Getting Not Genuine Windows Message

To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
- **in your own thread**, please
Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
How to Tell

Thank you for your reply and for looking at this for me. I am running Windows 7 Professional with SP 1 (hopefully that is what you wanted). Here is the report:

Code:

 
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
 
Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {BE4BAD45-705A-432E-8130-69A8067A1067}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120305-1505
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
 
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
 
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
 
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
 
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
 
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
 
File Scan Data-->
File Mismatch: C:\Windows\system32\sppcext.dll[Hr = 0x800b0100]
 
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{BE4BAD45-705A-432E-8130-69A8067A1067}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-1930030970-2100596283-3171667652</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 230 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.4.0</Version><SMBIOSVersion major="2" minor="6"/><Date>20101209000000.000000+000</Date></BIOS><HWID>56583607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>WN09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
 
Spsys.log Content: 0x80070002
 
Licensing Data-->
Software licensing service version: 6.1.7601.17514
 
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700524-02-1033-7601.0000-1962011
Installation ID: 004646373353469384395090512516997604227470793904964303
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 4/25/2012 1:49:38 PM
 
Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0000000000000040
Event Time Stamp: 4:24:2012 21:02
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
 
 
HWID Data-->
HWID Hash Current: MAAAAAEAAgABAAMAAAABAAAAAQABAAEA6GF+IsqhqnYgayj8znCuFQpT7mpgPUbK
 
OEM Activation 1.0 Data-->
N/A
 
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL APIC2154
FACP DELL FACP2154
HPET DELL OEMHPET 
MCFG DELL OEMMCFG 
SLIC DELL WN09 
OEMB DELL OEMB2154
GSCI DELL GMCHSCI

Your problem is the tampered file slcext.dll - I've seen a number of these recently, and I suspect that they may be the result of a malware attack.
First please ensure that your system is clear of viruses and malware.
Update your Anti-virus (what is it?) and run a full system scan.
Download, install and update MalwareBytes Anti-Malware free edition (from www.malwarebytes.org) - but do NOT enable the Real-Time Protection offer.
Run a full system scan in your main account, and Quick scans in all other accounts.

Once complete,
Please run CHKDSK and SFC scans -
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key.
You will be told that the drive is locked,
and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

The chkdsk will take a few hours depending on the size
of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally
(possibly after a second auto-reboot) - then run the SFC

SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found

Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type

SFC /SCANNOW

and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.

Post an MGADiag report with details of any error messages encountered

Be aware that I tend to consider Norton to be a pernicious form of malware! :)
That said, it's not as bad as it used to be, and may occasionally even work so I'll let you keep it there for the moment (there was a time when I'd have insisted on removing it before working on a system).

What program(s) do you recommend, Noel?

BTW, NIS is still scanning the comptuer - over 700,000 files so far. MalwareBytes Anti-Malware only scanned 350,000 files. I thought I set it for full system scan. Nothing found be either so far.

Here is the log for the MalwareBytes scan

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.04.25.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
MAR :: MAR [administrator]

4/25/2012 3:54:41 PM
mbam-log-2012-04-25 (15-54-41).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 368827
Time elapsed: 35 minute(s), 19 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Malwarebytes and Norton count different things - you'll probably find that Norton counts every entry in the registry or some such stupidity :)
350,000 does seem a somwhat low count for a fully-operational system, though.

I'm quite happy using MSE - I've used Avast and AVG .
I no longer recommend AVG (I used to be an agent for them when they were Grisoft), as I consider it suffering from bloat.
Avast is OK - but I didn't like the nags in the free version, and found the interface a little awkward.
MSE has the great advantage of being simple, like me :)

That's perfectly correct. -you wouldn't have got the intervening messages about a reboot unless you'd got it mostly right, anyhow.
This sort of thing can happen - and I can never remember the cause
Try booting to Safe Mode, and issuing the command from there.
If that fails, boot to the WinRE (Repair Your Computer') option, and run a similar command there - the problen being that the C: drive changes its drive letter there (usually to D: or E: ) so you have to amend the command for that once you've found out which it is.
To do that, use the DIR command (to avoid getting into areas which could make unwanted changes!)
type
DIR D:\Windows\system32\wat
if it finds that files, you're in business - if not, try E:... (etc.)
then use the CHKDSK command as above, substituting the correct letter.
It shouldn't demand a reboot this time, as you're not techically locking the drive.