Solved Windows 7 telling me it is not genuine, however it is a legit copy.

[NoelDP]

It's surprising how long some problems take to show up - but I would have expected this one to show up earlier.
Please run the standard file file-system checks.....
running CHKDSK and SFC

type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key
You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC

SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type

SFC /SCANNOW

and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.

run another MGADiag report, and post the results.

 

[ProSnipor]

Restarting for the CHKDSK now

 

[ProSnipor]

Ok and while this is going i want to say thank you so much for your help. I mean im pc savvy when it comes to hardware etc. But your knowledge of windows is amazing!

 

[NoelDP]

I specialise in this particular area - and have dealt with something like 4000 reports in the past couple of years
I just wish I had access to some of the tools available within MS, and a decent internet connection so I could do remote access for diagnostics.
Every case is a challenge - and every time I learn a little more.

Once we get the CScript error fixed, you will have a decision to make, depending on the history of your machine.
You have a COA sticker on the case with a Product Key on it - is it legible? If so, have you EVER used it before?
If you have NOT used it, then there should be no problem about activation - although you may have to use Telephone activation.

If you have used the Key before, then you will certainly need to use telephone activation, and sweet-talk the operator into allowing your change of motherboard on the basis of replacement for defect.
It may be allowed - or it may not.

If it is not allowed, then your only option is to purchase a new Full Retail license for Windows 7 Home Premium (or higher) - you can then use the Change Product Key link in the same way you already did, to change the Key to your new one, and activate the machine.

 

[NoelDP]

I get the same Not Genuine message after I installed SP1 so I removed SP1 and did a System Restore and the Not Genuine message went away! However my PID info disappeared as well!?


Any suggestions as to why I got a Not Genuine message and why my PID disappeared?

Your PID disappeared because (un)installing the SP forces a re-evaluation of the license - and that is not possible with the status shown in your report.

 

[ProSnipor]

I do have a coa sticker. But i did use the windows serial key like i mentioned before. Is that what you mean? Because this was a prebuilt dell. So there is also a dell product code on there aswell. Which are you reffering to?

 

[ProSnipor]

I typed the serial in to make the not genuine message disapear. So it is saved in my machine right now
So will i need to talk to an operator to fix this?

 

[NoelDP]

We'll see what happens when we get the next MGADiag report. So long as you didn't use the COA Key before then you should be OK.

 

[ProSnipor]

I ran the disk check, and everything was booted when i checked back in a few hours. I then ran the scan like you told me. It only went through one phase, which was a verification phase. Then it told me that windows resource protection did not find any integrity violations. However in the MGADiag report my pc still can't find the vbscript. Here is the report after the scan and disk check:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-R4CMM-C3RB3-9V4CT
Windows Product Key Hash: YMMF7YwmGbLO2u9gwhhHwoBupc0=
Windows Product ID: 00359-OEM-9805661-66170
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {138DA265-4E9A-4716-8984-89ED378DD17E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120305-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Kyle\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{138DA265-4E9A-4716-8984-89ED378DD17E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-9V4CT</PKey><PID>00359-OEM-9805661-66170</PID><PIDType>8</PIDType><SID>S-1-5-21-3691324936-1177366919-1304017508</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.20</Version><SMBIOSVersion major="2" minor="6"/><Date>20111117000000.000000+000</Date></BIOS><HWID>6DF83507018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
CScript Error: Can't find script engine "VBScript" for script "C:\Windows\system32\slmgr.vbs".

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:11:2012 22:10
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAEABAABAAEAAQACAAAAAwABAAEAHKImUfbaVPLACBAzGkhqj9boxJZiPeiCLNdcLcCzAtA=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
AAFT ALASKA OEMAAFT
SSDT AMD POWERNOW

 

[ProSnipor]

Now i remember what i ran, i ran the program 'malware bytes' could this have removed the vbscript from my machine?

 

[NoelDP]

MalwareBytes is one of the best Anti-malware scanners in the business - and most certaily would not have been the cause of this problem (I use it on every machine I touch!)

Try merging the regfix.reg file again - it may 'take' this time
Whether is works OK or fails, please open an Elevated Command Prompt window and run the following commands

REG QUERY HKCR\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8} /S
REG QUERY HKLM\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8} /S

Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the CP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Windows, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[ProSnipor]

This is what it stated after i ran the first command line
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKCR\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
/S

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
(Default) REG_SZ VB Script Language

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\Implemented Categ
ories

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\Implemented Categ
ories\{F0B7A1A1-9847-11CF-8F20-00805F2CD064}
(Default) REG_NONE

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\Implemented Categ
ories\{F0B7A1A2-9847-11CF-8F20-00805F2CD064}
(Default) REG_NONE

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32
(Default) REG_SZ C:\Program Files\McAfee\VirusScan\scriptsn.dll
ThreadingModel REG_SZ Both

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\OLEScript
(Default) REG_NONE

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\ProgID
(Default) REG_SZ VBScript


C:\Windows\system32>

 

[ProSnipor]

This is what it stated after the 2nd command line
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4
B0-00AA004A55E8} /S

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}

(Default) REG_SZ VB Script Language

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\Implemented Categories\{F0B7A1A1-9847-11CF-8F20-00805F2CD064}
(Default) REG_NONE

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\Implemented Categories\{F0B7A1A2-9847-11CF-8F20-00805F2CD064}
(Default) REG_NONE

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\InprocServer32
(Default) REG_SZ C:\Program Files\McAfee\VirusScan\scriptsn.dll
ThreadingModel REG_SZ Both

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\OLEScript
(Default) REG_NONE

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}
\ProgID
(Default) REG_SZ VBScript


C:\Windows\system32>

 

[cyclic]

Is your key an OEM ? if it is and you changed the mobo then unfortunately you are doomed my friend.
I feel it would be a good time to phone MS ( it's free) and explain the situation to them. They are actually very helpful

 

[ProSnipor]

It is an oem....ok. I'l wait to see what noel thinks before i phone them

 

[ProSnipor]

My pc originally had McAfee installed on it for a year, as bloat i guess. When i uninstalled it, some McAfee .dlls were left behind, could that dll in the two reports from the scan be my problem? If it is, how should i remove it because it was left behind even after i uninstalled. Also normal delete won't work because it is in use.

 

[NoelDP]

McAfee is second only to Norton in the number of ways it can screw up a system during uninstall (or even after uninstall!)

You MUST run the MCPR tool after the normal uninstall - and then check that it is truly removed.

As far as I could tell, there was no problem with the output from the commands that I asked.

Your problem is not so much that your installation is not genuine (which is up for debate) but that it cannot be properly tested for 'genuine-ness' - and so will always fail the test, even if you have a perfectly genuine system.

I'll have to come back to your tomorrow, after reviewing existing data.

 

[ProSnipor]

The pc i carried my hard-drive over from was a pre-built dell, that came with windows pre-installed on it. I wouldn't waste anybodies time here trying to have them help me fix a pirated copy of windows. That just wouldn't be right. Im going to look into removing the dll

 

[ProSnipor]

OMG OMG i think i fixed it! The McAfee .dll is off my pc and the licensing data has shown up! Look!

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-R4CMM-C3RB3-9V4CT
Windows Product Key Hash: YMMF7YwmGbLO2u9gwhhHwoBupc0=
Windows Product ID: 00359-OEM-9805661-66170
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {138DA265-4E9A-4716-8984-89ED378DD17E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120305-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Kyle\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{138DA265-4E9A-4716-8984-89ED378DD17E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-9V4CT</PKey><PID>00359-OEM-9805661-66170</PID><PIDType>8</PIDType><SID>S-1-5-21-3691324936-1177366919-1304017508</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.20</Version><SMBIOSVersion major="2" minor="6"/><Date>20111117000000.000000+000</Date></BIOS><HWID>6DF83507018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-056-666170-02-1033-7601.0000-1012012
Installation ID: 005855135326541620945862398814272234643222874636116921
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 9V4CT
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 4/13/2012 8:15:14 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:11:2012 22:10
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAEABAABAAEAAQACAAAAAwABAAEAHKImUfbaVPLACBAzGkhqj9boxJZiPeiCLNdcLcCzAtA=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
AAFT ALASKA OEMAAFT
SSDT AMD POWERNOW

 

[NoelDP]

"Told you so!"

Well done.