Windows Not Genuine popup

[gfdfgfd]

Hi everyone,

I bought a laptop refurbished pre-installed with Windows 7 Ultimate and everything was fine for nearly a year. But I recently have been getting these popups whenever I open a Microsoft application (Notepad, Office, etc...). Also have warning message on my desktop.

I tried the "SLMGR -REARM" trick suggested on another forum which resulted in new error messages.

Tried contacting the guy I purchased it from and it seems he's closed down now, which isn't very reassuring.

I've included some screen grabs to help describe the problem.

Any help appreciated.

 

[Layback Bear]

Welcome to our forum gfdfgfd.

The seller of this computer being gone is not a good sign.

The first thing that needs to be done is this tutorial by Brink.
It could show us the problem and we can go from there.

http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

 

[gfdfgfd]

Hi Layback,

OK, done that. Here are the results.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: N/A, hr = 0x80070422
Windows Product Key: *****-*****-KHGCQ-7DDY6-TF7CD
Windows Product Key Hash: YTcSHmTpekJgEHsEqFbudB5IfdE=
Windows Product ID: 00426-OEM-8992662-00015
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {BF3DF6FE-3919-4B73-85A7-42E0F4F5D443}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: F:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: F:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: F:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: F:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{BF3DF6FE-3919-4B73-85A7-42E0F4F5D443}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-TF7CD</PKey><PID>00426-OEM-8992662-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-2315669379-1459576559-1619567949</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP ENVY 15 Notebook PC </Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.34</Version><SMBIOSVersion major="2" minor="7"/><Date>20141219000000.000000+000</Date></BIOS><HWID>2D763907018400F2</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070422' to display the error text.
Error: 0x80070422 

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MgAAAAEAAgABAAIAAAABAAAAAwABAAEACraIkV59iIqYW0g6PthSeWB95OJk4oABuiw=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			HPQOEM		SLIC-MPC
  FACP			HPQOEM		SLIC-MPC
  DBGP			HPQOEM		229C    
  HPET			HPQOEM		229C    
  BOOT			HPQOEM		229C    
  MCFG			HPQOEM		229C    
  UEFI			HPQOEM		229C    
  UEFI			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  MSDM			HPQOEM		SLIC-MPC
  ASF!			HPQOEM		229C    
  ASPT			HPQOEM		229C    
  LPIT			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  SSDT			HPQOEM		229C    
  DMAR			HPQOEM		229C    
  FPDT			HPQOEM		SLIC-MPC
  BGRT			HPQOEM		229C

 

[Layback Bear]

Your system appears to have a counterfeit Windows 7 installed.

Your bios are for this.
[QUOTEModel>HP ENVY 15 Notebook PC ][/QUOTE]

Your Product ID is this.

Windows Product ID: 00426-OEM-8992662-00015

Which is for this type of computer.

Win 7,Ultimate,Samsung,XXXXX-OEM-8992662-00015

That is the reason for all of these.

File Scan Data--> File Mismatch: F:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003] File Mismatch: F:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003] File Mismatch: F:\Windows\system32\wat\watux.exe[Hr = 0x80070003] File Mismatch: F:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Do you have a Windows 7 COA sticker by Microsoft on your computer?
It will look something like this.




--------------------------
It would be helpful if you put the model number of you HP computer and also state (desktop or laptop) in your system specs.

 

[gfdfgfd]

It is a HP Envy 15 laptop dual boot with Windows 8.1 and Windows 7 (I don't use 8.1). I see no stickers on the back. Should I purchase another copy of W7 or is there another fix?

TIA

 

[Layback Bear]

I appears as the laptop/nootbook came with Windows 8.1. Their would not be a Microsoft COA sticker as Windows 7 should have.

I would just buy a Windows 7 DVD with the proper activation COA key.
The problem is where to buy. Their are boat loads of crooks selling Windows 7.
I don't recommend using places like eBay or the such.
I personally use a local dealer that I have trusted for decades.
Expect to pay full price or above for a proper Windows 7 DVD and matching COA key.

 

[SummGuy]

How exactly does an installation of Win-7 invalidate itself after so much time has passed since activation? I remember years ago there was one or two XP-WGA KB's pushed through WU that would invalidate target systems, but if you avoided them then there was really no way for MS to reach out and deactivate them. Were there ever any similar WGA kb's for win-7? If not, then how does a win-7 install invalidate itself?

 

[groze]

How exactly does an installation of Win-7 invalidate itself after so much time has passed since activation? I remember years ago there was one or two XP-WGA KB's pushed through WU that would invalidate target systems, but if you avoided them then there was really no way for MS to reach out and deactivate them. Were there ever any similar WGA kb's for win-7? If not, then how does a win-7 install invalidate itself?

Once your legit system is activated your system shouldn't be de-activate unless you do to many hardware changes at once. Which you can you call Microsoft one the phone and get a new key. Another case, is if somehow a bad person got a list of oem-keys from the Manufacture and published them online. Which will be a little harder to get activated. They may request you send the proof of purchase before activating your system. One other case is if a person install windows 7 sp1 using the same key on multiple machine. You can transfer a windows 7 sp1 retail version from one computer to another but must be removed from the old system unless the old system no longer works and a phone call would be required on both cases.


I may of misunderstood your post but we are not allowed to talk about activation hacks per forum rules but we can help you activate a legit system.

 

[townsbg]

I googled that serial number (what the log showed) and came up with all kinds of hits for "free" license keys for Windows. There really is no such thing and that is your problem. The key has been pirated so M$ has blacklisted it. You can try a phone activation and talk to one of the activation people and see if they will send you a new key but don't count on it. If 8.1 came on that system as well I would suspect that it is also pirated. You can buy a legit copy from Newegg however it is an oem copy and can only be activated on one computer. It cannot be transferred to another computer. Microsoft Windows 7 Professional SP1 64-bit - Operating Systems - Newegg.com

You can also go with a Linux distribution for free.

 

[groze]

townsbg

Is there anyway he could find out what that system actually came with? Windows 8 should be legit because the key should be embedded in the bios. (The key should also work with 8.1) I really hate it when people get scammed. That why I am trying to help out.

Warning the following instruction will erase all data on all connected writable drives.

I would recommend doing a full clean install by downloading a windows 8 iso from Microsoft (If that what he needs) using another computer. I would put the iso on a dvd, then insert the dvd into the other computer (remove all external writable drives connected to the computer), when it loads hit shift f10, type diskpart hit enter, then type clean all hit enter. Warning clean all will take several hours. When done type exit hit enter, then x out of the command prompt & installation screen, it will reboot (leave the dvd drive in) then reboot and follow the installation instructions, you shouldn't be asked for a key if the system is legit. I am not sure if you want to try to save your personal data if you do, I would recommend doing it from windows 8.x after doing a full virus scan before you do the above.

 

[derekimo]

Is there anyway he could find out what that system actually came with?

Showkey - Windows 10 Forums

 

[NoelDP]

The problem here is that the SPPSVC service has been disabled - because the Product Key in use is from a SAMSUNG computer, and is therefore NOT VALID in an HP machine.
The installation is counterfeit.

What probably happened is that an update broke the Activation Exploit that had been installed in an effort to circumvent Activation and Validation requirements.


You need to reformat and reinstall using genuine media.

 

[SummGuy]

I'm wondering how a win-7 install, once it's been activated and has lasted "almost a year" (in the case of the OP), can be deactivated remotely by MS. I pointed out that MS would do this with XP via a specific WGA KB pushed through WU, and I asked if MS has ever done this (a specific KB) with Win-7. If MS has never put out a WGA KB for Win-7, and if the system in question hasn't had a hardware change sufficient to trigger a re-activation, then how does win-7 check itself for validity? (ah, it must have something to do with the "Software Protection" service...)

 

[NoelDP]

Win 7's SPPSVC by default runs just after boot, and every day after that. It performs a licensing check and then exits until triggered again

Windows 7 has an update - KB971033 - called the WAT update. (Windows Activation Technologies)
It's an optional/recommended update, and when installed, it checks the licensing statues of the installed OS around every 90 days - and will trigger a non-genuine status if appropriate. This check includes a 'phone-home' to MS to check (amongst other things) whether the Key installed is a valid one.

Without the update installed, there is no periodic phone-home, and a counterfeit system will probably remain undetected unless something else triggers a non-genuine state.

A number of things can cause an apparently genuine but counterfeit system to expose itself - among them are:

• virus infection
• AV update
• anti-malware software
• SFC scan
• BIOS update
• disk errors

In this case, the machine appears to been activated by a Loader - and this has broken down allowing the system to discover the fact that there is no valid SLIC table for Windows 7, and that the SPPSVC service has been disabled in some way.

EDIT: Incidentally, in this case, the WAT update is not currently installed.