1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Windows This computer is not running genuine windows

Discussion in 'Software' started by nemo, 16 Jun 2011.

  1. nemo

    nemo Foregone Destruction

    16 Jun 2010
    Likes Received:
    Has anyone else been getting pop-ups saying 'This Computer is not running genuine windows' on Windows 7 recently ?

    Is it real or fake ?

    I spent my money a few months ago on a shiny legit version of Windows 7 Ultimate, so I don't really believe this message.

    I'm patched up to SP 1 too.
    I've got Avast running, and that has not flagged anything as suspicious.

    This contradicts the text in the system control panel which says 'Windows is activated'

    Any ideas ?

  2. IvanIvanovich

    IvanIvanovich будет глотать вашу душу.

    31 Aug 2008
    Likes Received:
    Open an elevated cmd prompt and run SFC /SCANNOW and see if it corrects it. If not run MGADiag and see what it has to say. if the report dosen't make any sense to you, copy paste it in this thread.
    Sometimes the genuine check makes a false positive too.
    nemo likes this.
  3. thehippoz

    thehippoz What's a Dremel?

    19 Dec 2008
    Likes Received:
    if your legit you might want to phone up the activation center too.. get a key that works

    remember there was a kb update a while back around march.. it pretty much brands anyone who runs ultimate a fake (because only pirates run it over premium seems)

    lemme see- KB971033

    once it's installed nowdays, you can't uninstall it.. if your still having trouble you might try and update everything but that one.. then hide the update so it doesn't come up again
    nemo likes this.
  4. sparkyboy22

    sparkyboy22 Web Tinkerer

    3 May 2010
    Likes Received:
    If it has only come up the once then WindowsKey + Pause/Break.
    Click the activate or change product key or whatever it says at the bottom.

    Use your current serial number. If its genuine it will go through fine. If not phone the number that is given and tell them where you bought it.
    nemo likes this.
  5. OCJunkie

    OCJunkie OC your Dremel too

    19 Apr 2011
    Likes Received:
    Even some "shiny legit versions" can be pir8 if bought from shady outfits. Just try to reactivate, if it fails call M$ and explain the situation, they'll most likely fix you a new key.
    nemo likes this.
  6. paulp

    paulp What's a Dremel?

    6 Apr 2011
    Likes Received:
    Pirate windows

    Have you heard of this happening? It's mighty big of microsoft to give out a key that way!:clap:
  7. RichCreedy

    RichCreedy Hey What Who

    24 Apr 2009
    Likes Received:
    if you have to talk to a microsoft rep on the activation line, and they suspect the license, they will ask a few questions about the license sticker, ie what is written on the license, who installed it, how many times has it been installed etc,etc.

    then if they are happy with the response, they will issue a new activation code, not a license key per se.
  8. OCJunkie

    OCJunkie OC your Dremel too

    19 Apr 2011
    Likes Received:
    That's what I meant. But yes generally they are surprisingly helpful if you're polite and give them no reason to think they're being played.
  9. nemo

    nemo Foregone Destruction

    16 Jun 2010
    Likes Received:
    Thanks all for those suggestions.

    thehippoz - you were spot on about KB971033 being the problem. Your advice to uninstall the KB971033 update, re-boot, check-for-new-updates, and then set the KB971033 to be a 'hidden' update did the job. We also found a good web-page about this update here

    Just to provide a bit of background:

    a) My copy of Windows 7 64bit Ultimate is 100% genuine. I purchased it about 9 months ago from Scan, one of the biggest and most reputable on-line dealers in the UK. I've also SP 1 installed (I normally install all the updates)

    b) I did activate my Windows when I bought it. This is confirmed by 'my computer -> properties' where it says 'Windows is Activated'

    c) Lysol -> I ran sfc /scannow and it said :
    Verification 100% complete.
    Windows Resource Protection found corrupt files but was unable to fix some of them.
    Details are included in the CBS.log windir\Logs\CBS\CBS.log

    The resulting log file is big (6mb). It seemed to be reasonably ok although it did flag up some problems (see end of post). However this did not stop the annoying pop-up from appearing (although I did learn that to get a 'cmd' console window with administrator privileges from the start menu program box, you type cmd then press CTRL+SHFT+RET :) )

    d) I then downloaded and ran mgadiag. This reported the validation status as 'Genuine'.

    e) I then went to the microsoft genuine validation web-page (using IE rather than Firefox/Chrome) and pressed the 'validate now' button. It reported 'Your windows is not genuine' (contradicting mgadiag). To resolve this problem it suggested that I buy a new copy of Windows 7, even though the holographic-ified dvd was sitting in my dvd reader. Not good.

    e) One other weird thing. My mate built himself a new machine to almost the same spec as mine at the same time, purchasing both our copies of Windows 7 at the same time from Scan.
    Our usage is pretty similar (playing games on Steam, Internet). However he has not got this problem. This is strange.

    In summary, I don't like the fact that i've disabled the KB971033 update (I want my machine to be as legit and secure as possible), but I refuse to accept being interrupted every couple of hours 'to buy a legal copy of windows'. My only options now seem to be :
    • Phone Microsoft (but after seeing their on-line web pages/validation process, I am not sure that they can help me out)
    • Revert to a previous restore point in the hope that whatever caused this message to start appearing a few weeks ago will be rolled-back. But I'll lose changes made since the backup date
    • Live with a disabled KB971033

    Anyway, thanks everyone for your help & suggestions. Rep Cheesecake all round :)

    CBS.log Extract

    2011-06-18 14:30:25, Info CBS Session: 30158267_3783756571 initialized by client WindowsUpdateAgent.
    2011-06-18 14:30:25, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
    2011-06-19 10:51:17, Info CSI 00000076 [SR] Beginning Verify and Repair transaction
    2011-06-19 10:51:22, Info CSI 00000077 Ignoring duplicate ownership for directory [l:58{29}]"\??\C:\Windows\System32\en-US" in component Microsoft-Windows-Foundation-Default-Security.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e39}, Type neutral, TypeName neutral, PublicKey neutral
    2011-06-19 10:53:10, Info CSI 00000132 Repair results created: (lots of these)
    2011-06-19 15:53:17, Info CSI 00000326 [SR] Cannot repair member file [l:38{19}]"sppuinotify.dll.mui" of Microsoft-Windows-Security-SPP-UX.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e39}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2011-06-19 15:53:17, Info CSI 00000327 [SR] This component was referenced by [l:266{133}]"Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.Windows Foundation Language Pack"
    2011-06-19 15:53:17, Info CSI 00000328 Hashes for file member \??\C:\Windows\System32\en-US\sppuinotify.dll.mui do not match actual file [l:38{19}]"sppuinotify.dll.mui" :
    2011-06-19 15:53:17, Info CSI 00000331 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired -> LOL ('have been successfully repaired' even though it says above 'cannot repair'. Bad skillz microsoft)
  10. mlennox

    mlennox What's a Dremel?

    18 Oct 2012
    Likes Received:
    started getting that message yesterday after 3 years

  11. mlennox

    mlennox What's a Dremel?

    18 Oct 2012
    Likes Received:
    I tired SFC ?SCANNOW but the response is that I need to be an administrator. I checked and I am an administrator.
  12. mlennox

    mlennox What's a Dremel?

    18 Oct 2012
    Likes Received:
    I tired SFC ?SCANNOW but the response is that I need to be an administrator. I checked and I am an administrator.

    Here is output from the url above:

    Diagnostic Report (1.9.0027.0):
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-742TJ-79G79-XRVFB
    Windows Product Key Hash: jeqd3GGw31LbpnWUpSKT0Ym0pdg=
    Windows Product ID: 00371-154-3873905-85841
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {A456BC6F-F536-4E18-BDD6-E9351D7C0C35}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120503-2030
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Visio Professional 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: N/A, hr=0x80070002
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{A456BC6F-F536-4E18-BDD6-E9351D7C0C35}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-XRVFB</PKey><PID>00371-154-3873905-85841</PID><PIDType>5</PIDType><SID>S-1-5-21-1781262384-756789545-919954020</SID><SYSTEM><Manufacturer>Gateway </Manufacturer><Model>NV59 </Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>V1.09 </Version><SMBIOSVersion major="2" minor="6"/><Date>20091126000000.000000+000</Date></BIOS><HWID>7C553607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007</Name><Ver>12</Ver><Val>261DF31330E7D86</Val><Hash>/Zl65I/UD0zxZ4WF63qmVCFXWY0=</Hash><Pid>89405-707-0089083-63064</Pid><PidType>14</PidType></Product></Products><Applications><App Id="53" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00170-154-387390-01-1033-7600.0000-1822011
    Installation ID: 000172897994026415703671731022878291173336057313111282
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: XRVFB
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 10/18/2012 9:25:10 AM

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 10:16:2012 09:01
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys

    HWID Data-->

    OEM Activation 1.0 Data-->

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    SSDT PmRef CpuPm
  13. deathtaker27

    deathtaker27 Modder

    17 Apr 2010
    Likes Received:
    Right click it and select run as administrator if your on vista or above
  14. short1uk

    short1uk Minimodder

    20 Sep 2011
    Likes Received:
    Is the software protection service started?
  15. javaman

    javaman May irritate Eyes

    10 May 2009
    Likes Received:
    I had this with HP. They carried out a bios update from their auto downloader software which changed the Identity of the the bios. HP's response was "its my fault since I hadn't created a backup" despite the fact it was their own pre installed bloatware that I hadn't got round to removing. Even within warrenty they refused to fix it unless I paid postage for it to be sent and returned with £100 for time spent looking at it and repair disk. After talking to Ebuyer they where kind enough to give me credit and was able to get a new PC.

Share This Page