locked
This computer is not running genuine windows pop up RRS feed

  • Question

  • I keep getting a pop up on my laptop that says "This computer is not running genuine windows pop up". All critical Microsoft updates have stopped. I completed a diagnostic and got the following results:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Code: 0x8004FE21

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82

    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=

    Windows Product ID: 00359-OEM-8992687-00095

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010300.1.0.003

    ID: {E397D51B-5188-4D98-9759-FC265713E4F8}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: Registered, 1.9.42.0

    Signed By: Microsoft

    Product Name: Windows 7 Home Premium

    Architecture: 0x00000009

    Build lab: 7601.win7sp1_ldr.160902-0600

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    File Mismatch: C:\windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003

    File Mismatch: C:\windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003

    File Mismatch: C:\windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003

    File Mismatch: C:\windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003

    File Mismatch: C:\windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003

    File Mismatch: C:\windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003

    File Mismatch: C:\windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003

    File Mismatch: C:\windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100

    File Mismatch: C:\windows\system32\user32.dll[6.1.7601.23528], Hr = 0x800b0100

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{E397D51B-5188-4D98-9759-FC265713E4F8}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-3039781735-2029895436-1514093590</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 3550</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20110526000000.000000+000</Date></BIOS><HWID>AD013207018400FE</HWID><UserLCID>1809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>WN09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->

    C:\windows\system32\slmgr.vbs(1131, 5) (null): 0xC004F012

    Windows Activation Technologies-->

    HrOffline: 0x8004FE21

    HrOnline: N/A

    HealthStatus: 0x000000000001EFF0

    Event Time Stamp: 3:21:2018 10:40

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppobjs.dll

    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui

    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

    Tampered File: %systemroot%\system32\sppwinob.dll

    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui

    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui

    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui

    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui

    Tampered File: %systemroot%\system32\drivers\spsys.sys

    HWID Data-->

    HWID Hash Current: NAAAAAEAAQABAAIAAAACAAAABAABAAEAJJQg0yRRvDqEvi5YznCWdFgbEoGEJQrKJjgucw==

    OEM Activation 1.0 Data-->

    N/A

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    DELL                       WN09

      FACP                                   DELL                       WN09

      HPET                                    DELL                       WN09

      MCFG                                 DELL                       WN09

      SSDT                                    TrmRef                 PtidDevc

      SLIC                                      DELL                       WN09  

      SSDT                                    TrmRef                 PtidDevc

      SSDT                                    TrmRef                 PtidDevc

      OSFR                                   DELL                       M08   

    Any help in how to resolve this issue would be greatly appreciated.

    Tuesday, March 27, 2018 4:09 PM

Answers

  • First try this.

    Open Windows Explorer and navigate to the C:\Windows\System32 folder. find the Catroot2 folder there, and right-click on it - select Properties.

    In the General tab, clear the box beside 'Read-only (Only.....' by clicking in it until it's empty (it cycles around three values)

    Click Apply.

    Accept any warnings that come up - if you get a 'Ignore/Ignore All/Try again' option, pick 'Ignore all' 

    Once complete (may be almost instantaneous),

    (note that the box will revert back to the 'blob' state - this is normal)

    reboot, and run another MGADiag report.        Post the result


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, March 28, 2018 8:38 AM
    Moderator

All replies

  • First try this.

    Open Windows Explorer and navigate to the C:\Windows\System32 folder. find the Catroot2 folder there, and right-click on it - select Properties.

    In the General tab, clear the box beside 'Read-only (Only.....' by clicking in it until it's empty (it cycles around three values)

    Click Apply.

    Accept any warnings that come up - if you get a 'Ignore/Ignore All/Try again' option, pick 'Ignore all' 

    Once complete (may be almost instantaneous),

    (note that the box will revert back to the 'blob' state - this is normal)

    reboot, and run another MGADiag report.        Post the result


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, March 28, 2018 8:38 AM
    Moderator
  • I thought I had done something wrong with my computer, but now that I have finally found this forum, I see that a whole bunch of other people are having exactly the same problem, at about the same time I started seeing it.  First, I have Windows 7 Pro, 64-bit.  I bought it outright, as the machine had Vista preinstalled, and i did the upgrade two or three years later.  It happens to be a Dell laptop, very old, 9 years now.  But still works okay.  In the past couple of months, I suddenly cannot use my printer nor reinstall it because I don't have sufficient rights.  This happens whether I use the regular account or the admin account.  Then I was unable to apply Windows Updates anymore, which started 3 or more months ago.  Then recently I'm getting a message that this copy of Windows is invalid.  If I follow the link to validate it, there is a message that the page is not available.  If I try testing the key at this website, I get a message that it cannot validate it, and try contacting later.

    All of these queries indicate to me that something systemic has happened.  Are there no Microsoft employees monitoring these boards to catch problem trends, or speak up when there is a solution?  I've only seen one response on this thread so far, that of Mr. Paton above.  Thank you very much sir.  Well, I acknowledge, there is a post from 2011 that had a response, but that 8 year gap is, um, significant.

    I'll try Mr. Paton's instructions.  If anything pertinent has come up since this original posting about 4 weeks ago, please let me know?

    Thanks very much.

    Ed

    Wednesday, April 25, 2018 2:05 PM