Answered by:
Windows 7 not genuine on new ASUS laptop

Question
-
After receiving my new ASUS laptop with Win 7 Home Premium from Amazon 10 days ago, I removed much of the bloatware and performed all the win patches. It took at least 6 reboots to get them all. A few days later I started getting a message saying "This computer is not running genuine windows"... "Resolve online now". I am then offered to purchase windows. I prefer not to reformat and reinstall, if possible. I have since added 2 programs (Office and Symantec). The messages started before these 2 apps were installed. Any help would be appreciated. Thanks.
Edit: I've not been asked to enter my product key and when I run "Windows Activation" from help it says "Activation was successful"
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-2QWT6-HCQXJ-9YQTR
Windows Product Key Hash: PVjSC5x6njvqunmbCY3lOD7rYDo=
Windows Product ID: 00359-OEM-8992687-00007
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010300.0.0.003
ID: {7FB9E9EB-0E29-4D0C-8BA4-D5CC9ABEB9AC}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7600.win7_gdr.101026-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7FB9E9EB-0E29-4D0C-8BA4-D5CC9ABEB9AC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-9YQTR</PKey><PID>00359-OEM-8992687-00007</PID><PIDType>2</PIDType><SID>S-1-5-21-1489790369-3938367028-4258213017</SID><SYSTEM><Manufacturer>ASUSTeK Computer INC.</Manufacturer><Model>N61Jv</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>219</Version><SMBIOSVersion major="2" minor="6"/><Date>20100702000000.000000+000</Date></BIOS><HWID>01B83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7600.16385Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800007-02-1033-7600.0000-2092009
Installation ID: 093996398596933420041185447603961151473525596366016840
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 9YQTR
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 2/26/2011 12:19:38 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 2:21:2011 23:42
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAIAAAABAAAAAwABAAEA6GEM53Ka9IzY2zA4XMYS91C8eEB6RlxdOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC _ASUS_ _ASUS_
FACP _ASUS_ _ASUS_
HPET _ASUS_ _ASUS_
MCFG _ASUS_ _ASUS_
ECDT _ASUS_ _ASUS_
SLIC _ASUS_ Notebook
SSDT PmRef CpuPm
Mark MacQSaturday, February 26, 2011 5:54 PM
Answers
-
I think your install my be knackered BUT, those two hidden user accounts appear to be normal. However, we are now straying away from WGA. I suggest one of the 3 suggestions below. And yes, I feel it is highly likely that your computer may have been compromised by a virus, spyware or rogue program.
- Wait for Darin from MS or start a no cost WGA support incident. http://support.microsoft.com/gp/contactwga
- Perform a clean installation (my personal choice, hopefully you have your data backed up). Clean install or factory restoration.
- Attempt further recovery or repair options, including taking it to a shop.
Please visit the following forum for setup questions if you choose to do a new install, they MAY be able to help you recover files before you format.
http://social.answers.microsoft.com/Forums/en-US/w7install/threads
I must add, that the WGA support is for WGA issues only. If it turns out that an external program trashed the install they may not help. If WGA failed and brought down the rest of the OS (unlikely) then they should help. Also, not yet mentioned is the possibility that a hardware issue may have caused the problem. You may wind up consulting Asus support.
- Marked as answer by Darin Smith MS Tuesday, March 1, 2011 8:39 PM
Sunday, February 27, 2011 7:40 PM -
"Mark MacQ" wrote in message news:f2c96e67-6af9-4dfc-8899-9058f5021898...
Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.
Mark MacQ
In view of your history, I would do two things1) A system Recovery back to ex-factory.2) a full system hardware test.2a - check the RAM not only with the MS RAM tester, but MemTest86+2b - check the Hard Drive with the HD manufacturer's test utility2c - test the default install after all updates from both MS and ASUS are applied.If it fails any of the above, make a complaint to ASUS.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, March 1, 2011 8:39 PM
Sunday, February 27, 2011 9:51 PMModerator
All replies
-
You have file tampers, view the file scan data section and alost the tampered file entries then perform the following. Reading from your post it appears you desire a clean install of windows without the OEM added programs, this can be done but I would advise you post in the following forum asking for information on performing a clean install using the COA_SLP key on the sticker (most likely in the batter compartment).
Back to the original problem, please see the instructions below.
SFC/system restore
type cmd in the search box of the start menu, right click on the icon that appears and type sfc /scannow without the qoutes and press enter, allow SFC to run, reboot when directed. If you get any error messages write them down exactly as they appear. After rebooting go to www.microsoft.com/genuine and attempt to validate.
If that does not work then type system restore in the search box, click on the resulting program and follow the wizards prompts to restore to a previous point prior to the non-genuine status.
If that does not work then start a no cost wga tech support incident at the following link http://support.microsoft.com/gp/contactwga
Saturday, February 26, 2011 9:44 PM -
Thanks Carl. Before I could try your suggestions a new (or related) issue developed. I couldn’t get to the desktop on bootup and received a message I'd not seen before that seemed fairly severe, "Your computer was unable to start" It offered to try to find a good restore point and I let it try but it was unsuccessful. The message read: "Startup repair cannot repair this computer automatically". I viewed the "Problem Details" that listed a number of tested areas (i.e. Problem signatures 01 through 07, os ver, locale Id.) All seemed okay except signature 05 showed "Auto Failover". I elected to view "diagnostic and repair details" that showed… last successful bootup time and session details. Nothing glaringly wrong here. The next section presented "Test Performed" and the only items that looked significant were "Root cause found: Unknown Bugcheck: Bugcheck 6b.parmeters 0x0,0x0, 0x0, 0x0. Repair action: system restore. Result: Failed Error code = 0x1f. The other error was... Repair Action: System files integrity check and repair. Result: Failed Error code= 0x490." This may not be anything more than the detail of the failed restore from earlier.
I selected advanced recovery options and was presented with a choice of the machine's user accts to log into. It said I should select an admin acct. It listed 4 user logins a pw box for each. This machine was only setup with 2 user accts, namely Mark and Asus Guest, yet it showed 2 others: "HomeGroupUser$" and "UpdatusUser" Do you think some external malicious process or person created these or might the o/s generate these n the background? I did select Mark (admin) and now see "Choose a recovery tool". Choices include: Startup Repair, System Restore (which I believe failed earlier), System Image Recovery, Windows Memory Diagnostic, Command Prompt, then shutdown or restart. My Symantec Endpoint (with all updates) came up completely clean. I had not gotten around to installing malwarebytes or similar utils.
Would you suggest I format and do a clean install from my backup image? Seems like a no-brainer at this point. Thanks.
Mark MacQSunday, February 27, 2011 5:53 PM -
I think your install my be knackered BUT, those two hidden user accounts appear to be normal. However, we are now straying away from WGA. I suggest one of the 3 suggestions below. And yes, I feel it is highly likely that your computer may have been compromised by a virus, spyware or rogue program.
- Wait for Darin from MS or start a no cost WGA support incident. http://support.microsoft.com/gp/contactwga
- Perform a clean installation (my personal choice, hopefully you have your data backed up). Clean install or factory restoration.
- Attempt further recovery or repair options, including taking it to a shop.
Please visit the following forum for setup questions if you choose to do a new install, they MAY be able to help you recover files before you format.
http://social.answers.microsoft.com/Forums/en-US/w7install/threads
I must add, that the WGA support is for WGA issues only. If it turns out that an external program trashed the install they may not help. If WGA failed and brought down the rest of the OS (unlikely) then they should help. Also, not yet mentioned is the possibility that a hardware issue may have caused the problem. You may wind up consulting Asus support.
- Marked as answer by Darin Smith MS Tuesday, March 1, 2011 8:39 PM
Sunday, February 27, 2011 7:40 PM -
Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.
Mark MacQSunday, February 27, 2011 9:39 PM -
"Mark MacQ" wrote in message news:f2c96e67-6af9-4dfc-8899-9058f5021898...
Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.
Mark MacQ
In view of your history, I would do two things1) A system Recovery back to ex-factory.2) a full system hardware test.2a - check the RAM not only with the MS RAM tester, but MemTest86+2b - check the Hard Drive with the HD manufacturer's test utility2c - test the default install after all updates from both MS and ASUS are applied.If it fails any of the above, make a complaint to ASUS.
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Marked as answer by Darin Smith MS Tuesday, March 1, 2011 8:39 PM
Sunday, February 27, 2011 9:51 PMModerator -
Thanks Noel. I restored my original factory image (and unfortunately all the bloatware) and upon first startup the win 7 updates (patch) summary screen showed all updates successful. When I looked at the update history all 57 showed as FAILED in the status column. There was no antivirus or any other software loaded since the factory reset. I rebooted and the updates went through except windows live essentials. I'll try to look at that more closely when I'm home.
I think all is okay but won't know for sure until all the bloatware is removed and I reinstall office and symantec endpoint. I also need to run the hardware tests you recommended. Sorry I wasn't more complete but wanted to provide an update that I think I’m all set.
Mark MacQTuesday, March 1, 2011 10:43 PM -
"Mark MacQ" wrote in message news:66d07a6a-9e2a-4407-b3f9-415219a4440a...
Thanks Noel. I restored my original factory image (and unfortunately all the bloatware) and upon first startup the win 7 updates (patch) summary screen showed all updates successful. When I looked at the update history all 57 showed as FAILED in the status column. There was no antivirus or any other software loaded since the factory reset. I rebooted and the updates went through except windows live essentials. I'll try to look at that more closely when I'm home.
I think all is okay but won't know for sure until all the bloatware is removed and I reinstall office and symantec endpoint. I also need to run the hardware tests you recommended. Sorry I wasn't more complete but wanted to provide an update that I think I’m all set.
Mark MacQ
I suggest you check the update status using Belarc Advisor - it'll show any that are installed but broken, and any that aren't installed. (www.belarc.com )
--
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, March 2, 2011 4:56 AMModerator