Windows 7 build 7601 This copy of windows is not genuine

All replies

• 

  

  0

  Sign in to vote

  The current problem is partially caused by the 'activator' that you ran. (RemoveWAT)

   Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....

  Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extraxt the .exe file, and run it, then reboot.

   Post back with another MGADiag report, and we'll then see what we can do.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Monday, January 13, 2014 7:56 AM

  Moderator
• 

  

  0

  Sign in to vote

  I downloaded WATFix and ran it, rebooted my pc. Did the MGADiag run and got this as a report:

  Diagnostic Report (1.9.0027.0):
  -----------------------------------------
  Windows Validation Data-->

  Validation Code: 0
  Cached Online Validation Code: N/A, hr = 0xc004f012
  Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
  Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
  Windows Product ID: 00426-OEM-8992662-00006
  Windows Product ID Type: 2
  Windows License Type: OEM SLP
  Windows OS version: 6.1.7601.2.00010100.1.0.001
  ID: {1EF033F6-679B-4B6B-A9BB-E86FFD8E572B}(3)
  Is Admin: Yes
  TestCab: 0x0
  LegitcheckControl ActiveX: Registered, 1.9.42.0
  Signed By: Microsoft
  Product Name: Windows 7 Ultimate
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.130318-1533
  TTS Error:
  Validation Diagnostic:
  Resolution Status: N/A

  Vista WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002

  Windows XP Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002

  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002

  OGA Data-->
  Office Status: 100 Genuine
  Microsoft Office Enterprise 2007 - 100 Genuine
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed

  File Scan Data-->

  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{1EF033F6-679B-4B6B-A9BB-E86FFD8E572B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-999729690-2670023326-2919426443</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>MS-7596</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V2.8</Version><SMBIOSVersion major="2" minor="5"/><Date>20100602000000.000000+000</Date></BIOS><HWID>73FE3C07018400F2</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-WKS</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>3765B6ADAC30586</Val><Hash>gPxr7rQxrMrjPy7gxOjc+wzA14Q=</Hash><Pid>89388-707-1925594-65307</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

  Spsys.log Content: 0x80070002

  Licensing Data-->
  Software licensing service version: 6.1.7601.17514

  Name: Windows(R) 7, Ultimate edition
  Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
  Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
  Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
  Extended PID: 00426-00178-926-600006-02-1033-7601.0000-0112014
  Installation ID: 000215337826458424619175716286858523886035664920399050
  Processor Certificate URL:
  Machine Certificate URL:
  Use License URL:
  Product Key Certificate URL:
  Partial Product Key: HYRR2
  License Status: Licensed
  Remaining Windows rearm count: 4
  Trusted time: 1/13/2014 10:34:18 PM

  Windows Activation Technologies-->
  HrOffline: 0x00000000
  HrOnline: N/A
  HealthStatus: 0x0000000000000000
  Event Time Stamp: N/A
  ActiveX: Registered, Version: 7.1.7600.16395
  Admin Service: Registered, Version: 7.1.7600.16395
  HealthStatus Bitmask Output:

  
  HWID Data-->
  HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEA6GHcoJJqIKVU8hAz9BZiZQgT6kWIlK5b13ZCGg==

  OEM Activation 1.0 Data-->
  N/A

  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information:
    ACPI Table Name OEMID Value OEMTableID Value
    APIC   7596MS  A7596200
    FACP   7596MS  A7596200
    SRAT   AMD     FAM_F_10
    HPET   7596MS  OEMHPET
    MCFG   7596MS  OEMMCFG
    SLIC   HPQOEM  SLIC-WKS
    OEMB   7596MS  A7596200
    SSDT   A M I   POWERNOW

  I had to remove the links since my account isn't verified yet.

  Thank you again and I'm looking forward to your reply.

  Monday, January 13, 2014 9:47 PM
• 

  

  0

  Sign in to vote

  This shows that you have another Activation Exploit installed.

  You have an ACER product Key, on a MSI motherboard, using what appears to be a HP SLIC table - and that combination can ONLY activate in the presence of a hacker's Activation Exploit. You will have to reformat and reinstall using genuine media and Key, since it's hooked into the system even before Windows boots.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Kamin of Ressik Tuesday, January 14, 2014 3:38 PM
  • Marked as answer by Noel D PatonModerator Saturday, January 25, 2014 11:16 AM

  Tuesday, January 14, 2014 9:01 AM

  Moderator
• 

  

  0

  Sign in to vote

  Sorry but I'm not that great when it comes to these things.

  How can I reformat and reinstall it by using genuine media and Key? I have this pc for many years and didn't have any problems with it till now. If it wasn't genuine, it could have shown up way earlier ? Why suddenly now after years?

  Tuesday, January 14, 2014 9:46 PM
• 

  

  0

  Sign in to vote

  Something you did probably disturbed one of the hacks and broke it - you then applied another to overcome that, which failed.

  Is there a COA sticker on the case of this machine?

  The motherboard is a retail one - is the machine supposedly from a large company, or from a small trader?

  Have you had it repaired at any time?
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Tuesday, January 14, 2014 9:59 PM

  Moderator
• 

  

  0

  Sign in to vote

  I can't see the COA sticker. And it's from a large company, never had it repaired since there was no need to. My pc works perfectly fine still.

  
  

  • Edited by Miyukie Tuesday, January 14, 2014 10:19 PM

  Tuesday, January 14, 2014 10:18 PM
• 

  

  0

  Sign in to vote

  Please give the make and model - and tell us where you purchased it from.

  I suspect that this machine has been rebuilt by a less-than-scrupulous vendor.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, January 15, 2014 8:15 AM

  Moderator
• 

  

  0

  Sign in to vote

  I noticed that Windows hashes become invalid when the OS is reinstalled too many times and / or the OS is placed on a new hard drive.  I believe this is for OEM and retail versions of Microsoft Windows.  If it is not a genuine copy of Windows like mine became after I tried a few different operating systems and came back to it when don't worry too much.  Many end users like to refresh their computers operating systems.  When I worked in Information Technologies as a desktop engineer I had to constantly refresh desktops and laptops.  I do it at home a lot too.  Why?  I like trying out new things and buying new computers just to test out an spanking new OS is not always the best idea.  It usually has to be a genuine copy for businesses mostly and people that write off the operating system on their taxes as an expense for their personal business.  Notice that a hacked version of Windows that works is still not a valued installed copy of Windows and cannot be fully trusted.  I mention Windows XP because I heard rumors that portions of Windows XP source code was released out to college institutions and I am sure that Windows XP files were probably decompiled and documented somewhere.  So instead of panicking and going to Linux.  Download a nice evaluation copy of Windows 2008 R2 or Windows 8.1 Enterprise.  It is usually good for longer than an end user wants to refresh the operating system.  I was told one time that most people finish a computer game in less than 90 days so why buy the whole operating system.  I know why it is good to buy it.  Office applications and personal media.  AND the whole idea of evaluating a new Microsoft product is to be a critic of it.

  -Windows XP Support Certification 2007

  Thursday, January 22, 2015 2:17 PM
• 

  

  0

  Sign in to vote

  let me take your statements one at a time...

  1) I noticed that Windows hashes become invalid when the OS is reinstalled too many times and / or the OS is placed on a new hard drive.  I believe this is for OEM and retail versions of Microsoft Windows.

  There are many reasons for an existing installation to become 'non-genuine' most of them have very little to do with reinstallation - although cloning to a new hard drive is a relatively common cause, and easily overcome.

  2) If it is not a genuine copy of Windows like mine became after I tried a few different operating systems and came back to it when don't worry too much. 

  I have no idea WTH that means - so won't comment/

  3) Many end users like to refresh their computers operating systems. 

  True but irrelevant to either the problem or any solution.

  4) When I worked in Information Technologies as a desktop engineer I had to constantly refresh desktops and laptops.  I do it at home a lot too.  Why?  I like trying out new things and buying new computers just to test out an spanking new OS is not always the best idea.

  ...ditto

  5)  It usually has to be a genuine copy for businesses mostly and people that write off the operating system on their taxes as an expense for their personal business.  Notice that a hacked version of Windows that works is still not a valued installed copy of Windows and cannot be fully trusted. 

  ...ditto

  6)  I mention Windows XP because I heard rumors that portions of Windows XP source code was released out to college institutions and I am sure that Windows XP files were probably decompiled and documented somewhere.

  You never mentioned XP  - and it's totally irrelevant anyhow

  7) So instead of panicking and going to Linux.  Download a nice evaluation copy of Windows 2008 R2 or Windows 8.1 Enterprise.  It is usually good for longer than an end user wants to refresh the operating system.

  MOST users never 'want' to refresh their system - they simply want it to work properly from the day they open the box until the day they want/have to replace it. The real world isn't that friendly, though so occasionally a reinstall is necessary (my current install is the same one the machine came with in Sept 2010 and very nearly as speedy now as then).

  Server OS's are very different to Client OS's - and are not generally to be recommended to the average user because of the roles involved. A Trial version of a Server OS lasts for 180 days. They are also not supported by anyone. MOST users expect at least 12 moths out of an install, even if they know how to do a reinstall.

  8) I was told one time that most people finish a computer game in less than 90 days so why buy the whole operating system.  I know why it is good to buy it.  Office applications and personal media.  AND the whole idea of evaluating a new Microsoft product is to be a critic of it.

  I think you're missing the point of the original post. The poster wants to USE his PC, not test it, or the OS. Office applications are not part of the OS, and 'personal media' covers a multitude of things, many of which are also not part of the OS. Evaluation of a new MS product is either a hobby, or part of a job - it is not the purpose for which people by pre-installed  machines.

  NONE  of your statements actually relate to a case such as this where the system is demonstrably counterfeit.

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  
  

  • Edited by Noel D PatonModerator Thursday, January 22, 2015 9:56 PM

  Thursday, January 22, 2015 9:55 PM

  Moderator