Win 7 Pro - This is not a genuine copy of windows message

[otc]

Hi,

I was, up until a month ago, an avid user and supporter of Win XP Pro, (32 bit). However, I built a new pc last month and as it was a full 64 bit m/c I thought I'd give Win 7 a go and see how I got on with it.

I wanted to "try before you buy", so I downloaded a copy of Win 7 Pro from a torrent site. Installed it and all was good. I found I actually loved this version even though I was a devout XP fan up until that point.

Anyway, I decided a couple of weeks ago to purchase a genuine copy of Win 7 Pro, (allbeit an OEM version), so that I could use the key to make my current copy legal. However, 2 days before my OEM arrived, I was suddenly prompted with a message - This copy of Windows is not genuine, (or words that effect). My desktop image disappeared and a little "footnote" was left in the bottom right corner of the desktop.

I figured Windows defender had tried to update and that's when MS found me out.

So, my OEM arrives and I duly enter the key and the message goes away and I can reinstate my desktop image. "Great" I think to myself. 2 days later, the message reappears and if I right click My Computer/Properties, the "Ask for genuine MS s/w" sign is there and my desktop goes black again.

Seems nothing I do will make this legit copy I now own, legit.

Any ideas? (Diagnostic report below. I've removed a few more digits, just in case someone has a powerful decrypting tool to make my key visible )

Funnily enough, after d/l'ing the MGAD tool and running it, the not genuine message on the desktop disappeared again

I know I did a bad thing, but I have rectified that now and I need resolution :devil:

otc.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-49J6F
Windows Product Key Hash: 9+6x0H5UaA8NGItys11zseP9uEk=
Windows Product ID: 00371-OEM-9045197-47920
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {209665CD-D875-4233-A163-297498AC0090}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120305-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{209665CD-D875-4233-A163-297498AC0090}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-49J6F</PKey><PID>00371-OEM-9045197-47920</PID><PIDType>3</PIDType><SID>S-1-5-21-637323311-1020415637-2880886675</SID><SYSTEM><Manufacturer>To be filled by O.E.M.</Manufacturer><Model>To be filled by O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0901</Version><SMBIOSVersion major="2" minor="7"/><Date>20111202000000.000000+000</Date></BIOS><HWID>5F4B3707018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-451-947920-02-2057-7601.0000-1072012
Installation ID: 014696436735331153969083420424236033680756285896078643
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 49J6F
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 19/04/2012 23:09:08

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAgACAAAAAQABAAEAHKJCQdKHRlKAHxLkrIsFrYqbvOLobBQP

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
SSDT AMD POWERNOW

 

[NoelDP]

There are no obvious problems in your report -it's possible that one of two things happened...

1) You had a 'race condition' that sorted itself out in the normal way, when MGADiag forced a re-evaluation of the license.
2) MGADiag has a limited repair capability - and that came into play.

You need to go to the Validation site to confirm that all is well (www.microsoft.com/genuine/validate ) - and you should install the WAT Update (KB971033) from WIndows Update, which will enable better information-gathering if the situation recurs.

 

[otc]

Cheers Noel,

KB971033 is already installed, Validation was successful, but I'm pretty certain I'd seen that screen before, (saying I was entitled to MS Essentials).

Oh! well, fingers crossed I guess.

otc.

 

[NoelDP]

971033 is NOT installed, according to your report!
- the file mismatches, and the errors under Windows Activation Technologies give that much away

 

[otc]

I beg to differ sir (see attached).

IDK if this was an automated d/l and install, as I wasn't told there were important updates and asked if I'd like to install them, but this happened TODAY and on 4th Jan, which is also odd, seeing as how I've only had Win 7 on this pc for almost a month :shock:.

Which file mismatch line tells you this wasn't installed as of the log report last night? Just curious

otc.

 

[NoelDP]

That's the Update History - which only says that it installed on that date - it doesn't mention that something has since uninstalled it.

download and install the 64-bit version from Description of the update for Windows Activation Technologies
then run another MGADiag report, and post the results.
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
All four are files which show this error only when the update is not installed.

 

[NoelDP]

Ah -I've just taken a closer look at your history - and you reinstalled the update today - I assume that was after you posted the report?
please post a new report.

 

[otc]

Yes, report first initiated Thursday, updated Friday by the looks of things but w/o my authorisation strangely enough.

New report:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-YYKRJ-RBMRC-49J6F
Windows Product Key Hash: 9+6x0H5UaA8NGItys11zseP9uEk=
Windows Product ID: 00371-OEM-9045197-47920
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {209665CD-D875-4233-A163-297498AC0090}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120305-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{209665CD-D875-4233-A163-297498AC0090}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-49J6F</PKey><PID>00371-OEM-9045197-47920</PID><PIDType>3</PIDType><SID>S-1-5-21-637323311-1020415637-2880886675</SID><SYSTEM><Manufacturer>To be filled by O.E.M.</Manufacturer><Model>To be filled by O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0901</Version><SMBIOSVersion major="2" minor="7"/><Date>20111202000000.000000+000</Date></BIOS><HWID>5F4B3707018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-451-947920-02-2057-7601.0000-1072012
Installation ID: 014696436735331153969083420424236033680756285896078643
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 49J6F
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 21/04/2012 00:38:05

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:20:2012 16:43
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAgACAAAAAQABAAEAHKJCQdKHRlKAHxLkrIsFrYqbvOLobBQP

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
SSDT AMD POWERNOW


otc.

 

[otc]

btw, what's the SLIC table all about? Do I need it?

Also, what's with the rearming process? Should I be worried I only have 3 left?

otc.

 

[NoelDP]

The SLIC table is irrelevant with an OEM System Builder install
3 is the normal count for re-arms - it's the number of time you can extend the grace period if your machine becomes de-actiated for soeme reason
It looks like validation installed KB971033 - check the timestamps on the files themselves Validation occured at 4:20:2012 16:43