locked
Windows 7 reformat on a Sony Vaio laptop resulting into a fake genuine key RRS feed

  • Question

  • ok, this is for a friend,

     

    she got infected with a virus on her laptop, she then reformatted with a friend's Home Premium CD using the genuine key which is printed under her laptop,

     

    when we tried installing the MS security essentials, it said it wasn't genuine,

    do these keys only last one installation and cannot be installed again?

     

    the shop where she bought it was from another country, so we can't contact them, but we are sure that the key is genuine , is there a way to make it work?

    Thursday, September 15, 2011 2:58 PM

Answers

  • TigerBoyPH

    Download & run WATFix this will fix the corrupted/tampered files caused by RemoveWAT. I did not make this, therefore I don't take any credit for this. It was made by Daz the developer of the famous Windows Loader app (illegal activation app, however it can also be used for legitimate purpose) It just depends how the end user is using it in there circumstance.

    Let it run. DO NOT restart or attempt to close it until it is finished.

    Once it's done & rebooted your system. Post another MGADiag Report.


    • Edited by tb19 Thursday, September 15, 2011 4:58 PM Added more information.
    • Marked as answer by TigerBoyPH Thursday, September 15, 2011 5:21 PM
    Thursday, September 15, 2011 4:34 PM

All replies

  •   In order to receive the best support, we request all users initially download and run the Genuine Diagnostics tool (MGADiag.exe) at this link http://go.microsoft.com/fwlink/?linkid=52012. Click "Continue", click the "Copy" button then “Paste” the report into a reply message in this thread.

    Thursday, September 15, 2011 3:05 PM
    Answerer
  • In order for us to analyze and troubleshoot a non-genuine notification issue you may be experiencing, please download and run the   Microsoft Genuine Advantage Diagnostics Tool.

     After running the tool, click on the Continue button, then click on the Copy button, then Paste the report into your post.  Also, please include a brief question or pertinent background information that would be helpful in our endeavor to assist you.

     Thank you!


    Carey Frisch
    Thursday, September 15, 2011 3:05 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-9HR2D-2FMT8-6CD9T
    Windows Product Key Hash: bvnsDmeA05YdA7CM6WFxZ1aHx9I=
    Windows Product ID: 00359-OEM-9806892-90224
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {89049A3E-7013-474C-9C55-3D8D03B113D2}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcomapi.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{89049A3E-7013-474C-9C55-3D8D03B113D2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6CD9T</PKey><PID>00359-OEM-9806892-90224</PID><PIDType>8</PIDType><SID>S-1-5-21-1331504112-2179168539-2797589327</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA2JFX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0300Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100720000000.000000+000</Date></BIOS><HWID>FCB93607018400FC</HWID><UserLCID>3409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000002000
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui


    HWID Data-->
    HWID Hash Current: MgAAAAEAAgABAAEAAAACAAAAAwABAAEA6GGQ/tAqmlFSx3JARipYS5zIBqG+eEYmXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC Sony VAIO
    FACP Sony VAIO
    HPET Sony VAIO
    MCFG Sony VAIO
    SLIC Sony VAIO
    SSDT Sony VAIO
    SSDT Sony VAIO

    ____________________________________________________________________________

     

    did she did it right? i'm asking this from her from a distance

    Thursday, September 15, 2011 4:09 PM
  •  
    "TigerBoyPH" wrote in message news:45ae12f2-5c3a-49ba-8ef1-21a5363e585b...

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE22
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-9HR2D-2FMT8-6CD9T
    Windows Product Key Hash: bvnsDmeA05YdA7CM6WFxZ1aHx9I=
    Windows Product ID: 00359-OEM-9806892-90224
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {89049A3E-7013-474C-9C55-3D8D03B113D2}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\sppcomapi.dll[Hr = 0x80070005]
    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    File Mismatch: C:\Windows\system32\en-US\user32.dll.mui[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{89049A3E-7013-474C-9C55-3D8D03B113D2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6CD9T</PKey><PID>00359-OEM-9806892-90224</PID><PIDType>8</PIDType><SID>S-1-5-21-1331504112-2179168539-2797589327</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA2JFX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0300Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100720000000.000000+000</Date></BIOS><HWID>FCB93607018400FC</HWID><UserLCID>3409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

    Windows Activation Technologies-->
    HrOffline: 0x8004FE22
    HrOnline: N/A
    HealthStatus: 0x0000000000002000
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui


    HWID Data-->
    HWID Hash Current: MgAAAAEAAgABAAEAAAACAAAAAwABAAEA6GGQ/tAqmlFSx3JARipYS5zIBqG+eEYmXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC Sony VAIO
    FACP Sony VAIO
    HPET Sony VAIO
    MCFG Sony VAIO
    SLIC Sony VAIO
    SSDT Sony VAIO
    SSDT Sony VAIO

    ____________________________________________________________________________

     

    did she did it right? i'm asking this from her from a distance


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, September 15, 2011 4:16 PM
    Moderator
  • This report reads like someone has made an attempt at fixing a broken system using a hacker’s tool called RemoveWAT.
    If this is the case, then use the tool again to ‘RestoreWAT' and then post another MGADiag report.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Thursday, September 15, 2011 4:16 PM
    Moderator
  • I'm unsure what we really did actually, i just helped her reformat the with the genuine key, how do i use this "RemoveWAT" , i tried googling, yet It sends me to some suspicious sites x.x
    Thursday, September 15, 2011 4:18 PM
  • TigerBoyPH

    Download & run WATFix this will fix the corrupted/tampered files caused by RemoveWAT. I did not make this, therefore I don't take any credit for this. It was made by Daz the developer of the famous Windows Loader app (illegal activation app, however it can also be used for legitimate purpose) It just depends how the end user is using it in there circumstance.

    Let it run. DO NOT restart or attempt to close it until it is finished.

    Once it's done & rebooted your system. Post another MGADiag Report.


    • Edited by tb19 Thursday, September 15, 2011 4:58 PM Added more information.
    • Marked as answer by TigerBoyPH Thursday, September 15, 2011 5:21 PM
    Thursday, September 15, 2011 4:34 PM
  • ok i asked her to do that tb19,

     

    heres the report

    ________________________________________________________

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-9HR2D-2FMT8-6CD9T
    Windows Product Key Hash: bvnsDmeA05YdA7CM6WFxZ1aHx9I=
    Windows Product ID: 00359-OEM-9806892-90224
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {89049A3E-7013-474C-9C55-3D8D03B113D2}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{89049A3E-7013-474C-9C55-3D8D03B113D2}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6CD9T</PKey><PID>00359-OEM-9806892-90224</PID><PIDType>8</PIDType><SID>S-1-5-21-1331504112-2179168539-2797589327</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VPCEA2JFX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R0300Y8</Version><SMBIOSVersion major="2" minor="6"/><Date>20100720000000.000000+000</Date></BIOS><HWID>FCB93607018400FC</HWID><UserLCID>3409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00196-068-990224-02-1124-7600.0000-2582011
    Installation ID: 005684192850737203450883594091843560798326075534691373
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 6CD9T
    License Status: Initial grace period
    Time remaining: 42540 minute(s) (29 day(s))
    Remaining Windows rearm count: 3
    Trusted time: 9/16/2011 1:02:04 AM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: MgAAAAEAAgABAAEAAAACAAAAAwABAAEA6GGQ/tAqmlFSx3JARipYS5zIBqG+eEYmXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
    ACPI Table Name OEMID Value OEMTableID Value
    APIC Sony VAIO
    FACP Sony VAIO
    HPET Sony VAIO
    MCFG Sony VAIO
    SLIC Sony VAIO
    SSDT Sony VAIO
    SSDT Sony VAIO

    Thursday, September 15, 2011 5:04 PM
  • This is looking good.

    Now you just need to Validate Online using Internet Explorer in order to become genuine again.

    • Marked as answer by TigerBoyPH Thursday, September 15, 2011 5:21 PM
    • Unmarked as answer by TigerBoyPH Thursday, September 15, 2011 5:21 PM
    Thursday, September 15, 2011 5:08 PM
  • thank you very much, it's fixed now :D , 

     

    for extra info, i want to know how did you know that we needed to restore WAT? (for purposes of helping others out also :D)

    Thursday, September 15, 2011 5:23 PM
  • Glad you got it worked out. You're welcome.

    RestoreWAT option is supposed to undo the work done by RemoveWAT (tampered & patched files)

    However, in v2.2.5 the RestoreWAT Button DID NOT undo all the mess the hack/crack created in the first place.



    • Edited by tb19 Thursday, September 15, 2011 5:35 PM
    Thursday, September 15, 2011 5:30 PM
  • No – it still needs to be activated (it’s in the Grace period)
     
    "tb19" wrote in message news:0f2c8a44-66ce-4f5f-b6fc-111233b7026c...

    This is looking good.

    Now you just need to Validate Online using Internet Explorer in order to become genuine again.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, September 16, 2011 6:15 AM
    Moderator
  • Please provide a new MGADiag so that we can check it
     
     
    "TigerBoyPH" wrote in message news:a7ecd08e-a874-4e9c-abf2-e509160c2ced...

    thank you very much, it's fixed now :D ,

     

    for extra info, i want to know how did you know that we needed to restore WAT? (for purposes of helping others out also :D)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, September 16, 2011 6:15 AM
    Moderator