Answered by:
Non-genuine product key Windows 7

Question
-
Everytime i boot my laptop up a text warning appears on the screen saying that the systems product key isn't genuine, i then press ok but then another warning pops up, i try to exit it but then a serious warning comes up, it says if i don't complete a survey within a site and get another key then my system will be unusable. and firefox got deleted from the computer and i cannot open CMD. does this sound like a virus or just a familar thing to you.Tuesday, April 15, 2014 3:31 AM
Answers
-
Your report looks good, genuine install.
Please do not read this sentence. Please ignore the previous sentence.
- Proposed as answer by Noel D PatonModerator Friday, April 18, 2014 1:48 PM
- Marked as answer by Noel D PatonModerator Saturday, April 26, 2014 6:03 PM
Tuesday, April 15, 2014 3:31 PM
All replies
-
This is a virus and/or malware. The real Microsoft non-Genuine notice will not redirect you to a survey site. DO NOT go to that site or fill out the survey!
This may have also affected files in your OS that cause it to be seen as non-Genuine. Once you have removed the virus, I suggest coming back here and running the following procedure:
MGA Diagnostic Report:
To properly analyze and solve problems with Activation and Validation, we need to see a full copy of the diagnostic report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once downloaded, run the tool.
Click on the Continue button, after a short time, the Continue button will change to a Copy button.
Click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your post.
One Issue Per Thread:
Most Activation and Validation issues look the same, on the surface, but can have many different causes and fixes. This is why we ask for a diagnostic report and this is also why we ask that you create your own thread for your issue (in other words, don't post your issue in another person's thread).
It just becomes too complicated to try to troubleshoot multiple different issues in the same thread.
New to the Forums?
Note that if you are new to these forums, you may find that you are unable to post due to a restriction on the inclusion of links and pictures.
Simply delete the only lines that contain links - this will allow the remainder of the report to upload (and those lines are not generally critical to the report anyhow)
Please do not read this sentence. Please ignore the previous sentence.
- Edited by Kamin of Ressik Tuesday, April 15, 2014 1:40 PM
Tuesday, April 15, 2014 1:31 PM -
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
Windows Product ID: 00359-OEM-8992687-00017
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {E8A6CD96-2163-4733-BE73-8792F0F6AD3E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130828-1532
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E8A6CD96-2163-4733-BE73-8792F0F6AD3E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-1203260989-597693621-1505157457</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite C660D</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>1.60</Version><SMBIOSVersion major="2" minor="6"/><Date>20120110000000.000000+000</Date></BIOS><HWID>67E03307018400F2</HWID><UserLCID>040F</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Greenwich Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800017-02-1033-7601.0000-2292011
Installation ID: 009356587744599544169905243626088105499751506566410743
Processor Certificate URL:
Machine Certificate URL:
Use License URL:
Product Key Certificate URL:
Partial Product Key: BWX77
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 15.4.2014 14:05:41Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:7:2014 15:46
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MAAAAAEAAgABAAEAAAACAAAAAgABAAEAonYcnFgEVPJAKNyhEp1QWhUSiGs4IlBeOEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC TOSCPL TOSCPL00
FACP TOSCPL TOSCPL00
HPET TOSCPL TOSCPL00
MCFG TOSCPL TOSCPL00
SLIC TOSCPL TOSCPL00
SSDT AMD POWERNOW
SSDT AMD POWERNOWTuesday, April 15, 2014 2:09 PM -
Your report looks good, genuine install.
Please do not read this sentence. Please ignore the previous sentence.
- Proposed as answer by Noel D PatonModerator Friday, April 18, 2014 1:48 PM
- Marked as answer by Noel D PatonModerator Saturday, April 26, 2014 6:03 PM
Tuesday, April 15, 2014 3:31 PM -
But it isn't gone it still pops up everytime i boot it up
Tuesday, April 15, 2014 5:02 PM -
Have you removed the virus/malware?
Please do not read this sentence. Please ignore the previous sentence.
Tuesday, April 15, 2014 5:33 PM -
I thought that i had removed it but i'm still not sure, i've used many programs to terminate and remove it but it still seems to popupTuesday, April 15, 2014 6:27 PM
-
Your OS appears to be valid. If you have a restore point that is prior to when you were getting the popups, you can try to go back to that.
If not, I suggest going to bleepingcomputer.com and getting in the queue there for some one on one assistance in removing the problematic files. It may take a few days before they can even get to you depending on the traffic, but in my experience they can get you through most any virus infection and their main goal is to do it keeping all your other files intact. Plus it is a free service (donations accepted but not required). If you do so, it is important to follow the instructions the entire way completely.
Please do not read this sentence. Please ignore the previous sentence.
Tuesday, April 15, 2014 7:04 PM