locked
Non-genuine product key Windows 7 RRS feed

  • Question

  • Everytime i boot my laptop up a text warning appears on the screen saying that the systems product key isn't genuine, i then press ok but then another warning pops up, i try to exit it but then a serious warning comes up, it says if i don't complete a survey within a site and get another key then my system will be unusable. and firefox got deleted from the computer and i cannot open CMD. does this sound like a virus or just a familar thing to you.
    Tuesday, April 15, 2014 3:31 AM

Answers

  • Your report looks good, genuine install.

    Please do not read this sentence. Please ignore the previous sentence.

    Tuesday, April 15, 2014 3:31 PM

All replies

  • This is a virus and/or malware.  The real Microsoft non-Genuine notice will not redirect you to a survey site.   DO NOT go to that site or fill out the survey!
     
       
     
    This may have also affected files in your OS that cause it to be seen as non-Genuine.  Once you have removed the virus, I suggest coming back here and running the following procedure:
     
    MGA Diagnostic Report:
     
    To properly analyze and solve problems with Activation and Validation, we need to see a full copy of the diagnostic report produced by the MGADiag tool (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     
    Once downloaded, run the tool.
    Click on the Continue button, after a short time, the Continue button will change to a Copy button.
    Click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your post.  
    One Issue Per Thread:
     
    Most Activation and Validation issues look the same, on the surface, but can have many different causes and fixes. This is why we ask for a diagnostic report and this is also why we ask that you create your own thread for your issue (in other words, don't post your issue in another person's thread). 

    It just becomes too complicated to try to troubleshoot multiple different issues in the same thread.

    New to the Forums?

    Note that if you are new to these forums, you may find that you are unable to post due to a restriction on the inclusion of links and pictures.
    Simply delete the only lines that contain links -  this will allow the remainder of the report to upload (and those lines are not generally critical to the report anyhow)

    Please do not read this sentence. Please ignore the previous sentence.





    Tuesday, April 15, 2014 1:31 PM
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-BFF84-6GFC2-BWX77
    Windows Product Key Hash: EkRG02noirn1etiserf2jJnVqlM=
    Windows Product ID: 00359-OEM-8992687-00017
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7601.2.00010300.1.0.003
    ID: {E8A6CD96-2163-4733-BE73-8792F0F6AD3E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.130828-1532
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E8A6CD96-2163-4733-BE73-8792F0F6AD3E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BWX77</PKey><PID>00359-OEM-8992687-00017</PID><PIDType>2</PIDType><SID>S-1-5-21-1203260989-597693621-1505157457</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite C660D</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>1.60</Version><SMBIOSVersion major="2" minor="6"/><Date>20120110000000.000000+000</Date></BIOS><HWID>67E03307018400F2</HWID><UserLCID>040F</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Greenwich Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSCPL</OEMID><OEMTableID>TOSCPL00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800017-02-1033-7601.0000-2292011
    Installation ID: 009356587744599544169905243626088105499751506566410743
    Processor Certificate URL:
    Machine Certificate URL:
    Use License URL:
    Product Key Certificate URL:
    Partial Product Key: BWX77
    License Status: Licensed
    Remaining Windows rearm count: 3
    Trusted time: 15.4.2014 14:05:41

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 4:7:2014 15:46
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: MAAAAAEAAgABAAEAAAACAAAAAgABAAEAonYcnFgEVPJAKNyhEp1QWhUSiGs4IlBe

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   TOSCPL  TOSCPL00
      FACP   TOSCPL  TOSCPL00
      HPET   TOSCPL  TOSCPL00
      MCFG   TOSCPL  TOSCPL00
      SLIC   TOSCPL  TOSCPL00
      SSDT   AMD     POWERNOW
      SSDT   AMD     POWERNOW

    Tuesday, April 15, 2014 2:09 PM
  • Your report looks good, genuine install.

    Please do not read this sentence. Please ignore the previous sentence.

    Tuesday, April 15, 2014 3:31 PM
  • But it isn't gone it still pops up everytime i boot it up

    Tuesday, April 15, 2014 5:02 PM
  • Have you removed the virus/malware?

    Please do not read this sentence. Please ignore the previous sentence.

    Tuesday, April 15, 2014 5:33 PM
  • I thought that i had removed it but i'm still not sure, i've used many programs to terminate and remove it but it still seems to popup
    Tuesday, April 15, 2014 6:27 PM
  • Your OS appears to be valid.  If you have a restore point that is prior to when you were getting the popups, you can try to go back to that.

     

    If not, I suggest going to bleepingcomputer.com and getting in the queue there for some one on one assistance in removing the problematic files.  It may take a few days before they can even get to you depending on the traffic, but in my experience they can get you through most any virus infection and their main goal is to do it keeping all your other files intact.  Plus it is a free service (donations accepted but not required).  If you do so, it is important to follow the instructions the entire way completely.


    Please do not read this sentence. Please ignore the previous sentence.

    Tuesday, April 15, 2014 7:04 PM