Answered by:
Windows 7 Build 7601 This copy of Windows is not genuine

Question
-
I posted this over at Microsoft Answers and someone over there suggested that I post my issue here.
TTS Error: T:20120108020710705-
Partial Product Key: WQ8RG
License Status: Notification
Notification Reason: 0xC004FE00.
You have a rare issue. You have a trusted store tamper.
I suggest you post on the WGA forum which specializes in these issues.
I just got an iMac for Christmas. My parents purchased me a combo Parallels/Windows 7 Home Premium set so that I'd be able to run Windows (Autodesk Revit) on my Mac. Before they bought this item, I asked Other World Computing if I would have any issues with an OEM copy on my new iMac. Installed both on Christmas, and now suddenly I have the "Windows 7 Build 7601 This copy of Windows is not genuine" watermark in the lower right corner.
I searched the web and read something about something to do with the installation of SP1. They mentioned uninstalling an update with the code (KB971033). I did that but it still didn't work. So I searched some more and someone in one of the threads here said to run a Dianogistic tool. So I did that and here's what I got:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-JHW3M-QDW8R-WQ8RG
Windows Product Key Hash: uRUcOeKInrryDKC+Qx41jZ+4YEQ=
Windows Product ID: 00359-OEM-8703737-54267
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {1A8749FB-946D-4842-A6CB-5897D9A9B7B1}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error: T:20120108020710705-
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{1A8749FB-946D-4842-A6CB-5897D9A9B7B1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-WQ8RG</PKey><PID>00359-OEM-8703737-54267</PID><PIDType>3</PIDType><SID>S-1-5-21-2481606279-3251921775-2975974372</SID><SYSTEM><Manufacturer>Apple Inc.</Manufacturer><Model>iMac12,2</Model></SYSTEM><BIOS><Manufacturer>Apple Inc.</Manufacturer><Version> IM121.88Z.0047.B1E.1110201314</Version><SMBIOSVersion major="2" minor="4"/><Date>20111020000000.000000+000</Date></BIOS><HWID>8AB73907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: U1BMRwEAAAAAAQAACAAAAKksAAAAAAAAYWECAKwA//88Avcj1M3MAROJf9ybj7SsIEe8hMh9DOGtJfOmZjDUkFsZxzUTdodbX/3ysPqwXnj8QWrKnZlTK+o3Oj2fR81dVOmBOXf+PhAzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAx4dZsxs/sxaQSZh6DCEuBHf5KiRwZJNOot86wFa0CmHbPgN9bCo6a6PA9l+F2UxUgzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgMM5DWJ9vWy3OurH7DdY1oDDOQ1ifb1stzrqx+w3WNaAwzkNYn29bLc66sfsN1jWgM
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-037-354267-02-1033-7601.0000-0082012
Installation ID: 019821230760630053976103618932140991744560311871594696
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: WQ8RG
License Status: Notification
Notification Reason: 0xC004FE00.
Remaining Windows rearm count: 5
Trusted time: 1/8/2012 2:32:14 AMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:31:2011 21:38
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEAAgABAAEAAAACAAAAAwABAAEAHKLWLUx5mspiNLSrtmdiPew5V1RSkx4eLnM=OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC APPLE Apple00
FACP APPLE Apple00
HPET APPLE Apple00
MCFG APPLE Apple00
SBST APPLE Apple00
ECDT APPLE Apple00
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDppt
SSDT APPLE SmcDpptPlease let me know if my copy of Windows is legit or if my parents and I got screwed...
Thanks, Travis
Sunday, January 8, 2012 6:54 PM
Answers
-
OEM System Builder copies are only for installation on a computer for sale to a third party. The correct license would have been a full license retail copy. Apple does not provide OEM copies of Windows with Macs. SB copies are not intended for end users to install on thier own computers.
Having said that, Noel Paton gave this advice to an earlier post concerning Notification Reason: 0xC004FE00.
The error you got apparently means"Error code hr = 0xC004FE00,The Software Licensing Service reported that activation is required to recover from tampering of SL Service trusted store."Please download and install the KB971033 update for windows - it will assist in diagnosis. http://support.microsoft.com/kb/971033
Please also visit the Validation site, and attempt to validate Windowsthen repost with a new copy of your MGADiag report - hopefully we'll be able to see exactly which files are affected. (The file Mismatches above simply tell us that the KB971033 WAT update is not yet installed)
Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.- Edited by CbarnhorstEditor Sunday, January 8, 2012 7:21 PM
- Proposed as answer by Darin Smith MS Tuesday, January 10, 2012 10:26 PM
- Marked as answer by Darin Smith MS Thursday, January 12, 2012 11:34 PM
Sunday, January 8, 2012 7:20 PMAnswerer
All replies
-
"TravisVaughan" wrote in message news:bc2608a6-69c3-4143-917b-4d13269b0f86...
I posted this over at Microsoft Answers and someone over there suggested that I post my issue here.
TTS Error: T:20120108020710705-
Partial Product Key: WQ8RG
License Status: Notification
Notification Reason: 0xC004FE00.
You have a rare issue. You have a trusted store tamper.
I suggest you post on the WGA forum which specializes in these issues.
I just got an iMac for Christmas. My parents purchased me a combo Parallels/Windows 7 Home Premium set so that I'd be able to run Windows (Autodesk Revit) on my Mac. Before they bought this item, I asked Other World Computing if I would have any issues with an OEM copy on my new iMac. Installed both on Christmas, and now suddenly I have the "Windows 7 Build 7601 This copy of Windows is not genuine" watermark in the lower right corner.
I searched the web and read something about something to do with the installation of SP1. They mentioned uninstalling an update with the code (KB971033). I did that but it still didn't work. So I searched some more and someone in one of the threads here said to run a Dianogistic tool. So I did that and here's what I got:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-JHW3M-QDW8R-WQ8RG
Windows Product Key Hash: uRUcOeKInrryDKC+Qx41jZ+4YEQ=
Windows Product ID: 00359-OEM-8703737-54267
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {1A8749FB-946D-4842-A6CB-5897D9A9B7B1}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error: T:20120108020710705-
Other data-->
SYSTEM><Manufacturer>Apple Inc.</Manufacturer><Model>iMac12,2</Model></SYSTEM><BIOS><Manufacturer>Apple Inc.</Manufacturer><Version> IM121.88Z.0047.B1E.1110201314</Version><SMBIOSVersion major="2" minor="4"/><Date>20111020000000.000000+000</Date></BIOSLicensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Partial Product Key: WQ8RG
License Status: Notification
Notification Reason: 0xC004FE00.
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Please let me know if my copy of Windows is legit or if my parents and I got screwed...
Thanks, Travis
The Licensing appears to be OK – but the machine has a Trusted Store Tamper, which is what is causing the non-genuine notification.Such tampers are often caused either by bad drivers, or by malware.You should first ensure that there is an up-to-date AV installed, and run a full system scan with that.Then download and install Malwarebytes Anti-Malware (free edition, from www.malwarebytes.org) update it (do NOT enable the Real-time protection option!), and then run a full scan with that in the main account, and quick scans in any other accounts.Once done, reboot and run another MGADiag report.Post back with the results.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Tuesday, January 10, 2012 10:26 PM
Sunday, January 8, 2012 7:18 PMModerator -
OEM System Builder copies are only for installation on a computer for sale to a third party. The correct license would have been a full license retail copy. Apple does not provide OEM copies of Windows with Macs. SB copies are not intended for end users to install on thier own computers.
Having said that, Noel Paton gave this advice to an earlier post concerning Notification Reason: 0xC004FE00.
The error you got apparently means"Error code hr = 0xC004FE00,The Software Licensing Service reported that activation is required to recover from tampering of SL Service trusted store."Please download and install the KB971033 update for windows - it will assist in diagnosis. http://support.microsoft.com/kb/971033
Please also visit the Validation site, and attempt to validate Windowsthen repost with a new copy of your MGADiag report - hopefully we'll be able to see exactly which files are affected. (The file Mismatches above simply tell us that the KB971033 WAT update is not yet installed)
Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.- Edited by CbarnhorstEditor Sunday, January 8, 2012 7:21 PM
- Proposed as answer by Darin Smith MS Tuesday, January 10, 2012 10:26 PM
- Marked as answer by Darin Smith MS Thursday, January 12, 2012 11:34 PM
Sunday, January 8, 2012 7:20 PMAnswerer -
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-JHW3M-QDW8R-WQ8RG
Windows Product Key Hash: uRUcOeKInrryDKC+Qx41jZ+4YEQ=
Windows Product ID: 00359-OEM-8703737-54267
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {0C1B3C71-816D-4EBA-956C-83D5B2652179}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error: T:20120108020710705-
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{0C1B3C71-816D-4EBA-956C-83D5B2652179}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-WQ8RG</PKey><PID>00359-OEM-8703737-54267</PID><PIDType>3</PIDType><SID>S-1-5-21-2481606279-3251921775-2975974372</SID><SYSTEM><Manufacturer>Parallels Software International Inc.</Manufacturer><Model>Parallels Virtual Platform</Model></SYSTEM><BIOS><Manufacturer>Parallels Software International Inc.</Manufacturer><Version>7.0.15054.722853</Version><SMBIOSVersion major="2" minor="3"/><Date>20071026000000.000000+000</Date></BIOS><HWID>8AB73907018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 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
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-037-354267-02-1033-7601.0000-3602011
Installation ID: 011601008953403514236493518895708793503034212630897800
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: WQ8RG
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 1/8/2012 3:24:54 PMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:31:2011 21:38
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MAAAAAEABAABAAEAAAABAAAAAQABAAEAln3sNUx5jqkSmFj+YC9UNgaFOluElziwOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PRLS PRLS_OEM
FACP PRLS PRLS_OEM
WAET PRLS PRLS_OEMHere's the updated Diagonistic Report.
-Travis
Sunday, January 8, 2012 8:25 PM -
You are now licensed.
License Status: Licensed
Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.Sunday, January 8, 2012 8:34 PMAnswerer -
That's looking good - hopefully you're no longer seeing non-genuine notifications?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, January 8, 2012 8:46 PMModerator -
No longer seeing the non-genuine notifications but the watermark did appear in the lower right hand corner. This was after a restart.
-Travis
Sunday, January 8, 2012 9:11 PM -
"TravisVaughan" wrote in message news:b5db4937-3062-4636-ab06-e06d7f1d70bb...
No longer seeing the non-genuine notifications but the watermark did appear in the lower right hand corner. This was after a restart.
-Travis
Please post another MGADiag report, after resetting the screen background, and rebooting twice.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSunday, January 8, 2012 9:18 PMModerator -
No further reply from the Original Poster.
Issue is assumed to be resolved.
Darin MSThursday, January 12, 2012 11:34 PM