locked
Windows 7 build 7600 suddenly not genuine anymore PLEASE HELP!!! RRS feed

  • Question

  • My Windows 7 Build 7600 suddenly started saying that it's not genuine on 11-10-2010 and i've used it since December 2009 and it worked fine the whole time it started doing it after I installed office 2007 I then did a system restore but it seemed to fail each time I uninstalled office but it didn't seem to fix the problem...PLEASE HELP!!! Here's my MGA report

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {3F311966-B2C3-44A5-BEBE-0385B1300F89}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{3F311966-B2C3-44A5-BEBE-0385B1300F89}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2439265392-3073116324-3774240876</SID><SYSTEM><Manufacturer>ECS</Manufacturer><Model>GeForce6100PM-M2</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="4"/><Date>20090306000000.000000+000</Date></BIOS><HWID>3DB93607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>South Africa Standard Time(GMT+02:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00178-926-600400-02-1033-7600.0000-3252009
    Installation ID: 008920051704170552405425443082549483292151700434545592
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 2
    Trusted time: 23-Nov-10 3:10:13 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:23:2010 15:05
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: OgAAAAQAAgABAAEAAgABAAAAAwABAAEAJJT8Xli/Pd6KowOIYraSAISLPlouhY3vGrja9Wh1aXVA6Q==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   Nvidia  AWRDACPI
      FACP   Nvidia  AWRDACPI
      HPET   Nvidia  AWRDACPI
      SSDT   PTLTD   POWERNOW
      MCFG   Nvidia  AWRDACPI
      SLIC   DELL    QA09  

     

    Tuesday, November 23, 2010 1:37 PM

Answers

  • Your computer is using a loader, a loader is an activation exploit that upon bootup loads an emulated SLIC into memory and then allows windows to boot. Windows sees the emulated SLIC and will activate if the other components of SLP activation are present. WAT recongizes the activation exploit for what it is and has placed your OS in notification mode. To return to genuine status you will need to.

    1. remove the loader.
    2. install a new, valid key. The key must be a full version.
    3. Activate and then validate.

    You can obtain a key by pressing the resolve now button when presented with the notification, you will then be presented with options to resolve the issue such as purchasing a WGA "get genuine kit".

    If you purchased the software as a retail product you may wan to consider reporting the seller to the MS antipiracy support group.

    Your computer has an ECS brand motherboard but is using the emulated SLIC from Dell. The product key is also Dell.

     

    One more note, if you installed with non-genuine, preactivated media (many were sold by on different sites) you may want to do a clean install to avoid malware.

    • Marked as answer by Darin Smith MS Tuesday, November 23, 2010 6:55 PM
    Tuesday, November 23, 2010 6:35 PM
  • Note: If your computer has a Certificate of Authenticity (COA) sticker on the side, bottom or (for some laptops) in the battery compartment, then the computer is licensed to use the version of Windows listed on that COA. You would need to contact the Manufacturer of the computer to get a replacement copy of the proper Windows Recovery Software for that model of computer. 

    Darin MS
    • Marked as answer by Darin Smith MS Tuesday, November 23, 2010 6:55 PM
    Tuesday, November 23, 2010 6:55 PM

All replies

  • Your computer is using a loader, a loader is an activation exploit that upon bootup loads an emulated SLIC into memory and then allows windows to boot. Windows sees the emulated SLIC and will activate if the other components of SLP activation are present. WAT recongizes the activation exploit for what it is and has placed your OS in notification mode. To return to genuine status you will need to.

    1. remove the loader.
    2. install a new, valid key. The key must be a full version.
    3. Activate and then validate.

    You can obtain a key by pressing the resolve now button when presented with the notification, you will then be presented with options to resolve the issue such as purchasing a WGA "get genuine kit".

    If you purchased the software as a retail product you may wan to consider reporting the seller to the MS antipiracy support group.

    Your computer has an ECS brand motherboard but is using the emulated SLIC from Dell. The product key is also Dell.

     

    One more note, if you installed with non-genuine, preactivated media (many were sold by on different sites) you may want to do a clean install to avoid malware.

    • Marked as answer by Darin Smith MS Tuesday, November 23, 2010 6:55 PM
    Tuesday, November 23, 2010 6:35 PM
  • Note: If your computer has a Certificate of Authenticity (COA) sticker on the side, bottom or (for some laptops) in the battery compartment, then the computer is licensed to use the version of Windows listed on that COA. You would need to contact the Manufacturer of the computer to get a replacement copy of the proper Windows Recovery Software for that model of computer. 

    Darin MS
    • Marked as answer by Darin Smith MS Tuesday, November 23, 2010 6:55 PM
    Tuesday, November 23, 2010 6:55 PM