Windows not genuine message

[pieren]

Hello,

I get a mesage saying that my Windows is not genuine, although it is.

Here is the report I get from Microsoft Genuine Advantage Diagnostic Tool:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {565009BC-B382-435D-A7BB-C63BCED17B6E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{565009BC-B382-435D-A7BB-C63BCED17B6E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-1853576784-3663928515-284711129</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS 8300 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20111017000000.000000+000</Date></BIOS><HWID>1EF13807018400FE</HWID><UserLCID>080C</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>FX09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0242011
Installation ID: 010874685721988822888085640376000573210110801414629396
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 13/12/2014 14:02:30
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:13:2014 07:50
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: LgAAAAEAAQABAAEAAAADAAAAAQABAAEAln3umda/UASuzhwhYj3WymcDYCUucw==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL FX09
FACP DELL FX09
HPET DELL FX09
MCFG DELL FX09
SSDT AMICPU PROC
SLIC DELL FX09
OSFR DELL FX09

 

[Gator]

This was most likely due to a bad update. Can you confirm that you have KB3004394 installed?

Perform step one, then search for the update above. If you have the update installed, download the update to remove this update below:
https://support.microsoft.com/kb/3024777

 

[NoelDP]

It looks like the patch has been installed - another reboot should get rid of the non-genuine message.

 

[pieren]

No, this update is not installes.

 

[NoelDP]

Are you still seeing the notifications?
If so, please post the Event logs and the C:\Windows\windowsupdate.log


Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

 

[pieren]

Thanks for your reply.

I have attached the files.

 

[NoelDP]

KB3004394 is installed, according to Windows Update - but KB3024777 is not.

Please do a Check for Updates - does KB3024777 appear now?
If not, then perhaps MS have also pulled this one!

In which case, uninstall KB3004394 and reboot twice.

 

[pieren]

In windows update neither KB3004394 nor KB3024777 appear.

How can I uninstall KB3004394 or install KB3024777?

In the attached image there is the list of updates.

 

[NoelDP]

Odd -

2014-12-10 08:58:01:850 1048 22a8 Handler Post-reboot status for package Package_for_KB3004394~31bf3856ad364e35~amd64~~6.1.1.0: 0x00000000.

It certainly should be present!
Try this

Close all open windows.
Open an Elevated Command Prompt window, and type the following command

wusa /uninstall /kb:3004394

If it works OK, wait 15 minutes, then reboot wait another 15 minutes and reboot again.

 

[pieren]

Thanks.

I have tried this, but I get the message "The update KB3004394 is not installed on this computer".

 

[NoelDP]

Have a look in the Update History rather than the installed Updates - it may simply be that the 4777 update uninstall 4394 without leaving anything behind.

 

[pieren]

In the update history there is nothing at all...

 

[NoelDP]

OK - we'll have to accept that the update has been installed and uninstall for the moment, then.
You say your still getting notifications - so there is something definitely screwy going on if the cause of these notifications isn't seen by MGADiag...

I'll look deeper into the even logs and get back to you.

 

[NoelDP]

Looking through the Application logs, I can see errors implying there are missing system files...
Lets check that out..

Please follow the Windows Update Posting Instructions and post the requested data

If the file is too large (8MB compressed), remove the older CBSPersist cab files until the final file is below the limit - you can always post them separately after zipping them. (the forum doesn't allow the upload of bare CAB files, for a number of reasons)