Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows 7 legal combination RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Recently I ordered an OEM version of Windows 7 Professional 64bit from buy.com to install on a new PC. They shipped me a DVD in a white envelope that has all the appropriate holograms marked X15-60529-01 64bit and a license marked 00186-073-592-628 with a key code, it was attached to the envelope with a paper clip. I formatted the hard drives, installed the product, activated it, MS Security Essentials was installed, and all the windows maintenance was applied.

    However I had problems with the Google redirect virus and thought I had done something wrong. I deleted all the partitions, re-partitioned the hard drives, formatted them, and did another install. The virus is still present. That lead me to questioning if the product is legal. On the MS website they infer that the licenses are encoded with the product they are valid for, however I could not find a list nor could a reference to the DVD be found on the website.

    Perhaps more caution would have been appropriate as previous OEM products always came in a sealed package with the license inside. Is this product valid or did buy.com sell me an illegal product?

    Friday, September 9, 2011 9:18 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Windows 7 OEM System Builder dvds are standard dvds.  The license is what matters and yours is an OEM license.  The product key is what determines the license type, not the dvd.

    This is actually an inappropriate license for a user to install since the system builder license is very clear that the software is only to be installed on a computer for sale to a customer.  That is the meaning of "system builder" as defined in the SB license printed on the outer wrapper.  This is spelled out on the product details page by any reputable online reseller.

    The appropriate license type for a user to install on his DIY (do-it-yourself) computer is full retail. 

    You are not entitled to free installation support from Microsoft with this type of license (OEM) and you cannot transfer it to another computer in the future.  Consider returning the software for credit against a full license retail copy.  The OS is not a place to cut corners.

    Having said all of that, use an online scanner to get rid of the rootkit and then boot the computer with the dvd and delete the partition.  Create a new one and format (full).  That will get rid of the rootkit on the hdd.  Install Windows.  If you cannot get rid of the infection on the dvd return the item as defective and purchase from a difference source.  Do not buy on eBay or the Amazon Marketplace or any other discount website.  The internet is loaded with counterfeit copies of Windows 7 that look very authentic (counterfeited in China) and the only safe places to purchase are the Microsoft Store, Amazon (corp.) or other well established Microsoft partner.

    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Saturday, September 10, 2011 12:36 AM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote
    "dougmat" wrote in message news:ae5b4e4a-515c-416b-b2fd-b75a529f9282...

    Here are the results

    Following activation the product key changed to the one I typed in. The key hash changed, and the product ID changed to: 00371-OEM-9307351-92628. The diagnostic tool results follow. Previously for an XP OEM install the DVD was marked differently and required an *.ini file generated by the OPK.  The W7 DVD was just a standard Full install. It was not an OEM DVD and the product ID now has OEM in it. The Google redirect virus/root kit is still present and if a hard drive re-partition, format, followed by an install doesn't get rid of it, then what?

    The above XP Pc's are still here and in use and are not infected.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7B84W-9PXPD-6CTX3
    Windows Product Key Hash: +QeRirmWBrHfUudR1XcTAHn2Lj0=
    Windows Product ID: 00371-OEM-9307351-92628
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048


    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: 6CTX3
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 9/9/2011 7:23:44 PM

     

    dougmat
     
     
    Leaving aside any consideration of rootkits, your installation is now showing as being activated properly.
     
     
    As far as the rootkit is concerned. that is well outside the remit for this forum – and you should post in a specialist malware forum, or contact MS Malware Removal for free assistance.
     
    (I am curious as to exactly what symptoms you are experiencing, though)
     
    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Monday, September 12, 2011 10:22 PM
    Saturday, September 10, 2011 8:32 AM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    In order for us to analyze and troubleshoot a non-genuine notification issue you may be experiencing, please download and run the   Microsoft Genuine Advantage Diagnostics Tool.

     After running the tool, click on the Continue button, then click on the Copy button, then Paste the report into your post.  Also, please include a brief question or pertinent background information that would be helpful in our endeavor to assist you.

     Thank you!

    Carey Frisch
    Friday, September 9, 2011 9:36 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-CM74G-RPHKF-PW487
    Windows Product Key Hash: 71BRYMECVaSXedfumfu8zryHJVY=
    Windows Product ID: 00371-177-0000061-85290
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {F974A596-3E3C-4681-A6A3-145D61BC5F48}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: E:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F974A596-3E3C-4681-A6A3-145D61BC5F48}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PW487</PKey><PID>00371-177-0000061-85290</PID><PIDType>5</PIDType><SID>S-1-5-21-3812561642-3393847666-116666162</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>DH67CL__</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>BLH6710H.86A.0128.2011.0823.1224</Version><SMBIOSVersion major="2" minor="7"/><Date>20110823000000.000000+000</Date></BIOS><HWID>CBFC3C07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00170-177-000006-00-1033-7600.0000-2502011
    Installation ID: 001574633220322633930435601215764104123290503322422900
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: PW487
    License Status: Initial grace period
    Time remaining: 40500 minute(s) (28 day(s))
    Remaining Windows rearm count: 4
    Trusted time: 9/9/2011 8:01:58 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 9:8:2011 19:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAEAAgABAAEAAQABAAAAAQABAAEAHKJ0wcdpfOkg1TLeapjK9LKNbkIucw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         DH67CL 
      FACP            INTEL         DH67CL 
      HPET            INTEL         DH67CL 
      MCFG            INTEL         DH67CL 
      SSDT            INTEL         DH67CL 

    I am not sure what all of the above means. I have not activated this copy of W7 yet, and the Google redirect virus is present.

    In the process of installing this copy of W7 the network cable was disconnected for drive formatting, for the install of W7, and while W7-SP1 was installed from a DVD. The network cable was connected, followed by the download & install of Microsoft Security Essentials, and its activation. The Google redirect virus shows up in both IE9 and Firefox6 for both Google and Bing searches. Any help would be appreciated. Also the Intel drivers and bios are current.
    dougmat
    Friday, September 9, 2011 10:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "dougmat" wrote in message news:c220307b-a50e-40ad-a10e-3c2d16062c2f...
    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-CM74G-RPHKF-PW487
    Windows Product Key Hash: 71BRYMECVaSXedfumfu8zryHJVY=
    Windows Product ID: 00371-177-0000061-85290
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {F974A596-3E3C-4681-A6A3-145D61BC5F48}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: E:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F974A596-3E3C-4681-A6A3-145D61BC5F48}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-PW487</PKey><PID>00371-177-0000061-85290</PID><PIDType>5</PIDType><SID>S-1-5-21-3812561642-3393847666-116666162</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>DH67CL__</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>BLH6710H.86A.0128.2011.0823.1224</Version><SMBIOSVersion major="2" minor="7"/><Date>20110823000000.000000+000</Date></BIOS><HWID>CBFC3C07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, RETAIL channel
    Activation ID: e838d943-63ed-4a0b-9fb1-47152908acc9
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00170-177-000006-00-1033-7600.0000-2502011
    Installation ID: 001574633220322633930435601215764104123290503322422900
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: PW487
    License Status: Initial grace period
    Time remaining: 40500 minute(s) (28 day(s))
    Remaining Windows rearm count: 4
    Trusted time: 9/9/2011 8:01:58 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 9:8:2011 19:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAEAAgABAAEAAQABAAAAAQABAAEAHKJ0wcdpfOkg1TLeapjK9LKNbkIucw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         DH67CL 
      FACP            INTEL         DH67CL 
      HPET            INTEL         DH67CL 
      MCFG            INTEL         DH67CL 
      SSDT            INTEL         DH67CL 

    I am not sure what all of the above means. I have not activated this copy of W7 yet, and the Google redirect virus is present.

    In the process of installing this copy of W7 the network cable was disconnected for drive formatting, for the install of W7, and while W7-SP1 was installed from a DVD. The network cable was connected, followed by the download & install of Microsoft Security Essentials, and its activation. The Google redirect virus shows up in both IE9 and Firefox6 for both Google and Bing searches. Any help would be appreciated. Also the Intel drivers and bios are current.
    dougmat
     
     
    Does the Product Key above match (what you can see of it) the Product Key on your license?
    If so, you’ve been scammed somewhere along the line, because the code here is the Default  (Keyless install) Key for Win7 Pro.
     
    If it’s different, then you need to change the Key to the once on your license, and then activate that
    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Friday, September 9, 2011 10:19 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Here are the results

    Following activation the product key changed to the one I typed in. The key hash changed, and the product ID changed to: 00371-OEM-9307351-92628. The diagnostic tool results follow. Previously for an XP OEM install the DVD was marked differently and required an *.ini file generated by the OPK.  The W7 DVD was just a standard Full install. It was not an OEM DVD and the product ID now has OEM in it. The Google redirect virus/root kit is still present and if a hard drive re-partition, format, followed by an install doesn't get rid of it, then what?

    The above XP Pc's are still here and in use and are not infected.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7B84W-9PXPD-6CTX3
    Windows Product Key Hash: +QeRirmWBrHfUudR1XcTAHn2Lj0=
    Windows Product ID: 00371-OEM-9307351-92628
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {F974A596-3E3C-4681-A6A3-145D61BC5F48}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.110622-1506
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: E:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{F974A596-3E3C-4681-A6A3-145D61BC5F48}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-6CTX3</PKey><PID>00371-OEM-9307351-92628</PID><PIDType>8</PIDType><SID>S-1-5-21-3812561642-3393847666-116666162</SID><SYSTEM><Manufacturer>INTEL_</Manufacturer><Model>DH67CL__</Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>BLH6710H.86A.0128.2011.0823.1224</Version><SMBIOSVersion major="2" minor="7"/><Date>20110823000000.000000+000</Date></BIOS><HWID>CBFC3C07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Activation ID: da22eadd-46dc-4056-a287-f5041c852470
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00371-00186-073-592628-02-1033-7601.0000-2522011
    Installation ID: 009943714732522260460206632642543046812396383173350470
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: 6CTX3
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 9/9/2011 7:23:44 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 9:8:2011 19:20
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAEAAgABAAEAAQABAAAAAQABAAEAHKJ0wcdpfOkg1TLeapjK9LKNbkIucw==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            INTEL         DH67CL  
      FACP            INTEL         DH67CL  
      HPET            INTEL         DH67CL  
      MCFG            INTEL         DH67CL  
      SSDT            INTEL         DH67CL  


     

    dougmat
    Friday, September 9, 2011 11:52 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Does your Windows 7 OEM packaging look like this?
    Carey Frisch
    Saturday, September 10, 2011 12:14 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Windows 7 OEM System Builder dvds are standard dvds.  The license is what matters and yours is an OEM license.  The product key is what determines the license type, not the dvd.

    This is actually an inappropriate license for a user to install since the system builder license is very clear that the software is only to be installed on a computer for sale to a customer.  That is the meaning of "system builder" as defined in the SB license printed on the outer wrapper.  This is spelled out on the product details page by any reputable online reseller.

    The appropriate license type for a user to install on his DIY (do-it-yourself) computer is full retail. 

    You are not entitled to free installation support from Microsoft with this type of license (OEM) and you cannot transfer it to another computer in the future.  Consider returning the software for credit against a full license retail copy.  The OS is not a place to cut corners.

    Having said all of that, use an online scanner to get rid of the rootkit and then boot the computer with the dvd and delete the partition.  Create a new one and format (full).  That will get rid of the rootkit on the hdd.  Install Windows.  If you cannot get rid of the infection on the dvd return the item as defective and purchase from a difference source.  Do not buy on eBay or the Amazon Marketplace or any other discount website.  The internet is loaded with counterfeit copies of Windows 7 that look very authentic (counterfeited in China) and the only safe places to purchase are the Microsoft Store, Amazon (corp.) or other well established Microsoft partner.

    Colin Barnhorst Windows 7 Ultimate x64 on DIY with 6GB ram.
    Saturday, September 10, 2011 12:36 AM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote

    The previous XP 64 OEM (from newegg.com) looked like the sample from Carey and required the OPK package to prepare the installation. The current W7 64 DVD (from buy.com) came in a simple unlabeled white paper sleeve with the license/key attached to it with a paper clip. The DVD and license appear to be legal (or a really good forgery). The W7  license was the peel and stick tag that normally goes on the outside of a finished PC, the install didn't require the OPK package. This is the technician PC that eventually is cloned to client PC's (sold to friends) each with its own license.

    I suspect the rootkit may be in the system (hidden) partition and perhaps the rootkit scanners don't look at it. It can probably be labeled with no ill effects and scanned.

    As for the rootkit, several online scanners were tried, none found anything and one of the MS forum moderators suggests a re-install. For the current install the PC was booted from the W7 DVD, all partitions were deleted, re-created, formatted, W7 installed, Intel drivers installed, MS Security Essentials installed, W7 maintenance installed, Firefox installed. The latter with a full format can be done quickly so I will try again. I will download new copies of the drivers, security software (if possible), and Firefox on a clean PC before installing it on the W7 PC.

     

     

     

    dougmat
    Saturday, September 10, 2011 4:49 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "dougmat" wrote in message news:ae5b4e4a-515c-416b-b2fd-b75a529f9282...

    Here are the results

    Following activation the product key changed to the one I typed in. The key hash changed, and the product ID changed to: 00371-OEM-9307351-92628. The diagnostic tool results follow. Previously for an XP OEM install the DVD was marked differently and required an *.ini file generated by the OPK.  The W7 DVD was just a standard Full install. It was not an OEM DVD and the product ID now has OEM in it. The Google redirect virus/root kit is still present and if a hard drive re-partition, format, followed by an install doesn't get rid of it, then what?

    The above XP Pc's are still here and in use and are not infected.

     

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: 0x0
    Windows Product Key: *****-*****-7B84W-9PXPD-6CTX3
    Windows Product Key Hash: +QeRirmWBrHfUudR1XcTAHn2Lj0=
    Windows Product ID: 00371-OEM-9307351-92628
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.1.7601.2.00010100.1.0.048


    Licensing Data-->
    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Professional edition
    Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
    Partial Product Key: 6CTX3
    License Status: Licensed
    Remaining Windows rearm count: 4
    Trusted time: 9/9/2011 7:23:44 PM

     

    dougmat
     
     
    Leaving aside any consideration of rootkits, your installation is now showing as being activated properly.
     
     
    As far as the rootkit is concerned. that is well outside the remit for this forum – and you should post in a specialist malware forum, or contact MS Malware Removal for free assistance.
     
    (I am curious as to exactly what symptoms you are experiencing, though)
     
    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Marked as answer by Darin Smith MS Monday, September 12, 2011 10:22 PM
    Saturday, September 10, 2011 8:32 AM
    Moderator