Win7 Not Genuine 0xC004FE00 SLMGR -REARM didn't work regedit blocked

vision024 · 08 Apr 2019

I have google other solution and nothing seems to work. This is what I have done so far... deleted KB971033 from the computer, tried the SLMGR -REARM. Got a Windows Script Hook: On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004FE00' to display the error text. Error: 0xC004FE00. Tried to access the regedit, but when I do type it in the Run. Receive a "Registry editing has been disabled by your administrator. After reading and looking at multiple website for solution, nothing hasn't changed. Windows 7 Build 7601 This copy of Windows is not genuine is the right corner of the screen and I really need my computer to be working. I use it for school and I'm not that tech savvy at troubleshooting my computer. Just a little background about my computer. Last year around November my computer hard drive crashed and lost everything on my hard drive. Had to buy a new hard drive for my computer. Because I'm a student, I don't have much or any money to take my computer to any place and have them do it for me. I followed instruction to the best I could and managed to do a fresh install of windows 7 from a cd/dvd rom on the new hard drive. When my hard drive died, I never did a recovery disc or restore disc and/or it never came with one. I had no idea how to retrieve my windows product keys from my previous hard drive. So I asked Microsoft where I could get a Genuine Windows key and I did get one. Didn't have an issue with activation until last month when I login into my computer, I got the Not Genuine popped up and since then have been trying to figure out how to make it go away permanently. I do have internet access but it is very slowly and crappy. I will not download any programs to my computer because of the possibility of a virus or malware. I would appreciate any help, assistance with some options I can do to get this resolved.

vision024 · 08 Apr 2019

Here is the MGA Diagnostic

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 50
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-VCX3P-Y6CCD-Q2KQF
Windows Product Key Hash: hPyFr8A1Qm1FwkjSu2DdhBYUIBI=
Windows Product ID: 00359-OEM-9828314-35214
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {9313F733-B525-4D97-B8BD-9DE8326C58E1}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr_escrow.181110-1429
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{9313F733-B525-4D97-B8BD-9DE8326C58E1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-Q2KQF</PKey><PID>00359-OEM-9828314-35214</PID><PIDType>8</PIDType><SID>S-1-5-21-1950206962-3554040745-2682003669</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEL22FX</Model></SYSTEM><BIOS><Manufacturer>Insyde Corp.</Manufacturer><Version>R0190E3</Version><SMBIOSVersion major="2" minor="7"/><Date>20120302000000.000000+000</Date></BIOS><HWID>EF133407018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>US Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00196-283-135214-02-1033-7601.0000-0872019
Installation ID: 007846896511656001056360457861751715153824784834724344
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: Q2KQF
License Status: Notification
Notification Reason: 0xC004FE00.
Remaining Windows rearm count: 5
Trusted time: 4/8/2019 9:13:13 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:26:2019 22:17
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEAln2YiNIBvNbgP+6VYj2KZSiXwq5QXg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
ASF! Sony VAIO
SLIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO

torchwood · 09 Apr 2019

Hi joe,

for starters please re-install KB971033.

REBOOT TWICE

rerun the tool.

Do have a couple of questions

Where did you get the product key currently in use - its the correct type version for what youve done
(from the COA sticker in the battery compartment?)
Confused as your specs are quoting a desktop report is showing as a laptop

Where did you get the W7 CD/DVD from and
you should be able to rearm this comp, you still have 5 lives left, but its being stopped by this
Registry editing has been disabled by your administrator
(note 3 lives is the norm for OEM's like yours)

More importantly these error codes are often related to malware
Notification Reason: 0xC004FE00.
HrOnline: 0xC004C533

please download and run Malwarebytes and ESET ON-LINE scanner (dissable your current AV)

go to see your colleges IT dept ask if you can use thier internet

Roy

vision024 · 09 Apr 2019

Specs are for a laptop, never specified it was a desktop. I don't remember the exact website I got the product key, it was suggested from Microsoft. The W7 CD/DVD is the same as what was on the dead hard drive and the product key is for the same. Which is Windows 7 Home Edition SP1
The COA sticker, I can't make out the letters, its kinda worn out and its not in the battery area, its under the laptop.

**(note 3 lives is the norm for OEM's like yours) <-- What do you mean by this? My computer has had hard drive issues, I sent it in when it was under warranty and when the hard drive had issues again, I factory reset twice and this last time the hard just dead.

When I get the chance I will run the Malwarebytes and ESET ON-LINE scanner

go to see your colleges IT dept ask if you can use their internet -- NOT an option.

townsbg · 09 Apr 2019

Regedit is disabled by the administrator [Solved]

The first method won't work for you since have home premium.

townsbg · 09 Apr 2019

The second method didn't work for me on my test virtual machine.

torchwood · 10 Apr 2019

Hi Joe,

The product key currently in use, Windows Product ID Type: 8 is from an OEM COA sticker, MS issued keys are a different type
So at some point you have changed it, likely when your original hard drive died.
(same type as mine - i swapped out my spinner for a SSD so had to use the COA key)

Quote
The W7 CD/DVD is the same as what was on the dead hard drive and the product key is for the same

Full description from the COA please, I suspect its either Retail or System builder edition, and why you have this - Remaining Windows rearm count: 5
The rearms are set by the install media - hard drive issues are irrelevant

Notes
if the key is in use on another comp it WILL go non-genuine
Factory reset via the in-built OEM install will be lost if you replace the hard drive
The product key COA should be on the original packaging- and cd/dvd's were not usually provided with laptops

Again new Mgadiag please after Kb971033 re-installed.
results of scans, might have to run other tools after

Roy

Thanks @townsbg
Regedit in Home Premium should be accessable the question here is why it is restricted as the GPO rule option should not normally be present

townsbg · 10 Apr 2019

Second Method

Click Start -> Run. Type this command in Run box and press Ok.

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0

Then a prompt will come up with this question: Value DisableRegistryTools exists, overwrite (Y/N)? Type yes and hit Enter.

After u did that also type this command in the run box and hit enter.

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0

As shown option 2 in the link I provided has some keys to clear. On my virtual machine I was able to replicate the issue by adding the keys and setting the value to 1. Unfortunately after that I wasn't able to use the commands to remove them since I had effectively disabled registry editing. I confirmed that running the commands from the command line and getting the error message the editing the registry was disabled. I had to use group policy editor remove the restriction. He won't be able to use option 1 since it is home premium and i doubt that option 2 will work for him since it didn't work for me. That leaves options 3 or 4. So hypothetically he could have had those keys added, perhaps by a clever virus. His system will be effectively crippled if the other methods don't work and I think that he will have to reinstall.