0x8004fe22 Windows not genuine

presto88 · 19 May 2017

reformated my asus g55 years ago, with a genuine code, i used a downloaded windows 7 installer and have input my coa sticker. now it says windows not genuine.

legitcheck.hta does not work, just shows a blank white
clicking "change product key" or "activate windows now" does not do anything
slui.exe does not open or show anything once opened.

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE22
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-FMGCP-DHHMC-3634B
Windows Product Key Hash: 3viF+eL3vruK2tpr36xKLwz2t4A=
Windows Product ID: 00371-OEM-9045683-79335
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {91B0D6CB-86A0-4231-B419-82337BC1C506}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.170427-1518
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{91B0D6CB-86A0-4231-B419-82337BC1C506}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3634B</PKey><PID>00371-OEM-9045683-79335</PID><PIDType>3</PIDType><SID>S-1-5-21-1903166929-975781018-3210794486</SID><SYSTEM><Manufacturer>ASUSTeK COMPUTER INC.</Manufacturer><Model>G55VW</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>G55VW.209</Version><SMBIOSVersion major="2" minor="7"/><Date>20120607000000.000000+000</Date></BIOS><HWID>EE6B3307018400FE</HWID><UserLCID>3409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>China Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: e120e868-3df2-464a-95a0-b52fa5ada4bf
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00180-456-879335-02-1042-7601.0000-1302017
Installation ID: 013950524973464214410925734200123756977932464123126340
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 3634B
License Status: Initial grace period
Time remaining: 31020 minute(s) (21 day(s))
Remaining Windows rearm count: 1
Trusted time: 05/19/2017 11:14:03 PM

Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000000800
Event Time Stamp: 5:19:2017 23:09
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


HWID Data-->
HWID Hash Current: NgAAAAIAAQABAAEAAQACAAAABAABAAEA1gRusyJBl6K0JG7PeO5jnYgflPWs0mZ0nmTAa5Zj

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			_ASUS_		Notebook
  FACP			_ASUS_		Notebook
  HPET			_ASUS_		Notebook
  MCFG			_ASUS_		Notebook
  FPDT			_ASUS_		Notebook
  ECDT			_ASUS_		Notebook
  SLIC			_ASUS_		Notebook
  SSDT			PmRef		Cpu0Ist
  SSDT			PmRef		Cpu0Ist

Layback Bear · 19 May 2017

Your log show this.

License Status: Initial grace period Time remaining: 31020 minute(s) (21 day(s))

Make sure KB 971033 is installed and activate your system.

I also see this in your log.

Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration

Type in slui again from the Start Orb and tick on it.
Hopefully it will work.

Jack

presto88 · 19 May 2017

i checked and yes kb971033 is installed 1/18/2016

what does tampered file mean and what should i do?

Layback Bear · 19 May 2017

Something or someone has tampered with the file.
Some times infections will do such thing. Sometime tuneup programs or clean up programs will mess with things.

I'm not understanding a grace period for a system that has been installed so long.

Give this a try.

By Brink:
SFC /SCANNOW Command - System File Checker - Windows 7 Help Forums

Jack

presto88 · 19 May 2017

thanks, i have esetnod32, avg tuneup utlities, ccleaner and spybot installed. is that the culprit? if so i will just remove them.

Dropbox - sfcdetails.txt

Layback Bear · 19 May 2017

I have never had Ccleaner do such a thing and I have used it for years.

I personally would never use Spybot or AVG anything.

Because you have Ccleaner install; show me one of these.
It might take more than on picture.
Use this tutorial by Brink to post the pictures.

Screenshots and Files - Upload and Post in Seven Forums - Windows 7 Help Forums

0x8004fe22 Windows not genuine-captureccleaner.png

Jack

presto88 · 20 May 2017

thanks for the help, i hope you are asking for installed programs. here is the list

Layback Bear · 20 May 2017

I must say that is one of the longest list of installed programs I have ever seen.

I see Tuneup Utility 2014, which has been discontinued.
I noticed Java 8 is way out of date.

You could try a Restore Point at a time before all this happened.

Do you have a Backup made before all this happened?

Jack

presto88 · 20 May 2017

i know right, i did try to minimize apps but it seems that i use most of them. will try to uninstall some utilities that i mentioned, spybot and tuneup utilities first, if you think i should.

unfortunately i didnt made backups, if everything fails i will do another clean install and try to minimize apps again. im giving this another month then ill do it.

Bat 1 · 20 May 2017

Java 8 Update 66