"This copy of windows is not genuine" message

[CJW]

Last week I had to re-install 7 Pro 64Bit, it activated just fine & I did all my updates. Yesturday I was just configuring some settings, nothing drastic & shut down for the night. As the comfuser was shutting down, I noticed down in the R-corner of the screen, the attached message.

When I go into the Comfuser's Properties & look under Windows Activation, it states:
Status Not Available
Product ID: Not Available

Of course, MS was no help; so does anyone know what is going on?

 

[Golden]

Hi,

In order to completely troubleshoot Windows validation & activation issues, please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click 'Copy' - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the validation tool here in your next reply

More info: http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

Regards,
Golden

 

[CJW]

I hope something can be figured out from this, thank you in advance for any help possible.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070017
Windows Product Key: N/A, hr=0x80070017
Windows Product Key Hash: N/A, hr=0x80070017
Windows Product ID: 00371-152-7951114-85961
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {757EA25A-065E-4A0C-B275-5D89761244B3}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7600.win7_gdr.120503-2030
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office XP Professional - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_70AFE6BE-656-80070057_E2AD56EA-815-80070057
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{757EA25A-065E-4A0C-B275-5D89761244B3}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>00371-152-7951114-85961</PID><PIDType>5</PIDType><SID>S-1-5-21-974363219-721625566-1937500864</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>MS-7596</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V2.3</Version><SMBIOSVersion major="2" minor="5"/><Date>20090928000000.000000+000</Date></BIOS><HWID>76D93707018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91110409-6000-11D3-8CFE-0050048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office XP Professional</Name><Ver>10</Ver><Val>744C6376E6F2F2C</Val><Hash>tHDWZJf/CfLerCckFTeBtljvN48=</Hash><Pid>54186-OEM-1792637-90166</Pid><PidType>4</PidType></Product></Products><Applications><App Id="15" Version="10" Result="100"/><App Id="16" Version="10" Result="100"/><App Id="18" Version="10" Result="100"/><App Id="1A" Version="10" Result="100"/><App Id="1B" Version="10" Result="100"/></Applications></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070017' to display the error text.
Error: 0x80070017 
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:
 
HWID Data-->
HWID Hash Current: NAAAAAIABAABAAEAAAACAAAAAQABAAEA6GHg+h4iCPQQM1Ty9BYgpXZVCBPqRYiUvkaesw==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   7596MS  A7596200
  FACP   7596MS  A7596200
  HPET   7596MS  OEMHPET 
  MCFG   7596MS  OEMMCFG 
  OEMB   7596MS  A7596200
  SSDT   A M I   POWERNOW

 

[Golden]

Please re-post an un-edited version MGADIAG report.

 

[CJW]

That's it, I didn't edit anything. I ran the program, clicked on Copy & pressed CTRL+V, that is all I did (other than close the error message).

 

[karlsnooks]

cjw,
Download and run the program at this link. Post the results.
http://artellos.com/ccount/click.php?id=7

 

[Golden]

OK. There are a few issues here:

Windows Product Key: N/A

and also

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Where did you get your Windows 7 installation from?

Regards,
Golden

 

[Golden]

Hi,

I've just had another look at this, and spotted the -BBBB of the Product Key, which, if I'm not mistaken, indicates a volume licence. How did you activate this installation?

Regards,
Golden

 

[NoelDP]

The error codes (0x80070017) mean there is a CRC failure - which means either that there is a problem with RAM, the HD, or there is malware present.

Reboot to Safe Mode with Networking, and download and install Malwarebytes Anti-malware (free version) from www.malwarebytes.org - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Delete everything it finds

(that's the only significant problem in the report - the File mismatches are caused by not installing the WAT update KB971033)

Please post a new MGADiag report when complete.

 

[NoelDP]

Hi,

I've just had another look at this, and spotted the -BBBB of the Product Key, which, if I'm not mistaken, indicates a volume licence. How did you activate this installation?

Regards,
Golden

Nah - it's a fallback for when the Key is removed from the registry and is independent of Key type (but IIRC, it is only available to Pro and above)

 

[Golden]

Thanks for clarifying Noel.

 

[CJW]

Golden:
I bought it from Best Buy a few months after its release & it's been activated over the phone & online. Due to other problems, I have had to re-install a few times, but this is the 1st time I've ever received this error.

karlsnooks & NoelDP:
I'll try both approaches later today & post my findings. I've already ran MemTest+ (no errors there) & the hard drive is about a month old. I think it may be a motherboard problem, but I'm not possitive & short on cash right now.

 

[NoelDP]

short on cash right now.

...that makes two of us, then

 

[CJW]

This is NOT good.

I went into Safe Mode w/Networking & DL'd the MBAM program, but I could not install it in either Safe Mode or regular Boot-up; I get the 1st error below. I also get an error (2nd) when trying to run the WVCheck program.

Q: When starting in Safe Mode, files scroll on the screen but stop for a short time at>
C:\Windows\System32\drivers\ClassPNP.dll, what is this file?

 

[karlsnooks]

cjw,
Ignore the title.
Read and execute:
http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html#post1839164

 

[NoelDP]

I have to agree with Karl at this point - just with one addition....
BACK UP YOUR DATA TO EXTERNAL MEDIA FIRST!!

 

[CJW]

I have to reinstall? That's what I was afraid of.

 

[NoelDP]

From teh looks of it your current installation is infected with a major rootkit - it's likely to take longer to 'fix' than to reinstall everything from scratch.
If the problem is hardware-related, rather than malware, then a reinstall will also show that.

 

[CJW]

Obviously this rootkit is not from any of the programs I install from original CD/DVDs, but what will be the best way to check (& clean if necessary) my External Hard Drive & Flash Drive?

 

[NoelDP]

Use something like WDO downloaded and burned on a known-clean machine.
What is Windows Defender Offline?