Windows Not Genuine error.

[DanIVA]

Hi Everyone

One of my client computers is receiving a 'windows is not genuine error message' even after I changed the product key to an msdn volume license key...

Here are the logs:

Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0

Cached Validation Code: 0x0
Windows Product Key: *****-*****-J6H36-6H276-3G734
Windows Product Key Hash: IDi/SN1rf2upcMHGvwxxvoCpjOU=
Windows Product ID: 00371-220-5111204-06186
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {4B45A9DA-66AC-4A4A-9904-4B0942D4588D}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{4B45A9DA-66AC-4A4A-9904-4B0942D4588D}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3G734</PKey><PID>00371-220-5111204-06186</PID><PIDType>5</PIDType><SID>S-1-5-21-698797955-1046650195-1296747404</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3484CZG</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>F1KT39AUS</Version><SMBIOSVersion major="2" minor="7"/><Date>20121012000000.000000+000</Date></BIOS><HWID>61963407018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TC-F1   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: c1e88de3-96c4-4563-ad7d-775f65b1e670
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00212-220-511120-00-2057-7601.0000-3492014
Installation ID: 012672160080834570281640436035786771698041761043159696
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 3G734
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 16/12/2014 16:40:29

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: 0x00000000
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:15:2014 10:13
WAT Activex: Registered
WAT Admin Service: Registered

HWID Data-->
HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GGIfcB2gHY435hgbD1gbC5z

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            LENOVO        TC-F1   
  FACP            LENOVO        TC-F1   
  HPET            LENOVO        TC-F1   
  MCFG            LENOVO        TC-F1   
  FPDT            LENOVO        TC-F1   
  SLIC            LENOVO        TC-F1   
  MSDM            LENOVO        TC-F1   
  SSDT            LENOVO        TC-F1   
  SSDT            LENOVO        TC-F1   
  SSDT            LENOVO        TC-F1   
  BGRT            LENOVO        TC-F1

Hope you guys can help =)

 

[DanIVA]

Should note this is the error code the user is getting: 0x8004FE21

 

[NoelDP]

Try this...

What AV are you using?
Please disable real-time scanning/protection and reboot

If the notification has disappeared, re-enable real-time scanning and reboot again

If the notification is still present, first check whether the real-time scanning is still switched off If so, then re-enable it and post the result. If it's turned itself back on then tell me or try again using a different disable option.


Post back with the results

 

[DanIVA]

Using Microsoft Security Essentials. and yes real time scanning is enabled by default in our domain.

Unfortunately I can't test this as the PC in question is in use throughout the day...