locked
Windows 7 Build 7601 Not Genuine Diagnosis RRS feed

  • Question

  • I have an Acer running Windows 7 with the display saying that I may be running a counterfeit copy of Windows 7 - Build 7601. The MCADiag Report is as follows. Can you tell me which OEM computer this Windows 7 was built for please?

    Diagnostic Report (1.9.0027.0):

     

    -----------------------------------------

     

    Windows Validation Data-->

     

     

     

    Validation Code: 50

     

    Cached Online Validation Code: 0xc004c4a2

    Windows Product Key: *****-*****-YG69F-9M66D-PMJBM

    Windows Product Key Hash: /kehptF9HHVxM5d8dUnqgcfndXw=

    Windows Product ID: 00426-OEM-8992662-00497

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.001

    ID: {BAB2F09B-3AF5-4EC1-A551-6AABF24C62C0}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Ultimate

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.110408-1631

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

     

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: 2.0.48.0

    OGAExec.exe Signed By: Microsoft

    OGAAddin.dll Signed By: Microsoft

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Enterprise 2007 - 100 Genuine

    OGA Version: Registered, 2.0.48.0

    Signed By: Microsoft

    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Users\AMV\AppData\Local\Google\Chrome\Application\chrome.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070005]

    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070005]

    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070005]

    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070005]

     

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{BAB2F09B-3AF5-4EC1-A551-6AABF24C62C0}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-PMJBM</PKey><PID>00426-OEM-8992662-00497</PID><PIDType>2</PIDType><SID>S-1-5-21-3374133645-3234463689-3915252691</SID><SYSTEM><Manufacturer>ACER</Manufacturer><Model>Veriton M460</Model></SYSTEM><BIOS><Manufacturer>ACER</Manufacturer><Version>R01-C3</Version><SMBIOSVersion major="2" minor="5"/><Date>20090525000000.000000+000</Date></BIOS><HWID>7B183A07018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65802</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

     

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Ultimate edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00426-00178-926-600497-02-2057-7600.0000-0262010

    Installation ID: 011244109164614374372144733932634852407234281341811570

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: PMJBM

    License Status: Notification

    Notification Reason: 0xC004F200 (non-genuine).

    Remaining Windows rearm count: 4

    Trusted time: 05/08/2011 18:29:26

     

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: N/A

    HealthStatus: 0x0000000000000000

    Event Time Stamp: N/A

    ActiveX: Not Registered - 0x80070005

    Admin Service: Not Registered - 0x80070422

    HealthStatus Bitmask Output:

     

     

     HWID Data-->

    HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEAJJTY4Ka9qnZI5MpSdjZqNHZfHp4Za1roRJUqhQ==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

    ACPI Table Name OEMID Value OEMTableID Value

    APIC 052509 APIC1721

    FACP 052509 FACP1721

    HPET 052509 OEMHPET

    MCFG 052509 OEMMCFG

    SLIC HPQOEM SLIC-MPC

    OEMB 052509 OEMB1721

    GSCI 052509 GMCHSCI

    Friday, August 5, 2011 6:25 PM

Answers

  • Cached Online Validation Code: 0xc004c4a2

    Windows Product Key: *****-*****-YG69F-9M66D-PMJBM

    Your install is using the blacklisted Lenovo key. This key was blacklisted before windows 7 was released and has never been sold. This install was done using a hackers loader program (blacklisted lenovo key on an acer computer with a hp slic table).

     

    You will have to purchase and install a legitimate copy of windows or revert to the windows your computer came with.

    Friday, August 5, 2011 7:51 PM
    Answerer

All replies

  • Cached Online Validation Code: 0xc004c4a2

    Windows Product Key: *****-*****-YG69F-9M66D-PMJBM

    Your install is using the blacklisted Lenovo key. This key was blacklisted before windows 7 was released and has never been sold. This install was done using a hackers loader program (blacklisted lenovo key on an acer computer with a hp slic table).

     

    You will have to purchase and install a legitimate copy of windows or revert to the windows your computer came with.

    Friday, August 5, 2011 7:51 PM
    Answerer
  • Hi Carey,

    Thank you very much for your prompt response. This computer was purchased secondhand by a friend of mine who has been having repeat crashes resulting in the "blue screen of death".

    I am inclined to recommend that he buys a new computer with a known history and an authentic copy of Windows 7. He was not given any master disks with the system so I guess that he will need to buy Office as well though the analysis appears to indicate a genuine version has been installed?

     

    Regards

    Richard

     

    Friday, August 5, 2011 8:22 PM
  • In addition to George's observations, your friends computer was manufactured on May 25, 2009

    <Date>20090525000000.000000+000</Date>

    a couple of months before Windows 7 released to manufacturers (July 24,2009), so it is not possible that this copy of Windows could be legitimate. OEM SLP copies like this

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    are only installed at the time a computer is made.  This copy was taken from the internet or directly pirated from a later computer using a Hewlett Packard SLIC table

    SLIC HPQOEM SLIC-MPC

    to simulate at real self-activating copy of Windows. Obviously Acer computers do not ship with Hewlett Packard BIOS tables.  Whoever did this was trying to make the computer more salable by installing the current version of Windows.

    Build 7601 simply means that he has installed Service Pack 1. This copy of Windows originally shipped as Build 7600.

    This copy of Windows is a flat out fake no matter how you analyse it. As George says, restore the original Vista that came with the computer or purchase a full license copy of Windows 7 from the Microsoft Store or other known reliable reseller like Amazon Corp. (not an Amazon Marketplace seller).

    OEMs no longer ship recovery disks but instead provide a program to make one.  Your friend can order a recovery disk set from Acer or from a third party like Recovery-Disks.com.  Given the manufacturing date of the computer there should be no reason to purchase a new one just to get genuine Windows.  Most people can make do with Office Home and Student just fine.  If your friend needs Outlook he can purchase Office Home and Business.  Most people get along with Windows Live Mail just fine.


    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Friday, August 5, 2011 8:39 PM
    Answerer
  • the version of office is the enterprise edition. this is only available for volume customers. You will hace to  purchase a legitimate copy of office.

     

    This computer likely came with vista installed. If the recovery partition is intact you can revert back to Vista. See your documentation or manufacturers website for instructions. You could also order recovery disks from the manufacturer.

    Friday, August 5, 2011 8:44 PM
    Answerer