After 3 months trouble-free, why do I get this now? RRS feed

  • Question

  • Here is my diagnostics report.  Please advise.

    Diagnostic Report (1.9.0027.0):


    Windows Validation Data-->


    Validation Code: 50

    Cached Online Validation Code: 0xc004c4a2

    Windows Product Key: *****-*****-98FK4-33GT2-BY984

    Windows Product Key Hash: xMetQhZPWynU9WH7UjF1WQYG+NQ=

    Windows Product ID: 00371-703-0313761-06873

    Windows Product ID Type: 5

    Windows License Type: Retail

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {18A1E828-0887-46A7-98D9-91D32C0E6EB8}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.140303-2144

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A


    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002


    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002


    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002


    OGA Data-->

    Office Status: 109 N/A

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3


    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed


    File Scan Data-->


    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{18A1E828-0887-46A7-98D9-91D32C0E6EB8}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-BY984</PKey><PID>00371-703-0313761-06873</PID><PIDType>5</PIDType><SID>S-1-5-21-1666387231-2829650780-981297906</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro1510</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A13</Version><SMBIOSVersion major="2" minor="4"/><Date>20081009000000.000000+000</Date></BIOS><HWID>4E1E3A07018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>M08    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 


    Spsys.log Content: 0x80070002


    Licensing Data-->

    Software licensing service version: 6.1.7601.17514


    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, RETAIL channel

    Activation ID: c1e88de3-96c4-4563-ad7d-775f65b1e670

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00212-703-031376-00-1033-7601.0000-1702014

    Installation ID: 014342062686251225648836750394958156701515361425209661

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: BY984

    License Status: Notification

    Notification Reason: 0xC004F200 (non-genuine).

    Remaining Windows rearm count: 3

    Trusted time: 20/09/2014 23:47:28


    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0xC004C4A2

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 9:20:2014 23:18

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:



    HWID Data-->



    OEM Activation 1.0 Data-->



    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x0

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    INTEL                     CRESTLNE

      FACP                                   TOSCPL                 CRESTLNE

      HPET                                    INTEL                     CRESTLNE

      BOOT                                  PTLTD                    $SBFTBL$

      MCFG                                 INTEL                     CRESTLNE

      TCPA                                   Intel                       CRESTLNE

      TMOR                                 PTLTD                            

      OSFR                                   TOSHIB                 A+2nd ID

      APIC                                    INTEL                     CRESTLNE

      SLIC                                      DELL                       M08   

      SSDT                                    SataRe                  SataAhci

      SSDT                                    SataRe                  SataAhci

      SSDT                                    SataRe                  SataAhci

      SSDT                                    SataRe                  SataAhci

    Saturday, September 20, 2014 10:58 PM


All replies

  • Your MGA report shows a Windows 7 Professional product key that belongs exclusively to a not-for-resale MSDN Subscription.  It is now deemed non-genuine since it cannot be resold.  To fix your issue, purchase a genuine Windows 7 Professional license and then proceed to update the Windows product key.

    Carey Frisch

    Sunday, September 21, 2014 1:12 AM

  • Thank you, but this does not answer my question.  This has been working fine for 3 months, including getting regular updates, so how did it suddenly cease to be genuine?
    Sunday, September 21, 2014 6:28 PM
  •  Here's my standard spiel on the time-delays involved in tagging abused keys....

    For MSDN Keys:- MS can only act once a key hits a threshold (and they won't tell an outsider what that threshold is, understandably). They then have to put it through internal systems to ensure that all relevant parties are informed, just in case it's an oversight - then it enters the queue for the next update to the system.

    I have no idea how often the WAT checking system is updated, but I would suspect that it's no more than weekly because of admin and timing issues. The internal MS processes could therefore take easily a couple of months. It therefore depends on how close to the end of a vendors sales list you are, and how quickly he's selling them.

    The cannier ones will sell just enough to stay under the threshold for each product (MSDN subs include a huge number of products), until they've maximised the profits, then try and flood the market before disappearing into the sunset, laden with your cash.

    This could take anything up to a year or more.

     For products sold using a loader:- The loader gets around online activation by fooling the computer into thinking that the OS is installed onto the correct machine, by modifying certain files.

    Because of a number of factors, it's impossible to stop this, so MS came up with the WAT update - which has the ability to scan the relevant files, and detect the use of a loader tool. If the user fully updates the machine, including recommended updates and optional updates, then the WAT update is installed and starts work, and within 3 days, a loader-installed machine will get a notification.

    However, the WAT update is a voluntary one, at least at the first update run, and can be uninstalled or refused. The other time the WAT update is installed is when you validate Windows for some reason - it is part of the validation process, rather than the activation process. This time, it does the scan immediately, and again this will show as non-genuine if a Loader is present. If a user never needs/wants to validate, then they need never install the WAT update, and may never see a non-genuine notification.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, September 21, 2014 6:41 PM
  • Because the seller of the product key likely sold it to several other unsuspecting buyers and the activation servers detected multiple activations on different hardware.  Hence, the product key was deemed misused and reclassified as non-genuine.  Words for the wise: Never purchase standalone product keys from individuals as they are likely stolen or pirated.

    Carey Frisch

    Sunday, September 21, 2014 9:09 PM
  • I see your link directs me to a different company: newegg.com.  How do I know I can trust them, any more than the other company who originally soft me the bogus license?  Why can't I buy Win7Pro from MS?
    Monday, September 22, 2014 1:58 PM
  • Microsoft no longer sells Windows 7 - only Windows 8.  Newegg is a verified vendor that sell a LOT more than just software.  They have been in business for years and you can be certain that the copy you purchase there will be genuine.  Generally if a vendor has no way to reach them via phone or does not have a way to get a refund prominently displayed on their website, they are probably selling bogus product.  If I were you, I would immediately file for a refund from the place that sold you what you have now (if possible).  Do NOT accept any offer they make for a "replacement key" or any sob story as to why it is coming up fake.  Never EVER EVER buy Windows OS installs from EBay, Craigslist, or Amazon.  They will be fraudulent 99.999% of the time. 

    Please do not read this sentence. Please ignore the previous sentence.

    Monday, September 22, 2014 2:06 PM
  • I wouldn't bother anyhow - Newegg don't operate in the UK.

    You can purchase safely in the UK from dabs.com or scan.co.uk - or any decent-sized retailer, but those are ones I know and trust.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, September 22, 2014 2:06 PM
  • Firstly - thank you Noel and Carey - I appreciate the time you put into this. 

    I am in the UK, so I looked at dabs and scan and I remain puzzled.  Each of them is only offering the OEM version, whereas I bought a full retail version from www.mrhightech.com. (Or, at least, that's what they claimed to be selling me - was that a lie?)

    I don't see any clues that would guide me to know which of these sites to trust.  mrhightech.com does give full contact and registration details of their company, including phone numbers etc, so what's not to trust?


    Tuesday, September 23, 2014 9:43 AM
  • Since Microsoft stopped producing and distributing retail versions of Windows 7 as of October 30, 2013, only the OEM versions are still available. 

    The problem I see with mrhightech.com is that they still show retail packaging for Windows 7 which is wrong.  You would need to telephone them and discuss this with them.

    Carey Frisch

    Tuesday, September 23, 2014 11:41 AM
  • I am waiting to hear back from them.  

    Meanwhile, I have recieved calls, yesterday and today, from a US number (001 954 385774) and indian-sounding women saying they are calling from MS Windows technical dept because I have potential problem on my computer and they want me to switch it on so they can help me fix it.  Today I asked her to tell me my name and she was surprisingly close - and the address too, although with significant errors.

    I am assuming this is a phishing scam, but it seems a strange coincidence.  I wonder if these calls are in some way linked to the counterfeit software issue.  Surely no dept at MS would behave in such a way?
    Wednesday, September 24, 2014 10:29 AM
  • Microsoft will NEVER call you unless YOU arrange it with them in advance.  ALL such calls are scams and you should immediately hang up and NEVER follow any of their directions.  Seeing as how you were sold a counterfeit copy of Windows, it would not surprise me if they were using your information as a contact point themselves or selling it to those that do such scams.  And that number is NOT a US number.  There is no US area code of 001 and the number of digits is wrong - the phone number is being spoofed.

    Please do not read this sentence. Please ignore the previous sentence.

    Wednesday, September 24, 2014 1:24 PM
  • Please review: Avoid tech support phone scams

    Carey Frisch

    Thursday, September 25, 2014 1:11 AM
  • And that number is NOT a US number.  There is no US area code of 001 and the number of digits is wrong - the phone number is being spoofed.

    Just a 'For What It's Worth'...

    Not quite true - the 001 code is the International Dialling Code for the USA (at least from the UK), so the call could (just possibly!) have come from a mobile phone set to return the international number rather than the local one (although they would mostly return +01).

    However, in respect of the number of digits, it does appears to be different to what I'd expect.

    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, September 25, 2014 9:36 PM
  • Yes, I had assumed it was a forwarding number.  They are easy to buy online.
    Friday, September 26, 2014 7:09 AM