Windows 7: Windows not genuine - Mine too ... please help

Uniontownship · 24 Jan 2013

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
 
Validation Code: 0x8004FE22
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
Windows Product ID: 00359-OEM-8992687-00057
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {2129FC3D-C2F1-4211-8094-F61F9AD55C7E}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
 
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
 
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
 
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
 
OGA Data-->
Office Status: 100 Genuine
Microsoft FrontPage 2002 - 100 Genuine
Microsoft Office Ultimate 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
 
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
 
File Scan Data-->
 
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{2129FC3D-C2F1-4211-8094-F61F9AD55C7E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W8DQG</PKey><PID>00359-OEM-8992687-00057</PID><PIDType>2</PIDType><SID>S-1-5-21-78155825-753345144-48407624</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite A505</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>1.40</Version><SMBIOSVersion major="2" minor="6"/><Date>20100831000000.000000+000</Date></BIOS><HWID>C4FC3907018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90170409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft FrontPage 2002</Name><Ver>10</Ver><Val>8D88782DA6A25F6</Val><Hash>n8avLcQL+Pq2p/VqsWkx8WuvSDw=</Hash><Pid>54196-758-4529877-16884</Pid><PidType>1</PidType></Product><Product GUID="{91120000-002E-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Ultimate 2007</Name><Ver>12</Ver><Val>76FC84525B8177A</Val><Hash>3Bsynl3sASoS+1Gb9txXlgN/dso=</Hash><Pid>81608-957-2693276-65020</Pid><PidType>1</PidType></Product></Products><Applications><App Id="17" Version="10" Result="100"/><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 
 
Spsys.log Content: 0x80070002
 
Licensing Data-->
Software licensing service version: 6.1.7601.17514
 
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800057-02-1033-7600.0000-3452009
Installation ID: 012854539422411551255532323014742105374482692246705786
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: W8DQG
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 1/24/2013 9:10:05 AM
 
Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000000800
Event Time Stamp: 1:18:2013 13:44
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
 
 
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAIAAAABAAAAAgABAAEA6GGCJQLfBDOeYo5oCJ8c4AhuJEM8VHwuHiBcXQ==
 
OEM Activation 1.0 Data-->
N/A
 
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
ACPI Table Name OEMID Value OEMTableID Value
APIC TOSINV TOSINV00
FACP TOSINV TOSINV00
HPET TOSINV TOSINV00
BOOT TOSINV TOSINV00
MCFG TOSINV TOSINV00
WDAT INTEL Calpella
ASF! TOSINV TOSINV00
SLIC TOSINV TOSINV00
SSDT INTEL SataAhci
ASPT INTEL Calpella
SSDT INTEL SataAhci

NoelDP · 24 Jan 2013

Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

To confirm that the problem is what I think it is, please run the following commands in an Elevated Command Prompt window and post the results.

REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S
REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S
REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Uniontownship · 25 Jan 2013

I entered the information as per instructed and this is what it does. Actually it does nothing.

C:\Users\Tina> REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-407
7-4AD6-8658-327C2C86C5AA} /S

C:\Users\Tina>REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077
-4AD6-8658-327C2C86C5AA} /S

C:\Users\Tina>REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-3
27C2C86C5AA} /S

C:\Users\Tina>REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077
-4AD6-8658-327C2C86C5AA} /S

C:\Users\Tina>

NoelDP · 25 Jan 2013

That's very odd! - I would expect *some* kind of response from the commands!
Please run the following commands and see what happens

DIR C:\Windows\System32\config

do you get a listing from that?

What happen is you use an Elevated Command Prompt?
( To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. )

It's possible that the default output has changed to either a null pointer, or a disk file rather than the screen - I'll have to see if I can repro.

NoelDP · 25 Jan 2013

That looks to me as if it's outgoing rather than incoming - and probably normal!
The mmc.exe cited as source is the Management Console, and would be sending commands to the bluetooth console.
I'll ask someone else to have a look-see.

Dwarf · 25 Jan 2013

Please repeat Noel's request, this time with an Elevated Command Prompt.

Uniontownship · 25 Jan 2013

I don't get " Accept the UAC prompt" it just opens up in the window. Administrator Command Prompt

so I typed in the DIR ... and get this

C:\Users\Tina>DIR C:\Windows\System32\config
Volume in drive C is TI105322W0F
Volume Serial Number is CC6C-F4D7

Directory of C:\Windows\System32\config

01/25/2013 07:33 AM <DIR> .
01/25/2013 07:33 AM <DIR> ..
04/09/2010 12:24 PM 28,672 BCD-Template
01/25/2013 07:33 AM 34,865,152 components
01/25/2013 07:29 AM 786,432 DEFAULT
07/13/2009 09:34 PM <DIR> Journal
01/14/2013 10:10 AM <DIR> RegBack
01/25/2013 08:49 AM 262,144 SAM
01/25/2013 07:29 AM 262,144 SECURITY
01/25/2013 03:21 PM 73,924,608 SOFTWARE
08/30/2010 08:59 AM 16 software.szfi
01/25/2013 03:22 PM 22,020,096 SYSTEM
01/09/2013 02:10 PM <DIR> systemprofile
01/09/2013 02:11 PM <DIR> TxR
8 File(s) 132,149,264 bytes
6 Dir(s) 426,916,167,680 bytes free

C:\Users\Tina>

Teerex · 25 Jan 2013

Uniontina, click the start orb and type 'cmd'. At the top of the list that will be created you'll have a program, cmd. Right-click on it and select 'Run as administrator' option. You'll now if it worked if it presents 'C:\Windows\system32>' and not 'C:\Users\Tina>'

NoelDP · 25 Jan 2013

In that case you're not right-clicking, or you're not selecting 'Run as Administrator'
- or you have UAC turned off.

Uniontownship · 28 Jan 2013

Ok everyone, two things. First Thank you Teerex for the explanation.

Second, I ran DIR C:\Windows\System32\config and the results are as follows:

C:\windows\system32>DIR C:\Windows\System32\config
Volume in drive C is TI105322W0F
Volume Serial Number is CC6C-F4D7

Directory of C:\Windows\System32\config

01/28/2013 07:44 AM <DIR> .
01/28/2013 07:44 AM <DIR> ..
04/09/2010 12:24 PM 28,672 BCD-Template
01/25/2013 03:27 PM 34,865,152 components
01/25/2013 03:27 PM 786,432 DEFAULT
07/13/2009 09:34 PM <DIR> Journal
01/14/2013 10:10 AM <DIR> RegBack
01/28/2013 07:41 AM 262,144 SAM
01/25/2013 03:27 PM 262,144 SECURITY
01/28/2013 07:41 AM 73,924,608 SOFTWARE
08/30/2010 08:59 AM 16 software.szfi
01/28/2013 07:42 AM 22,020,096 SYSTEM
01/09/2013 02:10 PM <DIR> systemprofile
01/09/2013 02:11 PM <DIR> TxR
8 File(s) 132,149,264 bytes
6 Dir(s) 426,837,204,992 bytes free

C:\windows\system32>

Finally I ran the commands and here are the results, I actually ran them twice, two different ways because it isn't doing anything.

C:\windows\system32> REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE5749
57-4077-4AD6-8658-327C2C86C5AA} /S

C:\windows\system32> REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6
-8658-327C2C86C5AA} /S

C:\windows\system32> REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE5749
57-4077-4AD6-8658-327C2C86C5AA} /S

C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE57495
7-4077-4AD6-8658-327C2C86C5AA} /S

C:\windows\system32>REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-
8658-327C2C86C5AA} /S

C:\windows\system32>REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE57495
7-4077-4AD6-8658-327C2C86C5AA} /S

C:\windows\system32>

Windows 7: Windows not genuine - Mine too ... please help

Windows not genuine - Mine too ... please help problems?