locked
Another Case of a "You May Be a Victim of Software Counterfeiting" :Complete with MGAD. RRS feed

  • Question

  • Can someone who knows how to interpret these reports give me an idea of what the problem is?  This install, and several others, have been running for weeks/months without issue.  I purchased 20 Dell OEM licenses complete with what appear to be legit Dell PID Labels and Dell OEM install disks.

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Code: 50

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

    Windows Product ID: 00371-OEM-8992671-00524

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {F530E301-3D1C-4453-B662-A20A84C3F7A9}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.130828-1532

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Professional Plus 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 7E90FEE8-169-80004005_B4D0AA8B-587-80004005_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{F530E301-3D1C-4453-B662-A20A84C3F7A9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-2797785481-1082481503-2132694946</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>OptiPlex 745                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>2.6.4 </Version><SMBIOSVersion major="2" minor="3"/><Date>20100301000000.000000+000</Date></BIOS><HWID>C63C3D07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B8K    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>6C51086DDD6CD86</Val><Hash>IZPg7Uu9iKjYENYQjalgRVAQ0q8=</Hash><Pid>89409-707-7054973-65043</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00178-926-700524-02-1033-7601.0000-3102013

    Installation ID: 010451122686901580395720562385238885772356667026260872

    (Omitted Links:)

    Partial Product Key: 733WD

    License Status: Notification

    Notification Reason: 0xC004F07C.

    Remaining Windows rearm count: 3

    Trusted time: 12/10/2013 9:56:10 AM

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0x00000000

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 11:8:2013 09:18

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    HWID Data-->

    HWID Hash Current: MAAAAAEAAwABAAIAAAABAAAAAQABAAEA6GGshmBWTmu2hi73moOw/2YqQj0AYCqF

    OEM Activation 1.0 Data-->

    N/A

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x0

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    DELL                       B8K   

      FACP                                   DELL                       B8K   

      HPET                                    DELL                       B8K   

      BOOT                                  DELL                       B8K   

      MCFG                                 DELL                       B8K   

      SSDT                                    DELL                       st_ex

      ASF!                                     DELL                       B8K   

      TCPA                                   DELL                       B8K   

      SLIC                                      DELL                       B8K    

    ***UPDATE***

    After I posted the report I noticed that the PID listed is NOT the PID on the label I used to activate the first time.

    I then tried to reactivate the proper PID # to no avail.  It came back as invalid.

    Next, I tried the PID# off of a as yet unused license I purchased as part of the pack of 20, mentioned above and VIOLA!...it successfully activated (again).

    So the what the heck is going on!  Why did I have to burn through two licenses?


    • Edited by capeterson67 Tuesday, December 10, 2013 4:06 PM Update
    Tuesday, December 10, 2013 3:42 PM

Answers

  • That report shows an OEM System Builder Key (which would be expected, from a OEM Pack such as this) I was almost expecting an MSDN Key which I could have definitively stated was counterfeit.

    Yes - ALL sales of Branded OS disks with Keys are illegal (except in Germany) so far as I know (but I Am Not A Lawyer).

    The problem is that MS have to work through legal channels to get these sites shut down, and that takes some considerable time and money.

    Manufacturers aren't allowed to offload stock in the public market, they can only sell machines with the OS pre-installed.

    How they get this type of material I don't know - it may be 'grey imports' or it may be totally fake or stolen stock, but the only such packages that were ever legal were the one issued as free updates when Windows 7 first launched, and were still only 'sold' through the manufacturers.

    Whether the Keys are/were/will remain valid is a whole different ballgame :(

    I can only suggest that you try reporting your failed one to MS as piracy and see what they have to say.

    https://www.microsoft.com/en-us/howtotell/cfr/report.aspx


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    • Proposed as answer by Kamin of Ressik Wednesday, December 11, 2013 6:29 PM
    • Marked as answer by capeterson67 Wednesday, December 11, 2013 6:46 PM
    Wednesday, December 11, 2013 6:12 PM
    Moderator

All replies

  • The BIOS SLIC table on the machine is for Vista, rather than Windows 7 - which explains why the OEM_SLP Key stopped working after the grace period ran out.

    I'm at a loss as to how you managed to 'buy' Windows 7 Dell OEM licenses - since they are not for sale!. Dell are not allowed to sell them except pre-installed, and no-one else is allowed to sell them at all.

    Please post a new MGADiag report of your now-activated machine, as it may prove to be counterfeit.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, December 11, 2013 7:37 AM
    Moderator
  • Here is the currently activated MGADiag report:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

    Validation Code: 0

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-THC62-RWGYT-P69MX

    Windows Product Key Hash: ui0iiykq4KZBqbdhqylOl1ut05g=

    Windows Product ID: 00371-OEM-0636213-19198

    Windows Product ID Type: 3

    Windows License Type: OEM System Builder

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {F530E301-3D1C-4453-B662-A20A84C3F7A9}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.130828-1532

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Professional Plus 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 7E90FEE8-169-80004005_B4D0AA8B-587-80004005_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{F530E301-3D1C-4453-B662-A20A84C3F7A9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P69MX</PKey><PID>00371-OEM-0636213-19198</PID><PIDType>3</PIDType><SID>S-1-5-21-2797785481-1082481503-2132694946</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>OptiPlex 745                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>2.6.4 </Version><SMBIOSVersion major="2" minor="3"/><Date>20100301000000.000000+000</Date></BIOS><HWID>C63C3D07018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B8K    </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>6C51086DDD6CD86</Val><Hash>IZPg7Uu9iKjYENYQjalgRVAQ0q8=</Hash><Pid>89409-707-7054973-65043</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel

    Activation ID: c33001fc-5e9c-4f27-8c05-e0154adb0db4

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00212-362-119198-02-1033-7601.0000-3442013

    Installation ID: 003740491152080382434690533744228230615010704293752844

    (Omitted Links)

    Partial Product Key: P69MX

    License Status: Licensed

    Remaining Windows rearm count: 3

    Trusted time: 12/11/2013 12:02:34 PM

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0x00000000

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 11:8:2013 09:18

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    HWID Data-->

    HWID Hash Current: MAAAAAEAAwABAAIAAAABAAAAAQABAAEA6GGshmBWTmu2hi73moOw/2YqQj0AYCqF

    OEM Activation 1.0 Data-->

    N/A

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x0

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    DELL                       B8K   

      FACP                                   DELL                       B8K   

      HPET                                    DELL                       B8K   

      BOOT                                  DELL                       B8K   

      MCFG                                 DELL                       B8K   

      SSDT                                    DELL                       st_ex

      ASF!                                     DELL                       B8K   

      TCPA                                   DELL                       B8K   

      SLIC                                      DELL                       B8K    

    As for how I purchased the Dell OEM licenses, there are Windows 7 Pro licenses for sale (Including the Discs and what appear to be genuine PID labels) from just about every software vendor on the internet.  I didn't just download the install files and get an email with 20 keys.  The company is Mission Softs.  Their site is Missionsofts.com and it is still up and fully functioning.  I just logged in and confirmed I purchased the software from them on May 21, 2013.

    I have seen them from Dell, HP, Sony, etc.  Do you mean to say that ALL of them are illegal?  If so, this is the best kept secret on the internet because they are going for between $55 and $85 depending on what version you are looking for and no one seems to be doing anything about it.


    Wednesday, December 11, 2013 5:25 PM
  • That report shows an OEM System Builder Key (which would be expected, from a OEM Pack such as this) I was almost expecting an MSDN Key which I could have definitively stated was counterfeit.

    Yes - ALL sales of Branded OS disks with Keys are illegal (except in Germany) so far as I know (but I Am Not A Lawyer).

    The problem is that MS have to work through legal channels to get these sites shut down, and that takes some considerable time and money.

    Manufacturers aren't allowed to offload stock in the public market, they can only sell machines with the OS pre-installed.

    How they get this type of material I don't know - it may be 'grey imports' or it may be totally fake or stolen stock, but the only such packages that were ever legal were the one issued as free updates when Windows 7 first launched, and were still only 'sold' through the manufacturers.

    Whether the Keys are/were/will remain valid is a whole different ballgame :(

    I can only suggest that you try reporting your failed one to MS as piracy and see what they have to say.

    https://www.microsoft.com/en-us/howtotell/cfr/report.aspx


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    • Proposed as answer by Kamin of Ressik Wednesday, December 11, 2013 6:29 PM
    • Marked as answer by capeterson67 Wednesday, December 11, 2013 6:46 PM
    Wednesday, December 11, 2013 6:12 PM
    Moderator
  • First Noel, let me thank you for your time.  I do appreciate it.

    Second, could you take another moment and confirm how I suspect the process works?

    Since the first "deactivated" MGADiag report displayed a different PID# than the number I initially activated the install with, I am thinking that when

    the MS Genuine Advantage Tool detected a PID# on BIOS (it is a refurbished Dell ironically) it should not be on, it replaces it with a PID# that will deactivate the install.

    When I tried to reactivate with the same PID# that worked the first time, that PID# had been added to the "do not activate list" and thus would not activate.

    Then, when I used another of the PID#'s in the pack, it worked as the first one did and will continue working until such time as MS detects that it also does not belong on

    the BIOS it is currently on and the same process will begin again?

    I am going to take your advice and report this incident to MS via the link you were kind enough to provide.  When I report this sequence of events to my superiors, I suspect that anything short of a full refund from Mission Software will result in a lawsuit of some kind.  Obviously we are done with the Branded OEM offers and will pay the extra $50 for retail licenses.

    **EDIT**  What is your experience with non-branded OEM licenses?  I am seeing these for sale on sites like CDW and TigerDirect, neither of which would I believe risk participating in the black market.



    • Edited by capeterson67 Wednesday, December 11, 2013 6:56 PM
    Wednesday, December 11, 2013 6:42 PM
  • The PID number is generated at the time of activation using a one-way hash comprising partly of the Product Key and partly of the hardware hash - many thousand machines may have the same PID. It's only the Key which may be blocked, not the PID - although there are certain PID's which are 'blocked by default' because they are 'impossible' values. Each Product Key is totally unique  - except for OEM_SLP Keys and Volume License Keys, which have special rules (and prices!).

    Depending on the exact problem with that Key, then yes, it's likely that it was added to the block list - meaning that it can never be activated again (MS may issue a new Key, but they NEVER unblock one) because of either multiple usage or other problems.

    OEM System Builder Licenses are locked to the first motherboard on which they are installed (it's pretty much a certainty that installing the same Key on a different motherboard - even from the same batch - will change the PID) and cannot be moved except under certain specific circumstances.

    However there may be better/cheaper options available. If the machines are currently licensed for the Pro/Business version of either Windows XP or Vista, then it could potentially be cheaper to purchase a Volume License agreement to enable an upgrade to Windows 7 Pro. You would need to contact a specialist vendor for this.


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, December 11, 2013 10:46 PM
    Moderator