locked
Is my installation of Windows 7 Pro counterfeit? RRS feed

  • Question

  • I purchased Windows 7 Professional x64 from an online store about 10 days ago. I thought that I was purchasing an OEM download. The download, installation, activation, and updates have not had any problems, but after a little investigation I now believe that the key was for a volume license installation. From what I've found so far this type of key is not for sale to the general public, and I'm concerned that this key will soon be blocked. I'm hoping that I can get validation here before I approach the vendor to request a refund. Maybe I'm wrong, it's been known to happen.

    I have ran the MGAdiag tool and have posted the report below. Thank you in advance for your time and help.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-*****-*****-YVWC4
    Windows Product Key Hash: 8njcVHvO29LQsL0vE7U/PTKc6zk=
    Windows Product ID: 55041-002-4357315-86838
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {96E1BBDD-17C8-4AA2-8BAB-649C62C8F2F2}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{96E1BBDD-17C8-4AA2-8BAB-649C62C8F2F2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-002-4357315-86838</PID><PIDType>6</PIDType><SID>S-1-5-21-3731740780-3095430795-945571601</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P35-DS3L</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F9</Version><SMBIOSVersion major="2" minor="4"/><Date>20090619000000.000000+000</Date></BIOS><HWID>0BDC3307018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
    Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 55041-00172-002-435731-03-1033-7601.0000-2922014
    Installation ID: 001756342182145241374792543130669834098501263036598671
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: YVWC4
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 10/29/2014 9:17:53 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 10:29:2014 19:45
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: OAAAAAEABgABAAEAAAACAAAAAgABAAEA6GFcwobmGJ9a2XTmiP3iX5iyyE9IgZC0TDams43MzDE=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            GBT           GBTUACPI
      FACP            GBT           GBTUACPI
      HPET            GBT           GBTUACPI
      MCFG            GBT           GBTUACPI
      SSDT            PmRef        CpuPm

    Thanks again,

    TD


    • Edited by td351 Thursday, October 30, 2014 6:50 AM
    Thursday, October 30, 2014 2:44 AM

Answers

  • You indeed do have a counterfeit Volume MAK install.  In addition, the Product Key listed at the top (ending in YVWC4) has many hits via Google from hacking/pirate websites.  Also it is different from the Product Key listed in the "Other Data" section (ending in BBBBB).  These should be the same key.  I am assuming the reason for this is due to cracking software being loaded onto the machine as part of the OS.

     

    You need to get an immediate refund and refuse any and all offers of "Replacement Keys" from the vendor.  If you want to get a valid OS, you will need to purchase of copy of Windows 7 OEM System Builder version because the Retail versions are all but gone.  You cannot use an OEM SLP version because you have a retail motherboard that does not have a SLIC Table installed in the BIOS to self activate.  You can get a copy of Windows from a reputable seller such as NewEgg.com.  Please note that you will need to format your drive and perform a clean install.  Be sure to back up your data first.


    Please do not read this sentence. Please ignore the previous sentence.


    Thursday, October 30, 2014 3:48 PM

All replies

  • You indeed do have a counterfeit Volume MAK install.  In addition, the Product Key listed at the top (ending in YVWC4) has many hits via Google from hacking/pirate websites.  Also it is different from the Product Key listed in the "Other Data" section (ending in BBBBB).  These should be the same key.  I am assuming the reason for this is due to cracking software being loaded onto the machine as part of the OS.

     

    You need to get an immediate refund and refuse any and all offers of "Replacement Keys" from the vendor.  If you want to get a valid OS, you will need to purchase of copy of Windows 7 OEM System Builder version because the Retail versions are all but gone.  You cannot use an OEM SLP version because you have a retail motherboard that does not have a SLIC Table installed in the BIOS to self activate.  You can get a copy of Windows from a reputable seller such as NewEgg.com.  Please note that you will need to format your drive and perform a clean install.  Be sure to back up your data first.


    Please do not read this sentence. Please ignore the previous sentence.


    Thursday, October 30, 2014 3:48 PM
  • Kamin,

    Thank you very much for your reply and confirmation of my suspicions, it is appreciated. That is what I suspected after looking through the report and researching. This is an older system that I built myself, so thank you for pointing me to the System Builder version. I am still learning. I will be contacting the vendor asap to request a refund.

    Thank you again for your time and advice!

    TD

    Thursday, October 30, 2014 5:53 PM