Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Windows 7 Ultimate not passing validation RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi, I have a HP Pavilion laptop that I bought directly from HP and that came with Windows 7 Ultimate.  For some reason, I'm now getting a message that my version of Windows may not be genuine. I downloaded and installed the Windows Activation Update as directed on Microsoft's website, but when I then went online to validate I got the message "Files that Windows needs to work properly have been modified, removed, or disabled. To resolve, you need to install genuine Windows. Not to worry, we can help you with that." and it tries to get me to pay $200 to buy Windows when I already have a genuine version!!! Next, I went to Microsoft tech support where it told me to run a diagnostic and post the results to this forum (below).  Can anyone please help me with this issue?  Many many thanks for your help, Sonya

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: 0xc004c4ab
    Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
    Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
    Windows Product ID: 00426-OEM-8992662-00400
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.001
    ID: {FCB667D5-9A16-4CEE-904E-A1F3C1B4241A}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Ultimate
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.120401-1505
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 103 Blocked VLK
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{FCB667D5-9A16-4CEE-904E-A1F3C1B4241A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-3858855411-4154095746-1938626148</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv6 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.1D</Version><SMBIOSVersion major="2" minor="6"/><Date>20101005000000.000000+000</Date></BIOS><HWID>24B83607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>US Mountain Standard Time(GMT-07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>QA09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65099</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Ultimate edition
    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00426-00178-926-600400-02-1033-7600.0000-3392010
    Installation ID: 010013261920554790126420524492584901724264035785739344
    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial Product Key: P4K27
    License Status: Notification
    Notification Reason: 0xC004F200 (non-genuine).
    Remaining Windows rearm count: 3
    Trusted time: 8/23/2012 12:43:43 PM

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C4AB
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 8:23:2012 12:38
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAEAAQABAAEAAAABAAAAAgABAAEAeqiGv6ao0FqwasKPOhWy4tzwdlY=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            HPQOEM        SLIC-MPC
      FACP            HPQOEM        SLIC-MPC
      HPET            HPQOEM        SLIC-MPC
      BOOT            HPQOEM        SLIC-MPC
      MCFG            HPQOEM        SLIC-MPC
      WDRT            HPQOEM        SLIC-MPC
      ASF!            HPQOEM        SLIC-MPC
      SLIC            DELL          QA09   
      ASPT            HPQOEM        SLIC-MPC
      SSDT            PmRef        CpuPm

    Thursday, August 23, 2012 7:54 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Cached Online Validation Code: 0xc004c4ab

    Windows has detected an activation exploit. You are using a Dell OEM SLP key on a HP computer. Your install was done using a hackers loader program as evidenced by the Dell slic table.

    you will have to purchase and install a genuine windows ultimate or revert to the windows your computer came with.

    Thursday, August 23, 2012 8:49 PM
    Answerer

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Cached Online Validation Code: 0xc004c4ab

    Windows has detected an activation exploit. You are using a Dell OEM SLP key on a HP computer. Your install was done using a hackers loader program as evidenced by the Dell slic table.

    you will have to purchase and install a genuine windows ultimate or revert to the windows your computer came with.

    Thursday, August 23, 2012 8:49 PM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote
    Carey, I see why you would say that, since the report says "SLIC            DELL          QA09   " but what you say about the install being done using a hackers loader program isn't true.  No one ever installed a different windows or any software from Dell on this computer.  However, I did have an old Dell laptop before I got this one.  The Dell died and a techie friend saved my old files (music, photos, docs, etc.) from the Dell and loaded them onto this computer, but that had nothing to do with Windows or any Windows components.  Like I said, this is a pretty new HP (though no longer under warranty) with the ORIGINAL Windows system that came with it.  Please advise what I should do.  Thanks very much, Sonya
    Friday, August 24, 2012 4:29 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    the only way you will get a Dell slic table on a hp computer is to use a hackers loader program (bios emulator). perhaps you need to have a talk with your techie friend. This is definitely not the original install.

    what version and edition is stated on your COA?(do not state the product key)

    the COA may be in the battery compartment)


    Friday, August 24, 2012 5:19 PM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote

    The SLIC table isn't the only indicator of the Activation Exploit.

    The error code 0xc004c4ab specifically  means "Genuine Validation detected Windows licensing exploits"

    The Key is from a Dell machine the SLIC table is apparently from a Dell - and the machine is actually a Hewlett-Packard

    There MUST be an activation exploit present.

    Becasue of that the recommendation is to reformat and reinstall using the proper manufacturer's recovery media for the machine.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Friday, August 24, 2012 5:21 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for your answers.  OK, I am looking at my COA, and there are a lot of long numbers, but nothing that says "version" or "edition". Here's what it looks like.  Please, whatever help you can provide would be so very much appreciated.  Thanks, Sonya

    =>OK, just deleted this image as requested...


    • Edited by SMHI Sunday, August 26, 2012 6:03 PM
    Saturday, August 25, 2012 12:26 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    delete or obscure the exposed product key.

    Looks like the version and edition are obscured.  Most of these notebooks ship with home premium. ultimate is usually a special order.

    I suggest you restore your system using your recovery partition. see your documentation or your manufacturers website for instructions on how to use it

    That will put it back to an as shipped state.
    Saturday, August 25, 2012 12:46 AM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote
    George, I've tried to do that, but when I go to restore, the computer will only allow me to restore to a point within the last week (which does not correct the problem).  When I select an older date, I get the error "the selected backup could not be found." Not sure why Im getting this since I have a pocket media drive that's connected to my computer that has the backups and seems to be fine. Thanks so much for working through this with me.  I'm pretty desperate for a solution...  sonya
    Sunday, August 26, 2012 6:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    you need to do a system recovery not system restore. system restore will not fix the hack. You need to use your recovery partition or you can order OEM system recovery disks from your manufacturer. 

    see your documentation or your manufacturers website for instructions on how to use it

    That will put it back to an as shipped state.

    p.s. the sku on the picture indicates your computer likely shipped with home premium.

    Sunday, August 26, 2012 6:11 PM
    Answerer