Windows Vista (TM) Build 6002 This copy of Windows is not genuine

All replies

• 

  

  0

  Sign in to vote

  "woodrow4821" wrote in message news:fc1e8ba3-d33c-4a49-96ed-3eb390dfa9e8...

  This is a Dell laptop I have had for about 4 years.

  Recently the desktop went black and shows this in the corner.

   Windows Vista (TM)

  Build 6002

  This copy of Windows is not genuine

  Ran the Microsoft Genuine Advantage Diagnostic Tool and below are the results.  Any help is appreciated.

  Thanks,

  Jeff

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  Validation Status: Genuine
  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc004f012
  Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
  Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
  Windows Product ID: 89578-OEM-7332157-00204
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.0.6002.2.00010300.2.0.003
  ID: {7B84CAFC-605A-4BA4-A2D1-0249320C94A5}(1)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows Vista (TM) Home Premium
  Architecture: 0x00000000
  Build lab: 6002.vistasp2_gdr.120402-0336
  TTS Error: M:20110907105319292-
  
  
  Other data-->
  SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1420                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="4"/><Date>20080203000000.000000+000</Date></BIOS

  
  Licensing Data-->
  Software licensing service version: 6.0.6002.18005
  Name: Windows(TM) Vista, HomePremium edition
  Description: Windows Operating System - Vista, OEM_SLP channel
  Partial Product Key: B9HD2
  License Status: Licensed
  
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20000
  
  
  

   

   

  There appear to be no current activation problems - although you had a problem in September last year?

  Please validate Windows at www.microsoft.com/genuine/validate

  what happens?

  You should pass - in which case you'll be offered IE9 and MSE (you don't have to take them!)

   

  Once done, please post a new MGADiag report.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Proposed as answer by Darin Smith MS Monday, May 21, 2012 9:38 PM

  Sunday, May 20, 2012 9:46 PM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for the quick response, Noel.  I just ran the validation process.  The results are listed below. Looks like it passed and I was offered MSE.  

  We don't remember what the problem was in September.  We did have an episode with the PC Security 2011 bug I think but I believe we cleaned him up ok.

  What's next?
  

  Jeff

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  Validation Status: Genuine
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
  Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
  Windows Product ID: 89578-OEM-7332157-00204
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.0.6002.2.00010300.2.0.003
  ID: {7B84CAFC-605A-4BA4-A2D1-0249320C94A5}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: Registered, 1.9.42.0
  Signed By: Microsoft
  Product Name: Windows Vista (TM) Home Premium
  Architecture: 0x00000000
  Build lab: 6002.vistasp2_gdr.120402-0336
  TTS Error: M:20110907105319292-
  Validation Diagnostic: 
  Resolution Status: N/A
  
  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: 6.0.6002.16398
  
  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: 2.0.48.0
  OGAExec.exe Signed By: Microsoft
  OGAAddin.dll Signed By: Microsoft
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: Registered, 2.0.48.0
  Signed By: Microsoft
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\donna\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{7B84CAFC-605A-4BA4-A2D1-0249320C94A5}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-2372112793-857742600-2696787891</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1420                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="4"/><Date>20080203000000.000000+000</Date></BIOS><HWID>AD313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 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
  
  Licensing Data-->
  Software licensing service version: 6.0.6002.18005
  Name: Windows(TM) Vista, HomePremium edition
  Description: Windows Operating System - Vista, OEM_SLP channel
  Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 89578-00146-321-500204-02-1033-6000.0000-1342008
  Installation ID: 005625537074632055293906095746045386180036115300475531
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
  Partial Product Key: B9HD2
  License Status: Licensed
  
  Windows Activation Technologies-->
  N/A
  
  HWID Data-->
  HWID Hash Current: PgAAAAEABgABAAMAAQABAAAAAwABAAEAJJS+KHoQGtPqTSSWUmauf0aD8MBSvOCjznDy9Ob3dHKUKKxWKoU=
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20000
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC DELL   M08    
    FACP DELL   M08    
    HPET DELL   M08    
    BOOT DELL   M08    
    MCFG DELL   M08    
    SLIC DELL   M08    
    SSDT PmRef CpuPm
  
  

  
  

  Tuesday, May 22, 2012 2:24 AM
• 

  

  0

  Sign in to vote

  That all looks fine now - hopefully the notification has gone?

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 22, 2012 7:06 AM

  Moderator
• 

  

  0

  Sign in to vote

  You can maybe look up what happened in September.

   

  Click Start - Control Panel (and select Classic view in the left hand pane)
  choose Administrative Tools then choose Reliability and Performance Monitor
  and choose MonitoringTools then Reliability Monitor (type Reliability in
  search on Start) . This list is a chart of software installs, uninstalls,
  Windows updates, and crashes by date (scroll left to see earlier dates).
  This will list what you installed and when.

  
  --
  .
  --

  "woodrow4821" wrote in message news:74d51aee-01e5-4892-8288-7d94671a4405...

  > Thanks for the quick response, Noel.  I just ran the validation process.  The results are listed below. Looks like it passed and I was offered MSE. 
  >
  > We don't remember what the problem was in September.  We did have an episode with the PC Security 2011 bug I think but I believe we cleaned him up ok.
  >
  > What's next?
  >
  >
  > Jeff
  >
  > Diagnostic Report (1.9.0027.0):
  > -----------------------------------------
  > Windows Validation Data-->
  > Validation Status: Genuine
  > Validation Code: 0
  > Cached Online Validation Code: 0x0
  > Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
  > Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
  > Windows Product ID: 89578-OEM-7332157-00204
  > Windows Product ID Type: 2
  > Windows License Type: OEM SLP
  > Windows OS version: 6.0.6002.2.00010300.2.0.003
  > ID: {7B84CAFC-605A-4BA4-A2D1-0249320C94A5}(3)
  > Is Admin: Yes
  > TestCab: 0x0
  > LegitcheckControl ActiveX: Registered, 1.9.42.0
  > Signed By: Microsoft
  > Product Name: Windows Vista (TM) Home Premium
  > Architecture: 0x00000000
  > Build lab: 6002.vistasp2_gdr.120402-0336
  > TTS Error: M:20110907105319292-
  > Validation Diagnostic:
  > Resolution Status: N/A
  >
  > Vista WgaER Data-->
  > ThreatID(s): N/A, hr = 0x80070002
  > Version: 6.0.6002.16398
  >
  > Windows XP Notifications Data-->
  > Cached Result: N/A, hr = 0x80070002
  > File Exists: No
  > Version: N/A, hr = 0x80070002
  > WgaTray.exe Signed By: N/A, hr = 0x80070002
  > WgaLogon.dll Signed By: N/A, hr = 0x80070002
  >
  > OGA Notifications Data-->
  > Cached Result: N/A, hr = 0x80070002
  > Version: 2.0.48.0
  > OGAExec.exe Signed By: Microsoft
  > OGAAddin.dll Signed By: Microsoft
  >
  > OGA Data-->
  > Office Status: 109 N/A
  > OGA Version: Registered, 2.0.48.0
  > Signed By: Microsoft
  > Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  >
  > Browser Data-->
  > Proxy settings: N/A
  > User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  > Default Browser: C:\Users\donna\AppData\Local\Google\Chrome\Application\chrome.exe
  > Download signed ActiveX controls: Prompt
  > Download unsigned ActiveX controls: Disabled
  > Run ActiveX controls and plug-ins: Allowed
  > Initialize and script ActiveX controls not marked as safe: Disabled
  > Allow scripting of Internet Explorer Webbrowser control: Disabled
  > Active scripting: Allowed
  > Script ActiveX controls marked as safe for scripting: Allowed
  >
  > File Scan Data-->
  >
  > Other data-->
  > Office Details: <GenuineResults><MachineData><UGUID>{7B84CAFC-605A-4BA4-A2D1-0249320C94A5}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-2372112793-857742600-2696787891</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1420                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="4"/><Date>20080203000000.000000+000</Date></BIOS><HWID>AD313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
  >
  > Spsys.log Content: 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
  >
  > Licensing Data-->
  > Software licensing service version: 6.0.6002.18005
  > Name: Windows(TM) Vista, HomePremium edition
  > Description: Windows Operating System - Vista, OEM_SLP channel
  > Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
  > Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  > Extended PID: 89578-00146-321-500204-02-1033-6000.0000-1342008
  > Installation ID: 005625537074632055293906095746045386180036115300475531
  > Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
  > Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
  > Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
  > Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
  > Partial Product Key: B9HD2
  > License Status: Licensed
  >
  > Windows Activation Technologies-->
  > N/A
  >
  > HWID Data-->
  > HWID Hash Current: PgAAAAEABgABAAMAAQABAAAAAwABAAEAJJS+KHoQGtPqTSSWUmauf0aD8MBSvOCjznDy9Ob3dHKUKKxWKoU=
  >
  > OEM Activation 1.0 Data-->
  > N/A
  >
  > OEM Activation 2.0 Data-->
  > BIOS valid for OA 2.0: yes
  > Windows marker version: 0x20000
  > OEMID and OEMTableID Consistent: yes
  > BIOS Information:
  >  ACPI Table Name OEMID Value OEMTableID Value
  >  APIC DELL   M08   
  >  FACP DELL   M08   
  >  HPET DELL   M08   
  >  BOOT DELL   M08   
  >  MCFG DELL   M08   
  >  SLIC DELL   M08   
  >  SSDT PmRef CpuPm
  >
  >
  >
  >
  >

  Tuesday, May 22, 2012 7:45 AM
• 

  

  0

  Sign in to vote

  "DavidMCandy" wrote in message news:f562370d-6f77-4543-8725-252e0b959a38...

  You can maybe look up what happened in September.

   

  Click Start - Control Panel (and select Classic view in the left hand pane)
  choose Administrative Tools then choose Reliability and Performance Monitor
  and choose MonitoringTools then Reliability Monitor (type Reliability in
  search on Start) . This list is a chart of software installs, uninstalls,
  Windows updates, and crashes by date (scroll left to see earlier dates).
  This will list what you installed and when.

  
  >

   

  David - you may be able to help me.

   

  Do you have any idea where the TTS data is held? I assume it's somewhere in the registry, but have no idea where to look unless I can get hold of a machine with a TTS error (or create one!)

  It would be useful to be able to clear it (and the related Spsys.log file) to  tidy things up after a fix, so as to re-assess the system.

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 22, 2012 8:00 AM

  Moderator
• 

  

  0

  Sign in to vote

  At a guess this is the service that detects memory tampers.

   

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FileInfo

   

  I'm using Procmon. WGADiag checks for Procmon. Curious.

   

  There is 74000 events.

  --

  ..

  --

  "Noel D Paton" wrote in message news:2a0203fd-449e-42f0-a6b3-f498d5edeeaf...

  > "DavidMCandy" wrote in message

  > news:f562370d-6f77-4543-8725-252e0b959a38...

  > You can maybe look up what happened in September.

  >

  > Click Start - Control Panel (and select Classic view in the left hand

  > pane)

  > choose Administrative Tools then choose Reliability and Performance

  > Monitor

  > and choose MonitoringTools then Reliability Monitor (type Reliability in

  > search on Start) . This list is a chart of software installs, uninstalls,

  > Windows updates, and crashes by date (scroll left to see earlier dates).

  > This will list what you installed and when.

  >

  >>

  >

  > David - you may be able to help me.

  >

  > Do you have any idea where the TTS data is held? I assume it's somewhere

  > in the registry, but have no idea where to look unless I can get hold of a

  > machine with a TTS error (or create one!)

  > It would be useful to be able to clear it (and the related Spsys.log file)

  > to tidy things up after a fix, so as to re-assess the system.

  >

  >

  > --------------------------------------------------------------------------------

  > Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed

  > Sloth

   

   

  Tuesday, May 22, 2012 9:17 AM
• 

  

  0

  Sign in to vote

  "DavidMCandy" wrote in message news:16c6fdfa-423f-4706-9fd7-b796f4451a7d...

  At a guess this is the service that detects memory tampers.

   

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FileInfo

   

  I'm using Procmon. WGADiag checks for Procmon. Curious.

   

  There is 74000 events.

   

   

   

   

   

  Thanks, David - I'll have a play :)

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 22, 2012 10:03 AM

  Moderator
• 

  

  0

  Sign in to vote

  Well, we're still seeing the message in the corner, but in the Application Log I see an entry with a status of "Information" saying... 

  "Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f"

  It has an Event ID of 12305 and a Source of Security-Licensing-SL C

  Aside from the nagging message the laptop seems to work just fine. 

  Any idea where to look?  Everything I see says it is genuine except the desktop.  Weird!

  Thanks,

  Jeff.

  Tuesday, May 22, 2012 6:52 PM
• 

  

  0

  Sign in to vote

  Try validating at www.microsoft.com/genuine/validate - see if that clears it.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 22, 2012 7:33 PM

  Moderator
• 

  

  0

  Sign in to vote

  So sorry for the superfluous detail about the Application Log.  

  In answer to your question from last night, after running the validation at www.microsoft.com/genuine/validate we are still seeing the notification in the corner of the desktop.

  Jeff

  Tuesday, May 22, 2012 8:58 PM
• 

  

  0

  Sign in to vote

  "woodrow4821" wrote in message news:92369f80-2df4-41d2-bac6-e5fe04495e3b...

  So sorry for the superfluous detail about the Application Log. 

  In answer to your question from last night, after running the validation at www.microsoft.com/genuine/validate we are still seeing the notification in the corner of the desktop.

  Jeff

  Nothing is superfluous at this stage :)

  Please post a new MGADiag report - it should have changed a little.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 22, 2012 9:12 PM

  Moderator
• 

  

  0

  Sign in to vote

  Ok, here's the new MGADiag Report. 

  Thanks again,

  Jeff

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  Validation Status: Genuine
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
  Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
  Windows Product ID: 89578-OEM-7332157-00204
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.0.6002.2.00010300.2.0.003
  ID: {7B84CAFC-605A-4BA4-A2D1-0249320C94A5}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: Registered, 1.9.42.0
  Signed By: Microsoft
  Product Name: Windows Vista (TM) Home Premium
  Architecture: 0x00000000
  Build lab: 6002.vistasp2_gdr.120402-0336
  TTS Error: M:20110907105319292-
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: 6.0.6002.16398

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: 2.0.48.0
  OGAExec.exe Signed By: Microsoft
  OGAAddin.dll Signed By: Microsoft

  OGA Data-->
  Office Status: 109 N/A
  OGA Version: Registered, 2.0.48.0
  Signed By: Microsoft
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Users\donna\AppData\Local\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{7B84CAFC-605A-4BA4-A2D1-0249320C94A5}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010300.2.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-B9HD2</PKey><PID>89578-OEM-7332157-00204</PID><PIDType>2</PIDType><SID>S-1-5-21-2372112793-857742600-2696787891</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron 1420                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A07</Version><SMBIOSVersion major="2" minor="4"/><Date>20080203000000.000000+000</Date></BIOS><HWID>AD313507018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

  Spsys.log Content: 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

  Licensing Data-->
  Software licensing service version: 6.0.6002.18005
  Name: Windows(TM) Vista, HomePremium edition
  Description: Windows Operating System - Vista, OEM_SLP channel
  Activation ID: bffdc375-bbd5-499d-8ef1-4f37b61c895f
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 89578-00146-321-500204-02-1033-6000.0000-1342008
  Installation ID: 005625537074632055293906095746045386180036115300475531
  Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
  Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
  Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
  Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
  Partial Product Key: B9HD2
  License Status: Licensed

  Windows Activation Technologies-->
  N/A

  HWID Data-->
  HWID Hash Current: PgAAAAEABgABAAMAAQABAAAAAwABAAEAJJS+KHoQGtPqTSSWUmauf0aD8MBSvOCjznDy9Ob3dHKUKKxWKoU=

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20000
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   DELL    M08   
    FACP   DELL    M08   
    HPET   DELL    M08   
    BOOT   DELL    M08   
    MCFG   DELL    M08   
    SLIC   DELL    M08   
    SSDT   PmRef  CpuPm

  Tuesday, May 22, 2012 10:26 PM
• 

  

  0

  Sign in to vote

  "woodrow4821" wrote in message news:ca12c363-3da8-465f-99ab-4c2175cd031f...

  Ok, here's the new MGADiag Report.

  Thanks again,

  Jeff

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->
  Validation Status: Genuine
  Validation Code: 0
  Cached Online Validation Code: 0x0
  Windows Product Key: *****-*****-F4GJK-KG77H-B9HD2
  Windows Product Key Hash: iJAth4TbScMi8HdcPurlASXdEkw=
  Windows Product ID: 89578-OEM-7332157-00204
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.0.6002.2.00010300.2.0.003
  ID: {7B84CAFC-605A-4BA4-A2D1-0249320C94A5}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: Registered, 1.9.42.0
  Signed By: Microsoft
  Product Name: Windows Vista (TM) Home Premium
  Architecture: 0x00000000
  Build lab: 6002.vistasp2_gdr.120402-0336
  TTS Error: M:20110907105319292-
  

   

   

  The only change from the original is the one I highlighted above (which is what I expected) - and tells us that Windows considers your system OK.

  Why it should be showing the notification still, I have no idea! - my best guess is that a registry entry somewhere has got stuck, or that there is some kind of malware present.

   

  I'd start with the standard file system checks (SFC and CHKDSK) and follow up with a full system scan with MalwareBytes Anti-Malware  (www.malwarebytes.org)

  Please run a full CHKDSK and SFC scan.... 

  type in the Search box

  CMD.EXE

  right-click on the only file that is found

  Select Run as Administrator

  - the Elevated Command Prompt window should pop up

  At the Command prompt, type

  CHKDSK C: /R

  and hit the Enter key.

   

  You will be told that the drive is locked,

  and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

   

   

  The chkdsk will take a few hours depending on the size

  of the drive, so be patient!

   

  After the CHKDSK has run, Windows should boot normally

  (possibly after a second auto-reboot) - then run the SFC

   

  SFC -System File Checker - Instructions

  Click on the Start button

  type in the Search box

  CMD.EXE

  right-click on the only file that is found

   

  Select Run as Administrator

  - the Elevated Command Prompt window should pop up

  At the Command prompt, type

   

  SFC /SCANNOW

   

  and hit the Enter key

   

  Wait for the scan to finish - make a note of any error messages - and then reboot.

     

   

   

   

   

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  • Marked as answer by Darin Smith MS Tuesday, May 29, 2012 7:18 PM

  Tuesday, May 22, 2012 10:34 PM

  Moderator
• 

  

  0

  Sign in to vote

  Sorry for the lag in responding.  My access to this laptop is a little limited as it does not belong to me. It belongs to a family member.  As it is, though, I am trusted with it, so that's good.

  In the above suggestions I was most worried about Malware so the first thing I've done is run the MalwareBytes Anti-Malware tool.  I ran the full scan of both the C: drive and the D: (recovery) drive.  I was pleased to find that nothing malicious was found.

  I will run the chkdsk next and the system file checker after that.  This will take place over the course of the weekend.  I should have the results by Tuesday.

  POSSIBLE EXTRA DETAIL ALERT!!  -  One thing I might mention here is when I ran the Reliability Monitor I found there were a ton of updates run on 5/13/12.  The problem was mentioned to me on 5/16/12.  It had been showing that "...not genuine" message for "a couple of days now" by then.  I'm wondering if there was some step in those updates that might have caused it.

  Thanks again for all the help,

  Jeff

   

  Friday, May 25, 2012 4:17 PM
• 

  

  0

  Sign in to vote

  That's always a possibility - but doesn't detract from anything said here so far (I think!)

  carry on with the detections, and see what happens.

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Friday, May 25, 2012 5:49 PM

  Moderator
• 

  

  0

  Sign in to vote

  Well, the message appears to be gone!  That's the good news.

  I think I was running the processes backwards.  Since I've been using LogMeIn to access the computer I wanted to watch what was going on, knowing I was not going to be able to watch the chkdsk.  I tried to run the SFC but it stopped at 59% saying it could not go on.  When I looked in the Windows Event Viewer I found an item saying the file system is corrupt and to run chkdsk. 
  

  I know I'm going to need to run the CHKDSK and proceed from there.  I'm hoping it will not come to using the restore disk.  My work with this laptop is not over, but the message is gone.  I thank you for the help with that.  If I need help with the corrupt file system I will definitely start a new thread for that.  You have been very helpful.  Thank you.

  I consider the matter of the "This copy of Windows is not genuine" message closed.

  Thank you.

  Jeff

  Tuesday, May 29, 2012 3:54 AM
• 

  

  0

  Sign in to vote

  Great - thanks for coming back to let us know!

  ---

  Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

  Tuesday, May 29, 2012 10:28 AM

  Moderator