Windows 7 not Genuine - ASUS notebook

Discussion in 'Windows 7' started by jradomsk, Dec 24, 2012.

  1. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    I got a call from a friend (very computer illiterate) with an ASUS notebook that came with w7 home premium (pretty sure) , anytime upgrade was done with ultimate key, later sp1 was installed.. Today there was a notification that its not genuine, widows update is now not running and if he tries to do an online validation it fails..
    I looked at the system using various tools and ran a status check with daz loader (says licensed) and slic toolkit shows slic validated and cert ok.. Any ideas?

    computer properties shows windows is activated..
    Slic Info Shows
    _ASUS_Notebook

    additional info about 2 or 3 months ago the hard drive was cloned to a larger hybrid drive.. the system volume was not expanded.. there is about 400gig of unallocated space..
     
  2. mictlan

    mictlan MDL Member

    Nov 9, 2009
    224
    114
    10
    #2 mictlan, Dec 24, 2012
    Last edited by a moderator: Apr 20, 2017
  3. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    Thanks.. I forgot about that tool... I'll post results here... I'm the one that upgraded the drive so I kinda responsible for his system now... Always seems when you do a favor you end up getting kicked in the a**
     
  4. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    #4 jradomsk, Dec 25, 2012
    Last edited by a moderator: Apr 20, 2017
    (OP)
  5. Daz

    Daz MDL Developer / Admin
    Staff Member

    Jul 31, 2009
    9,294
    66,087
    300
    #5 Daz, Dec 25, 2012
    Last edited by a moderator: Apr 20, 2017
    Code:
    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 12:23:2012 19:29
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify. dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll. mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dl l.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
    The loaders working perfectly, but because you've modified your system by trying other activation tools your systems not going to pass as genuine due to all of the tampered files.

    You can try opening command prompt as an administrator and using the command SFC /scannow. If that completes but doesn't fix all of the tampered files then try downloading WAT Fix (links in my signature). Don't use WAT Fix if SFC fails though.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    thanks for the suggestion.. not sure what tampered with those files as its not my system, the person is pretty computer illiterate so I don't think he looked for any other loaders but who knows.... the person bought the laptop with windows 7 installed and just ran anytime upgrade with an ultimate key... the bios has the proper slic in it..
     
  7. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    17,210
    14,767
    340
    Similar problems are seen in MS forums; try installing latest Intel RST drivers.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    Daz,
    I ran all the programs you suggested.. ran sfc /scannow and it said it couldn't repair some files.. then ran watfix and it rebooted machine (it showed windows update being installed on the reboot), then tried to validate.. its still failed.. ran mcdiag and it still shows these files as tampered with,, any ideas?

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x000000000001EFF0
    Event Time Stamp: 12:23:2012 19:29
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppobjs.dll
    Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Tampered File: %systemroot%\system32\sppwinob.dll
    Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
    Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Tampered File: %systemroot%\system32\drivers\spsys.sys
     
  9. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    #9 jradomsk, Dec 27, 2012
    Last edited: Dec 27, 2012
    (OP)
    some additional info..

    I copied files all the files that showed tampered and mismatch from another win 7 64, sp1 system,.. the crcs on all the files match with whats on the system in trouble.. there was some posts saying if altered mui files are present to get around language restriction on non ultimate versions it will fail genuine test.

    I am at a loss what can be causing the mismatch/tampered with errors.

    ALso the intel raid driver isn't on this system.. its a standard intel ahci driver.. no raid on laptop..

    are the files in question different between retail and oem versions?

    I also looked at the windows update hostory and the last update seems to be about the time the hard drive was upgraded to a hybrid drive..
     
  10. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    17,210
    14,767
    340
    RST means Rapid Storage Technology... its the AHCI driver.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    Already went to intel's site and used their driver discovery tool, it found drivers for other hardware but not the sata controller... I'll download the RST driver anyway but I don't expect windows to find compatible hardware :( Unless windows licensing does something funky, in this case I don't expect the intel driver to be the issue (system is using a m$ driver) as the file crcs match that of another system.. I don't think that the fact that the last update (sometime in october) is around the time the drive was upgraded is a coincidence ...
     
  12. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    17,210
    14,767
    340
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    17,210
    14,767
    340
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. Daz

    Daz MDL Developer / Admin
    Staff Member

    Jul 31, 2009
    9,294
    66,087
    300
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. dewot

    dewot MDL Junior Member

    Apr 25, 2008
    57
    17
    0
    Can't swear it will work, but I think you need to manually re-register the dlls you replaced. Regsvr32 - make sure to run from an admin command prompt, register each dll you replaced, then reboot to clear the cobwebs.

    You often have to re-register dlls when removing patches that allow you to install themes.
     
  16. stevo

    stevo MDL Novice

    Dec 22, 2012
    5
    0
    0
    #17 stevo, Dec 28, 2012
    Last edited: Dec 28, 2012
    Yeah just forget about type 3\4 memory make sure the boot table is MBR and the setttings in the BIOS are set up for legacy mode boot with the disk and follow the instructions run the repair with the command console and follow instructions Diskpart ETC.

    Thats got to be the reason, if you did that already uninstall update kbt971033 reboot and hide it. Remember when you rebuild the MBR you wipe EVERYTHING ON THE DISK. (its like fdisk if you remember DOS)

    You might get away with not having to have legacy mode on the 32 bit version but the 64 bit is a bit more tricky.. Tip if your a gamer partition your drives for 64 clusters that's fastest on 64 bit.
     
  17. jradomsk

    jradomsk MDL Junior Member

    Oct 22, 2009
    53
    0
    0
    UPDATE and Additional Info:
    This laptop never had Intel RST drivers installed, it used the original windows provided drivers.. With the original drive it passes windows genuine, with the Hybrid drive it fails.. Hashes of all "corrupt" files with good ones are correct.. Manually installed Intel RST drivers (the intel driver search tool does not see compatible hardware).. Two reboots and windows passes genuine... I know all the data is ok but I wonder what M$soft is doing that causes validation issues...