Answered by:
Windows 7: You may be a victim of.... MGADiag Report Included!

Question
-
Hi, my mother bought me this computer from the Dell website with a legit copy of Windows included, so I don't understand why it would be saying I have an ingenuine copy of it unless there's some sort of virus I attained. I'm also pretty new to this kind of stuff, so bear with me. I was looking through various threads on here and I guess the only way to reach a solution is through this diagnostic data, so if someone would be so kind to help me out here. I know it's Christmas Eve and I doubt anyone will be willing to answer for a while, I'll still be waiting patiently for a reply, so thank you in advance! :) And also if there's any other info I need to include, let me know.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-QCPVQ-KHRB8-RMV82
Windows Product Key Hash: +Rj3N34NLM2JqoBO/OzgzTZXgbY=
Windows Product ID: 00359-OEM-8992687-00095
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {EEE08741-FA39-41E9-BF44-DD691ADC9A74}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{EEE08741-FA39-41E9-BF44-DD691ADC9A74}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-RMV82</PKey><PID>00359-OEM-8992687-00095</PID><PIDType>2</PIDType><SID>S-1-5-21-2305926332-3165501996-60495240</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>XPS L501X </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A04</Version><SMBIOSVersion major="2" minor="6"/><Date>20101126000000.000000+000</Date></BIOS><HWID>C3213807018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>QA09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800095-02-1033-7600.0000-0402011
Installation ID: 012245068182276151361221385510112480538523485026659715
Processor Certificate URL: go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: go.microsoft.com/fwlink/?LinkID=88339
Use License URL: go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: RMV82
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 12/24/2012 10:26:11 AMWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:17:2012 20:51
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NAAAAAIAAQABAAEAAQACAAAAAwABAAEAln36MyKvFT9W8Vjk4M139qCDRDfIqLKCIOt2Vg==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC PTLTD APIC
FACP INTEL CALPELLA
HPET INTEL CALPELLA
BOOT PTLTD $SBFTBL$
MCFG INTEL CALPELLA
SLIC DELL QA09
OSFR DELL DELL
ASF! CETP CETP
SSDT PmRef CpuPmMonday, December 24, 2012 4:37 PM
Answers
-
The report shows the installation as being proeprly activated - and passed validation on 17th Dec.
Please validate at www.microsoft.com/genuine/validate - indications are it should pass.
This may simply be the result of a race condition, where two or more programs fight for resources, and the Software Protection service loses out and decides that the system is non-genuine.
This is often cuased by over-active Anti-virus programs - what Security software do you have installed?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Saturday, December 29, 2012 11:56 AM
- Marked as answer by Noel D PatonModerator Saturday, January 5, 2013 10:00 AM
Monday, December 24, 2012 5:21 PMModerator
All replies
-
The report shows the installation as being proeprly activated - and passed validation on 17th Dec.
Please validate at www.microsoft.com/genuine/validate - indications are it should pass.
This may simply be the result of a race condition, where two or more programs fight for resources, and the Software Protection service loses out and decides that the system is non-genuine.
This is often cuased by over-active Anti-virus programs - what Security software do you have installed?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Proposed as answer by Noel D PatonModerator Saturday, December 29, 2012 11:56 AM
- Marked as answer by Noel D PatonModerator Saturday, January 5, 2013 10:00 AM
Monday, December 24, 2012 5:21 PMModerator -
Well, that would make sense. I have Vipre and Malwarebytes, but a few minutes ago I uninstalled Vipre(the license expired anywho) and reinstalled Microsoft Security Essentials, Malwarebytes, and this program called GMER and all three are scanning my whole pc as of right now. They may have been conflicting because I noticed my Windows firewall was off and so was Microsoft Security Essentials and they were really outdated. I'll let you know about the validation thing. Thanks so much man! :DMonday, December 24, 2012 5:47 PM
-
Yeah it says it's genuine. I don't really know what that was all about then. Maybe it was just trying to get my antivirus stuff in order. I was kind of being lazy with it. :PMonday, December 24, 2012 5:50 PM
-
If you had MSE and Vipre installed at the same time, then it's no wonder that the system was complaining!
Vipre will automatically switch off Widnows Defender and the Windows firewall - it has alternative versions of both as part of its installation.
The problem then is that Windows Defender is replaced by parts of MSE - and Vipre probably switched off the ability for MSE to upate when it killed the Defender system.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, December 24, 2012 6:01 PMModerator -
Yeah that's most likely it. Thanks for your help and diagnosis bro! :) Have a Merry Christmas!Monday, December 24, 2012 6:08 PM
-
...and you, too!
Good luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
Monday, December 24, 2012 7:15 PMModerator -
Hello Doctor Proctor,
This traditional advice from the early days of Personal Computing still applies today: you should have only one antivirus/antimalware/protective program at a time set to do realtime scanning/protection on your system.
It's perfectly OK to have other protective programs installed and set to not do realtime scanning, and to run them on a manual basis to supplement what your main protective program is doing for you. In fact that's the best way, as no one protective program should be expected to be able to prevent and if necessary remediate all possible threats.
Thursday, December 27, 2012 4:20 PM