Windows Vista (TM) build 6002 Not Genuine

All replies

• 

  

  0

  Sign in to vote

  BIOS valid for OA 2.0: no, invalid SLIC table

   

  The problem appears to be in the Licensing Store - please try the following.....

   

  Recreate the Licensing Store with the correct data.

   

  1) Open an Internet Browser window.

  2) Type: %windir%\system32 into the browser address bar.

  3) Find the file CMD.exe

  4) Right-Click on CMD.exe and select 'Run as Administrator'

  5) Type: net stop slsvc (it may ask you if you are sure, select yes)

  6) Type: cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing

  7) Type: rename tokens.dat tokens.bar

  8) Type: cd %windir%\system32

  9) Type: net start slsvc

  10) Type: cscript slmgr.vbs -rilc (It may take a long time for this to complete, please be patient)

  11) Restart your computer twice. 

   

  You may be asked to enter your COA Key and/or Activate. – if asked for the Key, use the one on your COA sticker on the machine’s case (you may need to activate by telephone).  

   

  Once complete, run another MGADiag report and post back with the results.     

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Saturday, March 23, 2013 6:03 PM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for the reply, I tried it but I had an issue. I'm not very good with these sort of things. Here is what the cmd said

  http://i47.tinypic.com/oaua9k.jpg
  

  What shall I do? Thanks very much again for the reply.

  
  After I did this a message popped up saying I did something unauthorised and that I need to reinstall the windows vista disc. I don't know if I have the disc anymore 

  • Edited by AlyssaHolley Sunday, March 24, 2013 12:40 AM

  Sunday, March 24, 2013 12:19 AM
• 

  

  0

  Sign in to vote

  The screenshot you posted shows an error that usually occurs if someone has already tried that fix sometime in the past.

  try it again, this time using the following command #7, instead of the one ablove

  7) Type: rename tokens.dat tokens.bar3

  (hopefully this should work - if not, change the 'bar3' to a different number, and try again.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, March 24, 2013 12:50 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks again for your reply Noel, I tried this but it states "The system cannot find the file specified."

  Sorry if I'm doing something wrong, it's just so annoying considering I paid to get vista in the first place and I don't want to pay more for someone to fix it. 
  
  :)

  Sunday, March 24, 2013 1:33 AM
• 

  

  0

  Sign in to vote

  Not a problem :)

  That error indicated that there is a problem with one of the services involved -

     Please run the following command from an Elevated Command Prompt window(1)

   

  Copy and paste set of commands below into the window – once completed, hit the Enter Key to ensure that the last command has run (2)

   

  REG QUERY HKU

  REG QUERY HKU\S-1-5-20

  REG QUERY HKU\S-1-5-20\Environment

  REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20"

  REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

   

  Copy the whole output to your response(3)     

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, March 24, 2013 7:52 AM

  Moderator
• 

  

  0

  Sign in to vote

  Microsoft Windows [Version 6.0.6002]
  Copyright (c) 2006 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>REG QUERY HKU
  
  HKEY_USERS\.DEFAULT
  HKEY_USERS\S-1-5-19
  HKEY_USERS\S-1-5-20
  HKEY_USERS\S-1-5-21-3893134469-106959788-1925021397-1000
  HKEY_USERS\S-1-5-21-3893134469-106959788-1925021397-1000_Classes
  HKEY_USERS\S-1-5-18
  
  C:\Windows\system32>REG QUERY HKU\S-1-5-20
  
  HKEY_USERS\S-1-5-20\AppEvents
  HKEY_USERS\S-1-5-20\Console
  HKEY_USERS\S-1-5-20\Control Panel
  HKEY_USERS\S-1-5-20\Environment
  HKEY_USERS\S-1-5-20\EUDC
  HKEY_USERS\S-1-5-20\Keyboard Layout
  HKEY_USERS\S-1-5-20\Network
  HKEY_USERS\S-1-5-20\Printers
  HKEY_USERS\S-1-5-20\Software
  
  C:\Windows\system32>REG QUERY HKU\S-1-5-20\Environment
  
  HKEY_USERS\S-1-5-20\Environment
      TEMP    REG_EXPAND_SZ    %USERPROFILE%\AppData\Local\Temp
      TMP    REG_EXPAND_SZ    %USERPROFILE%\AppData\Local\Temp
  
  
  C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
  \ProfileList\S-1-5-20"
  
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
  5-20
      ProfileImagePath    REG_EXPAND_SZ    %SystemRoot%\ServiceProfiles\NetworkSer
  vice
      Flags    REG_DWORD    0x0
      State    REG_DWORD    0x0
  
  
  C:\Windows\system32>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
  \ProfileList"
  
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
      ProfilesDirectory    REG_EXPAND_SZ    %SystemDrive%\Users
      Default    REG_EXPAND_SZ    %SystemDrive%\Users\Default
      Public    REG_EXPAND_SZ    %SystemDrive%\Users\Public
      ProgramData    REG_EXPAND_SZ    %SystemDrive%\ProgramData
  
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
  5-18
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
  5-19
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
  5-20
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
  5-21-3893134469-106959788-1925021397-1000
  
  C:\Windows\system32>

  Thank you again

  Sunday, March 24, 2013 8:31 PM
• 

  

  0

  Sign in to vote

  Since I turmed it on today, red box pop up keeps coming up saying I must reinstall windows :/

  Sunday, March 24, 2013 8:38 PM
• 

  

  0

  Sign in to vote

  It's not unusual when you get certain causes of non-genuine status.

  Please run a full CHKDSK and SFC scan....

   

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  CHKDSK C: /R

   

  and hit the Enter key.

  You will be told that the drive is locked,

  and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

   

  The CHKDSK will take a few hours depending on the size of the drive, so be patient!

   

  After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

  then run the SFC.

   

  SFC -System File Checker - Instructions

  Click on Start > All Programs > Accessories

  Right-click on the Command Prompt entry

  Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

   

  At the Command prompt, type

   

  SFC /SCANNOW

   

  and hit the Enter key

   

  Wait for the scan to finish - make a note of any error messages - and then reboot.

   

   

  Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

   

  Post a new MGADiag report with details of any error messages encountered.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Sunday, March 24, 2013 8:42 PM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks again Noel, I appreciate your help. Here is the diagnostic report:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  Validation Status: Invalid License
  Validation Code: 50
  Cached Online Validation Code: N/A, hr = 0xc004f012
  Windows Product Key: *****-*****-GD2PK-BD3R2-44MV3
  Windows Product Key Hash: f7FPE6g/CLFmnJ4E6GbEU9Xn1sA=
  Windows Product ID: 89572-OEM-7332166-00021
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.0.6002.2.00010300.2.0.002
  ID: {847F6C39-9619-4F9E-AAEB-95701F03A2EA}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows Vista (TM) Home Basic
  Architecture: 0x00000000
  Build lab: 6002.vistasp2_gdr.130104-1437
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\Lissa\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{847F6C39-9619-4F9E-AAEB-95701F03A2EA}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-44MV3</PKey><PID>89572-OEM-7332166-00021</PID><PIDType>2</PIDType><SID>S-1-5-21-3893134469-106959788-1925021397</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>SLIC-MPC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.03</Version><SMBIOSVersion major="2" minor="4"/><Date>20090323000000.000000+000</Date></BIOS><HWID>03303507018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>7480B9502DF0D86</Val><Hash>oYWOW5ayFE3pZ+jvTpuXYsY64JE=</Hash><Pid>89388-707-8722531-65211</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  Software licensing service version: 6.0.6002.18005
  
  Windows Activation Technologies-->
  N/A
  
  HWID Data-->
  HWID Hash Current: NAAAAAEAAgABAAIAAQABAAAAAwABAAEAeqjuyVaKvOx6f8zw9mXWFfL0+H6w9hQkrFZGyg==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: no, invalid SLIC table
  Windows marker version: N/A
  OEMID and OEMTableID Consistent: N/A
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC HPQOEM SLIC-MPC
    FACP HPQOEM SLIC-MPC
    HPET HPQOEM SLIC-MPC
    BOOT HPQOEM SLIC-MPC
    MCFG HPQOEM SLIC-MPC
    ASF! HPQOEM SLIC-MPC
    SLIC HPQOEM SLIC-MPC
    SSDT PmRef CpuPm
  
  

  And here is the sky drive report: http://sdrv.ms/11ADL77

  Thanks again :)

  Sunday, March 24, 2013 11:10 PM
• 

  

  0

  Sign in to vote

  There is just a single error present in the SFC scan - which has no relevance (and shouldn't be checked in the first place, in my opinion!)

  	Line 263667: 2013-03-24 22:59:55, Info                  CSI    000001ec [SR] Repairing 1 components
  	Line 263668: 2013-03-24 22:59:55, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
  	Line 263671: 2013-03-24 22:59:55, Info                  CSI    000001ef [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
  

  There are some older errors present in the normal CBS log - but the latest of those is 10 days old, and relates to an IE 9 update.

  Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

  (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

   

  Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

  The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

   

  Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Monday, March 25, 2013 7:33 AM

  Moderator
• 

  

  0

  Sign in to vote

  http://sdrv.ms/16WiBk7

  http://sdrv.ms/16WiC7F

  Thanks again for your help sorry for the late reply.  :)

  Tuesday, March 26, 2013 8:45 PM
• 

  

  0

  Sign in to vote

  No problem - I'm not planning on going anywhere :)

  The CheckSUR results are clear - so we just have to worry about the SFC error, an the other CBS log problems....

  I am 99.9% certain that we can ignore the settings.ini error from the SFC report - it's likely to come back almost immediately anyhow. The problem is that 0.1%  - which is that the problem could be malware-related.

  Before I go about doing all sorts of 'wonderful' things, lets see if something fairly simple is the problem....

  Open Windows Explorer (Computer)

  Navigate to the C:\Windows folder

  Find the System32 sub-folder and right-click on it

  select Properties

   

  Clear the 'blob' from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.

  Click on Apply.

   

  Make sure that the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.

   

  Accept the Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.

   

  Wait for it to finish - it could take a couple of minutes.

   

  OK out, and exit Windows Explorer.

   

  Reboot twice

   

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonEditor Tuesday, April 2, 2013 11:38 PM
  • Marked as answer by Noel D PatonEditor Wednesday, April 10, 2013 12:26 PM

  Tuesday, March 26, 2013 9:09 PM

  Moderator
• 

  

  0

  Sign in to vote

  Hi, just did it but it is still popping up saying my windows isn't genuine. do you need another report?

  Tuesday, March 26, 2013 9:44 PM
• 

  

  0

  Sign in to vote

  Yes please - it may show some differences.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, March 26, 2013 9:52 PM

  Moderator
• 

  

  0

  Sign in to vote

  Anything further, Alyssa?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
  No - I do not work for Microsoft, or any of its contractors.

  Friday, March 29, 2013 12:27 PM

  Moderator