Hi, My pc is running win7 pro, and over the last few days i have had my desktop branded with a message saying my pc is not genuine windows. My copy came from uni, who gave it to me under a microsoft programme (ELMS), so im pretty sure its not a pirate install. As for office, im running 2010 beta, in case that makes any difference. When i check in control panel, system, it states that windows is activated, even when its displaying the nag on the desktop. Running microsofts web based checker, it says the reason is that some files have changed, but doesnt mention what files, and how to restore them. It seems the nag message appears and disapears during different boots, its not there all the time. Anyone know how to get more useful info as to why this stupid feature fails? (its been 2 days wasted trying to sort this so far)

Hello, Back when this happened to me with Vista I simply restored back to a previous date. Never saw it again. It happened recently with Windows 7 x64, I chose not to restore to another date thinking what ever program caused it need the file. Did a computer scan for virus and rootkit, none were found. Did a re-activation by phone. Took less than 5 minutes. Everything has been fine since. JB

Hi, Thanks for the advice, unfortunately rolling back didnt help. I have up to date AV, and am pretty careful what i run on this box. I have now found a utility called WGADiag which checks WGA (shame MS couldnt be bothered to put a link to this in the nag screen). From the results it appears that my key is ok, office is registered ok, but one single file doesnt match the signature. The damaged file is sppwinob.dll, Software Protection Platform Windows Plugin, a part of WGA. I have done a sfc /scannow, and that hasnt solved the issue. Does anyone know how i can replace the damaged file? WGADIAG results: Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: N/A, hr = 0xc004f012 Windows Product Key: *****-*****-66Y8K-GB2VK-QD3P8 Windows Product Key Hash: C3x40Yn4bCeEHVGeFPCwytjRdHQ= Windows Product ID: 00371-838-9483443-85015 Windows Product ID Type: 5 Windows License Type: Retail Windows OS version: 6.1.7600.2.00010100.0.0.048 ID: {4C602E21-B878-45FE-8FE8-409099C04611}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Professional Architecture: 0x00000009 Build lab: 7600.win7_gdr.100226-1909 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 100 Genuine Microsoft Office Access Runtime (English) 2007 - 121 Microsoft Office Visio Professional 2007 - 100 Genuine OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0x80092003 Other data--> Office Details: <GenuineResults><MachineData><UGUID>{4C602E21-B878-45FE-8FE8-409099C04611}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QD3P8</PKey><PID>00371-838-9483443-85015</PID><PIDType>5</PIDType><SID>S-1-5-21-1711181384-2998520931-2376760511</SID><SYSTEM><Manufacturer>XFX78I</Manufacturer><Model>XFX nForce 780i 3-Way SLI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version> P06 </Version><SMBIOSVersion major="2" minor="4"/><Date>20080711000000.000000+000</Date></BIOS><HWID>1BBB3607018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-001C-0409-0000-0000000FF1CE}"><LegitResult>121</LegitResult><Name>Microsoft Office Access Runtime (English) 2007</Name><Ver>12</Ver><Val>A6DF1BF2503CD6C</Val><Hash>dTTDvXHN4cR0t+IYAOhhFudJX58=</Hash><Pid>00000-694-0010114-62172</Pid><PidType>2</PidType></Product><Product GUID="{91120000-0051-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Visio Professional 2007</Name><Ver>12</Ver><Val>6C69DEBBF66A778</Val><Hash>5ePsv+zS7vOJL2ZpwB+y4Ob3UHQ=</Hash><Pid>84890-956-0411125-63268</Pid><PidType>1</PidType></Product></Products><Applications><App Id="53" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> Software licensing service version: 6.1.7600.16385 Name: Windows(R) 7, Professional edition Description: Windows Operating System - Windows(R) 7, RETAIL channel Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9 Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f Extended PID: 00371-00170-838-948344-00-2057-7600.0000-1142010 Installation ID: 001381629086249523326390431971581370041371274353290214 Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338 Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339 Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341 Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340 Partial Product Key: QD3P8 License Status: Licensed Remaining Windows rearm count: 3 Trusted time: 25/04/2010 17:40:14 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0000000000000080 Event Time Stamp: 4:25:2010 11:05 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered File: %systemroot%\system32\sppwinob.dll HWID Data--> HWID Hash Current: OgAAAAIAAgABAAEAAgACAAAABAABAAEAeqgASrkBMJaSAEwf6oo6G45mje/sqAXNfpWQpXKKvkHMMQ== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes, but no SLIC table Windows marker version: N/A OEMID and OEMTableID Consistent: N/A BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC XFX78I NVDAACPI FACP XFX78I NVDAACPI HPET XFX78I NVDAACPI MCFG XFX78I NVDAACPI WDRT XFX78I NVDAACPI OEMN NVIDIA NTUNEOEM

Hi, after checking the issue, it seems this is a general WGA related issue. As this forum focuses on Windows 7 specific issues, this inquiry would best be posted to Windows 7 WGA forum: http://social.microsoft.com/Forums/en-US/genuinewindows7/threads The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding. Sean Zhu - MSFT