Windows Activation alert "not running genuine Windows"

[Duncan123]

Hi, I have had exactly the same alert appearing, i am reading the thread, what exactly needs to be done to try and resolve? I was told by msoft support that this was a virus and charged for removal?

Thanks in advance

 

[derekimo]

Welcome to the forum,

Please follow these instructions and someone will be along shortly,

http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

 

[Duncan123]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-2PTG2-JGGJH-JQRQW
Windows Product Key Hash: eScjd5ekRG/rIDwl5n/hR/Y1rsQ=
Windows Product ID: 00359-OEM-9814922-81622
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {FF9EE33B-E202-4B35-B4E2-9AC2438C4F60}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{FF9EE33B-E202-4B35-B4E2-9AC2438C4F60}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-JQRQW</PKey><PID>00359-OEM-9814922-81622</PID><PIDType>8</PIDType><SID>S-1-5-21-2331440566-1496595693-2438545973</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Inspiron N5010</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A12</Version><SMBIOSVersion major="2" minor="6"/><Date>20110125000000.000000+000</Date></BIOS><HWID>E9403E07018400FC</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>WN09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>61A289FC8E79724</Val><Hash>udp2fJ2zN4s/u0wpjj69oi/JZ4w=</Hash><Pid>81602-914-4475053-68680</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-149-281622-02-2057-7601.0000-3492014
Installation ID: 006466141703950224651452428976476805851913133474852386
Processor Certificate URL: [url=http://go.microsoft.com/fwlink/?LinkID=88338]SpcService Web Service[/url]
Machine Certificate URL: [url=http://go.microsoft.com/fwlink/?LinkID=88339]RacService Web Service[/url]
Use License URL: [url=http://go.microsoft.com/fwlink/?LinkID=88341]UseLicenseService Web Service[/url]
Product Key Certificate URL: [url=http://go.microsoft.com/fwlink/?LinkID=88340]PkcService Web Service[/url]
Partial Product Key: JQRQW
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 16/12/2014 17:00:30
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:12:2014 10:18
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: LgAAAAEAAgABAAEAAAABAAAAAgABAAEA6GGs2Cp8qEKIgrTlYjrqmuoP1txcXQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   DELL    WN09    
  FACP   DELL    WN09   
  HPET   DELL  WN09
  MCFG   DELL  WN09
  SSDT   AMICPU  PROC
  SLIC   DELL    WN09   
  OSFR   DELL    M08

 

[NoelDP]

This looks like you've installed the botched update, and then the uninstaller...

What AV are you using?
Please disable real-time scanning/protection and reboot

If the notification has disappeared, re-enable real-time scanning and reboot again

If the notification is still present, first check whether the real-time scanning is still switched off If so, then re-enable it and post the result. If it's turned itself back on then tell me or try again using a different disable option.


Post back with the results

 

[Duncan123]

Hello NoelDP, I am running essentials, will try what you suggest and come back - thank you

 

[Duncan123]

Hello NoelDP, I am not getting the notification at all now, I have just got off phone to MSFT 2nd line support who are still saying that this issue is down to a virus (even though the notification re-appeared the day after my laptop was 'cleaned by them for a fee)...in their defence, they did mention release KB3004394 which I checked and doesn't appear on my updates list so assuming it has been removed....am I safe to assume that the issue was caused by KB3004394 and not as they say a virus?

Regards

 

[NoelDP]

Almost certainly it was the residual effect of installing and uninstalling the botched update - these effects appear to vary a little between AV's, but it seems to be some kind of one-time interaction which many AV's block. Once it's allowed, there appear to be no further problems.