Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
'Not Running Genuine Windows' problem was cured - sadly now back again RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    I have the 'Windows not running genuine Windows' error.  I originally posted the problem on this thread:

    /Forums/en-US/30ca39ee-399c-42d6-8538-651bdf86da1c/not-running-genuine-windows-windows-freezes#cb0beb44-8ff1-4883-bdba-b8559c1779b9

    And the problem was cleared - brilliant (and thanks).  Sadly little more than a week later and the problem is back just as ugly as it was before:  Here is the MGA Output:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
    Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
    Windows Product ID: 00359-OEM-8992687-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E781CFDB-8756-40E1-8292-94DD30116411}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130318-1533
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Users\Theresa\AppData\Local\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E781CFDB-8756-40E1-8292-94DD30116411}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2638911523-3035945039-2831818849</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 5733Z</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.07</Version><SMBIOSVersion major="2" minor="6"/><Date>20111107000000.000000+000</Date></BIOS><HWID>FD873E07018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800006-02-1033-7601.0000-2862011
    Installation ID: 020074413440382941578134990984960310700241442733822412
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 7QJB7
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 01/07/2013 19:37:33

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 6:21:2013 07:27
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAonZYwZBgcrMgZGhoPq0YXCJQXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ACRSYS ACRPRDCT
      FACP ACRSYS ACRPRDCT
      HPET ACRSYS ACRPRDCT
      BOOT ACRSYS ACRPRDCT
      MCFG ACRSYS ACRPRDCT
      ASF! ACRSYS ACRPRDCT
      SLIC ACRSYS ACRPRDCT
      ASPT ACRSYS ACRPRDCT
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm
      SSDT PmRef CpuPm

    Any idea what is going on here?

    Monday, July 1, 2013 6:53 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    McAfee have a tool to get rid of Norton? - that's rich! :)

    I would recommend uninstalling McAfee, then running both the (proper) Norton Removal Tool, and the McAfee MCPR cleanup tool, and then installing a standalone AV such as Avast, AVG, or MSE (all free).

    Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

     

    Close all other programs, then run the tool. When it's complete, reboot the machine  whether it asks for it or not.

     

    Download the McAfee removal tool from:

     

    http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

     

    Click Save, and save the file to a folder on your computer.

    Navigate to the folder where you saved the file.

    right-click on MCPR.exe and select 'Run as Administrator'  to run the removal tool.

     

    when complete, reboot.

     

    After the reboot, open an Elevated Command Prompt, and run the following command

     

    NETSH WINSOCK RESET

     

    You'll be advised to reboot - do so.

    then post another MGADiag report.

    If that shows the system as genuine, then install MSE (it requires Genuine Validation before it will install) - if not I'd recommend Avast as the less likely to cause further problems.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 3, 2013 6:33 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    The common cause for these mismatches is a faulty Intel Rapid Storage Tech driver

    Download and install the latest version from...

    https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=22194

    you need

    iata_enu.exe

    reboot then run another MGADiag report and post the results.

    due to intermittent internet internet connection I was just now able to look at your other thread. looks like the same issue. what has happened on your computer since it was fixed?

    did you clone your drive? are you running any registry cleaners or speed up my pc type of products?

    what antivirus are you using?

    Monday, July 1, 2013 7:46 PM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    I have done nothing except browse internet, check emails etc.  No new software has been installed, I'm not running a registry cleaner and wouldn't know how to clone a drive.  I have BT Netprotect Plus antivirus running which is basically an ISP branded version of McAfee.  I have previously tried updating the driver you suggest but it doesn't seem to have worked.

    Thanks

    Tuesday, July 2, 2013 3:43 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    how long have you had this antivirus installed?

    if my internet stays up I will alert Noel

    Tuesday, July 2, 2013 11:54 PM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote

    The two threads do look to have the same problem.

    McAfee in all (any of) its guises is high on my list of suspects here.

    What other AVs have EVER been installed on this machine? - residuals from uninstalled AVs can often interfere, and McAfee gets it hooks into more places than most would care to tread (apart from Norton).

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 3, 2013 7:31 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    The machine came with Norton installed.  I had to run a Norton uninstaller (excuse my phraseology) from McAfee before installing McAfee.  Should I uninstall McAfee, take the repair steps you recommended last week and then reinstall McAfee (or a different AV)?

    Wednesday, July 3, 2013 4:30 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    McAfee have a tool to get rid of Norton? - that's rich! :)

    I would recommend uninstalling McAfee, then running both the (proper) Norton Removal Tool, and the McAfee MCPR cleanup tool, and then installing a standalone AV such as Avast, AVG, or MSE (all free).

    Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

     

    Close all other programs, then run the tool. When it's complete, reboot the machine  whether it asks for it or not.

     

    Download the McAfee removal tool from:

     

    http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

     

    Click Save, and save the file to a folder on your computer.

    Navigate to the folder where you saved the file.

    right-click on MCPR.exe and select 'Run as Administrator'  to run the removal tool.

     

    when complete, reboot.

     

    After the reboot, open an Elevated Command Prompt, and run the following command

     

    NETSH WINSOCK RESET

     

    You'll be advised to reboot - do so.

    then post another MGADiag report.

    If that shows the system as genuine, then install MSE (it requires Genuine Validation before it will install) - if not I'd recommend Avast as the less likely to cause further problems.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, July 3, 2013 6:33 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Oh sorry  - maybe McAfee just pointed me at the Norton removal tool.

    OK McAfee is gone, I ran NETSH WINSOCK RESET but with no discernable difference so I ran the commands you gave me last week and it has fixed it again.  Hopefully with MSE installed the problem won't rear its ugly head again.

    Thanks again!

    regards

    Peter

    Thursday, July 11, 2013 8:58 AM