Win7 Home non genuine

[sigi08]

Hi,
I'm helping older people with there computer(problems) (non commercial base).
I'm helping a lady which bought an Acer notebook about a 1/2 year ago in a regular store (bill is available). The original (to me) MS windows7 productcode sticker is on the nb.
Since a few weeks a message pops up that this windows version a non genuine version. Reentering the product key did not solved the problem.
by the way: also activeX do not work (is enabled in IE7).
An e-mail to Acer support: advice: deinstall KB971033!
Which will be done tomorrow.
I searched in the internet, a lot of results but no clear instruction a mentioned.
question:
o Is it a good idea to deinstall KB971033 or SP1?
o Any idea how to solve the problem?
o how to get activeX working?
Thank for the help.
Sigi08

 

[NoelDP]

To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
- **in your own thread**, please
Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine, but do NOT quote the Key on the sticker!
How to Tell - Home

DO NOT uninstall KB971033! Why Acer tells you to do that is quite simple - it stops the error message being displayed. What they DON'T tell you is that it also prevents you fixing the problem that caused the notification in the first place.

You should probably give the system a good spring-clean - Is that Anti-Virus up-to-date?
Download and install Malwarebytes Anti-Malware (www.malwarebytes.org ). Update it, but do NOT accept the offer of Real-Time protection (it may cause problems).
Run a Full System Scan in your main user account, and Quick scans in any other account.
Delete everything it finds. You may well find that your anti-virus complains a few times during the process – allow that to do its thing at the same time.

 

[sigi08]

Noel,
thanks for the quick response.
I will run tomorrow the MS MGADiag tool and copy the results into this post.
The COA sticker is available.
these are information on it
key: V6xxx-.........-xxx6G
co.7p201.001
x1696072
00196-129-567-008

product -Id found
00359-OEM-9812951-67008


I will not unistall KB971033.
Antivirus (MS Security Essential) is up-to-date
and a scan is run regularly. I will run a full scan tomorrow to see i with my own eyes.
A malware program (Spybot) is installed and a check done.
A single item was found and removed.
Thanks so far.
Sigi

 

[NoelDP]

OK - the Product ID tells us that it's Home Premium - and that it's a Direct OEM install, but not a lot more.
The MGADiag results will tell us a lot more.

It's good that MSE is installed - BUT.... what was the AV that the machine (presumably) came pre-installed with? what OTHER AVs have ever been installed on this machine (even if never actually activated)?

I'm not that impressed with SpyBot any more - it seems to be trying to do too many things at once (especially with Tea-Timer, etc.)
Please give MBAM a try, you may be surprised.

 

[sigi08]

MGADIAG results

Hello Noel,
I did the mgadiag test this morning. see the result below.
Thank you for your support.
I "x"ed the last 3 blocks of Windows product key. If you need them I still can send it.

other strange items/problems:
Policy editor does not exists.
I also tried to start the policy editor (rsop.msc) to check settings:
windows settings - security settings - system services -> for Plug and Play value: Automatic.
no "RSOP" exists; also the value "HKEY_USERS\S-1-5-20" in the registry does not exists.

ActiveX controls/environment is not installed

I started also GenunieCheck.exe:
displayed key: BMWQD6QN
but program did not continued.

I also did a full scan with MS Security Essential => no items found.

Here the results of MGADIAG:

Diagnostic Report (1.9.0027.0):
 
-----------------------------------------
 
Windows Validation Data-->
 
 
 
Validation Code: 0x8004FE21
 
Cached Online Validation Code: N/A, hr = 0xc004f012
 
Windows Product Key: *****-*****-xxxxx-xxxxx-xxxxx (manually “x”ed)
 
Windows Product Key Hash: SS0PxF6+ZZ5WPXQcDDAJo5D8DlQ=
 
Windows Product ID: 00359-OEM-9812951-67008
 
Windows Product ID Type: 8
 
Windows License Type: COA SLP
 
Windows OS version: 6.1.7601.2.00010300.1.0.003
 
ID: {F6150484-B1AE-48F3-96A5-BFC9C93AE209}(1)
 
Is Admin: Yes
 
TestCab: 0x0
 
LegitcheckControl ActiveX: N/A, hr = 0x80070002
 
Signed By: N/A, hr = 0x80070002
 
Product Name: Windows 7 Home Premium
 
Architecture: 0x00000009
 
Build lab: 7601.win7sp1_gdr.110622-1506
 
TTS Error: 
 
Validation Diagnostic: 
 
Resolution Status: N/A
 
 
 
Vista WgaER Data-->
 
ThreatID(s): N/A, hr = 0x80070002
 
Version: N/A, hr = 0x80070002
 
 
 
Windows XP Notifications Data-->
 
Cached Result: N/A, hr = 0x80070002
 
File Exists: No
 
Version: N/A, hr = 0x80070002
 
WgaTray.exe Signed By: N/A, hr = 0x80070002
 
WgaLogon.dll Signed By: N/A, hr = 0x80070002
 
 
 
OGA Notifications Data-->
 
Cached Result: N/A, hr = 0x80070002
 
Version: N/A, hr = 0x80070002
 
OGAExec.exe Signed By: N/A, hr = 0x80070002
 
OGAAddin.dll Signed By: N/A, hr = 0x80070002
 
 
 
OGA Data-->
 
Office Status: 109 N/A
 
OGA Version: N/A, 0x80070002
 
Signed By: N/A, hr = 0x80070002
 
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
 
 
 
Browser Data-->
 
Proxy settings: N/A
 
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
 
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
 
Download signed ActiveX controls: Prompt
 
Download unsigned ActiveX controls: Disabled
 
Run ActiveX controls and plug-ins: Allowed
 
Initialize and script ActiveX controls not marked as safe: Disabled
 
Allow scripting of Internet Explorer Webbrowser control: Disabled
 
Active scripting: Allowed
 
Script ActiveX controls marked as safe for scripting: Allowed
 
 
 
File Scan Data-->
 
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
 
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
 
 
 
Other data-->
 
Office Details: <GenuineResults><MachineData><UGUID>{F6150484-B1AE-48F3-96A5-BFC9C93AE209}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-V9C6G</PKey><PID>00359-OEM-9812951-67008</PID><PIDType>8</PIDType><SID>S-1-5-21-3407281408-3733315972-2125296635</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 5742</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.09</Version><SMBIOSVersion major="2" minor="6"/><Date>20101108000000.000000+000</Date></BIOS><HWID>C9DF3807018400FC</HWID><UserLCID>0413</UserLCID><SystemLCID>0413</SystemLCID><TimeZone>West-Europa (standaardtijd)(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
 
 
 
Spsys.log Content: 0x80070002
 
 
 
Licensing Data-->
 
Versie van Software Licensing-service: 6.1.7601.17514
 
 
 
Naam: Windows(R) 7, HomePremium edition
 
Beschrijving: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
 
Activerings-id: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
 
Toepassings-id55c92734-d682-4d71-983e-d6ec3f16059f
 
Uitgebreide PID: 00359-00196-129-567008-02-1043-7601.0000-3202011
 
Installatie-id014860113743193760242946940521376495566301276082402010
 
URL van processorcertificaat: [URL]http://go.microsoft.com/fwlink/?LinkID=88338[/URL]
 
URL van computercertificaat: [URL]http://go.microsoft.com/fwlink/?LinkID=88339[/URL]
 
URL van gebruikte licentie: [URL]http://go.microsoft.com/fwlink/?LinkID=88341[/URL]
 
URL van productcodecertificaat: [URL]http://go.microsoft.com/fwlink/?LinkID=88340[/URL]
 
Gedeeltelijke productcode: V9C6G
 
Licentiestatus: licentie
 
Resterend aantal nieuwe Windows-activeringen: 3
 
Vertrouwde tijd: 23-11-2011 9:02:47
 
 
 
Windows Activation Technologies-->
 
HrOffline: 0x8004FE21
 
HrOnline: N/A
 
HealthStatus: 0x0000000000000240
 
Event Time Stamp: 11:22:2011 19:33
 
ActiveX: Registered, Version: 7.1.7600.16395
 
Admin Service: Registered, Version: 7.1.7600.16395
 
HealthStatus Bitmask Output:
 
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
 
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
 
 
 
 
 
HWID Data-->
 
HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEA6GHWFmyioMTulzIs7CysLnrJXF0=
 
 
 
OEM Activation 1.0 Data-->
 
N/A
 
 
 
OEM Activation 2.0 Data-->
 
BIOS valid for OA 2.0: yes
 
Windows marker version: 0x20001
 
OEMID and OEMTableID Consistent: yes
 
BIOS Information: 
 
ACPI Table Name OEMID Value OEMTableID Value
 
APIC ACRSYS ACRPRDCT
 
FACP ACRSYS ACRPRDCT
 
HPET ACRSYS ACRPRDCT
 
BOOT ACRSYS ACRPRDCT
 
MCFG ACRSYS ACRPRDCT
 
ASF! ACRSYS ACRPRDCT
 
SLIC ACRSYS ACRPRDCT
 
ASPT ACRSYS ACRPRDCT
 
SSDT PmRef CpuPm
 
SSDT PmRef CpuPm
 
SSDT PmRef CpuPm

 

[NoelDP]

RSOP.MSC only exists in Pro/Ultimate/Enterprise - use Services.msc instead, in Home editions

Your problem is caused by the File Mismatches and Tampers -
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003

File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100

Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui

Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui

The first thing (bexcause it's the easiest <g>) to fix is the watadminsvc.exe error
To do this, open Windows Updates, and look in the Installed Updates listing for KB971033 ('the WAT Update') - uninstall it, and reboot

Then go to Description of the update for Windows Activation Technologies and download the update - install it and reboot - then post another MGADiag report.

[edit]
with the report, please post the output from the following commands in a command prompt window.....
ICACLS C:\windows\system32\sppcext.dll
ICACLS C:\windows\system32\slcext.dll
ICACLS C:\windows\system32\slcext.dll.mui
[/edit]

 

[whs]

Best is to call Microsoft. They reactivate you in no time: Activation and registration of a Microsoft product

 

[NoelDP]

Best is to call Microsoft. They reactivate you in no time: Activation and registration of a Microsoft product

I assume that was in response to the (now deleted) post, rather than to me?

MS's usual response to these errors is a repair install - if you're lucky, and have an installation disk, rather than a Recovery disk.