locked
This computer is not running genuine Windows (0x8004fe21) RRS feed

  • Question

  • I have an HP laptop that I put a new SSD in, and then loaded Windows 7 Pro.  I did this with several HP laptops in at my company, and I'm seeing similar results from some of the others.  I don't know when exactly this happend, but I start getting the pop up about windows not being genuine, despite the fact that I'm able to continually re-activate windows via slui.exe.

    I've tried installing Intel Rapid Storage Technology, only because I've seen that fix problems in similar posts.  No luck.

    I'm not able to use Windows Update.  I've tried resetting that, etc.  No luck.

    Here is the MGADiag report.  I've got a couple of days off / on into this.  I want to get to the bottom of it because I have at least two others in the same situation... nearly identical hardware, with a Kingston SSD, but windows loaded after that change.  I may have added more RAM, but ?? 

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-3692Y-DTRJB-429CJ
    Windows Product Key Hash: blXQwRTH+d1UE57iXWtAvG+tCJY=
    Windows Product ID: 00371-OEM-9045012-96150
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {85F67E0C-F697-41DA-854D-06BEBB452928}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{85F67E0C-F697-41DA-854D-06BEBB452928}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-429CJ</PKey><PID>00371-OEM-9045012-96150</PID><PIDType>3</PIDType><SID>S-1-5-21-771688166-735333485-2114594636</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Compaq 8510p </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68MVD Ver. F.15</Version><SMBIOSVersion major="2" minor="4"/><Date>20081202000000.000000+000</Date></BIOS><HWID>C4FC3E07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00180-450-196150-02-1033-7601.0000-2412013
    Installation ID: 011266773864258845563604487604015204411332668075210865
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 429CJ
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 8/29/2013 3:06:03 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 8:27:2013 14:54
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAEAAAACAAAABAABAAEAeqiwy+ou2Hnk8rAJRoNGgkrCGux2dAvnMtD0hz4kKoU=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HP      30C5   
      FACP   HP      30C5   
      HPET   HP      30C5   
      MCFG   HP      30C5   
      SLIC   HPQOEM  SLIC-MPC
      TCPA   HP      30C5   
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT

    Thursday, August 29, 2013 7:07 PM

Answers

  • Hmmm - try this (last gasp remedy before a repair install!)

    Open an Elevated Command Prompt

    Run the following commands

     

    NET STOP WUAUSERV

    REN C:\WINDOWS\SoftwareDistribution SDOLD

    NET START WUAUSERV

     

    wait 15 minutes, and reboot

    then wait 10 minutes, and open Windows Updates, and run a Check for Updates.

     

    Install only the oldest update found - and reboot once installed

    then go back to Windows updates and install the others.

    post a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, September 6, 2013 9:56 PM
    Moderator

All replies

  • Apologies if this does not help, but I've had this problem for a long time too, and to double-check the Intel driver issue, you went to the:

    (Intel® RST) RAID Driver - Download Center   (apparently I can't post links till I'm verified)

    and downloaded and ran:

    iata_enu.exe   (Version: 11.7.0.1013)

    I only ask as I tried the link that used to be given in forums for the driver, got to a page that no longer existed, so ran the Intel driver update utility which said only a wi-fi driver was needed. A week later I googled  'Intel rapid storage technology driver', found it, tried it and for some reason Windows now behaves itself.

    Otherwise I'm not qualified to help... Good luck.

    Friday, August 30, 2013 12:23 PM
  • Assuming you installed the latest functional version of the IRST drivers, and it's still not helped, then try this....

    Please run the following commands in an Elevated Command Prompt

     

    NET STOP CRYPTSVC
    REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD
    NET START CRYPTSVC

     

    once complete, leave the system alone for at least an hour to rebuild the database, then reboot, and run another MGADiag report.
    Note that this may delete your Update History - but all updates will remain installed, and can be viewed in the Installed Updates listing.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    • Proposed as answer by Noel D PatonModerator Thursday, September 5, 2013 12:01 PM
    • Marked as answer by tmiller112 Thursday, September 5, 2013 1:28 PM
    • Unmarked as answer by tmiller112 Friday, September 6, 2013 11:34 AM
    Saturday, August 31, 2013 12:33 PM
    Moderator
  • Noel your solution seems to have solved the problem.  I didn't expect that, because I had done that already, except last time I had not waited before rebooting.  This time I followed your instructions and then let it sit for the rest of the day.  The next day when I came in the machine had applied updates and was asking for a reboot.  I've since been able to apply all windows updates, except for IE 10 for some reason, which fails with Error Code 9C57.  But I think it's safe to say after a couple of days that I'm done seeing the messages about windows not being genuine. 

    I had installed IRST, apparently successfully.  However I'm thinking I must have only installed the management software for that and not the drivers.  I thought that I would try removing and reinstalling just to make sure it applied correctly, but now it's telling me that my platform is not supported. 

    I'm not really concerned about IE10, until it becomes a bigger problem.  But here is my updated MGADiag just to be thorough.  Thanks very much for your help.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-3692Y-DTRJB-429CJ
    Windows Product Key Hash: blXQwRTH+d1UE57iXWtAvG+tCJY=
    Windows Product ID: 00371-OEM-9045012-96150
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {85F67E0C-F697-41DA-854D-06BEBB452928}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130708-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{85F67E0C-F697-41DA-854D-06BEBB452928}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-429CJ</PKey><PID>00371-OEM-9045012-96150</PID><PIDType>3</PIDType><SID>S-1-5-21-771688166-735333485-2114594636</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Compaq 8510p </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>68MVD Ver. F.15</Version><SMBIOSVersion major="2" minor="4"/><Date>20081202000000.000000+000</Date></BIOS><HWID>C4FC3E07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
    Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00180-450-196150-02-1033-7601.0000-2412013
    Installation ID: 011266773864258845563604487604015204411332668075210865
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 429CJ
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 9/5/2013 9:27:11 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 9:3:2013 15:06
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAEAAAACAAAABAABAAEAeqiwy+ou2Hnk8rAJRoNGgkrCGux2dAvnMtD0h5QOKoU=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HP      30C5   
      FACP   HP      30C5   
      HPET   HP      30C5   
      MCFG   HP      30C5   
      SLIC   HPQOEM  SLIC-MPC
      TCPA   HP      30C5   
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT
      SSDT   HP      HPQSAT

    Thursday, September 5, 2013 1:27 PM
  • Well I spoke too soon.  I should have known that by looking at the output I pasted, seeing all of the "Tampered Files".  I came in today to the familiar "not genuine" message.  I do appreciate the feedback so far.  I guess I'm going to give up and just live with the minor annoyance of this message from time to time.  Unless someone can see and offer a clear answer? 

    Friday, September 6, 2013 11:39 AM
  • Hmmm - try this (last gasp remedy before a repair install!)

    Open an Elevated Command Prompt

    Run the following commands

     

    NET STOP WUAUSERV

    REN C:\WINDOWS\SoftwareDistribution SDOLD

    NET START WUAUSERV

     

    wait 15 minutes, and reboot

    then wait 10 minutes, and open Windows Updates, and run a Check for Updates.

     

    Install only the oldest update found - and reboot once installed

    then go back to Windows updates and install the others.

    post a new MGADiag report


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, September 6, 2013 9:56 PM
    Moderator