Windows 7 Pro suddenly giving "Not Genuine" message

shawnlan · 12 Mar 2015

Few days ago my windows 7 pro started giving me this annoying message saying that my windows is not genuine. I've searched some articles online and found that it might be due to Avast. I used https://www.avast.com/en-us/uninstall-utility to remove it (I didn't go through the standard Control Panel uninstall process). I also made sure that my windows is updated. Now I switched to MSE. However, the message is still showing! Below is my MGADiag report. Please help. Thank you!

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {58096704-BF58-4FAD-B2F0-C31ABC33752E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150202-1526
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{58096704-BF58-4FAD-B2F0-C31ABC33752E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-1022473600-201420776-3900020974</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS 8300  </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A06</Version><SMBIOSVersion major="2" minor="6"/><Date>20111017000000.000000+000</Date></BIOS><HWID>1EEF3507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>FX09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700524-02-1033-7601.0000-0802012
Installation ID: 013480690105177873388316515261403722385105885541791950
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 3/12/2015 5:08:18 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:12:2015 11:38
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LAAAAAEAAQABAAEAAAACAAAAAQABAAEAln149VyuUARUrHC6Yj3Wyk4wLnM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            DELL          FX09   
  FACP            DELL          FX09   
  HPET            DELL        FX09
  MCFG            DELL        FX09
  SSDT            AMICPU        PROC
  SLIC            DELL          FX09   
  OSFR            DELL          FX09

shawnlan · 13 Mar 2015

Anyone please? Thank you.

genesis1 · 14 Mar 2015

Check your windows updates and see if kb 3004394 is installed. If it is then that is the problem as this was a botched windows update on sp1 machines and is responsible for many pc's receiving the non genuine message. Dowload this fix from MS Install KB3024777 to fix an issue with KB3004394 on Windows 7 and Windows Server 2008 R2

Hope it helps.

NoelDP · 16 Mar 2015

There are no problems with your MGADiag report.
'genesis1' is correct that the original version of the KB3004394 update caused many problems - however these usually show in the MGADiag, and are not present in this one, so it's unlikely to be that. The patch was also re-released in February, and the new version doesn't have the problems of the earlier one.

I can't see any reason why you should be getting a non-genuine notification - which probably means that the problem is caused by a race condition, and may be difficult to pin down. Such problems usually disappear after a few days - but they can sometimes be persistent.

The following may be worth trying.

Please disable real-time scanning/protection and reboot

If the notification has disappeared, re-enable real-time scanning and reboot again

If the notification is still present, first check whether the real-time scanning is still switched off.

If so, then re-enable it and post the result.

If it's turned itself back on then tell me or try again using a different disable option.

Post back with the results

shawnlan · 16 Mar 2015

I checked the update history. kb3004394 was installed last Dec 10. I didn't get the error until Mar 10. On Mar 12, KB3024777 was installed (after I uninstalled Avast and installed MSE). After that, the error showed once again, so I created this post. However, no more error showed after that. Now I go to Genuine Microsoft Software and it says my Windows is genuine. Looks like the error is fixed. I don't know how, but thank you all for your input!

Should I keep MSE or go back to Avast? Any suggestion? Thanks again.

NoelDP · 16 Mar 2015

Personally I prefer MSE - it doesn't nag me every 5 minutes!
It depends on how many dodgy sites you go to and how well-versed you are in the dangers of the internet.
Avast is possibly better if you plan on living dangerously - but for the general user who doesn't go into hotbeds of malware, MSE is perfectly good enough.

Chris2005 · 18 Mar 2015

Yea, I could see in your original post, the Validation Code: 0 means it's genuine.

NoelDP · 18 Mar 2015

Not necessarily - it's possible to have errors showing in the report, and still have that result!

(Not common - but I have seen it)