Windows 7 Ultimate suspicious RRS feed

  • Question

  • Hello,

    I suspect the version of Windows 7 Ultimate which I bought from a seller at Amazon.co.uk to be not genuine.The most obvious conspicuity seems to be the hologram of the included DVD. It's difficult to tell because it can't be easily removed like a sticker, however one can feel that it is attached on top of the DVD and not embedded within like with another Windows 7 DVD that I have.

    After sending it back to them the seller still claims everything was alright after checking with their wholesaler.

    I did run your validation tool with the following results:

    Diagnostic Report (1.9.0027.0):
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-VVVPQ-GGJY9-6GJBQ
    Windows Product Key Hash: UPQYpUnimmk/Xo/NPSOZVcl6Rz8=
    Windows Product ID: 00426-068-3431102-86922
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {C2C06BBA-5525-4290-91DC-9655510EA981}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C2C06BBA-5525-4290-91DC-9655510EA981}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-6GJBQ</PKey><PID>00426-068-3431102-86922</PID><PIDType>5</PIDType><SID>S-1-5-21-2358283280-4098149721-1405647957</SID><SYSTEM><Manufacturer>VMware, Inc.</Manufacturer><Model>VMware Virtual Platform</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>6.00</Version><SMBIOSVersion major="2" minor="4"/><Date>20091231000000.000000+000</Date></BIOS><HWID>5AB83607018400E8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: a0cde89c-3304-4157-b61c-c8ad785d1fad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00172-068-343110-00-1033-7600.0000-0152011
    Installation ID: 007161564525691570730076372326325352060144667464970360
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 6GJBQ
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 1/15/2011 4:36:50 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:

    HWID Data-->

    OEM Activation 1.0 Data-->

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            INTEL         440BX   
      SRAT            VMWARE        MEMPLUG
      BOOT            PTLTD         $SBFTBL$
      MCFG            PTLTD         $PCITBL$


    I would like to ask you for advice how to deal with this issue.

    Friday, February 4, 2011 10:17 AM


All replies

  • See the sticky "Blocked Product Keys". Your PID with -068- comes from a MSDN subscription and is "not for resale".
    "192 GB ought to be enough for anybody." (from the miniseries "Next Generation's Jokes")
    Friday, February 4, 2011 2:21 PM
  • Thanks, but I did see that posting and it says "If you have a similar PID, or your key is blocked and you want confirmation, post a new thread with a report from the MGADIAG tool ...".

    So, can I take your answer now as a confirmation that it isn't genuine? I need to reply to the seller.

    Friday, February 4, 2011 5:01 PM
  • Unfortunately, yes.

    "Windows Product ID: 00426-068 -3431102-86922"

     This tells us that the key originated from an MSDN (Microsoft Developer Network) subscription. Keys that originate from an MSDN Subscription are only valid to be used by the owner of that MSDN Subscription and are also tied to that subscription so the only way to sell an MSDN key is to sell the whole MSDN Subscription (which can be worth between $700 to $11,00 depending on the subscription level).

     So, unless you are the owner of MSDN subscription that this key originated from, then the key is not valid for use by you.  In this case I would recommend contacting the person or company that sold you this key and software and demand a refund.

    Please see the below links for additional information:


    The pirates have got VERY good at this over the past few years, as the price of equipment for manufacturing the packages drops, and as factories open in less well-policed countries.
    see also this post....


    Thank you,


    Darin MS
    Friday, February 4, 2011 8:18 PM