locked
WGA problems, overseas computer... RRS feed

  • Question

  • I have a friend overseas whose coworker's computer recently started giving error messages and a 30-day countdown about non-genuine Windows 7.  The computer itself was not from overseas, but straight from the organization's U.S.-based headquarters, so I'm 99% sure it's actually genuine.  (And none of their other computers are having these problems.)  They do have reasonable-speed, if somewhat flaky, internet access.  

    Diagnostic output:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0x8004FE22

    Cached Online Validation Code: 0xc004c4ab

    Windows Product Key: *****-*****-V9488-FGM44-2C9T3

    Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=

    Windows Product ID: 00426-OEM-8992662-00010

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.001

    ID: {A58C167E-13B0-46F9-8DCD-03411A07CFAE}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Ultimate

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.111025-1505

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 103 Blocked VLK

    Microsoft Office Enterprise 2007 - 103 Blocked VLK

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{A58C167E-13B0-46F9-8DCD-03411A07CFAE}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-2C9T3</PKey><PID>00426-OEM-8992662-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2943551611-4047720471-1430334795</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>647411U</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7UET64WW (2.12 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090313000000.000000+000</Date></BIOS><HWID>8A4F3207018400E8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>China Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-WKS</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>103</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65607</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Ultimate edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00426-00178-926-600010-02-1033-7601.0000-0162012

    Installation ID: 015952113925029743425780502974301880898353436702334630

    Partial Product Key: 2C9T3

    License Status: Licensed

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000002000

    Event Time Stamp: 1:16:2012 09:26

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

     

    HWID Data-->

    HWID Hash Current: NgAAAAEABAABAAIAAAABAAAAAwABAAEAnJ/EqsdXENPEpXp/5CzUcWQ/wPZwtqdsJH0O6UbK

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value

    OEMTableID Value

      APIC LENOVO

    TP-7U   

      FACP LENOVO

    TP-7U   

      HPET LENOVO

    TP-7U   

      BOOT LENOVO

    TP-7U   

      MCFG LENOVO

    TP-7U   

      SSDT LENOVO

    TP-7U   

      ECDT LENOVO

    TP-7U   

      SLIC HPQOEM

    SLIC-WKS

      ASF! LENOVO

    TP-7U   

      SSDT LENOVO

    TP-7U   

      TCPA

      SSDT LENOVO

    TP-7U   

      SSDT LENOVO

    TP-7U   

      SSDT LENOVO

    TP-7U   

    Saturday, January 21, 2012 8:11 PM

Answers

  • "Onesimus Prime" wrote in message news:f18dee61-0312-4bd7-ad7e-62e213597fac...

    I have a friend overseas whose coworker's computer recently started giving error messages and a 30-day countdown about non-genuine Windows 7.  The computer itself was not from overseas, but straight from the organization's U.S.-based headquarters, so I'm 99% sure it's actually genuine.  (And none of their other computers are having these problems.)  They do have reasonable-speed, if somewhat flaky, internet access. 

    Diagnostic output:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

     

    Windows Validation Data-->

    Validation Code: 0x8004FE22

    Cached Online Validation Code: 0xc004c4ab

    Windows Product Key: *****-*****-V9488-FGM44-2C9T3

    Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=

    Windows Product ID: 00426-OEM-8992662-00010

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.001

     

    OGA Data-->

    Office Status: 103 Blocked VLK

    Microsoft Office Enterprise 2007 - 103 Blocked VLK

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Other data-->

    SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>647411U</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7UET64WW (2.12 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090313000000.000000+000</Date></BIOS

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Partial Product Key: 2C9T3

    License Status: Licensed

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000002000

    Event Time Stamp: 1:16:2012 09:26

    ActiveX: Registered, Version: 7.1.7600.16395

     

    Admin Service: Registered, Version: 7.1.7600.16395

     

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

     

     
     
     
    The installations of both Windows and Office are non-genuine.
    Office is based on a blocked Volume License Key
    Windows is based on an OEM SLP Key for an HP computer – this computer was manufactured tool early to be capable of an OEM_SLP activation for Windows 7. The earlier activation was enabled by use –f a hackers Activation Exploit.
     
    The owner needs to revert back to the original Windows installation using the manufacturer’s Recovery system, and then if necessary, upgrade using a legitimate method.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, January 21, 2012 8:38 PM
    Moderator

All replies

  • "Onesimus Prime" wrote in message news:f18dee61-0312-4bd7-ad7e-62e213597fac...

    I have a friend overseas whose coworker's computer recently started giving error messages and a 30-day countdown about non-genuine Windows 7.  The computer itself was not from overseas, but straight from the organization's U.S.-based headquarters, so I'm 99% sure it's actually genuine.  (And none of their other computers are having these problems.)  They do have reasonable-speed, if somewhat flaky, internet access. 

    Diagnostic output:

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

     

    Windows Validation Data-->

    Validation Code: 0x8004FE22

    Cached Online Validation Code: 0xc004c4ab

    Windows Product Key: *****-*****-V9488-FGM44-2C9T3

    Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=

    Windows Product ID: 00426-OEM-8992662-00010

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.001

     

    OGA Data-->

    Office Status: 103 Blocked VLK

    Microsoft Office Enterprise 2007 - 103 Blocked VLK

     

    File Scan Data-->

    File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100

    File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

     

    Other data-->

    SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>647411U</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>7UET64WW (2.12 )</Version><SMBIOSVersion major="2" minor="4"/><Date>20090313000000.000000+000</Date></BIOS

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

    Name: Windows(R) 7, Ultimate edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Partial Product Key: 2C9T3

    License Status: Licensed

     

    Windows Activation Technologies-->

    HrOffline: 0x8004FE22

    HrOnline: N/A

    HealthStatus: 0x0000000000002000

    Event Time Stamp: 1:16:2012 09:26

    ActiveX: Registered, Version: 7.1.7600.16395

     

    Admin Service: Registered, Version: 7.1.7600.16395

     

    HealthStatus Bitmask Output:

    Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

     

     
     
     
    The installations of both Windows and Office are non-genuine.
    Office is based on a blocked Volume License Key
    Windows is based on an OEM SLP Key for an HP computer – this computer was manufactured tool early to be capable of an OEM_SLP activation for Windows 7. The earlier activation was enabled by use –f a hackers Activation Exploit.
     
    The owner needs to revert back to the original Windows installation using the manufacturer’s Recovery system, and then if necessary, upgrade using a legitimate method.
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Saturday, January 21, 2012 8:38 PM
    Moderator
  • Oh...  Wow, that's not at all what I was expecting.  Thank you for the answer, though!  I will pass that along to my friend.
    Sunday, January 22, 2012 1:12 AM