Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
can you verify the legitimacy of this? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    1
    Sign in to vote

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0

    Cached Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: PS--Do NOT post the product key
    Windows Product Key Hash: PS--Do NOT post the product key
    Windows Product ID: 00426-OEM-8992662-00006
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {C94F963C-21A3-411E-AF9B-F57286E58E9B}(4)
    Is Admin: No
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_rtm.090713-1255
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->

    Browser Data-->
    Proxy settings: 192.169.1.199:80
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watux.exe[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[hr = 0x80070002]
    File Mismatch: C:\Windows\system32\en-us\user32.dll.mui[hr = 0x80070002]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{C94F963C-21A3-411E-AF9B-F57286E58E9B}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKeyPS--Do NOT post the product key</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1091798282-4209107068-2784172893</SID><SYSTEM><Manufacturer>HP-Pavilion</Manufacturer><Model>AY004AA-ABM s5210la</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version> 5.52</Version><SMBIOSVersion major="2" minor="5"/><Date>20090914000000.000000+000</Date></BIOS><HWID>90B83607018400F2</HWID><UserLCID>080A</UserLCID><SystemLCID>0C0A</SystemLCID><TimeZone>Hora estándar central (México)(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result></Result><Products><LegitResult></LegitResult><Name></Name><Ver></Ver><Val></Val><Hash></Hash><Pid></Pid><PidType></PidType></Product></Products><Applications></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Versión del Servicio de licencias de software: 6.1.7600.16385

    Nombre: Windows(R) 7, Ultimate edition
    Descripción: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Id. de activación: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
    Id. de aplicación: 55c92734-d682-4d71-983e-d6ec3f16059f
    PID extendido: 00426-00178-926-600006-02-2058-7600.0000-0152010
    Id. de instalación: 013202531593615316133864640274958925912721646791110361
    URL del certificado de procesador: http://go.microsoft.com/fwlink/?LinkID=88338
    URL del certificado de maquina: http://go.microsoft.com/fwlink/?LinkID=88339
    URL de la licencia de uso: http://go.microsoft.com/fwlink/?LinkID=88341
    URL del certificado de clave de producto: http://go.microsoft.com/fwlink/?LinkID=88340
    Clave de producto parcial: HYRR2
    Estado de la licencia: con licencia
    Recuento de rearmado de Windows restante: 2
    Hora de confianza: 06/04/2010 11:14:22

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: PASS
    Event Time Stamp: 2:26:2010 10:21
    WAT Activex: Not Registered - 0x80040154
    WAT Admin Service: Not Registered - 0x80040154

    HWID Data-->
    HWID Hash Current: KgAAAAEAAAABAAEAAQABAAAAAQABAAEAeqiml/Lc9P5KhMTXWhEoq2oB

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   HPQOEM  SLIC-CPC
      FACP   HPQOEM  SLIC-CPC
      HPET   HPQOEM  SLIC-CPC
      MCFG   HPQOEM  SLIC-CPC
      SLIC   ACRSYS  ACRPRDCT
      SSDT   HPQOEM  SLIC-CPC


     

    • Edited by Rictro Tuesday, April 6, 2010 8:09 PM
    Tuesday, April 6, 2010 4:36 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Your computer has an activation exploit. It is using a Dell SLP key, an Acer SLIC on an HP computer. Also the HrOnline: 0xC004C4AB line indicates an activation exploit may be present.

    I advise you remove the exploit and install the version of windows that corresponds to the COA sticker on the side or bottom of your computer or do a factory restoration. You can activate using the key on the COA by doing a phone activation.

    • Marked as answer by Darin Smith MS Wednesday, April 7, 2010 12:18 AM
    Tuesday, April 6, 2010 7:32 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Rictro,

    You wrote, "if the product key that the tool of wga diagnostic do not correspond to the stick ind the machine that means a possible exploit?"

    On computers from major manufacturers, it is expected and a normal situation for the product key listed on the Certificate of Authenticity (CoA) to not be the product key that is installed in the operating system as the computer is shipped from the factory.  The HP factory makes hundreds and thousands of computers a day, and each HP computer made with, for example Windows 7 Home Basic, will have the same installed product key.  The product keys on the CoA are all unique, and are there as a backup in case something goes wrong with the installed product key.

    An activation exploit is a program that tries to fool Windows into thinking it is installed on a different brand name of computer than it really is.  For example, you have an HP computer, but as Carl_OH posted, the installation of Windows 7 Ultimate on your HP computer is really from Dell, and the program installed to fool the computer is really from Acer.

    This part of the report lists the activation exploits:

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: PASS
    Event Time Stamp: 2:26:2010 10:21
    WAT Activex: Not Registered - 0x80040154
    WAT Admin Service: Not Registered - 0x80040154

    Right now the computer has Windows 7 Ultimate installed, and because Microsoft was not paid to install this high end edition of Windows on your computer, the Windows Activation Technologies system has detected the problem and has marked it as Nongenuine.  As Carl_OH posted, the CoA tells us that your computer came from HP with Windows 7 Home Basic, and the computer will always be licensed to run that edition of Windows 7.  If you use the Recovery Solution provided by HP when you purchased the computer, you can put the original, Genuine installation of Win 7 Home Basic back onto the computer and it will once again be a Genuine Windows installation.

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Wednesday, April 7, 2010 3:02 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Rictro,

    Which version and edition of Windows is described on the Certificate of Authenticity affixed to the computer?

    PS--Do NOT post the product key.

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97

    Tuesday, April 6, 2010 5:10 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Your computer has an activation exploit. It is using a Dell SLP key, an Acer SLIC on an HP computer. Also the HrOnline: 0xC004C4AB line indicates an activation exploit may be present.

    I advise you remove the exploit and install the version of windows that corresponds to the COA sticker on the side or bottom of your computer or do a factory restoration. You can activate using the key on the COA by doing a phone activation.

    • Marked as answer by Darin Smith MS Wednesday, April 7, 2010 12:18 AM
    Tuesday, April 6, 2010 7:32 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    have a windows 7 home basic stick OA LATAM HP
    Tuesday, April 6, 2010 8:13 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    tank's but it's possible, the OS is just publish... whell another cuestion:

    if the product key that the tool of wga diagnostic do not correspond to the stick ind the machine that means a possible exploit?

    Tuesday, April 6, 2010 8:20 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    OK, you can do a factory restoration. Check your computers manual or try pressing F10 at system startup. I believe F10 will start system restore, if so follow the prompts to restore your system and with it your genuine status. Before you do this, backup your files. Your computer will return to factory condition and all of your files will be lost if you do not save them to removable media such as a DVD or a thumb drive.

    Thanks

    Carl

    Tuesday, April 6, 2010 8:21 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello Rictro,

    You wrote, "if the product key that the tool of wga diagnostic do not correspond to the stick ind the machine that means a possible exploit?"

    On computers from major manufacturers, it is expected and a normal situation for the product key listed on the Certificate of Authenticity (CoA) to not be the product key that is installed in the operating system as the computer is shipped from the factory.  The HP factory makes hundreds and thousands of computers a day, and each HP computer made with, for example Windows 7 Home Basic, will have the same installed product key.  The product keys on the CoA are all unique, and are there as a backup in case something goes wrong with the installed product key.

    An activation exploit is a program that tries to fool Windows into thinking it is installed on a different brand name of computer than it really is.  For example, you have an HP computer, but as Carl_OH posted, the installation of Windows 7 Ultimate on your HP computer is really from Dell, and the program installed to fool the computer is really from Acer.

    This part of the report lists the activation exploits:

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: PASS
    Event Time Stamp: 2:26:2010 10:21
    WAT Activex: Not Registered - 0x80040154
    WAT Admin Service: Not Registered - 0x80040154

    Right now the computer has Windows 7 Ultimate installed, and because Microsoft was not paid to install this high end edition of Windows on your computer, the Windows Activation Technologies system has detected the problem and has marked it as Nongenuine.  As Carl_OH posted, the CoA tells us that your computer came from HP with Windows 7 Home Basic, and the computer will always be licensed to run that edition of Windows 7.  If you use the Recovery Solution provided by HP when you purchased the computer, you can put the original, Genuine installation of Win 7 Home Basic back onto the computer and it will once again be a Genuine Windows installation.

    Buy Office 2007 Now, Get Office 2010 Free http://office2010.microsoft.com/en-us/tech-guarantee/microsoft-office-2010-technology-guarantee-FX101825695.aspx?CTT=97
    Wednesday, April 7, 2010 3:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    is windows 7 on my computer geniun one? 
    xxxxxxx
    do not post product keys in a public forum
    • Edited by Darin Smith MS Wednesday, April 7, 2010 8:21 PM do not post you Product key
    Wednesday, April 7, 2010 3:55 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    is windows 7 on my computer geniun one? 
    FJGCP=4DFJD-GJY49-VJBQ7-HYRR2

    It is a acer gateway pack bell and emachine spl key yes it is if you 2.1 slic bois from acer take the loader off and reload vista or buy a retail copy of seven
    Wednesday, April 7, 2010 4:01 PM