locked
Window 7 Home Premium appears to be non genuine RRS feed

  • Question

  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-C2HXV-C8RXJ-3C297
    Windows Product Key Hash: gyYPlv+FthGBZSpUYCZQkJdBfEQ=
    Windows Product ID: 00359-OEM-9739563-10101
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {E3571342-7FAA-47C5-BCBE-20FD8B97C63B}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.130104-1435
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E3571342-7FAA-47C5-BCBE-20FD8B97C63B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3C297</PKey><PID>00359-OEM-9739563-10101</PID><PIDType>8</PIDType><SID>S-1-5-21-1690161031-1510954289-2199924988</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 4738Z</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>V1.06</Version><SMBIOSVersion major="2" minor="6"/><Date>20100910000000.000000+000</Date></BIOS><HWID>D5B93607018400FC</HWID><UserLCID>4409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 6a7d5d8a-92af-4e6a-af4b-8fddaec800e5
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00194-395-610101-02-2052-7600.0000-0542013
    Installation ID: 011831652384826544861850626735552383436852943091861562
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 3C297
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 2
    Trusted time: 23/2/2013 4:30:44 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:23:2013 08:50
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAJJSYiK4VUuxsTm6OBjYQUnDbXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ACRSYS ACRPRDCT
      FACP ACRSYS ACRPRDCT
      HPET ACRSYS ACRPRDCT
      BOOT ACRSYS ACRPRDCT
      MCFG ACRSYS ACRPRDCT
      WDAT ACRSYS ACRPRDCT
      ASF! ACRSYS ACRPRDCT
      SLIC DELL   QA09   
      ASPT ACRSYS ACRPRDCT
      SSDT PmRef CpuPm

    Saturday, February 23, 2013 8:53 AM

Answers

  • I cannot imagine why they should block the site (except for the number of ads per page). I suggest that you talk to the System Admins and find out why.

    See if you can get to it from elsewhere - it really is one of the best.

    The reason that your install activated is that you changed the Key to the one from your COA - which still leaves the hack in place.

    The MS checker may still complain at a later date, and the system is still potentially in a vulnerable state. Although you  *could* leave the system as-is, I still recommend a clean install.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, February 25, 2013 2:23 PM
    Moderator

All replies

  • Your installation is counterfeit

    You have a Dell SLIC table on an Acer machine - which cannot happen, and means that an Activation Exploit must be present.

    Windows has discovered this, and consequently flagged the system.

    For which version and edition of Windows is the system licensed, according to the COA sticker on the case?

    You will need to reformat and reinstall - preferably using the manufacturer's Recovery media.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 11:18 AM
    Moderator
  • My sister had reformat my laptop without using the acer e-recovery system, I think that is the reason of Dell SLIC table were detected. Yet, I reformat again using the acer e-recovery system. Means I need to do that again??

    Windows 7 Home Prem OA SEA (Copyright 2009)

    Codes beside the first bar code is CO.7P201.041

    Codes beside the second bar code is X16-96084

    Codes below the second bar code is 00194-395-610-101

    These are what I can see from the COA sticker. I'm sorry that I don't know which represents the version and edition.

    Saturday, February 23, 2013 4:01 PM
  • Just reformatting and installing with the wrong disk doesn't change the SLIC table - it requires the installation of an Activation Exploit after the basic Windows install.

    Whatever else you do, you should make sure that you reinstall ONLY with known-clean media.

    Your machine is licensed for Windows 7 (the version) Home Premium (the edition)

     

     

    Download the SP1 Refresh for your language and edition from the links on these pages...

     

    Heidoc -Microsoft DR Download links

     

    The links are for downloads from the Digital River servers run for MS, so are about as safe as
    you can get :)

     

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk
    Image Burner, or (better still) your favourite burning application at the slowest speed possible.

     

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image'
    option from your app - or you'll end up with a useless coaster :)

     

    Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start
    the repair from there - you must start the repair from within a normal Windows
    boot.

     

    You can then clean install the system using the Custom install option, together with your COA Key.


     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 8:57 PM
    Moderator
  • Windows 7 Home Premium x86 SP1 U (media refresh) or Windows 7 Home Premium x64 SP1 U (media refresh)?
    Sunday, February 24, 2013 3:37 AM
  • Your current installation is of x64 :)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, February 24, 2013 9:48 AM
    Moderator
  • I'm so sorry that my computer knowledge is so low >.<.

    May I know how to check that it boots the system ok?

    After I burn it, it ask me to install window 7 once I open it.

    Monday, February 25, 2013 5:51 AM
  • That's a good start, at least :)

    Leave the disk in the tray/slot, and restart the machine - do you boot to normal Windows, or does the DVD boot it?

    If the former - check for the options to boot from DVD in your manual.

    If the latter - it works :) (take the DVD out, and restart the machine to get back into normal windows)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, February 25, 2013 8:18 AM
    Moderator
  • The DVD did the booting.
    Now my windows activated.
    Yet the product key is different from my original one. Does it matters?
    Normally under the windows edition there will be written  a Service Pack 1 but now it doesn't exist.
    And can I know how to clean install the system using the Custom install option, together with your COA Key? >.<
    Thank you so much :)
    Monday, February 25, 2013 11:19 AM
  • http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html should help with the install.

    Please post a new MGADiag report - your current install should not have become activated!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, February 25, 2013 1:12 PM
    Moderator
  • Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-C2HXV-C8RXJ-3C297
    Windows Product Key Hash: gyYPlv+FthGBZSpUYCZQkJdBfEQ=
    Windows Product ID: 00359-OEM-9739563-10101
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {E3571342-7FAA-47C5-BCBE-20FD8B97C63B}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Home Premium
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.130104-1435
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{E3571342-7FAA-47C5-BCBE-20FD8B97C63B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3C297</PKey><PID>00359-OEM-9739563-10101</PID><PIDType>8</PIDType><SID>S-1-5-21-1690161031-1510954289-2199924988</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 4738Z</Model></SYSTEM><BIOS><Manufacturer>INSYDE</Manufacturer><Version>V1.06</Version><SMBIOSVersion major="2" minor="6"/><Date>20100910000000.000000+000</Date></BIOS><HWID>D5B93607018400FC</HWID><UserLCID>4409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, HomePremium edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: 6a7d5d8a-92af-4e6a-af4b-8fddaec800e5
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00194-395-610101-02-2052-7600.0000-0542013
    Installation ID: 011831652384826544861850626735552383436852943091861562
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 3C297
    License Status: Licensed
    Remaining Windows rearm count: 2
    Trusted time: 25/2/2013 9:41:52 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:23:2013 18:12
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAJJSYiK4VUuxsTm6OBjYQUnDbXF0=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC ACRSYS ACRPRDCT
      FACP ACRSYS ACRPRDCT
      HPET ACRSYS ACRPRDCT
      BOOT ACRSYS ACRPRDCT
      MCFG ACRSYS ACRPRDCT
      WDAT ACRSYS ACRPRDCT
      ASF! ACRSYS ACRPRDCT
      SLIC DELL   QA09   
      ASPT ACRSYS ACRPRDCT
      SSDT PmRef CpuPm

    Monday, February 25, 2013 1:43 PM
  • My uni had blocked that particular webpage >.<

    If I clean it, do that mean that I need to reinstall my microsoft office and other things?
    Do I need to do a backup before I clean it?

    Monday, February 25, 2013 1:46 PM
  • I cannot imagine why they should block the site (except for the number of ads per page). I suggest that you talk to the System Admins and find out why.

    See if you can get to it from elsewhere - it really is one of the best.

    The reason that your install activated is that you changed the Key to the one from your COA - which still leaves the hack in place.

    The MS checker may still complain at a later date, and the system is still potentially in a vulnerable state. Although you  *could* leave the system as-is, I still recommend a clean install.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, February 25, 2013 2:23 PM
    Moderator