locked
Windows 7 Build 7601, This copy is not genuine message RRS feed

  • Question

  • This Windows message popped up in the lower right corner of my Dell Inspiron 1525, but after a lot of fiddling around, it went away.  However, the machine is running incredibly slowly and acting badly with frequent video lockups, freezes, etc., over the past 3 days, prior to the message appearing, today. 

    Trying to do things like a Windows backup, and a freeware backup all result in chugging along very slowly for awhile and then failure to complete.

    The only thing downloaded and installed at approximately the time the trouble started was TurboTax 2012 update (from the Intuit website); but, that has been uninstalled after we started having this problem.  The uninstall resulted in no improvement in performance.

    The machine is running Trend Micro Titanium Internet Security 2012, with latest updates.  It took several tries and an overnight run to get Trend to scan.  The scan came up clean.  Trend's RUBotted is also (and has been for months) running in the background and shows no problems.

    After reading many of these similar posts, I knew that you would want an MGADiag report so it follows.  One note is that the Diag was downloaded by and ran quickly and fine on the Netbook on which I'm typing this.  I transferred the downloaded .exe to the Dell, installed, ran and it kept "Not Responding" after churning for many minutes. Finally, I did a forced shutdown (wouldn't do a regular shutdown) and came back up in Safe Mode. The Diag then ran. 

    Any help would be greatly appreciated.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0x8007043c
    Windows Product Key: *****-*****-8VDDH-98HJY-7GPK3
    Windows Product Key Hash: vyW/fcQoRcxgMkxpFwxnbYLb0q0=
    Windows Product ID: 00359-034-0559414-85465
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {A36D174C-0316-47AE-A1DB-7B8487CBB84E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Plus 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings:
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Prompt
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Prompt
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A36D174C-0316-47AE-A1DB-7B8487CBB84E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7GPK3</PKey><PID>00359-034-0559414-85465</PID><PIDType>5</PIDType><SID>S-1-5-21-3822975605-836425097-235854842</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1525                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A16</Version><SMBIOSVersion major="2" minor="4"/><Date>20081016000000.000000+000</Date></BIOS><HWID>A58A3807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central America Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3EEDB94C840CD86</Val><Hash>wtnQOz5v2dY33zx3+CJo3HOPfPY=</Hash><Pid>89409-707-0103971-65634</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
    Error: 0x8007043C

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 9:27:2012 13:47
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Not Registered - 0x8007043c
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NgAAAAEABwABAAMAAAAAAAAAAAABAAEAeqhiDXoQCiUGDGzMRoPAsmw8tsDWsM5wlPsGpCqF

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          M08    
      FACP            DELL          M08    
      HPET            DELL          M08    
      BOOT            DELL          M08    
      MCFG            DELL          M08    
      SLIC            DELL          M08    
      OSFR            DELL          M08    
      SSDT            PmRef        CpuPm

    Thursday, November 22, 2012 4:26 PM

Answers

  • In that case you may have major problems - I've never known MGADiag fail before.

    What Anti-Virus are you using?

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by rengewwj Friday, November 23, 2012 7:05 PM
    Friday, November 23, 2012 7:11 AM
    Moderator

All replies

  • You appear to have run that report while in Safe Mode.

    Such reports miss a LOT of detail.

    Having said that, please try the following....

    This may simply be caused by a bad set of Intel Rapid Storage Technology drivers -  

     

    Installing the Intel Rapid Storage Drivers

    try downloading and installing them from here - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=21730

     

    (you want the iata_enu.exe download)

     

    Once complete, please reboot twice, then post another MGADiag report.   


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, November 22, 2012 9:00 PM
    Moderator
  • Thanks for the reply.

    Downloaded the iata_enu.exe, ran it, and got a message "This computer does not meet the minimum requirements for installing the software."

    I noticed on the download site that Windows 7 was not listed as one of the OS's listed for this specific exe.

    Also, please note above that we were unable to get the MGADiag to run in regular Windows mode.  It would sit with the little animated "working" circle spinning for quite awhile and then the "Not Responding" would show up in the header bar.  We tried 3 times before giving up and going to Safe Mode.

    Any ideas?

    Friday, November 23, 2012 2:42 AM
  • In that case you may have major problems - I've never known MGADiag fail before.

    What Anti-Virus are you using?

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    • Marked as answer by rengewwj Friday, November 23, 2012 7:05 PM
    Friday, November 23, 2012 7:11 AM
    Moderator
  • Thanks again.

    Anti-virus software is Trend Titanium 2012; and Trend RUBotted.  Both have been installed and running for months.  Neither shows any problem.

    Ran both CHKDSK and SFC per your instructions.  Messages were:

    During the Chkdsk run:

    after the USN Journal Verification is completed ...

    "chkdsk is verifying file data (stage 4 of 5)"
    "windows replaced bad clusters in the file 105110"
    "of name \windows\system32\DRIVER~1\FILERE~1\igdlh6~1.inf\ig41cd64.dll."

    windows replaced bad clusters in the file 313040
    of name \windows\system32\catroot\{F750E~1\PA58D3~1.CAT
      392688 files processed.

    At the end of the SFC scan:

    "Windows resource protection did not find any integrity violations."

    The CBS log is posted on the Skydrive at:

    https://skydrive.live.com/#cid=DB19013B11FE6600&id=DB19013B11FE6600!105

    The MGADiag, run in regular Windows mode, ran fine for the first time.  The report is:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-8VDDH-98HJY-7GPK3
    Windows Product Key Hash: vyW/fcQoRcxgMkxpFwxnbYLb0q0=
    Windows Product ID: 00359-034-0559414-85465
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {A36D174C-0316-47AE-A1DB-7B8487CBB84E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Plus 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings:
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Prompt
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Prompt
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A36D174C-0316-47AE-A1DB-7B8487CBB84E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7GPK3</PKey><PID>00359-034-0559414-85465</PID><PIDType>5</PIDType><SID>S-1-5-21-3822975605-836425097-235854842</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1525                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A16</Version><SMBIOSVersion major="2" minor="4"/><Date>20081016000000.000000+000</Date></BIOS><HWID>A58A3807018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central America Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>3EEDB94C840CD86</Val><Hash>wtnQOz5v2dY33zx3+CJo3HOPfPY=</Hash><Pid>89409-707-0103971-65634</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00170-034-055941-01-1033-7600.0000-2662010
    Installation ID: 014641974604513025723365969425908496235823764484163403
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 7GPK3
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 11/23/2012 11:03:01 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:22:2012 20:05
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: PgAAAAEABwABAAMAAAACAAAAAgABAAEAeqhiDXoQCiUGDGzMRoPAsmw8tsDWsM5wlPsGpPBIovFUP5hvKoU=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          M08    
      FACP            DELL          M08    
      HPET            DELL          M08    
      BOOT            DELL          M08    
      MCFG            DELL          M08    
      SLIC            DELL          M08    
      OSFR            DELL          M08    
      SSDT            PmRef        CpuPm

    Thank you.

    Friday, November 23, 2012 5:25 PM
  • That looks to have solved the non-genuine problem, at least - but be warned that you may have to replace the hard drive!

    If you open Event Viewer, and look at the Windows Logs\Applications you'll be able to find the latest ChkDsk result there as an event from source Wininit.

    if you look at the results, you will see an entry for 'bad sectors' - if that's anything other than 0 then the hard drive may be failing - the larger the number (it's 4KB for every sector) the worse the drive (bear in mind that a drive usually has a couple of hundred hidden spares, and it's only when those are used that Windows actually sees a problem)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, November 23, 2012 6:25 PM
    Moderator
  • Noel --

    Thanks so much for your excellent help.  We're trying to get a full backup on this old HD and we're discussing ways of retiring the old Dell.  At least we won't be seeing the frightening little "copy is not genuine" message.  Again, thank you.

    John & Patricia Wegner

    Friday, November 23, 2012 7:07 PM
  • You're welcome - good luck!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, November 23, 2012 7:09 PM
    Moderator