locked
Windows 7 Genuine Advantage Validation Issue after reinstalling video drivers RRS feed

  • Question

  • Hi,

    I am having a similar problem like many others on this forum. I recently started seeing the pop up window messages telling me my Windows 7 was not genuine, though it came pre-installed when I purchased my computer directly through Dell and never had an issue for the 2 years I've had it. 

    The error messages seem to have started after I tried fixing a video problem by uninstalling and reinstalling video drivers. I ran into problems and needed to do a few reboots that required going through Safe Mode. Ultimately, I did a System Restore to fix things. Since then, the Windows Validation issue has been happening.

    After reading through other posts, I have already tried some basic things including doing a System Restore to a further previous point before the issues started happening. I also ran chkdsk /R and sfc /scannow at the command prompt as an administrator. Unfortunately, the validation issue seems to be persisting.

    I ran the Microsoft Genuine Advantage Diagnostic Tool (1.9.0027.0) and the results are below (with links broken until my account is verified):

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {1D2B0058-051B-4618-81CD-0692F8EB7E47}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{1D2B0058-051B-4618-81CD-0692F8EB7E47}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-3025314977-4112907139-4034415965</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L521X</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="7"/><Date>20121207000000.000000+000</Date></BIOS><HWID>4BFF3B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>CL09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18A1D581E8F7C</Val><Hash>UXqYTCJaK1W7S0m8ElYaW5v1Kl8=</Hash><Pid>81605-958-5195366-65827</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-1033-7601.0000-2272012
    Installation ID: 014721615225491221803613453302789993894356065233292071
    Processor Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: hxxp://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 12/8/2013 1:03:37 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000010100
    Event Time Stamp: 12:7:2013 15:13
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: MgAAAAEAAAABAAIAAQABAAAABAABAAEAln18Bc6ahDcCYWCaOIJKqpBuHIi4DryClmM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    CL09  
      FACP   DELL    CL09  
      DBGP   DELL    CL09  
      HPET   DELL    CL09  
      BOOT   DELL    CL09  
      MCFG   DELL    CL09  
      TCPA   DELL    CL09  
      SLIC   DELL    CL09  
      UEFI   DELL    CL09  
      ASF!   DELL    CL09  
      SLIC   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      ASPT   DELL    CL09  
      FPDT   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      SSDT   COMPAL  CRV ORB
      DMAR   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      SSDT   COMPAL  CRV ORB

    -----------------------

    I see the two lines referencing "Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui" and "Tampered File: %systemroot%\system32\drivers\spsys.sys" which I am guessing must be part of the issue.

    I understand I can try reinstalling Windows 7, but is there any other way to resolve this issue?

    Thanks for you help!

    Sunday, December 8, 2013 7:49 PM

Answers

  • I hate to say it, but I suspect that a repair install is going to be the easiest fix... (I have to battle myself between finding the cause, and a quick/solution for clients!)

    Download the SP1 Refresh for your language and edition from the links on these pages...

    Heidoc -Microsoft DR Download links

    The links are for downloads from the Digital River servers run for MS, so are about as safe as
    you can get :)

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk
    Image Burner, or (better still) your favourite burning application at the slowest speed possible.

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image'
    option from your app - or you'll end up with a useless coaster :)

    Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start
    the repair from there - you must start the repair from within a normal Windows
    boot.

    Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

    - and they should help you get through it (it's not as difficult as it looks!)

    Always ask questions first if you're unsure - either here, or in sevenforums.

    Good luck with it!



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, December 10, 2013 8:03 PM
    Moderator

All replies

  • Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys

    Please run a full CHKDSK and SFC scan....

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

    At the Command prompt, type

    CHKDSK C: /R

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

    At the Command prompt, type

    SFC /SCANNOW

    and hit the Enter key

    Wait for the scan to finish - make a note of any error messages - and then reboot.

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, December 8, 2013 9:58 PM
    Moderator
  • I ran chkdsk /r and sfc /scannow

    Here is the link to the CBS.log (https replaced with hxxps until my verification is done):

    hxxps://skydrive.live.com/redir?resid=6830F89769C9415E!190&authkey=!AAezk34cW4OTltk&ithint=file%2c.zip

    Here is the MGADiag report I ran afterwards:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
    Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
    Windows Product ID: 00359-OEM-8992687-00095
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {1D2B0058-051B-4618-81CD-0692F8EB7E47}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{1D2B0058-051B-4618-81CD-0692F8EB7E47}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-3025314977-4112907139-4034415965</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L521X</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="7"/><Date>20121207000000.000000+000</Date></BIOS><HWID>4BFF3B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>CL09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0014-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional 2007</Name><Ver>12</Ver><Val>1E18A1D581E8F7C</Val><Hash>UXqYTCJaK1W7S0m8ElYaW5v1Kl8=</Hash><Pid>81605-958-5195366-65827</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800095-02-1033-7601.0000-2272012
    Installation ID: 014721615225491221803613453302789993894356065233292071
    Processor Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: hxxp://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: hxxp://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: RMV82
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 12/8/2013 4:29:46 PM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0000000000010100
    Event Time Stamp: 12:7:2013 15:13
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys


    HWID Data-->
    HWID Hash Current: MgAAAAEAAAABAAIAAQABAAAABAABAAEAln18Bc6ahDcCYWCaOIJKqpBuHIi4DryClmM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    CL09  
      FACP   DELL    CL09  
      DBGP   DELL    CL09  
      HPET   DELL    CL09  
      BOOT   DELL    CL09  
      MCFG   DELL    CL09  
      TCPA   DELL    CL09  
      SLIC   DELL    CL09  
      UEFI   DELL    CL09  
      ASF!   DELL    CL09  
      SLIC   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      ASPT   DELL    CL09  
      FPDT   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      SSDT   COMPAL  CRV ORB
      DMAR   DELL    CL09  
      SSDT   COMPAL  CRV ORB
      SSDT   COMPAL  CRV ORB

    Sunday, December 8, 2013 10:38 PM
  • The SFC results are clear - which means that the problem is likely to be difficult to isolate.

    There don't appear to be any significant errors in the background CBS data, either.

    Let's see if another tool gives us any pointers...

    Please download and save  the CheckSUR tool from http://support.microsoft.com/kb/947821

    (you'll need to look in the details for Windows 7, downloading from the Microsoft Download Center)

    Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.

    The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file  - and an archive …\checksur.persist.log file

    Then zip the CheckSUR.log and upload it to your SkyDrive Public folder so I can take a look - post a link in your reply.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, December 8, 2013 11:00 PM
    Moderator
  • I ran the CheckSUR tool and it seemed to complete without any problems. Here is the link to the CheckSUR.log file that was generated.

    hxxps://skydrive.live.com/redir?resid=6830F89769C9415E!191&authkey=!ANavlkwxrusDhK4&ithint=file%2c.zip

    Monday, December 9, 2013 12:53 AM
  • Interesting result, there!

    Checking Component Store
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_0e9c0119a7ea1e59	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0ebb6eada7d2b408	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_0f4ab3fac0ece997	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_0f15caa0c1145e3a	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_0f19ad68c110e89b	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    (f)	CSI Payload File Missing	0x00000000	lsasrv.mof	amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c	
    (fix)	CSI Payload File Missing	CSI File Replaced	File: lsasrv.mof From: C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsasrv.mof
    

    It found and fixed a number of errors, all to do with different versions of the same file.

    This makes me think 'enemy action?' -

    Please download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, December 9, 2013 7:33 AM
    Moderator
  • Hi Noel,

    I already have Malwarebytes installed on my machine and I will typically run a Quick Scan intermittently without ever finding anything.

    This time, I went ahead and ran a Full Scan (after updating it of course) and it also ran without finding anything and reported "No malicious items detected."

    For what it's worth, I also ran a McAfee SecurityCenter Full Scan, but it was negative as well.

    I know you can never be too safe when it comes to malware, but it seems everything on my computer is running properly without any abnormal behavior at this time. It's just the Windows Activation Technologies window that keeps popping up daily telling me "This computer is not running genuine Windows."

    It sounds like the cause will be hard to find. Again, other than uninstall/reinstalling video drivers and having some "Windows did not shut down successfully" issues in the process, I can't think of anything really out of the ordinary that's happened to my computer.

    Any other ideas of what to do? Thanks again for your help with everything so far.

    Tuesday, December 10, 2013 7:17 AM
  • I hate to say it, but I suspect that a repair install is going to be the easiest fix... (I have to battle myself between finding the cause, and a quick/solution for clients!)

    Download the SP1 Refresh for your language and edition from the links on these pages...

    Heidoc -Microsoft DR Download links

    The links are for downloads from the Digital River servers run for MS, so are about as safe as
    you can get :)

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk
    Image Burner, or (better still) your favourite burning application at the slowest speed possible.

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image'
    option from your app - or you'll end up with a useless coaster :)

    Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start
    the repair from there - you must start the repair from within a normal Windows
    boot.

    Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

    - and they should help you get through it (it's not as difficult as it looks!)

    Always ask questions first if you're unsure - either here, or in sevenforums.

    Good luck with it!



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Tuesday, December 10, 2013 8:03 PM
    Moderator
  • Thanks for the input. Since it sounds like it this will take a while, I'll probably save this reinstall project for the weekend when I have more time (need to back up everything first). I'll let you know how it turns out. Thanks again!
    Wednesday, December 11, 2013 4:34 AM
  • You're welcome - good luck!

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, December 11, 2013 7:20 AM
    Moderator