none
Windows 7 not genuine Build 7600.

    Question

  • I'm getting the same as some other people, the non genuine error. Laptop bought from Currys just started getting the message yesterday i've had it for months. I've run malware software, my laptop came up with clean bill of health. I've run the Genuinme Advantage Diagnostic Tool but i'm struggling to get the information out of it. I clicked copy but where does it go? I can open the event viewer but it doesn't look like the info other people have pasted in. Not sure what i'm doing can someone help please?
    Thursday, July 15, 2010 9:15 AM

Answers

  • This computer has an emulator to spoof OEM SLP activation. You will need to do a clean installation of the OS that as Dan said should be represented on the COA sticker under your computer or in the battery compartment or purchase a retail copy of windows and perform a clean installation of that OS.

    Alternatively you MAY be able to perform a factory restoration to the original image supplied by the manufacturer. Review your manual and follow the steps provided to start the factory restoration process. If the image was deleted from the hard drive you will need to contact the manufacturer for replacement media.

    HrOnline: 0xC004C4AB  <-- this indicates that an exploit (loader) has been detected.

    SLIC  DELL  QA09   <--------This reflects the spoofed SLP marker when the computer was manufactured by Packard Bell  

     

     

     

    Thursday, July 15, 2010 11:55 PM

All replies

  • Hello phattmaxi,

    When you click Copy the report goes to the Windows clipboard.  Then come back here, hit the Reply link, put your cursor in the text input area, then right click and choose paste.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Thursday, July 15, 2010 12:02 PM
  • Great thanks Dan.  If you'd be able to tell me what's happened here and what can be done i would be very grateful. I'm wondering if it really isn't genuine why a well known high street retailer would sell me a laptop knowing that this may happen.. Thanks in advance, Andy.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {8B588CCA-21AD-468C-A39C-100FDBF9CE0A}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Home and Student 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8B588CCA-21AD-468C-A39C-100FDBF9CE0A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-1629962529-539717912-2314578980</SID><SYSTEM><Manufacturer>Packard Bell   </Manufacturer><Model>EasyNote TJ68                  </Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>V1.30          </Version><SMBIOSVersion major="2" minor="5"/><Date>20091025000000.000000+000</Date></BIOS><HWID>BFBA3607018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>B8F59DD5F0C4F40</Val><Hash>guj+fTCUIN4mHunEitD22xBsb48=</Hash><Pid>81602-928-1763477-68833</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00178-926-600400-02-2057-7600.0000-0222010
    Installation ID: 005330543750730513509401594273967850175320972486817105
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 2
    Trusted time: 15/07/2010 18:38:02

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 7:15:2010 10:25
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: NAAAAAEAAgABAAIAAAACAAAAAwABAAEAeqholYLDen9U4IytUCE+UhKK1F+AxLD1JL9Gyg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC 
      FACP            INTEL         CRESTLNE
      HPET            INTEL         CRESTLNE
      BOOT            PTLTD         $SBFTBL$
      MCFG            INTEL         CRESTLNE
      SLIC            DELL          QA09  
      SSDT            BrtRef        DD01BRT
      SSDT            BrtRef        DD01BRT

    Thursday, July 15, 2010 5:48 PM
  • Hello phatt-maxi,

    One last bit, please verify that this Packard Bell laptop has a Certificate of Authenticity (CoA) affixed to the computer (on the bottom or in the battery compartment on the newest laptops).

    If so, what version and edition of Windows is listed on the CoA?  Don't post the product key.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Thursday, July 15, 2010 6:17 PM
  • As far as I know, the owner of Packard Bell is Gateway (Acer). I don't believe they use a DELL slic on their machines. What's suspicious, too, is that a leaked DELL OEM key for Ultimate is known (your *****-*****-X92GV-V7DCV-P4K27) but no Packard Bell key for the same version. The Easynote TJ68 seems being delivered by default with Windows 7 Home Premium, not with Ultimate.

    "I think there is a world market for maybe five computers.” (Thomas J. Watson, Sr.)
    Thursday, July 15, 2010 9:19 PM
  • This computer has an emulator to spoof OEM SLP activation. You will need to do a clean installation of the OS that as Dan said should be represented on the COA sticker under your computer or in the battery compartment or purchase a retail copy of windows and perform a clean installation of that OS.

    Alternatively you MAY be able to perform a factory restoration to the original image supplied by the manufacturer. Review your manual and follow the steps provided to start the factory restoration process. If the image was deleted from the hard drive you will need to contact the manufacturer for replacement media.

    HrOnline: 0xC004C4AB  <-- this indicates that an exploit (loader) has been detected.

    SLIC  DELL  QA09   <--------This reflects the spoofed SLP marker when the computer was manufactured by Packard Bell  

     

     

     

    Thursday, July 15, 2010 11:55 PM
  • Thanks...

    The windows sticker, i hope you meant that..

    Windows 7 OA

    Acer Group

    CO7P201 001

    00196-036-984-994

    X15-53758

     

    That' all the info there is appart from the product Key.

    Friday, July 16, 2010 8:46 AM
  • "x15-53758" is a SKU code for Windows 7 Home Premium, like expected. You can reinstall this originally installed version if you have a recovery partition or DVD, and reactivate it with the key on the sticker. But your Windows Ultimate version is a fake that should be deleted during the HP reinstall (format).
    "I think there is a world market for maybe five computers.” (Thomas J. Watson, Sr.)
    Friday, July 16, 2010 9:35 AM
  • "phattmaxi" wrote in message news:d82ae88d-8fd5-49eb-b316-44c49979a5f6...

    Thanks...

    The windows sticker, i hope you meant that..

    Windows 7 OA

    Acer Group

    CO7P201 001

    00196-036-984-994

    X15-53758

     

    That' all the info there is appart from the product Key.


    VERY odd!
    That appears to be an Acer Home Premium 'N' edition (missing the Media Player) - which would make sense in the UK, with Curry's being out to push stuff as cheap as possible.
    Have you sent the machine anywhere for repair? - has a friend been let loose on it to 'fix' something? If the former, then take it back and demand they fix it properly for no extra charge. If the latter - never let them near your PC again!
     
    The only way to get back to where you should be now would be to contact Curry's, or Acer, and get hold of the proper Recovery disks for the system. (if you never create the set when you first got the PC).The bad news is that if you do it through Curry's, it's likely to cost you £50. I have no idea what the price through Acer direct is - if you can even get support from them! (From their website - "Please note that all Acer products purchased from PC World, Dixons or Curry's are supported via the store from which the product was purchased.").
     
    Restoring a system from the recovery disks will also restore the recovery partition (at least in the case of Acer).
     
    You *may* get away with restoring from the present recovery partition - but I suspect that it will fail, having probably been overwritten by the Dell software.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, July 16, 2010 9:45 AM
  • Im Having the same issue can anyone help me out? here is the information i received from Genuine Advantage Diagnostic Tool.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-29RQD-48QPR-PTVPY
    Windows Product Key Hash: CjMt0XUFfMRHmBsL2+ZaWM65KnI=
    Windows Product ID: 00359-033-2105382-85390
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {50C9D6C5-AAE2-4AAD-A722-CEAC17132C50}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100226-1909
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{50C9D6C5-AAE2-4AAD-A722-CEAC17132C50}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PTVPY</PKey><PID>00359-033-2105382-85390</PID><PIDType>5</PIDType><SID>S-1-5-21-1871876734-2396462376-3728546822</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.21</Version><SMBIOSVersion major="2" minor="4"/><Date>20090423000000.000000+000</Date></BIOS><HWID>8ABB3607018400F8</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00170-033-210538-01-4105-7600.0000-1542010
    Installation ID: 012865093365252930102200433710195095020154175032287223
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: PTVPY
    License Status: Notification
    Notification Reason: 0xC004F009 (grace time expired).
    Remaining Windows rearm count: 3
    Trusted time: 16/07/2010 1:18:59 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 5:12:2010 23:26
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: OAAAAAIAAgABAAEAAQACAAAABAABAAEA6GFiHa3PnlhE8Hp/9gL83Y3vmog8/qXKgOv8Yb79Rso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        SLIC-MPC
      FACP            HPQOEM        SLIC-MPC
      HPET            HPQOEM        SLIC-MPC
      BOOT            HPQOEM        SLIC-MPC
      MCFG            HPQOEM        SLIC-MPC
      DMAR                          
      ASF!            HPQOEM        SLIC-MPC
      SLIC            HPQOEM        SLIC-MPC
      SSDT            PmRef        CpuPm


    Friday, July 16, 2010 5:25 PM
  • Hello CamDesmarais,

    Please do not piggyback on other people's threads.

    Please create your own thread in this section by clicking on the Ask A Question link.  Paste your report into the thread and provide an explanation of your specific situation or error messages that you are seeing.


    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Friday, July 16, 2010 5:54 PM
  • Hi and thanks very much for your comprehensive answer. No i've not sent it anywhere to be fixed and i don't let my mates anywhere near this laptop as the reason i have a new laptop is because my 'mate' fixed my PC!

    I've taken it back into Currys this morning, they looked a little suprised however to be fair to them they have offered to install the correct version of windows for me, back up my files and upgrade office to 2010.

    Interestingly Microsoft tell me the W7 Ultimate i have is illegal, with a key that's been stolen or leaked. When  i take it back in to get sorted out they have a few questions to answer.

     

    Many thanks, Andy.

    Saturday, July 17, 2010 11:50 AM
  • Thanks very much for your help with this, it's very much appreciated. To Currys's!

     

    Regards, Andy.

    Saturday, July 17, 2010 11:51 AM
  • "phattmaxi" wrote in message news:b21a45ab-0706-4f29-8178-7bcec818aef3...

    Hi and thanks very much for your comprehensive answer. No i've not sent it anywhere to be fixed and i don't let my mates anywhere near this laptop as the reason i have a new laptop is because my 'mate' fixed my PC!

    I've taken it back into Currys this morning, they looked a little suprised however to be fair to them they have offered to install the correct version of windows for me, back up my files and upgrade office to 2010.

    Interestingly Microsoft tell me the W7 Ultimate i have is illegal, with a key that's been stolen or leaked. When  i take it back in to get sorted out they have a few questions to answer.

     

    Many thanks, Andy.


    Interesting - when you get the machine back, the FIRST thing you should do is run another MGADiag report, and let us have a look.
    It wouldn't be the first time that a reputable big store has been let down by one of its own employees.
    I trust you took your own backup of data before you took it in?
     
    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, July 17, 2010 8:22 PM