locked
Been running validated windows 7 pro since mid October now coming up as non genuine after virus scan and malware picked up trojans? RRS feed

  • Question

  • I bought this from a seemingly reputable ebay software trader (I know) who has over 130 positive feedback for similar items. It passed all previous validation and activation but came up as non genuine after running both alware bytes and avast free anti virus scans on 25/1/2011. It seems a legit retail version having been through the microsoft website on counterfeiting, can  anyone check my report to verify this?

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a2
    Windows Product Key: *****-*****-XH7YT-BBCTT-QJ323
    Windows Product Key Hash: ZawlAlJpgovklVUOC7sKry1SBpY=
    Windows Product ID: 00371-221-2784644-86420
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {F3EBD5B5-17A2-4594-A1BE-01291BC117AC}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F3EBD5B5-17A2-4594-A1BE-01291BC117AC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QJ323</PKey><PID>00371-221-2784644-86420</PID><PIDType>5</PIDType><SID>S-1-5-21-197890248-1984445458-2020700477</SID><SYSTEM><Manufacturer>INTELR</Manufacturer><Model>AWRDACPI</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="2"/><Date>20080303000000.000000+000</Date></BIOS><HWID>19BA3607018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 770bc271-8dc1-467d-b574-73cbacbeccd1
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00172-221-278464-00-2057-7600.0000-0252011
    Installation ID: 010484156580499795750105634910303791002280085011022320
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: QJ323
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 3
    Trusted time: 27/01/2011 21:20:24

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A2
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 1:25:2011 14:55
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAEAAgABAAEAAAACAAAAAQABAAEA6GE84pzbUPSqdjbKGoZiPeaYsJBGyg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   IntelR  AWRDACPI
      FACP   IntelR  AWRDACPI
      MCFG   IntelR  AWRDACPI
      SSDT   PmRef  Cpu0Ist
      SSDT   PmRef  Cpu0Ist

     

     

    Thursday, January 27, 2011 9:34 PM

Answers

All replies

  • "fireson1" wrote in message news:807f8a9e-f60c-47dd-b143-75c2cdc275fa...

    I bought this from a seemingly reputable ebay software trader (I know) who has over 130 positive feedback for similar items. It passed all previous validation and activation but came up as non genuine after running both alware bytes and avast free anti virus scans on 25/1/2011. It seems a legit retail version having been through the microsoft website on counterfeiting, can  anyone check my report to verify this?

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a2
    Windows Product Key: *****-*****-XH7YT-BBCTT-QJ323
    Windows Product Key Hash: ZawlAlJpgovklVUOC7sKry1SBpY=
    Windows Product ID: 00371-221-2784644-86420
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010100.0.0.048

     

    As you suspected.... Unfortunately, your Key is from a not-for-resale MSDN account, and has been blocked. You need to claim a refund from the vendor.
    Please read the following stickies....
     
    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/a2444f34-0aff-4f29-a8ac-67e28b0c0285
     
    and
     
    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/06698c46-8668-4ccd-a544-a88969265a6b
     
    The pirates have got VERY good at this over the past few years, as the price of equipment for manufacturing the packages drops, and as factories open in less well-policed countries.
     
    see also this post....
     
    http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/46a58748-5a64-41ff-b7f4-f6d3b47beca9
     
     

     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Thursday, January 27, 2011 11:13 PM
    Thursday, January 27, 2011 10:13 PM
    Moderator
  •   And don't let them try to give you another key, just get your money back.

    Darin MS
    Thursday, January 27, 2011 11:15 PM
  • As expected absolutely no response from the Ebay vendor, I purchased this when he had something like 90 plus positive feedbacks for similar software sales and  he managed to hook another 40 at least before he stopped trading in early/mid January.

    I have received fairly stock answers from Ebay on reporting this vendor and from yourselves, the question is what can two massive global corporations with vast turnovers and profits do to protect innocent consumers like myself and many others who are being ripped of by people with genuine keys who then decide to mass manufacture very clever retail packaged clones and use these MSDN keys? Looking through these forums this is a massive ongoing problem and its upsetting many people.

     

    Surely Ebay and Microsoft can get together to ensure this problem is eradicated, where theres a will and all that ?

    Wednesday, February 2, 2011 4:02 PM
  • "fireson1" wrote in message news:beb3df69-4321-44ee-b038-53456cea8730...

    As expected absolutely no response from the Ebay vendor, I purchased this when he had something like 90 plus positive feedbacks for similar software sales and  he managed to hook another 40 at least before he stopped trading in early/mid January.

    I have received fairly stock answers from Ebay on reporting this vendor and from yourselves, the question is what can two massive global corporations with vast turnovers and profits do to protect innocent consumers like myself and many others who are being ripped of by people with genuine keys who then decide to mass manufacture very clever retail packaged clones and use these MSDN keys? Looking through these forums this is a massive ongoing problem and its upsetting many people.

     

    Surely Ebay and Microsoft can get together to ensure this problem is eradicated, where theres a will and all that ?


    They do - but eBay refuses to block sales of anything until the vendor has been proven guilty. There are notices on eBay regarding the sale of counterfeit software (but in the wrong place, IMHO), and the partnership they already have with MS in dealing with the problem.
    MS spends millions a year on chasing scammers, and catches a large number, but there are unfortunately a huge number doing it - and organised crime has moved in and creating a huge supply of counterfeits.
    Read the Stickies at the top of the forum index page - they contain links to a lot of 'interesting' places.
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, February 2, 2011 6:52 PM
    Moderator