Answered by:
Windows 7 suddenly says not genuine build 7600

Question
-
I had some malware/virus and after cleaning up I'm now getting the Windows 7 not genuine error.
It looks to me like the there are some messed-up files. Is there any way to fix them? I tried to run that genuine advantage tool to fix things but it didn't install properly and gives me "update installation failed 8000FFFF"
Here's the output:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-R36JB-GDRWY-3TRHD
Windows Product Key Hash: CZYND2YRcwXj9+icB4L/cQhSh3I=
Windows Product ID: 00359-OEM-8882475-77214
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {8D37DB97-C6BF-41DB-A57A-C51A3F793F12}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7600.win7_rtm.090713-1255
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Standard 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{8D37DB97-C6BF-41DB-A57A-C51A3F793F12}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-3TRHD</PKey><PID>00359-OEM-8882475-77214</PID><PIDType>3</PIDType><SID>S-1-5-21-1802169648-3998439190-446707050</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 1410</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>v0.3108</Version><SMBIOSVersion major="2" minor="6"/><Date>20090625000000.000000+000</Date></BIOS><HWID>84B80600018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>B88E3FE60D2ED86</Val><Hash>P7R7M/4Fc6pHq1ZI7oR1YEurR4M=</Hash><Pid>89396-707-0122871-65524</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80041010' to display the error text.
Error: 0x80041010Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: LgAAAAAAAQABAAIAAAACAAAAAgABAAEAJJTSUCg29IjsPuKsruvUX6YYLrZWuA==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS ACRPRDCT
FACP ACRSYS ACRPRDCT
HPET ACRSYS ACRPRDCT
BOOT ACRSYS ACRPRDCT
MCFG ACRSYS ACRPRDCT
DMAR
ASF! ACRSYS ACRPRDCT
SLIC ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCTSaturday, April 17, 2010 1:30 AM
Answers
-
Hello jmrwiseguy,
The core of your issue centers on the line in your Diagnostic Report that reads:
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100This means the file(s) has been Tampered, Modified or has become Corrupt. Vista see this as an attack to bypass it's Licensing security. (It's interesting to note that most of the reported files are directly or indirectly related to Activation or Validation)
The resolution is to repair the modified files. To do that, there are a few things you can try:
a. System Scan. The scan will look for bad Windows files and will attempt to repair them, if possible.
1) Click the Start Button
2) Type: cmd.exe
3) Right-click the cmd.exe file and select 'Run as Administrator'
4) In the CMD window, type: sfc /scannow
5) Reboot and see if that resolves the issue.
b. Repairing Windows using System Restore:1) Click the Start button
2) In the Start Search field, type: System Restore and hit “Enter”
3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
4) Click the "Next" button.
5) Reboot and see if that resolves the issue.
If neither of these sets of steps resolves the issue, my only other suggestions would be either to create a (no cost) suport request at http://support.microsoft.com/gp/contactwga or reinstall.Thank you,
Darin MS- Marked as answer by Darin Smith MS Saturday, April 17, 2010 2:56 AM
Saturday, April 17, 2010 2:55 AM
All replies
-
All of the file mismatches you have don't bode well for fixing this and having a stable system. That said, have you tried running sfc /scannow? if not I recomend you do so but only after backing up your data.
- Run sfc /scannow
- go to www.microsoft.com/genuine
- re-run the diagnostic utility and repost the results.
Or, consider reinstalling.
Saturday, April 17, 2010 2:55 AM -
Hello jmrwiseguy,
The core of your issue centers on the line in your Diagnostic Report that reads:
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slui.exe[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[Hr = 0x800b0003]
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100This means the file(s) has been Tampered, Modified or has become Corrupt. Vista see this as an attack to bypass it's Licensing security. (It's interesting to note that most of the reported files are directly or indirectly related to Activation or Validation)
The resolution is to repair the modified files. To do that, there are a few things you can try:
a. System Scan. The scan will look for bad Windows files and will attempt to repair them, if possible.
1) Click the Start Button
2) Type: cmd.exe
3) Right-click the cmd.exe file and select 'Run as Administrator'
4) In the CMD window, type: sfc /scannow
5) Reboot and see if that resolves the issue.
b. Repairing Windows using System Restore:1) Click the Start button
2) In the Start Search field, type: System Restore and hit “Enter”
3) Select "Choose Different Restore Point", Put a check in the box that says "Show restore points older than 5 days", select the restore point that corresponds to the date Before you first noticed the issue.
4) Click the "Next" button.
5) Reboot and see if that resolves the issue.
If neither of these sets of steps resolves the issue, my only other suggestions would be either to create a (no cost) suport request at http://support.microsoft.com/gp/contactwga or reinstall.Thank you,
Darin MS- Marked as answer by Darin Smith MS Saturday, April 17, 2010 2:56 AM
Saturday, April 17, 2010 2:55 AM