Answered by:
'Not Running Genuine Windows' problem was cured - sadly now back again

Question
-
Hi
I have the 'Windows not running genuine Windows' error. I originally posted the problem on this thread:
/Forums/en-US/30ca39ee-399c-42d6-8538-651bdf86da1c/not-running-genuine-windows-windows-freezes#cb0beb44-8ff1-4883-bdba-b8559c1779b9
And the problem was cleared - brilliant (and thanks). Sadly little more than a week later and the problem is back just as ugly as it was before: Here is the MGA Output:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-WJ2H8-R6B6D-7QJB7
Windows Product Key Hash: ckKNc+BBPDWmo1LUlOkraNjlQ34=
Windows Product ID: 00359-OEM-8992687-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {E781CFDB-8756-40E1-8292-94DD30116411}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Theresa\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E781CFDB-8756-40E1-8292-94DD30116411}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-7QJB7</PKey><PID>00359-OEM-8992687-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2638911523-3035945039-2831818849</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 5733Z</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.07</Version><SMBIOSVersion major="2" minor="6"/><Date>20111107000000.000000+000</Date></BIOS><HWID>FD873E07018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800006-02-1033-7601.0000-2862011
Installation ID: 020074413440382941578134990984960310700241442733822412
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 7QJB7
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 01/07/2013 19:37:33
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 6:21:2013 07:27
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAonZYwZBgcrMgZGhoPq0YXCJQXF0=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS ACRPRDCT
FACP ACRSYS ACRPRDCT
HPET ACRSYS ACRPRDCT
BOOT ACRSYS ACRPRDCT
MCFG ACRSYS ACRPRDCT
ASF! ACRSYS ACRPRDCT
SLIC ACRSYS ACRPRDCT
ASPT ACRSYS ACRPRDCT
SSDT PmRef CpuPm
SSDT PmRef CpuPm
SSDT PmRef CpuPm
Any idea what is going on here?
Monday, July 1, 2013 6:53 PM
Answers
-
McAfee have a tool to get rid of Norton? - that's rich! :)
I would recommend uninstalling McAfee, then running both the (proper) Norton Removal Tool, and the McAfee MCPR cleanup tool, and then installing a standalone AV such as Avast, AVG, or MSE (all free).
Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home
Close all other programs, then run the tool. When it's complete, reboot the machine whether it asks for it or not.
Download the McAfee removal tool from:
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
Click Save, and save the file to a folder on your computer.
Navigate to the folder where you saved the file.
right-click on MCPR.exe and select 'Run as Administrator' to run the removal tool.
when complete, reboot.
After the reboot, open an Elevated Command Prompt, and run the following command
NETSH WINSOCK RESET
You'll be advised to reboot - do so.
then post another MGADiag report.
If that shows the system as genuine, then install MSE (it requires Genuine Validation before it will install) - if not I'd recommend Avast as the less likely to cause further problems.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, July 7, 2013 8:41 AM
- Marked as answer by Noel D PatonModerator Sunday, July 21, 2013 8:54 AM
Wednesday, July 3, 2013 6:33 PMModerator
All replies
-
The common cause for these mismatches is a faulty Intel Rapid Storage Tech driver
Download and install the latest version from...
https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=22194
you need
iata_enu.exe
reboot then run another MGADiag report and post the results.
due to intermittent internet internet connection I was just now able to look at your other thread. looks like the same issue. what has happened on your computer since it was fixed?
did you clone your drive? are you running any registry cleaners or speed up my pc type of products?
what antivirus are you using?
- Edited by george1009Editor Monday, July 1, 2013 8:11 PM edit
Monday, July 1, 2013 7:46 PMAnswerer -
Hi
I have done nothing except browse internet, check emails etc. No new software has been installed, I'm not running a registry cleaner and wouldn't know how to clone a drive. I have BT Netprotect Plus antivirus running which is basically an ISP branded version of McAfee. I have previously tried updating the driver you suggest but it doesn't seem to have worked.
Thanks
Tuesday, July 2, 2013 3:43 PM -
how long have you had this antivirus installed?
if my internet stays up I will alert Noel
Tuesday, July 2, 2013 11:54 PMAnswerer -
The two threads do look to have the same problem.
McAfee in all (any of) its guises is high on my list of suspects here.
What other AVs have EVER been installed on this machine? - residuals from uninstalled AVs can often interfere, and McAfee gets it hooks into more places than most would care to tread (apart from Norton).
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Wednesday, July 3, 2013 7:31 AMModerator -
Hi
The machine came with Norton installed. I had to run a Norton uninstaller (excuse my phraseology) from McAfee before installing McAfee. Should I uninstall McAfee, take the repair steps you recommended last week and then reinstall McAfee (or a different AV)?
Wednesday, July 3, 2013 4:30 PM -
McAfee have a tool to get rid of Norton? - that's rich! :)
I would recommend uninstalling McAfee, then running both the (proper) Norton Removal Tool, and the McAfee MCPR cleanup tool, and then installing a standalone AV such as Avast, AVG, or MSE (all free).
Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home
Close all other programs, then run the tool. When it's complete, reboot the machine whether it asks for it or not.
Download the McAfee removal tool from:
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
Click Save, and save the file to a folder on your computer.
Navigate to the folder where you saved the file.
right-click on MCPR.exe and select 'Run as Administrator' to run the removal tool.
when complete, reboot.
After the reboot, open an Elevated Command Prompt, and run the following command
NETSH WINSOCK RESET
You'll be advised to reboot - do so.
then post another MGADiag report.
If that shows the system as genuine, then install MSE (it requires Genuine Validation before it will install) - if not I'd recommend Avast as the less likely to cause further problems.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, July 7, 2013 8:41 AM
- Marked as answer by Noel D PatonModerator Sunday, July 21, 2013 8:54 AM
Wednesday, July 3, 2013 6:33 PMModerator -
Oh sorry - maybe McAfee just pointed me at the Norton removal tool.
OK McAfee is gone, I ran NETSH WINSOCK RESET but with no discernable difference so I ran the commands you gave me last week and it has fixed it again. Hopefully with MSE installed the problem won't rear its ugly head again.
Thanks again!
regards
Peter
Thursday, July 11, 2013 8:58 AM