Answered by:
Windows 7 build 7601 shows in bottom right hand corner of desktop as not genuine.

Question
-
Hi
I bought my computer about 2 years ago with Windows 7 home premium 64bit pre-installled. It has suddenly come up with this message.
I have run the diagnostic report with the following result.
Please help. Many thanks
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-T3C78-P2WHK-HHXH2
Windows Product Key Hash: ZzK01E0j3uo6FV48NdSILx4MVgY=
Windows Product ID: 00359-OEM-8703334-55672
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {CFBBD726-1D37-4499-94DB-EF611ED65A50}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{CFBBD726-1D37-4499-94DB-EF611ED65A50}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HHXH2</PKey><PID>00359-OEM-8703334-55672</PID><PIDType>3</PIDType><SID>S-1-5-21-2788789940-3457343511-3605309129</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0901 </Version><SMBIOSVersion major="2" minor="6"/><Date>20101029000000.000000+000</Date></BIOS><HWID>E2053007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-033-355672-02-2057-7600.0000-0272011
Installation ID: 021636125576797945400522071472187981288064554283397226
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: HHXH2
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 23/06/2013 19:17:14
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:26:2013 21:55
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: OAAAAAIABgABAAEAAAABAAAAAgABAAEA6GGGR0xncsaAlvpLyt4cv2jWQsYKK/5EMjC0GWBaXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 102910 APIC1416
FACP 102910 FACP1416
HPET 102910 OEMHPET
MCFG 102910 OEMMCFG
OEMB 102910 OEMB1416
OSFR 102910 OEMOSFR
SSDT DpgPmm CpuPm
Sunday, June 23, 2013 6:36 PM
Answers
-
There is no apparent problem in your report - what symptoms are you seeing?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Saturday, June 29, 2013 7:45 PM
- Marked as answer by Noel D PatonModerator Sunday, July 7, 2013 8:33 AM
Tuesday, June 25, 2013 9:04 PMModerator
All replies
-
There is no apparent problem in your report - what symptoms are you seeing?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Saturday, June 29, 2013 7:45 PM
- Marked as answer by Noel D PatonModerator Sunday, July 7, 2013 8:33 AM
Tuesday, June 25, 2013 9:04 PMModerator -
I see.
I first noticed the message appear in the bottom right hand corner of my desktop about 2 weeks ago.
I rebooted my PC and it went away so I didn't think much about it. Then a few days later it suddenly appeared again. My PC is fine when it boots up and the message only seems to appear sporadically - after it's been idle for some time for instance. There does not appear to be any detrimental effect to the performance of the computer.
One thing that did come to mind, and I'm not computer savvy so I'm not sure if this has any relevance but I went into control panel to add an extra language to my keyboard - Greek Polytonic for my studies. I was able to happily type away in Greek. At a later stage I cam across Microsoft language packs. I've not bought these. Do these come with Win7 home premium? Am I supposed to buy these for access to Greek Polytonic?
I have now turned it back off.
As I mentioned the message only comes on from time to time. Perhaps I had ran the report when the message had gone?
If the message appears again I will rerun the report whilst it's on the desktop and post it here.
Thanks
Thursday, June 27, 2013 5:31 PM -
There are two types of Language pack for Windows.
Home Premium already can cope with a number of languages in terms of Keyboards and display, but to change the full Windows experience to another language you need to install the MUI Language packs - which are only available for Ultimate and Enterprise edition.
It's likely that what you are seeing is the result of a race condition, where one or more processes are competing with the Software Protection service for resources. If the Software Protection service doesn't 'win' the race in a reasonable time, then it sulks, and shows the non-genuine notification. A reboot will often fix this.
Main causes of such a race condition are malware or a software conflict usually with an overly-aggressive AV.
What Anti-Virus are you using? What other AV's have EVER been installed on this machine?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Friday, June 28, 2013 8:30 PMModerator -
Thanks for getting back to me.
I am using Kaspersky Anti Virus 2011 and this is the only program I have installed. I renew it with a 2 year licence so it is regularly updated.
Friday, June 28, 2013 9:26 PM -
Kaspersky isn't associated with many problems in these forums - and it is one of the better AV's
You should check what else is running in the background when the notification first comes up - it may give some clues. Unfortunately Event Viewer isn't often of much help here, but it's worth checking anyhow, to see if there's anything to offer a clue.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Saturday, June 29, 2013 7:28 AMModerator -
Sorry long time no post but the issue hasn't cropped up for a while until just now. The PC was in sleep mode. When I came back to it and wiggled the mouse (told you I'm a novice!!) to waken it. there was the message.
I managed to locate event viewer but have absolutely no idea what I'm supposed to do with it. Any tips for a complete novice???
Anyway when the warning message came up I quickly went to run the diagnostic tool ready to post it here when I knew the message was showing. However when I copied the data and went to open up my Firefox browser the "windows not genuine" message had gone!!! What's going on here?? That's in the space of a minute or two.
If this isn't fixed would there be any damage to the machine or security risks? It's not happening all the time but it would be good to get rid of it once and for all.
Many thanks
Tuesday, July 16, 2013 7:28 PM -
Such temporary messages as you seem to be getting are almost impossible to track down (as you've found) as simply looking for them will often clear them, and the very limited repair capability built into the MGADiag tool will often fix them.
Please open Event Viewer
In the left pane, navigate to the Windows Logs
right-click on Applications and select 'Save all events as...' save as Apps.evtx
repeat for the System logs - save as Sys.evtx
Compress both files, and upload to your public SkyDrive, and post a link - I'll see if I can find anything helpful there.
It's unlikely that any damage to the system will occur just from getting these messages, unless they are a symptom of something more widespread such as a malware infestation, or hardware damage.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Thursday, July 18, 2013 2:39 PMModerator -
-
I have a suspicion that Kaspersky is involved here - I would recommend uninstalling it temporarily, and running their cleanup tool http://support.kaspersky.com/common/service.aspx?el=1464
Assuming that Windows is still showing as genuine, install MSE for a while, and see how things go.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Saturday, July 27, 2013 11:31 AMModerator