Windows suddenly not genuine (KB3004394 ??)

alexc · 13 Dec 2014

After installing a bunch of updates (among which the infamous KB3004394) early this week, I started getting the 'windows not genuine' message (my copy is 100% legal). I run the KB3024777 update which is supposed to fix things, but I'm still getting the 'windows not genuine' message. Any ideas?

Here is the MGADiag output:

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-PWB9R-4K7W4-2BT4J
Windows Product Key Hash: jlJIE69lzaXsu5B+X11cktZP6u8=
Windows Product ID: 00359-OEM-8992687-00015
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {E5A90ED0-4426-4713-8BB3-BF81ADB4C725}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 103 Blocked VLK
Microsoft Office Standard 2007 - 103 Blocked VLK
Microsoft Office Project Standard 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E5A90ED0-4426-4713-8BB3-BF81ADB4C725}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2BT4J</PKey><PID>00359-OEM-8992687-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-2363513811-1566349318-2052125673</SID><SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>RC530/RC730</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>01WD.M004.20110621.PSA</Version><SMBIOSVersion major="2" minor="7"/><Date>20110621000000.000000+000</Date></BIOS><HWID>B10E3207018400FE</HWID><UserLCID>0410</UserLCID><SystemLCID>0410</SystemLCID><TimeZone>ora solare Europa occidentale(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>SECCSD</OEMID><OEMTableID>LH43STAR</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0012-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89396-707-1528066-65416</Pid><PidType>14</PidType></Product><Product GUID="{90120000-003A-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Project Standard 2007</Name><Ver>12</Ver><Val>437005356259D86</Val><Hash>G5Qjl2nuHEjAmcG9TDdU8SHIOkc=</Hash><Pid>89402-707-0356806-63706</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="3A" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Versione servizio di gestione licenze software: 6.1.7601.17514

Nome: Windows(R) 7, HomePremium edition
Descrizione: Windows Operating System - Windows(R) 7, OEM_SLP channel
ID di attivazioned2c04e90-c3dd-4260-b0f3-f845f5d27d64
ID applicazione: 55c92734-d682-4d71-983e-d6ec3f16059f
PID esteso: 00359-00178-926-800015-02-1033-7601.0000-1602011
ID di installazione: 021020709013544120925945362404840644765784515111290284
URL certificato processore: http://go.microsoft.com/fwlink/?LinkID=88338
URL certificato computer: http://go.microsoft.com/fwlink/?LinkID=88339
URL licenza d'uso: http://go.microsoft.com/fwlink/?LinkID=88341
URL certificato codice "Product Key": http://go.microsoft.com/fwlink/?LinkID=88340
Codice "Product Key" parziale: 2BT4J
Stato licenza: concesso in licenza
Numero di ripristini Windows rimanenti: 3
Ora attendibile: 13/12/2014 14:24:56

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:11:2014 17:43
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAEAAQABAAIAAAABAAAABwABAAEAonZ2L4Z3AITWL+TlrJkOcx79pCFMHV6MZNxyir5BLnM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			SECCSD		LH43STAR
  FACP			SECCSD		LH43STAR
  HPET			SECCSD		LH43STAR
  MCFG			SECCSD		LH43STAR
  SLIC			SECCSD		LH43STAR
  SSDT			PmRef		Cpu0Ist
  SSDT			PmRef		Cpu0Ist
  SSDT			PmRef		Cpu0Ist
  SSDT			PmRef		Cpu0Ist

Thank you in advance

Gator · 13 Dec 2014

Maybe a stupid question but, did you restart your PC after installing the update?

If that doesn't work, try uninstalling the KB3024777 update and reinstalling it. Then reboot.

Ensure KB3004394 is not installed.

To uninstall updates:
Windows Update - Uninstall an Update

NoelDP · 13 Dec 2014

The only problem in your report is that you have installed a counterfeit copy of Office.

As far as Windows is concerned, another reboot should get rid of the problem, as it appears that the patch KB3024777 has already been installed.

alexc · 13 Dec 2014

I rebooted my PC at least a couple of times after installing KB3024777.
Thank you

NoelDP · 13 Dec 2014

Are you still seeing the non-genuine notification? Is Avast your AV?

alexc · 13 Dec 2014

I'm still getting the non-genuine notification. Yes, Avast is my antivirus.
Thank you

NoelDP · 13 Dec 2014

With a clean MGADiag report, it's likely that the problem is a race condition, where two or more processes compete for resources.
In this case one of the resources is the Software Protection system - and the other is likely to be your AV.
Avast has been known to cause such problems in the past.
First, try this

1) Switch off the real-time scanning in Avast completely.
2) Reboot and see if you still get the non-genuine notification - if you do, check that Avast is still switched off.

post back with your results, and post the event logs...

Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

alexc · 13 Dec 2014

Hello Noel, I did as you suggested: disabled Avast file protection, rebooted (after the reboot file protection was still off) and the non-genuine notification is gone (my laptob has been on for a few hours now - also, I re-enabled Avast file protection)!!!
Thanks a million, I definitely owe you a pint :)

NoelDP · 13 Dec 2014

try another reboot or two with the protection switched on - if the notifications return I would suggest uninstalling Avast, running their cleanup tool, and then either reinstalling Avast, or installing MSE instead.

saturday777 · 13 Dec 2014

I have the exactly same problem since yesterday. Called Microsoft Windows here in Sweden, and they also told me that this was due to a recent update, and that I should download the latest update ending with 777 - which I did, but the problem prevails, and the message keeps popping up every ½ hour or so... My worry is that I suddenly will not have access to the system, and I depend on it since I work from home. I have also tried to run the WindowsActivationUpdate.exe, but keep getting some error message. I don't have Avast - I have Kaspersky. I used to have Avast, but uninstalled it about a year ago...