locked
Windows 7 ultimate (64 bit) signal "not genuine" at random. RRS feed

  • Question

  • Dears, it is some time now that my system randomly signal that my installation is not genuine.

    This happened after a problem that I had on my second HDD; on that HDD there is a Linux partition, rescued by reinstalling GRUB.

    Before posting, I cleaned the registry and I do other simple maintenance task. Also tried to remove the KB97103, reinstall and reboot (twice) the system but no luck.

    This is my MDIAG report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-FVFD3-WH867-KG866
    Windows Product Key Hash: RV0SpO2YK0tOgjqW1OSaR0Z2IGA=
    Windows Product ID: 00426-293-6072382-85010
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {95E78920-2AC2-4BDA-9F6D-271A1657270F}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 12\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{95E78920-2AC2-4BDA-9F6D-271A1657270F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KG866</PKey><PID>00426-293-6072382-85010</PID><PIDType>5</PIDType><SID>S-1-5-21-978313371-677906514-2389898809</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0307   </Version><SMBIOSVersion major="2" minor="5"/><Date>20091015000000.000000+000</Date></BIOS><HWID>92473D07018400FA</HWID><UserLCID>0410</UserLCID><SystemLCID>0410</SystemLCID><TimeZone>ora solare Europa occidentale(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Errore di input: Impossibile trovare il file di script "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 7:8:2012 14:09
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAln2moqgY4ms4mFTyEDOoqBwhYj3O7jqLDg+OLg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            101509        APIC0941
      FACP            101509        FACP0941
      HPET            101509        OEMHPET
      MCFG            101509        OEMMCFG
      OEMB            101509        OEMB0941
      SSDT            A M I         POWERNOW

    Tuesday, July 17, 2012 8:19 PM

Answers

  • You probably have the residues of a hacker's Activation Exploit installed -

    download WATFix from here (WATFix ), and use that.

    Be careful and ensure that y ou click on the small link, and not the large button!

    Once you've run it, post back with a new MGADiag report

    Post back with another MGADiag report whichever you do, and we'll then see what we can do.  


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by tmamm Thursday, July 19, 2012 12:56 PM
    Tuesday, July 17, 2012 10:30 PM
    Moderator
  • That looks OK now - you need to activate it.

    First try Internet activation - if that fails, try telephone activation and speak to an operator.


    telephone activation (operator calls)
     Click on the Start button
    in the Search box, type
    SLUI 4
     and hit the Enter key
    follow the instructions, but when asked which service you require by the telephone ansafone, do NOT reply - this should force an operator to respond, who can deal with you 


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by tmamm Thursday, July 19, 2012 12:56 PM
    Wednesday, July 18, 2012 6:01 PM
    Moderator

All replies

  • You probably have the residues of a hacker's Activation Exploit installed -

    download WATFix from here (WATFix ), and use that.

    Be careful and ensure that y ou click on the small link, and not the large button!

    Once you've run it, post back with a new MGADiag report

    Post back with another MGADiag report whichever you do, and we'll then see what we can do.  


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by tmamm Thursday, July 19, 2012 12:56 PM
    Tuesday, July 17, 2012 10:30 PM
    Moderator
  • Dear Noel,

    thanks for the link and the support.

    This is my MGADiag after running the tool:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-FVFD3-WH867-KG866
    Windows Product Key Hash: RV0SpO2YK0tOgjqW1OSaR0Z2IGA=
    Windows Product ID: 00426-293-6072382-85010
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.001
    ID: {95E78920-2AC2-4BDA-9F6D-271A1657270F}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 12\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{95E78920-2AC2-4BDA-9F6D-271A1657270F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KG866</PKey><PID>00426-293-6072382-85010</PID><PIDType>5</PIDType><SID>S-1-5-21-978313371-677906514-2389898809</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0307   </Version><SMBIOSVersion major="2" minor="5"/><Date>20091015000000.000000+000</Date></BIOS><HWID>92473D07018400FA</HWID><UserLCID>0410</UserLCID><SystemLCID>0410</SystemLCID><TimeZone>ora solare Europa occidentale(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Versione servizio di gestione licenze software: 6.1.7601.17514

    Nome: Windows(R) 7, Ultimate edition
    Descrizione: Windows Operating System - Windows(R) 7, RETAIL channel
    ID di attivazioneac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
    ID applicazione: 55c92734-d682-4d71-983e-d6ec3f16059f
    PID esteso: 00426-00170-293-607238-00-1040-7601.0000-2002012
    ID di installazione: 019223401662918935648920036881581975768572582783276093
    URL certificato processore: http://go.microsoft.com/fwlink/?LinkID=88338
    URL certificato computer: http://go.microsoft.com/fwlink/?LinkID=88339
    URL licenza d'uso: http://go.microsoft.com/fwlink/?LinkID=88341
    URL certificato codice "Product Key": http://go.microsoft.com/fwlink/?LinkID=88340
    Codice "Product Key" parziale: KG866
    Stato licenza: concesso in licenza
    Numero di ripristini Windows rimanenti: 3
    Ora attendibile: 18/07/2012 19:29:19

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:8:2012 14:09
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAln2moqgY4ms4mFTyEDOoqBwhYj3O7jqLDg+OLg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   101509  APIC0941
      FACP   101509  FACP0941
      HPET   101509  OEMHPET
      MCFG   101509  OEMMCFG
      OEMB   101509  OEMB0941
      SSDT   A M I   POWERNOW

    Wednesday, July 18, 2012 5:44 PM
  • That looks OK now - you need to activate it.

    First try Internet activation - if that fails, try telephone activation and speak to an operator.


    telephone activation (operator calls)
     Click on the Start button
    in the Search box, type
    SLUI 4
     and hit the Enter key
    follow the instructions, but when asked which service you require by the telephone ansafone, do NOT reply - this should force an operator to respond, who can deal with you 


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by tmamm Thursday, July 19, 2012 12:56 PM
    Wednesday, July 18, 2012 6:01 PM
    Moderator
  • Ok, it work now.

    Thanks for your help.

    GGM.

    Thursday, July 19, 2012 12:56 PM
  • You're welcome - please post a new MGADiag report so that we can check it out.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, July 19, 2012 12:57 PM
    Moderator