locked
Win 7 suddenly not genuine RRS feed

  • Question

  • Bought a computer from a reputable reseller.  After several weeks, the message that this copy of windows is not genuine appears.  Nevertheless, I do get updates.  Since I installed a lot of different software, I want to make sure that it is not causing the problem.  This computer has a non-original harddrive, operating system was cloned onto it from original harddrive.  When I first got it, it did say that it had been activated.  Wanted to check here first.

     

    MGADT report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {F31242D3-EE9C-41B2-9536-280841B22442}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Enterprise 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F31242D3-EE9C-41B2-9536-280841B22442}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-3324927553-371137973-2662520785</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>2081CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6FET83WW (3.13 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20100315000000.000000+000</Date></BIOS><HWID>02BA3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>1380E2D3A732D86</Val><Hash>sFD/fLOBWDwFdKlCV4hTqtg9L20=</Hash><Pid>89388-707-0157152-65628</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00178-926-600400-02-1033-7600.0000-0862010
    Installation ID: 013684697853740990662615396594385970905434149832352311
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 3
    Trusted time: 11/8/2010 2:13:42 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:8:2010 14:06
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: OAAAAAEABAABAAIAAAABAAAABAABAAEAeqgIjzExsFQuCICF5Czea5IZ4PqEu0TThLTOdaDARso=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-6F  
      FACP            LENOVO        TP-6F  
      HPET            LENOVO        TP-6F  
      BOOT            LENOVO        TP-6F  
      MCFG            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      ECDT            LENOVO        TP-6F  
      SLIC            DELL          QA09  
      ASF!            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      TCPA                   
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  


    Monday, November 8, 2010 8:27 PM

Answers

  • "parkermom" wrote in message news:6e6e0294-538e-4bfb-9974-45f4cae011b4...

    Bought a computer from a reputable reseller.  After several weeks, the message that this copy of windows is not genuine appears.  Nevertheless, I do get updates.  Since I installed a lot of different software, I want to make sure that it is not causing the problem.  This computer has a non-original harddrive, operating system was cloned onto it from original harddrive.  When I first got it, it did say that it had been activated.  Wanted to check here first.

     

    MGADT report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001

    Other data-->
    <SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>2081CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6FET83WW (3.13 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20100315000000.000000+000</Date></BIOS><HWID>02BA3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 3
    Trusted time: 11/8/2010 2:13:42 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-6F  
      FACP            LENOVO        TP-6F  
      HPET            LENOVO        TP-6F  
      BOOT            LENOVO        TP-6F  
      MCFG            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      ECDT            LENOVO        TP-6F  
      SLIC            DELL          QA09  
      ASF!            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      TCPA                   
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  



    I'm sorry to have to say that although your PC is apparently equipped for Win 7, the current install is not genuine.
    Your Lenovo PC has an install from what appears to be a Hewlett Packard recovery disk set - which means that it cannot be genuine in its present incarnation. The current install has been enabled by the use of a hacker's Loader program, to fool Windows into thinking that a legitimate install is involved, but recent updates have discovered this, and brought it to your attention.
    For what version and edition of Windows is the PC licensed, according to the COA sticker on the case??
    I suspect that your computer is licensed for Home Premium edition, while the current install is for Ultimate - your options include reformatting and reinstalling from the manufacturer's recovery disks, and purchasing a full Windows 7 Ultimate license from MS or elsewhere.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Monday, November 8, 2010 10:16 PM
    Monday, November 8, 2010 8:50 PM
    Moderator
  • The OS in your computer is using a known activation exploit indicated by the following errors and inconsistancies in your report. Contact the seller and request a refund, or order the restoration media from Lenovo to restore the original OS.

    HrOnline: 0xC004C4AB  <----- indicates a known activation exploit has been found.

    SLIC            DELL          QA09  <--- Your computer is a Lenovo branded computer, however the exploit is attempting to emulate a dell SLIC bios marker.

    This marker is required for OEM_SLP activation.

    Look on the bottom, back or side (or possibly the battery compartment on laptops) for a COA sticker, it will tell you what version of windows came installed on your computer. You can install that version of windows activating the key from the sticker by phone.

    • Marked as answer by Darin Smith MS Monday, November 8, 2010 10:16 PM
    Monday, November 8, 2010 8:57 PM

All replies

  • "parkermom" wrote in message news:6e6e0294-538e-4bfb-9974-45f4cae011b4...

    Bought a computer from a reputable reseller.  After several weeks, the message that this copy of windows is not genuine appears.  Nevertheless, I do get updates.  Since I installed a lot of different software, I want to make sure that it is not causing the problem.  This computer has a non-original harddrive, operating system was cloned onto it from original harddrive.  When I first got it, it did say that it had been activated.  Wanted to check here first.

     

    MGADT report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001

    Other data-->
    <SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>2081CTO</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6FET83WW (3.13 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20100315000000.000000+000</Date></BIOS><HWID>02BA3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><


    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 3
    Trusted time: 11/8/2010 2:13:42 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            LENOVO        TP-6F  
      FACP            LENOVO        TP-6F  
      HPET            LENOVO        TP-6F  
      BOOT            LENOVO        TP-6F  
      MCFG            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      ECDT            LENOVO        TP-6F  
      SLIC            DELL          QA09  
      ASF!            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      TCPA                   
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  
      SSDT            LENOVO        TP-6F  



    I'm sorry to have to say that although your PC is apparently equipped for Win 7, the current install is not genuine.
    Your Lenovo PC has an install from what appears to be a Hewlett Packard recovery disk set - which means that it cannot be genuine in its present incarnation. The current install has been enabled by the use of a hacker's Loader program, to fool Windows into thinking that a legitimate install is involved, but recent updates have discovered this, and brought it to your attention.
    For what version and edition of Windows is the PC licensed, according to the COA sticker on the case??
    I suspect that your computer is licensed for Home Premium edition, while the current install is for Ultimate - your options include reformatting and reinstalling from the manufacturer's recovery disks, and purchasing a full Windows 7 Ultimate license from MS or elsewhere.

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Monday, November 8, 2010 10:16 PM
    Monday, November 8, 2010 8:50 PM
    Moderator
  • The OS in your computer is using a known activation exploit indicated by the following errors and inconsistancies in your report. Contact the seller and request a refund, or order the restoration media from Lenovo to restore the original OS.

    HrOnline: 0xC004C4AB  <----- indicates a known activation exploit has been found.

    SLIC            DELL          QA09  <--- Your computer is a Lenovo branded computer, however the exploit is attempting to emulate a dell SLIC bios marker.

    This marker is required for OEM_SLP activation.

    Look on the bottom, back or side (or possibly the battery compartment on laptops) for a COA sticker, it will tell you what version of windows came installed on your computer. You can install that version of windows activating the key from the sticker by phone.

    • Marked as answer by Darin Smith MS Monday, November 8, 2010 10:16 PM
    Monday, November 8, 2010 8:57 PM
  • Thanks all...I'll be in contact with the seller.

     

    Monday, November 8, 2010 9:11 PM