none
Accidentally deleted system file, Windows says it isn't genuine!

    Question

  • Hello

    So my baby sister mistakenly got her hands on my laptop and deleted a system file. The computer keeps telling me now that my Windows is no genuine. I tried to find the deleted file in the recycle bin and it wasn't there. I tried a system restore but for some reason no restore points are available except for 2 and these are from today and yesterday, by these times, the file had already been deleted. Help please!

    I ran the MGADT and here are the results: 

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-J8D7P-XQJJ2-GPDD4
    Windows Product Key Hash: xgsndMkYdJsYmUng0qIJ/thx+HI=
    Windows Product ID: 00371-868-0000007-85197
    Windows Product ID Type: 1
    Windows License Type: KMS Client
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {D243037B-FFBB-42F2-B389-673D70C5483A}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Professional Plus 2007 - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070005]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D243037B-FFBB-42F2-B389-673D70C5483A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-GPDD4</PKey><PID>00371-868-0000007-85197</PID><PIDType>1</PIDType><SID>S-1-5-21-524202390-3540687380-2877105031</SID><SYSTEM><Manufacturer>ASUSTeK COMPUTER INC.</Manufacturer><Model>X101CH</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>X101CH.0701</Version><SMBIOSVersion major="2" minor="7"/><Date>20120308000000.000000+000</Date></BIOS><HWID>2BFC0600018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>9E9D6BB020BA586</Val><Hash>ySTVb94dSHZL2cWDp1Tre5aucCs=</Hash><Pid>89409-707-0270667-65272</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Not Registered - 0x80070005
    Admin Service: Not Registered - 0x80070005
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: KgAAAAAAAQABAAEAAAABAAAAAgABAAEAJJS23chjAhAuZF7Xbk4itQQa

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ALASKA A M I
      FACP ALASKA A M I
      HPET ALASKA A M I
      MCFG ALASKA A M I
      RTCF A1234 RTCONFIG
      SSDT PmRef CpuPm
      SLIC _ASUS_ Notebook
      BGRT ALASKA A M I

    Help please!

    Thursday, November 14, 2013 4:06 AM

Answers

All replies

  • is this a laptop from a business?

    Windows License Type: KMS Client tells me, you use KMS Server to activate Windows.


    "A programmer is just a tool which converts caffeine into code"

    Thursday, November 14, 2013 5:56 AM
  • You are using a KMS Client, and Office Professional Plus 2007, which is a Volume License Only product.   

    If you bought this OS as a Retail install, then it is counterfeit.  If you are this laptop is not used in a Volume License environment, then your copy of Office is counterfeit. 

    If this is a work laptop, there may be some file corruptions that are causing the activation failure.  If so, posting your MGA report in a new thread in this forum could help get it fixed.


    Please do not read this sentence. Please ignore the previous sentence.

    Thursday, November 14, 2013 4:00 PM
  • Yes, this does look like a business computer. If this laptop is not from a business of some sort it's likely that it is a counterfeit Windows installation. 

    Where did you get the laptop and who installed the OS and Office for you? You might wanna check with them.


    Thanks,

    Bryan Doherty

    MCSA, CCNP, A+, Network+, Security+

    Blog: http://social.technet.microsoft.com/profile/bryan%20doherty/ 

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, November 14, 2013 5:36 PM
  • Yes I got this laptop from work.
    Friday, November 15, 2013 4:29 AM
  • Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    this is an important file when it comes to activation. Run sfc /scannow and try to repair the script.

    If this fails, extract the file from your Windows DVD and copy it to system32 folder:

    http://blog.nirsoft.net/2009/09/17/how-to-extract-missing-system-files-from-the-dvd-of-windows-7vista/


    "A programmer is just a tool which converts caffeine into code"

    Friday, November 15, 2013 5:31 AM