none
Windows 7 build 7601 shows in bottom right hand corner of desktop as not genuine. RRS feed

  • Question

  • Hi

    I bought my computer about 2 years ago with Windows 7 home premium 64bit pre-installled. It has suddenly come up with this message.

    I have run the diagnostic report with the following result.

    Please help. Many thanks

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-T3C78-P2WHK-HHXH2
    Windows Product Key Hash: ZzK01E0j3uo6FV48NdSILx4MVgY=
    Windows Product ID: 00359-OEM-8703334-55672
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {CFBBD726-1D37-4499-94DB-EF611ED65A50}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130318-1533
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{CFBBD726-1D37-4499-94DB-EF611ED65A50}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HHXH2</PKey><PID>00359-OEM-8703334-55672</PID><PIDType>3</PIDType><SID>S-1-5-21-2788789940-3457343511-3605309129</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0901   </Version><SMBIOSVersion major="2" minor="6"/><Date>20101029000000.000000+000</Date></BIOS><HWID>E2053007018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00174-033-355672-02-2057-7600.0000-0272011
    Installation ID: 021636125576797945400522071472187981288064554283397226
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: HHXH2
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 23/06/2013 19:17:14

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:26:2013 21:55
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: OAAAAAIABgABAAEAAAABAAAAAgABAAEA6GGGR0xncsaAlvpLyt4cv2jWQsYKK/5EMjC0GWBaXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            102910        APIC1416
      FACP            102910        FACP1416
      HPET            102910        OEMHPET
      MCFG            102910        OEMMCFG
      OEMB            102910        OEMB1416
      OSFR            102910        OEMOSFR
      SSDT            DpgPmm        CpuPm

    Sunday, June 23, 2013 6:36 PM

Answers

All replies

  • There is no apparent problem in your report - what symptoms are you seeing?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, June 25, 2013 9:04 PM
    Moderator
  • I see.

    I first noticed the message appear in the bottom right hand corner of my desktop about 2 weeks ago.

    I rebooted my PC and it went away so I didn't think much about it. Then a few days later it suddenly appeared again. My PC is fine when it boots up and the message only seems to appear sporadically - after it's been idle for some time for instance. There does not appear to be any detrimental effect to the performance of the computer.

    One thing that did come to mind, and I'm not computer savvy so I'm not sure if this has any relevance but I went into control panel to add an extra language to my keyboard - Greek Polytonic for my studies. I was able to happily type away in Greek. At a later stage I cam across Microsoft language packs. I've not bought these. Do these come with Win7 home premium? Am I supposed to buy these for access to Greek Polytonic?

    I have now turned it back off.

    As I mentioned the message only comes on from time to time. Perhaps I had ran the report when the message had gone?

    If the message appears again I will rerun the report whilst it's on the desktop and post it here.

    Thanks

    Thursday, June 27, 2013 5:31 PM
  • There are two types of Language pack for Windows.

    Home Premium already can cope with a number of languages in terms of Keyboards and display, but to change the full Windows experience to another language you need to install the MUI Language packs - which are only available for Ultimate and Enterprise edition.

    It's likely that what you are seeing is the result of a race condition, where one or more processes are competing with the Software Protection service for resources. If the Software Protection service doesn't 'win' the race in a reasonable time, then it sulks, and shows the non-genuine notification. A reboot will often fix this.

    Main causes of such a race condition are malware or a software conflict usually with an overly-aggressive AV.

    What Anti-Virus are you using? What other AV's have EVER been installed on this machine?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, June 28, 2013 8:30 PM
    Moderator
  • Thanks for getting back to me.

    I am using Kaspersky Anti Virus 2011 and this is the only program I have installed. I renew it with a 2 year licence so it is regularly updated.

     
    Friday, June 28, 2013 9:26 PM
  • Kaspersky isn't associated with many problems in these forums - and it is one of the better AV's

    You should check what else is running in the background when the notification first comes up - it may give some clues. Unfortunately Event Viewer isn't often of much help here, but it's worth checking anyhow, to see if there's anything to offer a clue.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, June 29, 2013 7:28 AM
    Moderator
  • Sorry long time no post but the issue hasn't cropped up  for a while until just now.  The PC was in sleep mode. When I came back to it and wiggled the mouse (told you I'm a novice!!) to waken it. there was the message.

    I managed to locate event viewer but have absolutely no idea what I'm supposed to do with it. Any tips for a complete novice???

    Anyway when the warning message came up I quickly went to run the diagnostic tool ready to post it here when I knew the message was showing. However when I copied the data and went to open up my Firefox browser the "windows not genuine" message had gone!!! What's going on here?? That's in the space of a minute or two.

    If this isn't fixed would there be any damage to the machine or security risks? It's not happening all the time but it would be good to get rid of it once and for all.

    Many thanks

    Tuesday, July 16, 2013 7:28 PM
  • Such temporary messages as you seem to be getting are almost impossible to track down (as you've found) as simply looking for them will often clear them, and the very limited repair capability built into the MGADiag tool will often fix them.

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and upload to your public SkyDrive, and post a link - I'll see if I can find anything helpful there.

    It's unlikely that any damage to the system will occur just from getting these messages, unless they are a symptom of something more widespread such as a malware infestation, or hardware damage.



    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, July 18, 2013 2:39 PM
    Moderator
  • Hi Noel

    Please find link for my two logs as requested

    https://skydrive.live.com/#cid=2A04968C86A3DABD&id=2A04968C86A3DABD!105

    Thanks

    Thursday, July 25, 2013 3:57 PM
  • I have a suspicion that Kaspersky is involved here - I would recommend uninstalling it temporarily, and running their cleanup tool http://support.kaspersky.com/common/service.aspx?el=1464

    Assuming that Windows is still showing as genuine, install MSE for a while, and see how things go.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, July 27, 2013 11:31 AM
    Moderator