Answered by:
User reports Windows 7 License Error

Question
-
I have a user who's reporting that she's receiving notification that her Windows License is invalid. User reports error of “you may be a victim of software counterfeiting.”
We do have a valid retail upgrade we purchased for her computer. Two questions:
1) Is there anything we can do other than reinstall the OS?
2) If we do reinstall, can we use the existing license, or do we have to purchase a new one?Below is output from the Microsoft Diagnostic Tool.
Thanks for your help.
Aaron
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 50
Cached Online Validation Code: 0xc004c4a2
Windows Product Key: *****-*****-TR6T4-WYJH6-QBMFX
Windows Product Key Hash: QBAxAvoTb35eBFHL+Udp4Xy01aI=
Windows Product ID: 00371-618-9026416-85367
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {7641CF5A-8E01-4FDD-8029-884D5C0D0F19}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7641CF5A-8E01-4FDD-8029-884D5C0D0F19}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QBMFX</PKey><PID>00371-618-9026416-85367</PID><PIDType>5</PIDType><SID>S-1-5-21-1889013102-4045138444-3160380799</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 5750</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.07</Version><SMBIOSVersion major="2" minor="7"/><Date>20110302000000.000000+000</Date></BIOS><HWID>726E3C07018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00170-618-902641-01-2057-7601.0000-2242012
Installation ID: 002002545453749474696761871312075822795531893606724381
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: QBMFX
License Status: Notification
Notification Reason: 0xC004F200 (non-genuine).
Remaining Windows rearm count: 3
Trusted time: 31/08/2012 21:36:33
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C4A2
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:16:2012 12:40
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAQABAAAAAwABAAEAonYmlh7NdgCoiFyBqK3i1JC3BE747C5z
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS ACRPRDCT
FACP ACRSYS ACRPRDCT
HPET ACRSYS ACRPRDCT
BOOT ACRSYS ACRPRDCT
MCFG ACRSYS ACRPRDCT
ASF! ACRSYS ACRPRDCT
SLIC ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
ASPT ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
SSDT ACRSYS ACRPRDCT
Friday, August 31, 2012 9:01 PM
Answers
-
The Key in use appears to have been blocked for some reason - I have seen this cleared by simply re-validating at www.microsoft.com/genuine/validate (but it's unusual)
It may be worth phoning MS and asking the reason for the block - sometimes it's because the user has been sold stolen or counterfeit media (the report shows that the block was present on 16th June, so your user is a bit slow to report problems!), and sometimes it's because of a screwup in the vendors records (who was the vendor?)
This machine appers to have a license for Windows 7 - what version and edition is quoted on the COA?
If it's Win7 Pro, then simply swap the Key in using 'SLUI 3'
If it's a lower edition, then you'd have to reformat/reinstal using either the manufacturer's Recovery media or Retail media together with the COA Key, activate, then use Anytime Upgrade procedures to install the Upgrade. (with a different Key to the current one)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Friday, August 31, 2012 10:09 PM
- Proposed as answer by Noel D PatonModerator Sunday, September 9, 2012 3:32 PM
- Marked as answer by Noel D PatonModerator Sunday, September 16, 2012 10:05 AM
Friday, August 31, 2012 10:05 PMModerator
All replies
-
The Key in use appears to have been blocked for some reason - I have seen this cleared by simply re-validating at www.microsoft.com/genuine/validate (but it's unusual)
It may be worth phoning MS and asking the reason for the block - sometimes it's because the user has been sold stolen or counterfeit media (the report shows that the block was present on 16th June, so your user is a bit slow to report problems!), and sometimes it's because of a screwup in the vendors records (who was the vendor?)
This machine appers to have a license for Windows 7 - what version and edition is quoted on the COA?
If it's Win7 Pro, then simply swap the Key in using 'SLUI 3'
If it's a lower edition, then you'd have to reformat/reinstal using either the manufacturer's Recovery media or Retail media together with the COA Key, activate, then use Anytime Upgrade procedures to install the Upgrade. (with a different Key to the current one)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonModerator Friday, August 31, 2012 10:09 PM
- Proposed as answer by Noel D PatonModerator Sunday, September 9, 2012 3:32 PM
- Marked as answer by Noel D PatonModerator Sunday, September 16, 2012 10:05 AM
Friday, August 31, 2012 10:05 PMModerator -
Thanks for the advice Noel.
I believe the user has contacted MS, but will confirm.
The user had a personal laptop running Windows 7 Home, and the company paid for a Win 7 Pro upgrade, which was purchased from Microsoft/Anytime Upgrade. To the best of our knowledge, no one has used the upgrade key elsewhere. I don't know what's quoted on the user's computer COA, but probably a good idea to confirm she had a valid copy of Win 7 Home to begin with.
Thanks again.
Sunday, September 2, 2012 6:58 PM -
As I said earlier, it does look as if the machine shipped with a copy of Windows 7 installed - there is a SLIC 2.1 table present indicating this, and the date is OK (although it is very simple to simulate the SLIC, we usually spot such counterfeits by other indicators not present here).
If the user or company purchased the wrong (counterfeit/stolen) Anytime Upgrade - possibly from somewhere like eBay - this is a possible result.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Sunday, September 2, 2012 7:12 PMModerator