I got a call from a friend (very computer illiterate) with an ASUS notebook that came with w7 home premium (pretty sure) , anytime upgrade was done with ultimate key, later sp1 was installed.. Today there was a notification that its not genuine, widows update is now not running and if he tries to do an online validation it fails.. I looked at the system using various tools and ran a status check with daz loader (says licensed) and slic toolkit shows slic validated and cert ok.. Any ideas? computer properties shows windows is activated.. Slic Info Shows _ASUS_Notebook additional info about 2 or 3 months ago the hard drive was cloned to a larger hybrid drive.. the system volume was not expanded.. there is about 400gig of unallocated space..
Thanks.. I forgot about that tool... I'll post results here... I'm the one that upgraded the drive so I kinda responsible for his system now... Always seems when you do a favor you end up getting kicked in the a**
Code: Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x000000000001EFF0 Event Time Stamp: 12:23:2012 19:29 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered File: %systemroot%\system32\sppobjs.dll Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui Tampered File: %systemroot%\system32\sppwinob.dll Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify. dll.mui Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll. mui Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dl l.mui Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui Tampered File: %systemroot%\system32\drivers\spsys.sys The loaders working perfectly, but because you've modified your system by trying other activation tools your systems not going to pass as genuine due to all of the tampered files. You can try opening command prompt as an administrator and using the command SFC /scannow. If that completes but doesn't fix all of the tampered files then try downloading WAT Fix (links in my signature). Don't use WAT Fix if SFC fails though.
thanks for the suggestion.. not sure what tampered with those files as its not my system, the person is pretty computer illiterate so I don't think he looked for any other loaders but who knows.... the person bought the laptop with windows 7 installed and just ran anytime upgrade with an ultimate key... the bios has the proper slic in it..
Daz, I ran all the programs you suggested.. ran sfc /scannow and it said it couldn't repair some files.. then ran watfix and it rebooted machine (it showed windows update being installed on the reboot), then tried to validate.. its still failed.. ran mcdiag and it still shows these files as tampered with,, any ideas? Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x000000000001EFF0 Event Time Stamp: 12:23:2012 19:29 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered File: %systemroot%\system32\sppobjs.dll Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui Tampered File: %systemroot%\system32\sppwinob.dll Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui Tampered File: %systemroot%\system32\drivers\spsys.sys
some additional info.. I copied files all the files that showed tampered and mismatch from another win 7 64, sp1 system,.. the crcs on all the files match with whats on the system in trouble.. there was some posts saying if altered mui files are present to get around language restriction on non ultimate versions it will fail genuine test. I am at a loss what can be causing the mismatch/tampered with errors. ALso the intel raid driver isn't on this system.. its a standard intel ahci driver.. no raid on laptop.. are the files in question different between retail and oem versions? I also looked at the windows update hostory and the last update seems to be about the time the hard drive was upgraded to a hybrid drive..
Already went to intel's site and used their driver discovery tool, it found drivers for other hardware but not the sata controller... I'll download the RST driver anyway but I don't expect windows to find compatible hardware Unless windows licensing does something funky, in this case I don't expect the intel driver to be the issue (system is using a m$ driver) as the file crcs match that of another system.. I don't think that the fact that the last update (sometime in october) is around the time the drive was upgraded is a coincidence ...
Can't swear it will work, but I think you need to manually re-register the dlls you replaced. Regsvr32 - make sure to run from an admin command prompt, register each dll you replaced, then reboot to clear the cobwebs. You often have to re-register dlls when removing patches that allow you to install themes.
Yeah just forget about type 3\4 memory make sure the boot table is MBR and the setttings in the BIOS are set up for legacy mode boot with the disk and follow the instructions run the repair with the command console and follow instructions Diskpart ETC. Thats got to be the reason, if you did that already uninstall update kbt971033 reboot and hide it. Remember when you rebuild the MBR you wipe EVERYTHING ON THE DISK. (its like fdisk if you remember DOS) You might get away with not having to have legacy mode on the 32 bit version but the 64 bit is a bit more tricky.. Tip if your a gamer partition your drives for 64 clusters that's fastest on 64 bit.
UPDATE and Additional Info: This laptop never had Intel RST drivers installed, it used the original windows provided drivers.. With the original drive it passes windows genuine, with the Hybrid drive it fails.. Hashes of all "corrupt" files with good ones are correct.. Manually installed Intel RST drivers (the intel driver search tool does not see compatible hardware).. Two reboots and windows passes genuine... I know all the data is ok but I wonder what M$soft is doing that causes validation issues...