Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows 7 Build 7600 / This copy of Windows is not genuine RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I've been using windows 7 now since launch, I have a genuine retail box which I bought at launch and recently (2 - 3 months ago) I upgraded my hardware. In the last 2 weeks following a windows update I keep getting messages stating: You may be a victim of software counterfeiting and asking to go online and resolve now. However it isn't letting me do that(I get error code 0x8007000D the data is invalid).  I emailed a log over (support ref: 1131000681) and havn't received an actual responce yet just an automated acknowledgement.

    It's now not letting me run the log file utility when I click on the button to download nothing happens, please advise.

    Edit: Diagnostic tool ran:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0x8007000d
    Windows Product Key: *****-*****-7VD4Y-6YTW4-V2DTD
    Windows Product Key Hash: GiO2PT2xNFtmOUPeQhT46W+KzBo=
    Windows Product ID: 00359-112-4377851-85811
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {A06104B5-EDAD-47BA-8749-B08338F23671}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office XP Small Business - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A06104B5-EDAD-47BA-8749-B08338F23671}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-V2DTD</PKey><PID>00359-112-4377851-85811</PID><PIDType>5</PIDType><SID>S-1-5-21-3671130120-1032393326-450427490</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55A-UD3</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F6</Version><SMBIOSVersion major="2" minor="4"/><Date>20100211000000.000000+000</Date></BIOS><HWID>46BB3607018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91130409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Small Business</Name><Ver>10</Ver><Val>253F66870C5C4E4</Val><Hash>5EVVExPV9CauhjkdNnT4Ir1abTA=</Hash><Pid>54188-OEM-1794601-04594</Pid><PidType>4</PidType></Product></Products><Applications><App Id="16" Version="10" Result="100"/><App Id="19" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007000D' to display the error text.
    Error: 0x8007000D

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 5:10:2010 18:28
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEA6GGA3cxaQsaAlgrVQEBMiwx0Yj1k86YqdlY=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   GBT     GBTUACPI
      FACP   GBT     GBTUACPI
      HPET   GBT     GBTUACPI
      MCFG   GBT     GBTUACPI
      EUDS   GBT     
      TAMG   GBT     GBT   B0
      SSDT   INTEL  PPM RCM

    Monday, May 10, 2010 5:20 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Something has interfered with the software protection service.

    1. type services.msc in the start menu, press enter, scroll down to a service called software protection. Insure it is set to automatic [delayed start], if not right click on it, set it to automatic [delayed start] then click apply (or OK). right click on the service again and select start to start the service if it is not running. Write down any errors that occur through this process
    2. If the above did not apply, or if it did not fix the problem type cmd in the start menu, then right click on the cmd icon that appears, select run as administrator, type sfc /scannow and allow it to run, follow any instructions to reboot.
    3. If that did not do the trick then type system restore in the search box, start the restoration process to a save point dated prior to the first non genuine status.

    Let us know if this helps, submit a new report at anytime if you feel it has been repaired so we can verify.

    Monday, May 10, 2010 7:10 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    A folder "Windows\sistem32" doesn't exist in any version of Windows. If you didn't create it yourself, you may have caught some malware that changed important system settings. Try "sfc/scannow" to check that. As a temporary solution, you could move sppsvc.exe manually into the "Windows\system32" folder and register it with "regsvr32" ("regsvr32 C:\Windows\system32\sppsvc.exe").

    "I think there is a world market for maybe five computers.” (Thomas J. Watson, Sr.)
    Wednesday, May 12, 2010 9:01 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Corbana,

      While the word "sisteme" is Romanian for "System", non-english versions of Windows still use the Windows\system32 spelling for that folder.  In other words, if you had a Romanian version of Windows, the "Windows\system32" folder would still be spelled "Windows\system32".

      Since this "Windows\sistem32" folder is not a Windows system folder, it was not created by Windows during install. So it had to be created either by a user of the computer, by a legitimate program or by malware. The fact that an importent Windows service has been remapped to a file located in a non-windows system folder suggests to me that it's likely the work of malware.

      Unfortunatly, remapping services (and possible malware) is outside my expertise. Personally I would suggest reinstalling.  But if that is not acceptable, you can create a (no cost) support request at http://support.microsoft.com/gp/contactwga for additional assistance. (Note: I can't guarantee they will be able to fix the issue without the need for a reinstall). 

    Sorry I couldn't be more help,

    Darin MS
    Wednesday, May 12, 2010 9:53 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Something has interfered with the software protection service.

    1. type services.msc in the start menu, press enter, scroll down to a service called software protection. Insure it is set to automatic [delayed start], if not right click on it, set it to automatic [delayed start] then click apply (or OK). right click on the service again and select start to start the service if it is not running. Write down any errors that occur through this process
    2. If the above did not apply, or if it did not fix the problem type cmd in the start menu, then right click on the cmd icon that appears, select run as administrator, type sfc /scannow and allow it to run, follow any instructions to reboot.
    3. If that did not do the trick then type system restore in the search box, start the restoration process to a save point dated prior to the first non genuine status.

    Let us know if this helps, submit a new report at anytime if you feel it has been repaired so we can verify.

    Monday, May 10, 2010 7:10 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    OK I have tried system restore and it removed the blacked out desktop but within an hour of using the computer I get the message again stating I may be a victim of software counterfeiting and asking to go online and resolve now. I have also tried the system file checker to no avail.

    When checking the services.msc option I have found that SPP is mapped to "C:\Windows\sistem32\sppsvc.exe" rather than "C:\Windows\system32\sppsvc.exe" unfortunately I cannot see how to remap this so I am unsure on my next step. Please can you advise?

    Wednesday, May 12, 2010 8:40 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    A folder "Windows\sistem32" doesn't exist in any version of Windows. If you didn't create it yourself, you may have caught some malware that changed important system settings. Try "sfc/scannow" to check that. As a temporary solution, you could move sppsvc.exe manually into the "Windows\system32" folder and register it with "regsvr32" ("regsvr32 C:\Windows\system32\sppsvc.exe").

    "I think there is a world market for maybe five computers.” (Thomas J. Watson, Sr.)
    Wednesday, May 12, 2010 9:01 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Corbana,

      While the word "sisteme" is Romanian for "System", non-english versions of Windows still use the Windows\system32 spelling for that folder.  In other words, if you had a Romanian version of Windows, the "Windows\system32" folder would still be spelled "Windows\system32".

      Since this "Windows\sistem32" folder is not a Windows system folder, it was not created by Windows during install. So it had to be created either by a user of the computer, by a legitimate program or by malware. The fact that an importent Windows service has been remapped to a file located in a non-windows system folder suggests to me that it's likely the work of malware.

      Unfortunatly, remapping services (and possible malware) is outside my expertise. Personally I would suggest reinstalling.  But if that is not acceptable, you can create a (no cost) support request at http://support.microsoft.com/gp/contactwga for additional assistance. (Note: I can't guarantee they will be able to fix the issue without the need for a reinstall). 

    Sorry I couldn't be more help,

    Darin MS
    Wednesday, May 12, 2010 9:53 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    The version I installed was an English version.

    The "Sistem32" folder does not exist on my machine anywhere.

    I have formatted the machine now and the message has stopped appearing and the  service is pointing at the correct file so all is well in the world again, a little more extreme than I would have like but better safe than sorry.

    Thanks for all your help

    Thursday, May 13, 2010 10:44 AM