Answered by:
Client Began To Recieve OFFICE 2007 Not Genuine

Question
-
I had a client call me stating they were working with another company who had them RESET somethings on the computer (I have no knowledge what was done). After all this, she received a "NON GENUINE" message. I had her check the other two machines in the office to verify their OFFICE 2007 had a different Product ID. She confirmed they were different. I had her contact the business owner to confirm there were no computers at home, because the Microsft Diagnostic Program shows an invalid Volume Licence Key. The Code is below:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-HWBQ9-DHM92-VT7VJ
Windows Product Key Hash: eJa08l6EsXYs1vqTEoqe88ELWDI=
Windows Product ID: 89576-OEM-7357616-85291
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.0.6002.2.00010100.2.0.006
ID: {72F8E672-2264-497B-B832-DA5A3C68AF2B}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows Vista (TM) Business
Architecture: 0x00000000
Build lab: 6002.vistasp2_gdr.100218-0019
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: 6.0.6002.16398
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: 2.0.48.0
OGAExec.exe Signed By: Microsoft
OGAAddin.dll Signed By: Microsoft
OGA Data-->
Office Status: 108 Invalid VLK
Microsoft Office Enterprise 2007 - 108 Invalid VLK
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{72F8E672-2264-497B-B832-DA5A3C68AF2B}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010100.2.0.006</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VT7VJ</PKey><PID>89576-OEM-7357616-85291</PID><PIDType>3</PIDType><SID>S-1-5-21-3549922667-3061768663-3182360165</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>DG965RY_</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>MQ96510J.86A.1687.2007.0510.0258</Version><SMBIOSVersion major="2" minor="4"/><Date>20070510000000.000000+000</Date></BIOS><HWID>FA333507018400EA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>108</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>108</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>51E53ADC45F0D86</Val><Hash>V1Qbzh/KB0pomikSKmWGfV0hqLw=</Hash><Pid>89388-707-5586747-65171</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="108"/><App Id="16" Version="12" Result="108"/><App Id="18" Version="12" Result="108"/><App Id="19" Version="12" Result="108"/><App Id="1A" Version="12" Result="108"/><App Id="1B" Version="12" Result="108"/><App Id="44" Version="12" Result="108"/><App Id="A1" Version="12" Result="108"/><App Id="BA" Version="12" Result="108"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.0.6002.18005
Name: Windows(TM) Vista, Business edition
Description: Windows Operating System - Vista, OEM_COA_NSLP channel
Activation ID: 177df7ed-709f-454a-91bd-947ec8a1e668
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 89576-00146-576-185291-02-1033-6000.0000-2122007
Installation ID: 004821320215494512669743180944354933783090401731996640
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43473
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43474
Use License URL: http://go.microsoft.com/fwlink/?LinkID=43476
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=43475
Partial Product Key: VT7VJ
License Status: Licensed
Windows Activation Technologies-->
N/A
HWID Data-->
HWID Hash Current: OAAAAAEABgABAAEAAQABAAAAAgABAAEAnJ+WcqSzJNq+JNTB7Ngu98aYSjZ+BfL08C+wPKxWKoU=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INTEL DG965RY
FACP INTEL DG965RY
MCFG INTEL DG965RY
WDDT INTEL DG965RY
ASF! INTEL DG965RY
SSDT INTEL CpuPm
SSDT INTEL CpuPm
SSDT INTEL CpuPm
SSDT INTEL CpuPm
SSDT INTEL CpuPm
-BobThursday, July 22, 2010 7:59 PM
Answers
-
ok, looks like I may have misunderstood your original post.
Bottom Line is Office is using a Volume License Key that was not created or sold by Microsoft. I don't know who installed it.
There are programs available (one called Magic Jellybean) that can tell you what Product Key is being used in an installed copy of Office (they are 3rd party programs so I can't link to them and Microsoft makes no claims as to the quality and funtionality of 3rd party programs). The best way to confirm that all the Office programs are using the correct Product Key is to find out what key is being used in the installed Office and compair it to the product key that it should be using.
If they don't match, uninstall then reinstall office using the proper key.
Hope that helps,
Darin MS- Marked as answer by Darin Smith MS Friday, July 23, 2010 10:38 PM
Friday, July 23, 2010 10:37 PM
All replies
-
Hi Bob,
You have done all the legwork and have created all the 'dots', we just need to go one step further and connect all the dots.
1) The user says that company did 'something' to your client's computer
2) You confirm that the Product ID is not the same as they used to be (Product IDs are created at install so this means Office was reinstall since you last recorded the Product ID)
3) The Diagnostic Report shows that the Office currently installed on that computer is using a Invalid Volume License key. Invalid means that the key was not created by Microsoft and was created thru a pirate program called a Key Generator (KeyGen).
Given this information, the conclusion I would come to is thatit is likely that this company reinstall the Office, on that computer, using a Non-Genuine Product Key.
The resolution would be to uninstall the Non-genuine copy of Office and reinstall the proper version of Office using the proper genuine product key (and to not let that company touch your client's computer, anymore).
Hope that helps,
Darin MS- Proposed as answer by Darin Smith MS Thursday, July 22, 2010 9:26 PM
- Edited by Darin Smith MS Thursday, July 22, 2010 9:32 PM
Thursday, July 22, 2010 9:25 PM -
Just as general information that you might find useful, Microsoft accepts Piracy Reports submitted at http://microsoft.com/piracy
Darin MSThursday, July 22, 2010 9:29 PM -
Hi Dan,
Thanks for your input. Since this appeared as a VLK issue, I had my client check the other machines in the office (I wanted to see if they all had the same Product ID and I thought maybe too many installs had been exercised) but they all had different Product ID numbers. These machines all came from a vendor (I'm not sure if they were purchased at the same time, or same vendor) with Office 2007 installed. I requested my client to search for her invoice to determine how OFFICE 2007 was itemized.
I'm not sure that anyone changed the Product ID Number, and feel it probably is the same as delivered from manufacturer.
The company she was recently working with was HP, because she was having scanning issues, which is unrelated to OFFICE changes. She told me the "Not Genuine" message starting happening when HP RESET several settings. Could be coincidental, but that's when message appeared. I also asked her to see if they supplied Install Discs with the same PID., but she is not sure if backup disc were supplied (she will get back to me).
An Invalid Volume License Key sort of points the finger at the original equipment manufacturer. I will wait to see what the invoice from the computer vendor itemizes, and then go from there.
Thank you for your clarification, if this was done intentionally it just upsets me to no end because of the costs incurred by the client because of unethical practices.
-Bob
Thursday, July 22, 2010 10:02 PM -
ok, looks like I may have misunderstood your original post.
Bottom Line is Office is using a Volume License Key that was not created or sold by Microsoft. I don't know who installed it.
There are programs available (one called Magic Jellybean) that can tell you what Product Key is being used in an installed copy of Office (they are 3rd party programs so I can't link to them and Microsoft makes no claims as to the quality and funtionality of 3rd party programs). The best way to confirm that all the Office programs are using the correct Product Key is to find out what key is being used in the installed Office and compair it to the product key that it should be using.
If they don't match, uninstall then reinstall office using the proper key.
Hope that helps,
Darin MS- Marked as answer by Darin Smith MS Friday, July 23, 2010 10:38 PM
Friday, July 23, 2010 10:37 PM