z4A/700Z5A/700Z5B</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies Ltd.</Manufacturer><Version>02FD</Version><SMBIOSVersion major="2" minor="6"/><Date>20110903000000.000000+000</Date></BIOS
     
    Licensing Data-->
    Software licensing service version: 6.1.7601.17514
    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: K8JVB
    License Status: Licensed
    Remaining Windows rearm count: 5
    Trusted time: 12/18/2011 7:26:40 PM
    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 12:18:2011 18:35
     
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
     
    Please be fixed :D
     
     
    Looks good to me.
    Note the timestamp I’ve highlighted – it displays the time (usually) of the last boot at which the Tamper was present.
    20111218110410492
    2011 Dec 18 11:04
    Interestingly, that’s the exact same time as the one in your first report.
    I can’t swear to it, but it’s quite possible that running the MGADiag actually fixed the Tamper the first time around (it does have some repair capability) but did not properly reset the flag.
     
    Whatever – it looks like you’re good to go.
    I’d reinstall anything you uninstalled, and run an MGADiag report after a reboot on each install – see if the Tamper stamp changes. If it does, then you may have found the cause of the problem.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, December 19, 2011 1:45 AM
    Moderator
  • Thank you so much, you're a lifesaver! That is an interesting quark...

     

    Ah, whatever I uninstalled was just like Peggle (a game) and other useless software. I'll just stay away from it. Thanks again!

    Monday, December 19, 2011 1:54 AM
  • "Berwick Chasehome" wrote in message news:4db17b56-4187-4f42-a53b-ec7611deb2ba...

    Thank you so much, you're a lifesaver! That is an interesting quark...

     

    Ah, whatever I uninstalled was just like Peggle (a game) and other useless software. I'll just stay away from it. Thanks again!

    Games are often incredibly badly written (especially Java games) and may well have been the cause.
     
    Good Luck!!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, December 19, 2011 9:23 AM
    Moderator