none
Windows 7 Pro x64 install claiming it is not genuine RRS feed

  • Question

  • One of my company's sales reps has a Dell laptop that came from the factory with Windows 7 Pro x64 preinstalled. A few weeks ago, he had to do a system restore to fix a problem. After that, he started getting pop-up alerts that his Windows installation is not genuine.

    I checked in "Control Panel > System", and it says that his installation is activated. I assume that Dell used their OEM license to install the operating system. In an attempt to fix the problem, I wrote down the Product Key on the laptop's COA and tried to enter it. "Control Panel > System" didn't have a link to do this (must be an OEM thing; retail copies give you this option). So, I resorted to the command line:

    slmgr.vbs -ipk <product key>
    slmgr.vbs -ato

    Windows accepted the key and activated it without a fuss. However, the pop-ups are still happening. I had the sales rep run MGADiag; there is the output:


    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-6PQM9-9TDVP-2F3F8
    Windows Product Key Hash: ZC8WxIXSKvca7Hg3rrATamZtKdI=
    Windows Product ID: 00371-OEM-9313075-79418
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {0C5316F2-4D79-4357-9C95-1C9677BEE1DF}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.110622-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Small Business 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 7E90FEE8-169-80004005_B4D0AA8B-587-80004005_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{0C5316F2-4D79-4357-9C95-1C9677BEE1DF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2F3F8</PKey><PID>00371-OEM-9313075-79418</PID><PIDType>8</PIDType><SID>S-1-5-21-1852969405-338236755-1016812075</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6420</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20110711000000.000000+000</Date></BIOS><HWID>A5BA3607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>CBX3   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00CA-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business 2007</Name><Ver>12</Ver><Val>BF1186D5182E586</Val><Hash>x3hXUz9zuj3yuE4Kdo304wqelS4=</Hash><Pid>89395-707-9117712-65622</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: da22eadd-46dc-4056-a287-f5041c852470
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00186-130-779418-02-1033-7600.0000-0602012
    Installation ID: 009115422992960952580445943043357273516546920856018415
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 2F3F8
    License Status: Licensed
    Remaining Windows rearm count: 0
    Trusted time: 2/29/2012 9:57:52 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000012240
    Event Time Stamp: 2:23:2012 10:15
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: OAAAAAEAAAABAAIAAgABAAAABgABAAEAln2oIUJ79msc2kwhXhxkUPCA9jnItRwrCrNyir5BLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            DELL          CBX3   
      FACP            DELL          CBX3   
      HPET            A M I          PCHHPET
      BOOT            DELL          CBX3    
      MCFG            DELL          SNDYBRDG
      TCPA                    
      SSDT            DELLTP        TPM
      SSDT            DELLTP        TPM
      SSDT            DELLTP        TPM
      DMAR            INTEL         SNB
      SLIC            DELL          CBX3   
      SSDT            DELLTP        TPM


    I know this installation of Windows is genuine. How do I fix the file mismatch/tampered file issues?
    Friday, March 30, 2012 4:38 PM

Answers

  • "PC Wrangler" wrote in message news:bac729c9-f5fe-4cd4-9573-b6d8373a3798...


    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-6PQM9-9TDVP-2F3F8
    Windows Product Key Hash: ZC8WxIXSKvca7Hg3rrATamZtKdI=
    Windows Product ID: 00371-OEM-9313075-79418
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100


    Other data-->
    SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6420</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20110711000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: 2F3F8
    License Status: Licensed
    Remaining Windows rearm count: 0
    Trusted time: 2/29/2012 9:57:52 PM



    I know this installation of Windows is genuine. How do I fix the file mismatch/tampered file issues?
     
    First, start by running the standard system checks - CHKDSK C: /R and SFC /SCANNOW
    when complete, reboot again, and run another MGADiag - post the results.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, March 30, 2012 5:12 PM
    Moderator

All replies

  • "PC Wrangler" wrote in message news:bac729c9-f5fe-4cd4-9573-b6d8373a3798...


    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-6PQM9-9TDVP-2F3F8
    Windows Product Key Hash: ZC8WxIXSKvca7Hg3rrATamZtKdI=
    Windows Product ID: 00371-OEM-9313075-79418
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100


    Other data-->
    SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude E6420</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20110711000000.000000+000</Date></BIOS


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: 2F3F8
    License Status: Licensed
    Remaining Windows rearm count: 0
    Trusted time: 2/29/2012 9:57:52 PM



    I know this installation of Windows is genuine. How do I fix the file mismatch/tampered file issues?
     
    First, start by running the standard system checks - CHKDSK C: /R and SFC /SCANNOW
    when complete, reboot again, and run another MGADiag - post the results.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, March 30, 2012 5:12 PM
    Moderator
  • No reply from the Original Poster.

    Issue is assumed to be resolved.


    Darin MS

    Tuesday, April 3, 2012 6:48 PM