locked
Windows Not Geniune? RRS feed

  • Question

  • I have bought windows 7 in oct 2009 - all has been well since a couple of days ago, where it is not saying its not genuine - and microsoft has blocked the product key.

    so far, all attempts to re-activate have not worked

     

    Edit:  Don't know if it helps at all - but have managed to get windows to 'validate' (thanks to some other forum posts) - but still saying that the product key is blocked when attempt to validate

     

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-4WV4V-MP62G-437Q6
    Windows Product Key Hash: NRqlF19PWPdfxzL6K/VUk9jfCmA=
    Windows Product ID: 00359-911-8587716-85634
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {DB6BD488-1ECB-461A-B1D3-5E43A0DB4B46}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watux.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{DB6BD488-1ECB-461A-B1D3-5E43A0DB4B46}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-437Q6</PKey><PID>00359-911-8587716-85634</PID><PIDType>5</PIDType><SID>S-1-5-21-2068121791-1252109000-783212517</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>EP45-UD3P</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="4"/><Date>20090224000000.000000+000</Date></BIOS><HWID>78BA3607018400F8</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>AUS Central Standard Time(GMT+09:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00170-911-858771-00-3081-7600.0000-0892010
    Installation ID: 009666525642757346877253489712692406651372964154494385
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 437Q6
    License Status: Initial grace period
    Time remaining: 43200 minute(s) (30 day(s))
    Remaining Windows rearm count: 2
    Trusted time: 30/03/2010 8:11:11 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4A2
    HealthStatus: PASS
    Event Time Stamp: 3:29:2010 21:32
    WAT Activex: Not Registered - 0x80040154
    WAT Admin Service: Not Registered - 0x80040154

    HWID Data-->
    HWID Hash Current: OgAAAAEABgABAAEAAAACAAAAAwABAAEAJJRsn6Z65L+ENAiFwo8MNUa8PuAwApqIKs/QtCz0inVGyg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            GBT           GBTUACPI
      FACP            GBT           GBTUACPI
      HPET            GBT           GBTUACPI
      MCFG            GBT           GBTUACPI
      EUDS            GBT          
      SSDT            PmRef        CpuPm

    Tuesday, March 30, 2010 10:46 AM

Answers

  • WAT sees an activation exploit, the key appears to be a genuine retail key (it doesn't show up on the search engines, the board owner has the ability to check it with microsoft).

    I don't beleive the key is the problem at all, I think if you can figure out what exploit was installed and remove it that key will validate just fine. If you can't remove it then you may need to do a clean install and activate with the key you recieved with your purchase. If you installed from media that did not come from MS or if you used an ISO available on the internet it may have been prepackaged with the exploit. If that is the case, when you reinstall don't use the same media, use genuine MS media or an ISO downloaded from a cerified vendor.

    Thanks

    Carl


    Download and run MGAdiag and paste the results in your thread go.microsoft.com/fwlink/?linkid=52012
    • Marked as answer by Darin Smith MS Wednesday, March 31, 2010 8:19 PM
    Tuesday, March 30, 2010 2:38 PM

All replies

  • WAT sees an activation exploit, the key appears to be a genuine retail key (it doesn't show up on the search engines, the board owner has the ability to check it with microsoft).

    I don't beleive the key is the problem at all, I think if you can figure out what exploit was installed and remove it that key will validate just fine. If you can't remove it then you may need to do a clean install and activate with the key you recieved with your purchase. If you installed from media that did not come from MS or if you used an ISO available on the internet it may have been prepackaged with the exploit. If that is the case, when you reinstall don't use the same media, use genuine MS media or an ISO downloaded from a cerified vendor.

    Thanks

    Carl


    Download and run MGAdiag and paste the results in your thread go.microsoft.com/fwlink/?linkid=52012
    • Marked as answer by Darin Smith MS Wednesday, March 31, 2010 8:19 PM
    Tuesday, March 30, 2010 2:38 PM
  • Hello Romanes,

      Your Diagnostic Report does show that there is a Known activation hack/exploit installed in your copy of Windows. That copy of Windows will remain in a Non-Genuine state untill that has been removed.

      I also see that this Product key has, in fact, been Blocked and is no longer a Valid product key. Unfortunatly, my tool does not tell me the reason for the block.

      Thank you,


    Darin MS
    Tuesday, March 30, 2010 8:20 PM