Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows 7 not genuine on new ASUS laptop RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    After receiving my new ASUS laptop with Win 7 Home Premium from Amazon 10 days ago, I removed much of the bloatware and performed all the win patches. It took at least 6 reboots to get them all. A few days later I started getting a message saying "This computer is not running genuine windows"... "Resolve online now". I am then offered to purchase windows. I prefer not to reformat and reinstall, if possible. I have since added 2 programs (Office and Symantec). The messages started before these 2 apps were installed. Any help would be appreciated. Thanks.

    Edit: I've not been asked to enter my product key and when I run "Windows Activation" from help it says "Activation was successful"

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-2QWT6-HCQXJ-9YQTR
    Windows Product Key Hash: PVjSC5x6njvqunmbCY3lOD7rYDo=
    Windows Product ID: 00359-OEM-8992687-00007
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {7FB9E9EB-0E29-4D0C-8BA4-D5CC9ABEB9AC}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.101026-1503
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{7FB9E9EB-0E29-4D0C-8BA4-D5CC9ABEB9AC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-9YQTR</PKey><PID>00359-OEM-8992687-00007</PID><PIDType>2</PIDType><SID>S-1-5-21-1489790369-3938367028-4258213017</SID><SYSTEM><Manufacturer>ASUSTeK Computer INC.</Manufacturer><Model>N61Jv</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>219</Version><SMBIOSVersion major="2" minor="6"/><Date>20100702000000.000000+000</Date></BIOS><HWID>01B83607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800007-02-1033-7600.0000-2092009
    Installation ID: 093996398596933420041185447603961151473525596366016840
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 9YQTR
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 2/26/2011 12:19:38 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 2:21:2011 23:42
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: MAAAAAEAAQABAAIAAAABAAAAAwABAAEA6GEM53Ka9IzY2zA4XMYS91C8eEB6Rlxd

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   _ASUS_  _ASUS_
      FACP   _ASUS_  _ASUS_
      HPET   _ASUS_  _ASUS_
      MCFG   _ASUS_  _ASUS_
      ECDT   _ASUS_  _ASUS_
      SLIC   _ASUS_  Notebook
      SSDT   PmRef  CpuPm

     

    Mark MacQ
    Saturday, February 26, 2011 5:54 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    I think your install my be knackered BUT, those two hidden user accounts appear to be normal. However, we are now straying away from WGA. I suggest one of the 3 suggestions below. And yes, I feel it is highly likely that your computer may have been compromised by a virus, spyware or rogue program.

    1. Wait for Darin from MS or start a no cost WGA support incident. http://support.microsoft.com/gp/contactwga
    2. Perform a clean installation (my personal choice, hopefully you have your data backed up). Clean install or factory restoration.
    3. Attempt further recovery or repair options, including taking it to a shop.

    Please visit the following forum for setup questions if you choose to do a new install, they MAY be able to help you recover files before you format.

    http://social.answers.microsoft.com/Forums/en-US/w7install/threads

    I must add, that the WGA support is for WGA issues only. If it turns out that an external program trashed the install they may not help. If WGA failed and brought down the rest of the OS (unlikely) then they should help. Also, not yet mentioned is the possibility that a hardware issue may have caused the problem. You may wind up consulting Asus support.

    Sunday, February 27, 2011 7:40 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Mark MacQ" wrote in message news:f2c96e67-6af9-4dfc-8899-9058f5021898...

    Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.

    Mark MacQ

    In view of your history, I would do two things
    1) A system Recovery back to ex-factory.
    2) a full system hardware test.
     
    2a - check the RAM not only with the MS RAM tester, but MemTest86+
    2b - check the Hard Drive with the HD manufacturer's test utility
    2c - test the default install after all updates from both MS and ASUS are applied.
     
    If it fails any of the above, make a complaint to ASUS.
     
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 27, 2011 9:51 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    You have file tampers, view the file scan data section and alost the tampered file entries then perform the following. Reading from your post it appears you desire a clean install of windows without the OEM added programs, this can be done but I would advise you post in the following forum asking for information on performing a clean install using the COA_SLP key on the sticker (most likely in the batter compartment).

     

    Back to the original problem, please see the instructions below.

    SFC/system restore

    type cmd in the search box of the start menu, right click on the icon that appears and type sfc /scannow without the qoutes and press enter, allow SFC to run, reboot when directed. If you get any error messages write them down exactly as they appear. After rebooting go to www.microsoft.com/genuine and attempt to validate.

     

    If that does not work then type system restore in the search box, click on the resulting program and follow the wizards prompts to restore to a previous point prior to the non-genuine status.

     

    If that does not work then start a no cost wga tech support incident at the following link http://support.microsoft.com/gp/contactwga

     

     

     

     

     

    Saturday, February 26, 2011 9:44 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks Carl. Before I could try your suggestions a new (or related) issue developed. I couldn’t get to the desktop on bootup and received a message I'd not seen before that seemed fairly severe, "Your computer was unable to start" It offered to try to find a good restore point and I let it try but it was unsuccessful. The message read: "Startup repair cannot repair this computer automatically". I viewed the "Problem Details" that listed a number of tested areas (i.e. Problem signatures 01 through 07, os ver, locale Id.) All seemed okay except signature 05 showed "Auto Failover". I elected to view "diagnostic and repair details" that showed… last successful bootup time and session details. Nothing glaringly wrong here. The next section presented "Test Performed" and the only items that looked significant were "Root cause found: Unknown Bugcheck: Bugcheck 6b.parmeters 0x0,0x0, 0x0, 0x0. Repair action: system restore. Result: Failed Error code = 0x1f. The other error was... Repair Action: System files integrity check and repair. Result: Failed Error code= 0x490." This may not be anything more than the detail of the failed restore from earlier.

    I selected advanced recovery options and was presented with a choice of the machine's user accts to log into. It said I should select an admin acct. It listed 4 user logins a pw box for each. This machine was only setup with 2 user accts, namely Mark and Asus Guest, yet it showed 2 others: "HomeGroupUser$" and "UpdatusUser"  Do you think some external malicious process or person created these or might the o/s generate these n the background? I did select Mark (admin) and now see "Choose a recovery tool". Choices include: Startup Repair, System Restore (which I believe failed earlier), System Image Recovery, Windows Memory Diagnostic, Command Prompt, then shutdown or restart. My Symantec Endpoint (with all updates) came up completely clean. I had not gotten around to installing malwarebytes or similar utils.

    Would you suggest I format and do a clean install from my backup image? Seems like a no-brainer at this point. Thanks.

    Mark MacQ
    Sunday, February 27, 2011 5:53 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I think your install my be knackered BUT, those two hidden user accounts appear to be normal. However, we are now straying away from WGA. I suggest one of the 3 suggestions below. And yes, I feel it is highly likely that your computer may have been compromised by a virus, spyware or rogue program.

    1. Wait for Darin from MS or start a no cost WGA support incident. http://support.microsoft.com/gp/contactwga
    2. Perform a clean installation (my personal choice, hopefully you have your data backed up). Clean install or factory restoration.
    3. Attempt further recovery or repair options, including taking it to a shop.

    Please visit the following forum for setup questions if you choose to do a new install, they MAY be able to help you recover files before you format.

    http://social.answers.microsoft.com/Forums/en-US/w7install/threads

    I must add, that the WGA support is for WGA issues only. If it turns out that an external program trashed the install they may not help. If WGA failed and brought down the rest of the OS (unlikely) then they should help. Also, not yet mentioned is the possibility that a hardware issue may have caused the problem. You may wind up consulting Asus support.

    Sunday, February 27, 2011 7:40 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.

    Mark MacQ
    Sunday, February 27, 2011 9:39 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Mark MacQ" wrote in message news:f2c96e67-6af9-4dfc-8899-9058f5021898...

    Good to know those two accts are normal. Determining the cause to this sort of issues can be a crap shoot. I think the hardware is okay from what I can tell although I can't be sure. Same with WGA causing this, it's unlikely but I suppose not impossible. I might have a bad Win7 install from the ASUS factory. I do know that it took many hours and reboots of failed update attempts before I got all the 50+ updates to take. This was done within a day of getting the new machine 9 days ago. I probably should have done a clean install with the WGA issue but I like to try to resolve the specific problem(s) instead of going throwing the towel in, but we all know how cryptic these things can be and ultimately the answer is a clean start. I will try a clean install and will see what Darin has to offer. Thanks Carl.

    Mark MacQ

    In view of your history, I would do two things
    1) A system Recovery back to ex-factory.
    2) a full system hardware test.
     
    2a - check the RAM not only with the MS RAM tester, but MemTest86+
    2b - check the Hard Drive with the HD manufacturer's test utility
    2c - test the default install after all updates from both MS and ASUS are applied.
     
    If it fails any of the above, make a complaint to ASUS.
     
     

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Sunday, February 27, 2011 9:51 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks Noel. I restored my original factory image (and unfortunately all the bloatware) and upon first startup the win 7 updates (patch) summary screen showed all updates successful. When I looked at the update history all 57 showed as FAILED in the status column. There was no antivirus or any other software loaded since the factory reset. I rebooted and the updates went through except windows live essentials. I'll try to look at that more closely when I'm home.

     

    I think all is okay but won't know for sure until all the bloatware is removed and I reinstall office and symantec endpoint. I also need to run the hardware tests you recommended. Sorry I wasn't more complete but wanted to provide an update that I think I’m all set.

     

    Mark MacQ
    Tuesday, March 1, 2011 10:43 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Mark MacQ" wrote in message news:66d07a6a-9e2a-4407-b3f9-415219a4440a...

    Thanks Noel. I restored my original factory image (and unfortunately all the bloatware) and upon first startup the win 7 updates (patch) summary screen showed all updates successful. When I looked at the update history all 57 showed as FAILED in the status column. There was no antivirus or any other software loaded since the factory reset. I rebooted and the updates went through except windows live essentials. I'll try to look at that more closely when I'm home.

     

    I think all is okay but won't know for sure until all the bloatware is removed and I reinstall office and symantec endpoint. I also need to run the hardware tests you recommended. Sorry I wasn't more complete but wanted to provide an update that I think I’m all set.

     
    Mark MacQ

    I suggest you check the update status using Belarc Advisor - it'll show any that are installed but broken, and any that aren't installed. (www.belarc.com )

    --

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, March 2, 2011 4:56 AM
    Moderator